This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/dEGOlqVsKgQaCH1VxJ9CAArc06o.roa File: dEGOlqVsKgQaCH1VxJ9CAArc06o.roa (raw, json) Hash identifier: 4QNQJHvNTBP/TpqbVI9/mB+7TEbOGPGQviIZYoErhd0= Subject key identifier: 74:41:8E:96:A5:6C:2A:04:1A:08:7D:55:C4:9F:42:00:0A:DC:D3:AA Certificate issuer: /CN=c28973affaa9936d39146aa136fbcb051b9af99f Certificate serial: 019B7C1351D8A4F4E717520B610981300FFE Authority key identifier: C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/dEGOlqVsKgQaCH1VxJ9CAArc06o.roa Signing time: Fri 02 Jan 2026 00:19:59 +0000 ROA not before: Fri 02 Jan 2026 00:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3257 IP address blocks: 78.40.200.0/21 maxlen: 21 82.119.192.0/19 maxlen: 19 88.81.160.0/19 maxlen: 19 185.155.164.0/22 maxlen: 22 217.22.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 09:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:51:d8:a4:f4:e7:17:52:0b:61:09:81:30:0f:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c28973affaa9936d39146aa136fbcb051b9af99f Validity Not Before: Jan 2 00:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74418e96a56c2a041a087d55c49f42000adcd3aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e3:c4:77:ea:49:41:0f:96:b3:2a:22:e0:e7: d9:38:d7:44:33:7f:70:7b:56:74:2c:01:81:de:10: 7b:39:15:f9:94:dc:06:86:6a:46:a3:eb:ec:98:26: 4f:29:ef:c1:c9:0a:a8:5f:34:3f:f9:e6:f3:8f:fe: 60:df:83:32:f5:2b:5c:3e:74:e0:30:94:fe:30:07: 10:38:91:2d:30:48:fe:6b:3e:43:1b:61:b5:75:cc: 48:85:9e:7c:22:1b:e8:25:96:4e:d7:e4:b9:6e:86: 77:db:7f:34:70:6c:59:0b:8d:ea:f0:53:7e:7c:cd: 9b:89:b3:86:e9:ea:d9:82:45:23:ee:ca:d9:e0:d8: 00:8b:f4:8f:01:90:be:9c:2a:3f:ec:ea:51:c5:7e: 78:34:f3:c4:fe:53:f7:c3:43:99:59:b6:22:34:f1: 6d:07:6f:91:10:76:c5:a0:79:a1:71:a6:18:cc:07: 2a:eb:bd:3d:03:ce:b5:6c:2f:b4:60:ce:e1:27:36: f2:64:f1:2f:6f:a6:e2:4a:4d:ae:05:66:aa:c3:07: 9a:4e:2a:66:08:40:06:25:25:9f:e3:f4:8f:a9:57: d5:0a:ae:ba:cb:23:bd:7c:fe:f6:ea:8f:71:c1:3c: 89:e7:52:25:a8:14:54:88:5f:19:cb:5c:73:6e:80: 6c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:41:8E:96:A5:6C:2A:04:1A:08:7D:55:C4:9F:42:00:0A:DC:D3:AA X509v3 Authority Key Identifier: keyid:C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/dEGOlqVsKgQaCH1VxJ9CAArc06o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.40.200.0/21 82.119.192.0/19 88.81.160.0/19 185.155.164.0/22 217.22.224.0/19 Signature Algorithm: sha256WithRSAEncryption 5a:9e:8d:a5:38:ed:b3:b2:3d:c9:64:87:de:bf:17:36:eb:6f: 