This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/w_6UCf2xWqx3O-O-dOo2JUNA-Og.roa File: w_6UCf2xWqx3O-O-dOo2JUNA-Og.roa (raw, json) Hash identifier: fBGvP8lF6sKoiZdNpgR7ynCDnNW1bXWeroCO7zDMZqA= Subject key identifier: C3:FE:94:09:FD:B1:5A:AC:77:3B:E3:BE:74:EA:36:25:43:40:F8:E8 Certificate issuer: /CN=c49eee24deab5520119b6a3da0457d39c40641db Certificate serial: 019B7E389626954D062952D7FA552865B5CD Authority key identifier: C4:9E:EE:24:DE:AB:55:20:11:9B:6A:3D:A0:45:7D:39:C4:06:41:DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJ7uJN6rVSARm2o9oEV9OcQGQds.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/w_6UCf2xWqx3O-O-dOo2JUNA-Og.roa Signing time: Fri 02 Jan 2026 10:19:56 +0000 ROA not before: Fri 02 Jan 2026 10:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43667 IP address blocks: 77.91.192.0/21 maxlen: 24 94.198.128.0/21 maxlen: 24 185.32.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.crl rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.mft rsync://rpki.ripe.net/repository/DEFAULT/xJ7uJN6rVSARm2o9oEV9OcQGQds.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:96:26:95:4d:06:29:52:d7:fa:55:28:65:b5:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c49eee24deab5520119b6a3da0457d39c40641db Validity Not Before: Jan 2 10:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3fe9409fdb15aac773be3be74ea36254340f8e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:aa:58:64:23:13:a7:c9:24:6d:76:36:75:2d: 80:44:a4:52:5c:ca:7a:3c:46:7e:0d:e5:0c:eb:fc: 22:30:86:1d:0a:9d:4c:0b:62:ba:59:6e:ff:31:bf: 65:75:52:dd:fa:39:da:54:cb:1c:fa:dc:22:4c:ef: 8a:48:93:82:0f:d2:40:df:70:6b:32:ba:14:28:8a: cf:58:be:5d:47:01:d9:c4:8b:10:23:43:4e:34:be: a3:32:b3:19:e2:3a:ae:01:29:05:5e:5b:b5:ee:d4: 43:f6:32:25:c2:14:42:0b:8b:2d:e2:5a:1d:04:bc: 84:ee:c0:da:5e:0a:7e:87:7c:a4:cd:d6:39:76:28: bb:d6:32:33:02:35:ed:88:60:8a:a1:5a:36:8b:be: ea:8e:a9:44:cf:22:76:d9:a9:8a:6a:e7:88:e0:53: 83:30:86:3e:a0:4d:92:7d:e0:29:54:77:80:08:51: 6b:c2:36:38:ac:2b:a0:96:28:66:f0:39:bc:ec:82: ee:c7:dc:db:7f:95:4f:f7:93:d1:56:13:90:93:67: fe:90:b4:48:12:2b:a8:1c:b1:b3:22:70:91:46:07: c5:45:57:f2:98:ab:58:94:ce:b7:0b:2b:67:49:a6: 58:36:a9:71:b4:0c:80:29:01:b4:0c:c5:57:eb:ba: 49:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:FE:94:09:FD:B1:5A:AC:77:3B:E3:BE:74:EA:36:25:43:40:F8:E8 X509v3 Authority Key Identifier: keyid:C4:9E:EE:24:DE:AB:55:20:11:9B:6A:3D:A0:45:7D:39:C4:06:41:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJ7uJN6rVSARm2o9oEV9OcQGQds.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/w_6UCf2xWqx3O-O-dOo2JUNA-Og.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9786f4-dd54-4e43-aea4-59c4c10aebd9/1/xJ7uJN6rVSARm2o9oEV9OcQGQds.