This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/CWNF4a7mLYbKSGXj37QsRs18EPc.roa File: CWNF4a7mLYbKSGXj37QsRs18EPc.roa (raw, json) Hash identifier: YsCfFIceaBejyXvZZ5Ucl+3/y81JerhJsxljYX0B06A= Subject key identifier: 09:63:45:E1:AE:E6:2D:86:CA:48:65:E3:DF:B4:2C:46:CD:7C:10:F7 Certificate issuer: /CN=261c8e2b00a3d5957d4112daf35b66e429375505 Certificate serial: 019B7C1284486D41405F4CBCEE3B2427EB8C Authority key identifier: 26:1C:8E:2B:00:A3:D5:95:7D:41:12:DA:F3:5B:66:E4:29:37:55:05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/CWNF4a7mLYbKSGXj37QsRs18EPc.roa Signing time: Fri 02 Jan 2026 00:19:06 +0000 ROA not before: Fri 02 Jan 2026 00:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62290 IP address blocks: 91.193.54.0/24 maxlen: 24 185.24.116.0/22 maxlen: 22 185.24.116.0/23 maxlen: 23 185.173.212.0/22 maxlen: 22 212.102.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.mft rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:84:48:6d:41:40:5f:4c:bc:ee:3b:24:27:eb:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=261c8e2b00a3d5957d4112daf35b66e429375505 Validity Not Before: Jan 2 00:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=096345e1aee62d86ca4865e3dfb42c46cd7c10f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:07:6a:cb:f3:a2:52:3e:f7:f1:a1:9b:a7:e6: d9:8e:c8:68:a5:50:c7:8c:4e:87:c5:3d:e5:90:6d: 88:ad:d9:fa:4d:ff:a5:f1:0b:6c:ea:bd:6e:08:53: c0:4f:a1:70:43:25:37:9e:1a:52:d0:50:90:01:44: fa:5d:a4:99:3f:17:5b:66:1c:12:6a:06:46:14:05: 1a:51:bc:43:d1:1c:05:7d:c8:05:d9:de:57:8b:5f: 3a:34:57:68:f6:99:44:5b:41:93:89:dd:8c:56:10: 90:5d:9c:98:65:2b:e2:a6:2a:8d:b1:81:1e:8e:22: f8:10:49:9a:62:bf:a3:0b:21:9a:ab:12:3a:a5:3e: 90:f4:50:39:f8:52:96:79:6d:6e:2b:38:16:73:6f: 7e:18:03:7f:46:dc:d9:32:d2:47:c8:24:aa:2c:73: 16:e4:27:84:30:60:0c:20:8e:ca:3f:c6:75:8a:aa: c1:9e:99:b7:c4:11:24:40:92:e3:40:c2:6e:0e:71: 8f:1c:c5:4c:ab:89:99:63:98:d7:e6:04:61:11:d1: b3:20:b7:bf:4e:58:1c:56:a8:da:1d:a3:33:8b:dc: 22:61:1e:60:47:aa:9b:99:f3:25:74:48:74:54:9f: d5:e8:65:61:1b:f5:9f:5d:45:af:4c:2a:6b:82:52: 90:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:63:45:E1:AE:E6:2D:86:CA:48:65:E3:DF:B4:2C:46:CD:7C:10:F7 X509v3 Authority Key Identifier: keyid:26:1C:8E:2B:00:A3:D5:95:7D:41:12:DA:F3:5B:66:E4:29:37:55:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/CWNF4a7mLYbKSGXj37QsRs18EPc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/a1c9d9-fb1b-4cfa-a6c0-298838556d09/1/JhyOKwCj1ZV9QRLa81tm5Ck3VQU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.193.54.0/24 185.24.116.0/22 185.173.212.0/22 