9d:09:a2:53:63:c5:ee:7c:3f:95:1b:f3:82:43:fc:69:87:38: 86:f0:da:f3:3a:ce:80:b1:24:03:90:c0:06:d3:44:5f:4d:77: 9e:05:9a:e0:28:aa:98:c4:12:9a:97:b2:37:fe:81:f3:f2:f0: b6:f6:64:7e:e5:94:c6:a8:4a:0e:88:07:10:1c:c3:31:4f:6d: aa:10:3c:b4:1a:1e:20:ec:31:86:37:d9:a8:ea:bb:41:32:47: e9:1c:3b:5a:04:99:bb:23:f1:c7:50:53:c3:1b:66:04:d0:37: 20:23:1f:d1:40:19:8a:2b:68:58:72:f7:0e:27:92:8b:28:75: 7c:7d:a3:86:aa:f6:0d:a8:bf:9b:9f:ab:7e:24:8d:fb:28:e4: 8d:cf:6f:14:91:34:a9:ba:88:6f:d4:1a:77:44:3c:94:f4:31: 02:2c:5f:b2:1e:65:13:f5:14:7e:ff:38:af:a4:cd:81:81:7c: 6f:8c:18:56:a7:e4:51:01:da:a9:d6:19:a1:07:fb:33:33:89: 96:a2:e4:e5:f5:76:c6:9e:a9:00:85:1c:9f:d0:da:6c:fd:bc: 55:ff:9b:33:0e:85:48:6c:33:9b:07:b7:45:f2:cd:a4:6f:d2: 56:f0:41:f6 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt8E1HYpPTnF1ILYQmBMA/+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyODk3M2FmZmFhOTkzNmQzOTE0NmFhMTM2ZmJjYjA1MWI5 YWY5OWYwHhcNMjYwMTAyMDAxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDQxOGU5NmE1NmMyYTA0MWEwODdkNTVjNDlmNDIwMDBhZGNkM2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OPEd+pJQQ+Wsyoi4OfZONdEM39w e1Z0LAGB3hB7ORX5lNwGhmpGo+vsmCZPKe/ByQqoXzQ/+ebzj/5g34My9StcPnTg MJT+MAcQOJEtMEj+az5DG2G1dcxIhZ58IhvoJZZO1+S5boZ32380cGxZC43q8FN+ fM2bibOG6erZgkUj7srZ4NgAi/SPAZC+nCo/7OpRxX54NPPE/lP3w0OZWbYiNPFt B2+REHbFoHmhcaYYzAcq6709A861bC+0YM7hJzbyZPEvb6biSk2uBWaqwweaTipm CEAGJSWf4/SPqVfVCq66yyO9fP726o9xwTyJ51IlqBRUiF8Zy1xzboBsDwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFHRBjpalbCoEGgh9VcSfQgAK3NOqMB8GA1UdIwQY MBaAFMKJc6/6qZNtORRqoTb7ywUbmvmfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd29senJfcXBrMjA1RkdxaE52dkxCUnVhLVo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9hOTU0YmQtMTU3Zi00ZGJiLWJiYTQt MzQ2M2I1NmUzNzJjLzEvZEVHT2xxVnNLZ1FhQ0gxVnhKOUNBQXJjMDZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9hOTU0YmQtMTU3Zi00ZGJiLWJiYTQtMzQ2M2I1NmUzNzJj LzEvd29senJfcXBrMjA1RkdxaE52dkxCUnVhLVo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQDTijIAwQF UnfAAwQFWFGgAwQCuZukAwQF2RbgMA0GCSqGSIb3DQEBCwUAA4IBAQBano2lOO2z sj3JZIfevxc262+dCaJTY8XufD+VG/OCQ/xphziG8NrzOs6AsSQDkMAG00RfTXee BZrgKKqYxBKal7I3/oHz8vC29mR+5ZTGqEoOiAcQHMMxT22qEDy0Gh4g7DGGN9mo 6rtBMkfpHDtaBJm7I/HHUFPDG2YE0DcgIx/RQBmKK2hYcvcOJ5KLKHV8faOGqvYN qL+bn6t+JI37KOSNz28UkTSpuohv1Bp3RDyU9DECLF+yHmUT9RR+/zivpM2BgXxv jBhWp+RRAdqp1hmhB/szM4mWouTl9XbGnqkAhRyf0Nps/bxV/5szDoVIbDObB7dF 8s2kb9JW8EH2 -----END CERTIFICATE-----Generated at Fri Jan 2 16:24:30 2026 by rpki-client