This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/WrFi9wM8-MBxaZss80dQCIHVjIA.roa File: WrFi9wM8-MBxaZss80dQCIHVjIA.roa (raw, json) Hash identifier: T4A9s6KUh5deKQT7uVYVm6QXd45Uqa2wbOgRg/X9a94= Subject key identifier: 5A:B1:62:F7:03:3C:F8:C0:71:69:9B:2C:F3:47:50:08:81:D5:8C:80 Certificate issuer: /CN=1627b80681f5b48e126898295983e0df29971b98 Certificate serial: 019B7CED431C6DA33A9D6A7014F27B90C6D2 Authority key identifier: 16:27:B8:06:81:F5:B4:8E:12:68:98:29:59:83:E0:DF:29:97:1B:98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fie4BoH1tI4SaJgpWYPg3ymXG5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/WrFi9wM8-MBxaZss80dQCIHVjIA.roa Signing time: Fri 02 Jan 2026 04:18:02 +0000 ROA not before: Fri 02 Jan 2026 04:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39387 IP address blocks: 195.178.118.0/23 maxlen: 23 2001:67c:300::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft rsync://rpki.ripe.net/repository/DEFAULT/Fie4BoH1tI4SaJgpWYPg3ymXG5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:43:1c:6d:a3:3a:9d:6a:70:14:f2:7b:90:c6:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1627b80681f5b48e126898295983e0df29971b98 Validity Not Before: Jan 2 04:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ab162f7033cf8c071699b2cf347500881d58c80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:17:5f:ad:4e:01:7c:06:60:36:17:17:ff:03: 52:f8:4d:89:84:2d:d1:b1:aa:55:e9:50:56:dd:d7: 18:b1:66:e3:5c:7b:ee:4b:46:a1:36:b3:19:8a:07: f4:4d:b1:b1:6c:03:84:c2:ce:ed:b6:f2:cc:ab:74: db:80:0c:57:ae:1b:a0:a8:8c:11:cc:66:99:fa:cf: 2b:03:3d:36:75:48:a2:9c:95:cf:4e:c4:c2:22:28: 36:a4:a5:71:6d:a8:10:45:2c:19:06:39:77:6f:79: c8:ae:4c:ab:e9:3a:b8:5e:3a:40:0a:a1:89:70:18: 90:bc:77:9c:7c:bc:81:bf:60:eb:3c:63:21:a7:52: cb:ab:a5:62:55:2d:43:2f:77:c6:6d:23:2e:ef:e0: 6b:f1:07:94:42:0a:79:29:9a:6e:6c:63:d8:ae:34: 5c:5e:a0:64:5d:23:85:01:dd:91:32:1f:aa:90:c6: 72:37:b5:58:fd:11:03:b3:71:80:1e:da:74:24:fe: 09:09:22:e2:2c:b0:3b:84:8b:02:ae:0d:32:57:8a: 9d:e5:2e:97:b5:ac:ff:46:42:ce:4d:3c:2d:45:dd: 39:ee:f5:95:f0:e8:40:95:55:70:ef:bd:d4:29:ec: 47:81:5d:2b:27:18:17:23:bb:20:2e:79:d7:b2:c5: a2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B1:62:F7:03:3C:F8:C0:71:69:9B:2C:F3:47:50:08:81:D5:8C:80 X509v3 Authority Key Identifier: keyid:16:27:B8:06:81:F5:B4:8E:12:68:98:29:59:83:E0:DF:29:97:1B:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fie4BoH1tI4SaJgpWYPg3ymXG5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/WrFi9wM8-MBxaZss80dQCIHVjIA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.178.118.0/23 IPv6: 