This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/1KJ1DEvvUx0hUUP6VrPeRs66bzQ.roa File: 1KJ1DEvvUx0hUUP6VrPeRs66bzQ.roa (raw, json) Hash identifier: 9ZODHvJMX+LLnmU8F5Mt4Ii9IxBxc0OdSRFMgMzJ7zo= Subject key identifier: D4:A2:75:0C:4B:EF:53:1D:21:51:43:FA:56:B3:DE:46:CE:BA:6F:34 Certificate issuer: /CN=c28973affaa9936d39146aa136fbcb051b9af99f Certificate serial: 019B7C13550F8F0B9488C3330C76956902D5 Authority key identifier: C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/1KJ1DEvvUx0hUUP6VrPeRs66bzQ.roa Signing time: Fri 02 Jan 2026 00:20:00 +0000 ROA not before: Fri 02 Jan 2026 00:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30058 IP address blocks: 82.119.208.0/23 maxlen: 23 217.22.242.0/23 maxlen: 23 217.22.246.0/23 maxlen: 23 217.22.250.0/23 maxlen: 23 217.22.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:55:0f:8f:0b:94:88:c3:33:0c:76:95:69:02:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c28973affaa9936d39146aa136fbcb051b9af99f Validity Not Before: Jan 2 00:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4a2750c4bef531d215143fa56b3de46ceba6f34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:16:2a:bc:af:f5:1b:e1:f6:88:83:ba:5f:6d: 9b:82:10:36:06:80:30:ad:0c:a2:63:97:40:7a:a4: 4f:27:6d:be:e1:94:b9:c6:60:ea:8f:7e:c6:25:74: c0:c8:26:b2:b2:dd:aa:c7:5d:cd:6c:2d:f4:f8:bd: c9:62:16:86:71:64:7e:8e:dd:a6:f2:a8:b1:f7:8a: c1:e1:b0:eb:8a:bc:3f:f9:bd:9b:9c:6b:de:a4:e8: 7f:e8:7f:b1:f2:92:35:5d:6a:eb:51:f3:26:dc:61: af:e0:5d:f1:62:17:c4:8b:e4:f2:d2:38:44:3e:72: 52:0c:ef:4c:75:10:41:11:2a:6b:a7:a1:09:6c:c6: 90:49:f7:49:7c:2e:4e:5d:62:a2:14:00:b5:b5:bb: ee:ec:7f:01:58:f0:63:de:1b:8a:d4:aa:c4:8b:34: be:6d:e4:45:86:3c:6b:a9:e9:30:79:bd:88:3b:7f: 6b:cd:a8:6b:d9:b2:92:07:73:fe:2e:de:7e:11:83: 92:39:c2:a7:d2:cd:ce:26:26:37:55:f5:de:64:9f: 1c:27:07:32:df:1e:eb:7a:0b:27:4e:91:8f:05:1f: c1:0e:30:64:03:29:e4:7f:25:77:c5:09:ab:e1:62: 6b:a9:14:d4:9c:7c:b1:e4:e8:76:a2:aa:d5:c8:8b: fc:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:A2:75:0C:4B:EF:53:1D:21:51:43:FA:56:B3:DE:46:CE:BA:6F:34 X509v3 Authority Key Identifier: keyid:C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/1KJ1DEvvUx0hUUP6VrPeRs66bzQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.119.208.0/23 217.22.242.0/23 217.22.246.0/23 217.22.250.0/23 217.22.254.0/23 Signature Algorithm: sha256WithRSAEncryption 86:01:87:57:ee:71:39:85:c2:ac:65:6c:25:48:02:28:46:ab: 4c:66:cb:7c:02:06:46:55:20:43:fe:c1:d5:7a:ee:d8:6c:d8: 