This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1fac4a-aa33-44bc-b6a2-1cf3da6f7d7e/1/wE_m3PzawUPxAcW_yzrW78mgOTg.roa File: wE_m3PzawUPxAcW_yzrW78mgOTg.roa (raw, json) Hash identifier: 0rkpF2YguxZ08C9vGFT6j8nPqUGLYAFlwBvueLMdE9E= Subject key identifier: C0:4F:E6:DC:FC:DA:C1:43:F1:01:C5:BF:CB:3A:D6:EF:C9:A0:39:38 Certificate issuer: /CN=e92574d716cbbdbf724d706c1117970f667b237e Certificate serial: 019B7BA4CBD559097D2789069FBD0C9605BD Authority key identifier: E9:25:74:D7:16:CB:BD:BF:72:4D:70:6C:11:17:97:0F:66:7B:23:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SV01xbLvb9yTXBsEReXD2Z7I34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1fac4a-aa33-44bc-b6a2-1cf3da6f7d7e/1/wE_m3PzawUPxAcW_yzrW78mgOTg.roa Signing time: Thu 01 Jan 2026 22:19:16 +0000 ROA not before: Thu 01 Jan 2026 22:19:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203934 IP address blocks: 45.90.188.0/22 maxlen: 22 185.118.156.0/23 maxlen: 23 185.118.158.0/23 maxlen: 23 2a03:6320::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1fac4a-aa33-44bc-b6a2-1cf3da6f7d7e/1/6SV01xbLvb9yTXBsEReXD2Z7I34.crl rsync://rpki.ripe.net/repository/DEFAULT/14/1fac4a-aa33-44bc-b6a2-1cf3da6f7d7e/1/6SV01xbLvb9yTXBsEReXD2Z7I34.mft rsync://rpki.ripe.net/repository/DEFAULT/6SV01xbLvb9yTXBsEReXD2Z7I34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:cb:d5:59:09:7d:27:89:06:9f:bd:0c:96:05:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e92574d716cbbdbf724d706c1117970f667b237e Validity Not Before: Jan 1 22:19:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c04fe6dcfcdac143f101c5bfcb3ad6efc9a03938 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:47:78:3f:3d:16:b1:da:9d:f6:1b:bf:61:f6: fb:fd:c2:c3:93:6f:ac:58:c0:a2:08:d7:fb:5c:a1: 07:db:90:82:53:13:d7:01:57:6b:1d:5a:1f:64:32: c3:f3:9a:85:30:a6:c9:13:6e:b6:cd:b3:61:f7:5e: 43:49:b2:97:7c:ac:24:84:30:ea:28:06:e3:c7:96: e3:20:cb:a2:3e:f7:2e:25:0a:90:d1:e9:00:a1:d2: 0c:fc:63:fd:1f:47:72:0a:7e:67:d0:6a:ef:52:f8: ad:aa:c3:95:e2:e7:83:d6:d7:b9:5b:a1:4f:d4:f2: 06:91:ce:dc:65:2f:74:e8:cf:5a:bf:ae:d5:83:a5: ea:47:ba:cc:99:29:78:09:d9:3b:4c:8b:d4:44:9a: 70:c0:b8:06:f8:34:67:ed:55:cd:d3:f5:b7:9c:9e: aa:3e:f9:8f:63:df:df:5b:0a:60:3d:c8:ee:d6:7c: e9:d9:9b:02:a9:61:59:81:05:54:8b:89:74:f0:8a: f6:7e:3e:f1:4d:1b:8e:8b:99:d2:45:a6:cc:85:e0: 8d:bf:80:83:19:f8:94:0c:13:3f:36:2c:c1:05:ea: 1b:cb:b8:f6:2b:a9:f4:5b:3b:a9:e6:04:f4:24:0e: 64:43:8b:7b:d6:34:8c:5f:65:60:f2:8b:37:c0:1d: ad:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:4F:E6:DC:FC:DA:C1:43:F1:01:C5:BF:CB:3A:D6:EF:C9:A0:39:38 X509v3 Authority Key Identifier: keyid:E9:25:74:D7:16:CB:BD:BF:72:4D:70:6C:11:17:97:0F:66:7B:23:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SV01xbLvb9yTXBsEReXD2Z7I34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1fac4a-aa33-44bc-b6a2-1cf3da6f7d7e/1/wE_m3PzawUPxAcW_yzrW78mgOTg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1fac4a-aa33-44bc-b6a2-1cf3da6f7d7e/1/6SV01xbLvb9yTXBsEReXD2Z7I34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.90.188.0/22 