2001:67c:300::/48 Signature Algorithm: sha256WithRSAEncryption c6:0f:b3:92:54:a9:de:93:4e:a5:a2:a9:b9:d0:bb:18:3f:82: 6e:9e:e9:60:e1:5a:62:ae:09:69:ad:c8:8b:ec:6d:5e:f9:1e: 3b:f6:29:ef:29:fd:e8:19:cf:8a:e4:34:84:71:94:23:9a:ee: bd:17:ca:f3:73:14:d2:50:20:37:3b:b7:79:b1:8d:32:bf:62: d0:a7:ca:ef:67:ca:8a:32:48:43:51:29:b2:ce:27:8f:c0:d7: 1d:29:72:c6:6d:0f:95:a3:69:69:c7:98:82:81:57:b8:29:13: 33:a1:19:48:8c:79:27:dc:b6:14:cc:c5:32:b3:55:3c:f5:5d: f7:11:ec:9e:1a:36:13:ed:5c:54:32:b8:7d:b2:22:cb:f0:8d: 83:b8:a8:7b:b4:b7:3d:c6:22:3a:81:53:c1:cb:de:c6:f5:83: 01:02:b6:69:43:71:ab:1f:ee:68:3f:df:e2:c8:8e:f7:ec:1a: 5b:2c:ca:37:c7:a6:df:b9:c6:7e:0c:57:93:0f:0d:ed:35:d1: f7:04:25:bd:08:53:2c:d2:f6:a5:b0:bd:7b:97:d1:5c:94:3b: e7:ec:b0:0f:a2:47:64:69:91:52:d7:3c:d4:de:56:eb:c8:23: 51:96:b3:ed:78:1c:12:45:1c:42:85:74:6b:db:a3:a0:33:d9: f9:5d:9f:dd -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt87UMcbaM6nWpwFPJ7kMbSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MjdiODA2ODFmNWI0OGUxMjY4OTgyOTU5ODNlMGRmMjk5 NzFiOTgwHhcNMjYwMTAyMDQxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWIxNjJmNzAzM2NmOGMwNzE2OTliMmNmMzQ3NTAwODgxZDU4YzgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RdfrU4BfAZgNhcX/wNS+E2JhC3R sapV6VBW3dcYsWbjXHvuS0ahNrMZigf0TbGxbAOEws7ttvLMq3TbgAxXrhugqIwR zGaZ+s8rAz02dUiinJXPTsTCIig2pKVxbagQRSwZBjl3b3nIrkyr6Tq4XjpACqGJ cBiQvHecfLyBv2DrPGMhp1LLq6ViVS1DL3fGbSMu7+Br8QeUQgp5KZpubGPYrjRc XqBkXSOFAd2RMh+qkMZyN7VY/REDs3GAHtp0JP4JCSLiLLA7hIsCrg0yV4qd5S6X taz/RkLOTTwtRd057vWV8OhAlVVw773UKexHgV0rJxgXI7sgLnnXssWiKwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFFqxYvcDPPjAcWmbLPNHUAiB1YyAMB8GA1UdIwQY MBaAFBYnuAaB9bSOEmiYKVmD4N8plxuYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmllNEJvSDF0STRTYUpncFdZUGczeW1YRzVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iZjg2YjAtYzVlZC00YmRkLWE5MTct NjgyY2QzYmQ0MTAyLzEvV3JGaTl3TTgtTUJ4YVpzczgwZFFDSUhWaklBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9iZjg2YjAtYzVlZC00YmRkLWE5MTctNjgyY2QzYmQ0MTAy LzEvRmllNEJvSDF0STRTYUpncFdZUGczeW1YRzVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBw7J2MA8E AgACMAkDBwAgAQZ8AwAwDQYJKoZIhvcNAQELBQADggEBAMYPs5JUqd6TTqWiqbnQ uxg/gm6e6WDhWmKuCWmtyIvsbV75Hjv2Ke8p/egZz4rkNIRxlCOa7r0XyvNzFNJQ IDc7t3mxjTK/YtCnyu9nyooySENRKbLOJ4/A1x0pcsZtD5WjaWnHmIKBV7gpEzOh GUiMeSfcthTMxTKzVTz1XfcR7J4aNhPtXFQyuH2yIsvwjYO4qHu0tz3GIjqBU8HL 3sb1gwECtmlDcasf7mg/3+LIjvfsGlssyjfHpt+5xn4MV5MPDe010fcEJb0IUyzS 9qWwvXuX0VyUO+fssA+iR2RpkVLXPNTeVuvII1GWs+14HBJFHEKFdGvbo6Az2fld n90= -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:43 2026 by rpki-client