86:16:04:fb:10:8c:0d:3d:a1:20:64:d3:3c:76:7f:05:1c:16: 94:23:0f:e8:c7:4b:b0:7b:2f:4d:45:79:72:6a:72:8a:20:98: 05:07:b0:ad:40:51:4e:87:c9:66:e1:7c:7b:6a:9c:ab:f2:ff: 07:a9:e4:23:9c:3f:c4:23:f3:00:0c:67:d5:f2:1b:cc:6b:3a: e2:99:0a:26:fc:7f:60:4e:2c:ab:de:e1:25:96:3f:96:eb:68: 85:bd:4d:85:ec:e3:1c:ee:19:85:a1:71:c0:51:74:30:a2:0b: 7b:46:c4:26:b9:5a:ca:b2:bf:6f:f7:8a:68:31:a1:1f:e9:40: 72:d8:77:6f:a5:77:93:5f:62:42:d4:d0:8c:22:03:dc:97:95: 6f:bb:92:7e:cf:ba:1c:40:b9:15:82:5d:73:0d:78:96:2f:4e: 8c:58:30:e7:8a:a2:7b:27:de:5c:a4:35:11:93:35:50:e8:4e: 59:ef:d9:4a:e5:61:dc:b1:34:51:ce:9b:1d:18:be:41:79:69: ec:09:06:49:54:78:0c:7c:8e:3b:00:f6:1b:c7:76:76:0b:25: ff:15:08:1c -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt8E1UPjwuUiMMzDHaVaQLVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyODk3M2FmZmFhOTkzNmQzOTE0NmFhMTM2ZmJjYjA1MWI5 YWY5OWYwHhcNMjYwMTAyMDAyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGEyNzUwYzRiZWY1MzFkMjE1MTQzZmE1NmIzZGU0NmNlYmE2ZjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxYqvK/1G+H2iIO6X22bghA2BoAw rQyiY5dAeqRPJ22+4ZS5xmDqj37GJXTAyCayst2qx13NbC30+L3JYhaGcWR+jt2m 8qix94rB4bDrirw/+b2bnGvepOh/6H+x8pI1XWrrUfMm3GGv4F3xYhfEi+Ty0jhE PnJSDO9MdRBBESprp6EJbMaQSfdJfC5OXWKiFAC1tbvu7H8BWPBj3huK1KrEizS+ beRFhjxrqekweb2IO39rzahr2bKSB3P+Lt5+EYOSOcKn0s3OJiY3VfXeZJ8cJwcy 3x7regsnTpGPBR/BDjBkAynkfyV3xQmr4WJrqRTUnHyx5Oh2oqrVyIv8FQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFNSidQxL71MdIVFD+laz3kbOum80MB8GA1UdIwQY MBaAFMKJc6/6qZNtORRqoTb7ywUbmvmfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd29senJfcXBrMjA1RkdxaE52dkxCUnVhLVo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9hOTU0YmQtMTU3Zi00ZGJiLWJiYTQt MzQ2M2I1NmUzNzJjLzEvMUtKMURFdnZVeDBoVVVQNlZyUGVSczY2YnpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9hOTU0YmQtMTU3Zi00ZGJiLWJiYTQtMzQ2M2I1NmUzNzJj LzEvd29senJfcXBrMjA1RkdxaE52dkxCUnVhLVo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQBUnfQAwQB 2RbyAwQB2Rb2AwQB2Rb6AwQB2Rb+MA0GCSqGSIb3DQEBCwUAA4IBAQCGAYdX7nE5 hcKsZWwlSAIoRqtMZst8AgZGVSBD/sHVeu7YbNiGFgT7EIwNPaEgZNM8dn8FHBaU Iw/ox0uwey9NRXlyanKKIJgFB7CtQFFOh8lm4Xx7apyr8v8HqeQjnD/EI/MADGfV 8hvMazrimQom/H9gTiyr3uEllj+W62iFvU2F7OMc7hmFoXHAUXQwogt7RsQmuVrK sr9v94poMaEf6UBy2HdvpXeTX2JC1NCMIgPcl5Vvu5J+z7ocQLkVgl1zDXiWL06M WDDniqJ7J95cpDURkzVQ6E5Z79lK5WHcsTRRzpsdGL5BeWnsCQZJVHgMfI47APYb x3Z2CyX/FQgc -----END CERTIFICATE-----Generated at Tue Jan 20 12:47:04 2026 by rpki-client