185.118.156.0/22 IPv6: 2a03:6320::/32 Signature Algorithm: sha256WithRSAEncryption 60:a3:96:eb:18:6b:e6:d7:ed:79:7e:37:ec:fb:00:db:2a:96: db:73:a9:bd:f6:b0:43:b3:8f:a7:d2:5b:ec:7a:6d:d3:28:19: 3d:01:08:4f:7c:e2:f4:21:9d:fa:08:90:38:0d:14:7d:b3:24: 8b:0e:ea:d7:a8:60:33:6f:31:5e:d2:fc:4e:66:05:2b:64:6f: 12:a9:55:5c:69:19:3b:d4:f7:9c:75:0f:6e:f9:55:a0:c9:ca: 14:7c:99:19:b2:38:db:af:42:86:ac:3e:51:bb:ca:ba:93:46: 87:9c:de:5d:4a:a6:1b:45:fe:8e:e7:b2:92:0a:44:20:9a:5a: 99:3e:40:ed:bf:fc:88:92:81:13:d9:ac:a8:43:81:68:f6:d3: da:45:e9:d9:06:26:c3:94:59:67:f4:d9:89:d8:9f:2a:e9:e5: 3a:8f:b6:39:94:1c:d2:87:0c:73:7a:22:9e:51:95:38:f7:49: 65:5d:c2:ff:99:cd:ee:4f:38:7b:a4:11:0d:d6:0b:0f:43:ee: 9f:8d:46:25:77:f6:a6:65:2d:f2:3e:0f:ba:b1:af:b3:da:80: 4b:db:4f:74:5e:3b:b0:1a:77:c8:9c:83:6d:51:df:c6:c7:81: cb:b3:d2:ad:3e:b7:e3:67:b0:2b:ff:55:bb:17:05:b8:f7:d0: 91:38:ba:f9 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7pMvVWQl9J4kGn70MlgW9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MjU3NGQ3MTZjYmJkYmY3MjRkNzA2YzExMTc5NzBmNjY3 YjIzN2UwHhcNMjYwMTAxMjIxOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDRmZTZkY2ZjZGFjMTQzZjEwMWM1YmZjYjNhZDZlZmM5YTAzOTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEd4Pz0Wsdqd9hu/Yfb7/cLDk2+s WMCiCNf7XKEH25CCUxPXAVdrHVofZDLD85qFMKbJE262zbNh915DSbKXfKwkhDDq KAbjx5bjIMuiPvcuJQqQ0ekAodIM/GP9H0dyCn5n0GrvUvitqsOV4ueD1te5W6FP 1PIGkc7cZS906M9av67Vg6XqR7rMmSl4Cdk7TIvURJpwwLgG+DRn7VXN0/W3nJ6q PvmPY9/fWwpgPcju1nzp2ZsCqWFZgQVUi4l08Ir2fj7xTRuOi5nSRabMheCNv4CD GfiUDBM/NizBBeoby7j2K6n0Wzup5gT0JA5kQ4t71jSMX2Vg8os3wB2t+QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFMBP5tz82sFD8QHFv8s61u/JoDk4MB8GA1UdIwQY MBaAFOkldNcWy72/ck1wbBEXlw9meyN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlNWMDF4Ykx2Yjl5VFhCc0VSZVhEMlo3STM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xZmFjNGEtYWEzMy00NGJjLWI2YTIt MWNmM2RhNmY3ZDdlLzEvd0VfbTNQemF3VVB4QWNXX3l6clc3OG1nT1RnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC8xZmFjNGEtYWEzMy00NGJjLWI2YTItMWNmM2RhNmY3ZDdl LzEvNlNWMDF4Ykx2Yjl5VFhCc0VSZVhEMlo3STM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLVq8AwQC uXacMA0EAgACMAcDBQAqA2MgMA0GCSqGSIb3DQEBCwUAA4IBAQBgo5brGGvm1+15 fjfs+wDbKpbbc6m99rBDs4+n0lvsem3TKBk9AQhPfOL0IZ36CJA4DRR9sySLDurX qGAzbzFe0vxOZgUrZG8SqVVcaRk71PecdQ9u+VWgycoUfJkZsjjbr0KGrD5Ru8q6 k0aHnN5dSqYbRf6O57KSCkQgmlqZPkDtv/yIkoET2ayoQ4Fo9tPaRenZBibDlFln 9NmJ2J8q6eU6j7Y5lBzShwxzeiKeUZU490llXcL/mc3uTzh7pBEN1gsPQ+6fjUYl d/amZS3yPg+6sa+z2oBL2090XjuwGnfInINtUd/Gx4HLs9KtPrfjZ7Ar/1W7FwW4 99CROLr5 -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:11 2026 by rpki-client