212.102.109.0/24 Signature Algorithm: sha256WithRSAEncryption 31:93:48:f2:e6:88:e0:19:26:fb:0a:70:31:01:3d:72:a0:07: aa:e5:38:90:83:23:27:84:4a:92:c9:50:32:5b:e7:ce:6b:ec: 60:fa:8e:8e:b8:44:e4:fe:23:bb:b7:8f:a4:da:dd:7a:cc:89: 06:07:f6:98:00:f9:86:43:8d:8e:45:aa:76:23:be:41:5a:f6: 86:f2:25:c1:9c:c4:6f:df:51:8e:1b:00:ca:f6:b6:a4:96:f4: 11:b1:80:0a:89:d9:e8:26:ec:ef:50:f3:65:24:c1:cd:d6:2b: e4:4c:a3:51:40:a3:b9:4d:96:c6:64:42:1f:1e:cd:98:5f:f9: 8a:04:b9:13:ed:4a:16:c0:a4:cf:32:07:08:a7:1d:5b:20:9a: 7f:ee:14:ac:ac:d6:d2:f5:4e:f6:71:36:e3:63:50:a4:fa:a5: 34:e1:5c:62:45:7d:85:52:17:c6:34:a2:b3:3a:3f:44:4e:7a: c4:2f:ad:37:9c:79:39:c1:9c:94:33:2d:0e:6b:b1:a2:9c:ee: bf:ea:2e:d4:b4:c1:88:a2:68:79:8d:8c:c2:55:3e:de:83:2a: a4:ac:99:76:57:6f:b3:51:4e:f6:f6:99:0f:de:03:4c:02:f5: 86:24:62:98:5d:d9:30:47:8b:03:10:9a:a0:2e:eb:5d:b5:8d: 11:17:67:85 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt8EoRIbUFAX0y87jskJ+uMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2MWM4ZTJiMDBhM2Q1OTU3ZDQxMTJkYWYzNWI2NmU0Mjkz NzU1MDUwHhcNMjYwMTAyMDAxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTYzNDVlMWFlZTYyZDg2Y2E0ODY1ZTNkZmI0MmM0NmNkN2MxMGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQdqy/OiUj738aGbp+bZjshopVDH jE6HxT3lkG2Irdn6Tf+l8Qts6r1uCFPAT6FwQyU3nhpS0FCQAUT6XaSZPxdbZhwS agZGFAUaUbxD0RwFfcgF2d5Xi186NFdo9plEW0GTid2MVhCQXZyYZSvipiqNsYEe jiL4EEmaYr+jCyGaqxI6pT6Q9FA5+FKWeW1uKzgWc29+GAN/RtzZMtJHyCSqLHMW 5CeEMGAMII7KP8Z1iqrBnpm3xBEkQJLjQMJuDnGPHMVMq4mZY5jX5gRhEdGzILe/ TlgcVqjaHaMzi9wiYR5gR6qbmfMldEh0VJ/V6GVhG/WfXUWvTCprglKQnQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFAljReGu5i2Gykhl49+0LEbNfBD3MB8GA1UdIwQY MBaAFCYcjisAo9WVfUES2vNbZuQpN1UFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmh5T0t3Q2oxWlY5UVJMYTgxdG01Q2szVlFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9hMWM5ZDktZmIxYi00Y2ZhLWE2YzAt Mjk4ODM4NTU2ZDA5LzEvQ1dORjRhN21MWWJLU0dYajM3UXNSczE4RVBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9hMWM5ZDktZmIxYi00Y2ZhLWE2YzAtMjk4ODM4NTU2ZDA5 LzEvSmh5T0t3Q2oxWlY5UVJMYTgxdG01Q2szVlFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAW8E2AwQC uRh0AwQCua3UAwQA1GZtMA0GCSqGSIb3DQEBCwUAA4IBAQAxk0jy5ojgGSb7CnAx AT1yoAeq5TiQgyMnhEqSyVAyW+fOa+xg+o6OuETk/iO7t4+k2t16zIkGB/aYAPmG Q42ORap2I75BWvaG8iXBnMRv31GOGwDK9raklvQRsYAKidnoJuzvUPNlJMHN1ivk TKNRQKO5TZbGZEIfHs2YX/mKBLkT7UoWwKTPMgcIpx1bIJp/7hSsrNbS9U72cTbj Y1Ck+qU04VxiRX2FUhfGNKKzOj9ETnrEL603nHk5wZyUMy0Oa7GinO6/6i7UtMGI omh5jYzCVT7egyqkrJl2V2+zUU729pkP3gNMAvWGJGKYXdkwR4sDEJqgLutdtY0R F2eF -----END CERTIFICATE-----Generated at Tue Feb 10 05:47:48 2026 by rpki-client