This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/wFcQh1pLnWpHuf1lStluq2uxmvY.roa File: wFcQh1pLnWpHuf1lStluq2uxmvY.roa (raw, json) Hash identifier: bDd77hcpwLaq11qSWv9bvORhMC9yZa9TDgXB+u0jId4= Subject key identifier: C0:57:10:87:5A:4B:9D:6A:47:B9:FD:65:4A:D9:6E:AB:6B:B1:9A:F6 Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7DC7943073C3EADD403D7EFCF2CA9 Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/wFcQh1pLnWpHuf1lStluq2uxmvY.roa Signing time: Thu 01 Jan 2026 18:17:56 +0000 ROA not before: Thu 01 Jan 2026 18:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203963 IP address blocks: 89.191.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:dc:79:43:07:3c:3e:ad:d4:03:d7:ef:cf:2c:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c05710875a4b9d6a47b9fd654ad96eab6bb19af6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:52:4d:ed:ea:48:3d:e0:51:3a:c1:1f:76:de: 52:ee:8d:01:c7:b0:d5:91:91:96:e5:39:6c:49:83: 4c:fa:24:1e:95:9c:36:55:4f:fa:1b:de:74:db:c2: 01:6e:a2:96:c8:19:63:48:3c:81:e1:68:43:70:68: a2:d5:75:ef:bf:53:cb:c2:b5:78:a1:23:be:ee:e6: 7c:fd:24:36:68:70:e7:ad:de:39:8d:f2:19:91:14: 10:40:67:e7:ee:cf:4b:aa:56:d3:b2:f3:9b:c4:3c: 47:53:df:68:5a:a0:aa:84:5d:d4:1e:fe:da:70:10: 03:33:25:5c:8f:b9:32:6b:22:2b:78:04:3c:91:8c: 35:e1:e7:32:48:74:e9:86:53:45:39:f9:4d:d7:ed: 09:ca:3b:63:cd:ac:7a:4b:60:95:65:b0:a9:33:51: e0:3f:c7:d7:67:9c:5b:ed:76:46:60:8a:8d:bf:93: 85:06:f8:51:70:ea:78:72:c9:14:9f:63:0c:19:8b: ff:4a:48:9a:1b:c0:49:4b:5e:09:ca:b6:85:42:08: c7:69:db:2b:b9:cd:6e:9f:d0:2e:f8:87:e7:4f:06: 01:38:97:ac:5e:95:72:9c:6c:fe:c6:b2:30:08:37: 3d:4d:fa:0d:cf:78:60:0e:b1:e6:8f:dc:0a:50:f1: 4e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:57:10:87:5A:4B:9D:6A:47:B9:FD:65:4A:D9:6E:AB:6B:B1:9A:F6 X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/wFcQh1pLnWpHuf1lStluq2uxmvY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.191.112.0/21 Signature Algorithm: sha256WithRSAEncryption 80:09:e4:02:80:fe:18:9b:e5:13:18:47:1e:ac:98:68:90:48: c5:65:82:31:c6:5a:b7:a1:a6:68:a7:fa:c6:c3:ea:ca:4f:a0: 0b:08:74:3f:d8:cc:c9:7d:28:31:1e:55:b2:99:1f:d0:ca:f4: db:e8:e1:56:da:bf:2f:d1:af:96:d9:96:ae:bc:e0:59:51:2c: bc:56:bd:fe:7e:50:14:94:55:47:29:c1:4b:1e:7c:8b:9b:b2: 84:6a:97:98:92:0d:80:4a:74:a7:b3:ed:cc:5b:1b:df:39:1f: 97:15:64:9d:a4:f1:44:41:47:dd:5f:11:90:c3:b0:64:2b:aa: 26:00:dc:e1:e0:7a:0a:55:42:6d:e4:1e:23:ae:a8:f5:54:5a: 56:9c:45:bc:9d:4d:ba:18:ae:3d:16:8e:aa:56:44:89:45:4c: 86:34:76:94:5d:ad:9c:6a:90:70:57:e5:fd:0b:1e:2c:c7:bf: 26:9f:58:ff:a7:45:d3:4e:8f:10:f5:34:b1:c2:07:36:e8:5a: 7c:1a:8e:82:d7:9a:ee:4d:6a:4d:34:c0:5d:05:86:d1:8a:25: de:f9:f9:2b:25:54:32:78:30:c8:5d:e9:e3:ac:13:63:0a:bb: c0:a3:71:df:e9:c8:1d:21:f4:ae:d3:e8:a7:d4:5f:93:c2:da: 0c:bb:a6:75 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x9x5Qwc8Pq3UA9fvzyypMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDU3MTA4NzVhNGI5ZDZhNDdiOWZkNjU0YWQ5NmVhYjZiYjE5YWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVJN7epIPeBROsEfdt5S7o0Bx7DV kZGW5TlsSYNM+iQelZw2VU/6G95028IBbqKWyBljSDyB4WhDcGii1XXvv1PLwrV4 oSO+7uZ8/SQ2aHDnrd45jfIZkRQQQGfn7s9LqlbTsvObxDxHU99oWqCqhF3UHv7a cBADMyVcj7kyayIreAQ8kYw14ecySHTphlNFOflN1+0Jyjtjzax6S2CVZbCpM1Hg P8fXZ5xb7XZGYIqNv5OFBvhRcOp4cskUn2MMGYv/SkiaG8BJS14JyraFQgjHadsr uc1un9Au+IfnTwYBOJesXpVynGz+xrIwCDc9TfoNz3hgDrHmj9wKUPFOuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMBXEIdaS51qR7n9ZUrZbqtrsZr2MB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvd0ZjUWgxcExuV3BIdWYxbFN0bHVxMnV4bXZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDWb9wMA0G CSqGSIb3DQEBCwUAA4IBAQCACeQCgP4Ym+UTGEcerJhokEjFZYIxxlq3oaZop/rG w+rKT6ALCHQ/2MzJfSgxHlWymR/QyvTb6OFW2r8v0a+W2ZauvOBZUSy8Vr3+flAU lFVHKcFLHnyLm7KEapeYkg2ASnSns+3MWxvfOR+XFWSdpPFEQUfdXxGQw7BkK6om ANzh4HoKVUJt5B4jrqj1VFpWnEW8nU26GK49Fo6qVkSJRUyGNHaUXa2capBwV+X9 Cx4sx78mn1j/p0XTTo8Q9TSxwgc26Fp8Go6C15ruTWpNNMBdBYbRiiXe+fkrJVQy eDDIXenjrBNjCrvAo3Hf6cgdIfSu0+in1F+TwtoMu6Z1 -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:54 2026 by rpki-client