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.91.192.0/21 94.198.128.0/21 185.32.132.0/22 Signature Algorithm: sha256WithRSAEncryption 53:36:c3:b2:24:f9:fe:03:41:e8:7d:f1:2d:25:2b:dd:af:56: bf:7d:d1:63:f7:80:55:ef:69:02:ed:12:fd:10:67:b5:53:aa: a5:ba:e8:06:15:e5:c4:e2:64:f6:db:53:a3:0c:33:25:51:29: a0:ce:0c:56:34:1a:ec:3e:71:6e:eb:ad:9a:40:cc:09:03:fe: a4:83:7f:e6:7b:15:8b:bc:18:16:f2:80:1a:d1:0f:8a:0d:1e: 45:9e:9f:94:5b:ea:7e:3e:65:be:87:cd:45:13:3a:74:a1:69: 64:63:b2:6a:6c:1e:25:2a:f4:28:f6:ee:b4:8e:e0:a3:2b:c2: 90:f2:0c:ff:7c:68:ae:26:b7:ae:fb:7d:92:4d:6f:5c:c2:47: 8f:48:87:14:48:46:8f:a3:3d:68:8d:0b:0e:2b:d1:6b:50:2c: 45:83:b5:65:16:a1:02:08:ab:31:1b:64:82:bb:40:a9:bf:46: 56:1e:c4:5c:5a:ac:30:28:c0:1a:36:67:e0:d4:95:23:64:39: e0:8b:5d:0e:d8:33:86:1c:a5:42:12:f5:38:41:e9:66:9e:fd: a5:b0:2e:17:9b:5c:36:25:70:7a:62:fd:35:9e:cd:dd:63:db: f9:8d:1d:1f:39:ba:ea:3b:c9:1d:4b:f8:46:f8:4f:26:ed:e7: 47:7d:e2:c8 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+OJYmlU0GKVLX+lUoZbXNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0OWVlZTI0ZGVhYjU1MjAxMTliNmEzZGEwNDU3ZDM5YzQw NjQxZGIwHhcNMjYwMTAyMTAxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjM2ZlOTQwOWZkYjE1YWFjNzczYmUzYmU3NGVhMzYyNTQzNDBmOGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqpYZCMTp8kkbXY2dS2ARKRSXMp6 PEZ+DeUM6/wiMIYdCp1MC2K6WW7/Mb9ldVLd+jnaVMsc+twiTO+KSJOCD9JA33Br MroUKIrPWL5dRwHZxIsQI0NONL6jMrMZ4jquASkFXlu17tRD9jIlwhRCC4st4lod BLyE7sDaXgp+h3ykzdY5dii71jIzAjXtiGCKoVo2i77qjqlEzyJ22amKaueI4FOD MIY+oE2SfeApVHeACFFrwjY4rCuglihm8Dm87ILux9zbf5VP95PRVhOQk2f+kLRI EiuoHLGzInCRRgfFRVfymKtYlM63CytnSaZYNqlxtAyAKQG0DMVX67pJNQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMP+lAn9sVqsdzvjvnTqNiVDQPjoMB8GA1UdIwQY MBaAFMSe7iTeq1UgEZtqPaBFfTnEBkHbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEo3dUpONnJWU0FSbTJvOW9FVjlPY1FHUWRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85Nzg2ZjQtZGQ1NC00ZTQzLWFlYTQt NTljNGMxMGFlYmQ5LzEvd182VUNmMnhXcXgzTy1PLWRPbzJKVU5BLU9nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy85Nzg2ZjQtZGQ1NC00ZTQzLWFlYTQtNTljNGMxMGFlYmQ5 LzEveEo3dUpONnJWU0FSbTJvOW9FVjlPY1FHUWRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDTVvAAwQD XsaAAwQCuSCEMA0GCSqGSIb3DQEBCwUAA4IBAQBTNsOyJPn+A0HoffEtJSvdr1a/ fdFj94BV72kC7RL9EGe1U6qluugGFeXE4mT221OjDDMlUSmgzgxWNBrsPnFu662a QMwJA/6kg3/mexWLvBgW8oAa0Q+KDR5Fnp+UW+p+PmW+h81FEzp0oWlkY7JqbB4l KvQo9u60juCjK8KQ8gz/fGiuJreu+32STW9cwkePSIcUSEaPoz1ojQsOK9FrUCxF g7VlFqECCKsxG2SCu0Cpv0ZWHsRcWqwwKMAaNmfg1JUjZDngi10O2DOGHKVCEvU4 Qelmnv2lsC4Xm1w2JXB6Yv01ns3dY9v5jR0fObrqO8kdS/hG+E8m7edHfeLI -----END CERTIFICATE-----Generated at Mon Feb 9 20:10:23 2026 by rpki-client