This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/wIdf6vaDJFhtJ8xYIOOIeBucwJU.roa File: wIdf6vaDJFhtJ8xYIOOIeBucwJU.roa (raw, json) Hash identifier: DMtxfZaOeh5mDXJxHcSwqLFA2Bt6C2O7poIlCzKWZ04= Subject key identifier: C0:87:5F:EA:F6:83:24:58:6D:27:CC:58:20:E3:88:78:1B:9C:C0:95 Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Certificate serial: 019B797E6E939B1918AF1A6D8CA3B7A8DD93 Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/wIdf6vaDJFhtJ8xYIOOIeBucwJU.roa Signing time: Thu 01 Jan 2026 12:18:07 +0000 ROA not before: Thu 01 Jan 2026 12:18:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64267 IP address blocks: 89.251.16.0/24 maxlen: 24 89.251.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 02:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:6e:93:9b:19:18:af:1a:6d:8c:a3:b7:a8:dd:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d Validity Not Before: Jan 1 12:18:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0875feaf68324586d27cc5820e388781b9cc095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:47:1f:d0:6d:9b:40:eb:e7:55:85:c0:d4:ec: 8d:f5:90:eb:5d:63:5a:41:0d:6f:3b:0f:ee:81:97: 4b:5f:d1:19:b3:96:00:2b:cf:77:a2:1e:8e:c0:7d: d1:15:13:5f:0f:35:05:90:6d:66:5c:86:2c:ad:b5: bb:8c:ba:66:90:e6:29:5a:ea:7a:30:7a:ab:a0:12: 87:df:b7:87:14:73:5c:69:50:f6:fb:5c:8a:9e:4d: 83:83:93:09:8f:2d:cb:00:96:2a:9f:74:90:76:32: 2c:91:c3:41:d1:4b:a8:45:3a:97:9f:b6:3f:ba:05: 73:14:60:b6:9d:90:fd:24:0a:8d:01:85:cd:b0:a7: af:e6:8e:bf:87:d5:90:68:d4:00:fb:25:fc:8b:81: 70:fa:89:9a:4e:2b:c9:f4:0c:ef:ab:d4:be:71:fd: c4:e0:0e:d8:8c:30:2b:59:b8:d2:e4:be:1f:ed:ad: eb:cd:4d:8f:f2:23:67:bd:f4:fc:ea:59:ba:ef:6d: b4:6f:30:3f:fe:76:39:87:44:19:e3:ae:51:bd:b3: 82:3f:63:48:38:fd:de:98:1d:5f:84:7f:a2:a0:57: c9:26:26:82:48:9e:d6:7a:88:26:50:e8:09:16:e7: c1:2b:94:80:2e:1f:53:40:0f:34:a4:e0:e5:c0:1a: b6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:87:5F:EA:F6:83:24:58:6D:27:CC:58:20:E3:88:78:1B:9C:C0:95 X509v3 Authority Key Identifier: keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/wIdf6vaDJFhtJ8xYIOOIeBucwJU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.251.16.0/24 89.251.19.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:65:a4:88:2c:bd:d0:1b:b4:f9:22:ed:ed:c6:12:8f:8e:2e: 43:81:6d:33:1f:d1:fc:bc:38:f2:57:33:60:29:0c:ca:4b:1f: c5:99:23:c8:99:4c:44:4d:d5:cc:1a:65:07:37:81:fe:c6:93: 63:37:31:a4:aa:90:e7:9b:ad:3b:a9:35:ef:f3:3a:bd:f9:c0: d5:31:32:45:c6:a4:6e:ef:3a:b7:ad:7d:90:36:8b:d6:dc:91: 6d:8f:33:30:d8:01:c2:41:0d:b4:56:54:5a:ed:79:8f:3e:a0: 05:93:0b:66:7d:ea:fc:7a:71:10:a1:e9:4e:52:40:0d:1c:a4: 04:cf:3c:83:bc:43:d2:cf:a0:cc:13:c9:29:14:cf:a5:27:f4: 8e:c1:33:f0:81:1b:68:8a:50:97:44:58:96:93:56:34:ca:fd: 02:33:c0:f5:e8:63:83:bf:5c:80:51:1f:ec:f0:3b:62:e2:53: 9b:bd:70:8d:fd:a5:ae:c6:17:a1:d3:19:38:05:f2:21:b3:3f: c5:48:ab:9e:8d:fe:43:55:7e:84:84:23:fb:f7:f5:3d:5d:d3: da:dd:a4:7e:2f:6f:e0:dc:d0:45:0b:1c:2d:c9:da:8c:c4:9a: c3:ec:50:f7:05:3c:dc:84:cb:be:10:96:36:6d:be:53:27:05: 42:5a:33:e2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fm6TmxkYrxptjKO3qN2TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj NWFjOGQwHhcNMjYwMTAxMTIxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDg3NWZlYWY2ODMyNDU4NmQyN2NjNTgyMGUzODg3ODFiOWNjMDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0cf0G2bQOvnVYXA1OyN9ZDrXWNa QQ1vOw/ugZdLX9EZs5YAK893oh6OwH3RFRNfDzUFkG1mXIYsrbW7jLpmkOYpWup6 MHqroBKH37eHFHNcaVD2+1yKnk2Dg5MJjy3LAJYqn3SQdjIskcNB0UuoRTqXn7Y/ ugVzFGC2nZD9JAqNAYXNsKev5o6/h9WQaNQA+yX8i4Fw+omaTivJ9Azvq9S+cf3E 4A7YjDArWbjS5L4f7a3rzU2P8iNnvfT86lm67220bzA//nY5h0QZ465RvbOCP2NI OP3emB1fhH+ioFfJJiaCSJ7WeogmUOgJFufBK5SALh9TQA80pODlwBq26wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMCHX+r2gyRYbSfMWCDjiHgbnMCVMB8GA1UdIwQY MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt MzE4YTI2ZDRhOGM5LzEvd0lkZjZ2YURKRmh0Sjh4WUlPT0llQnVjd0pVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5 LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWfsQAwQA WfsTMA0GCSqGSIb3DQEBCwUAA4IBAQBsZaSILL3QG7T5Iu3txhKPji5DgW0zH9H8 vDjyVzNgKQzKSx/FmSPImUxETdXMGmUHN4H+xpNjNzGkqpDnm607qTXv8zq9+cDV MTJFxqRu7zq3rX2QNovW3JFtjzMw2AHCQQ20VlRa7XmPPqAFkwtmfer8enEQoelO UkANHKQEzzyDvEPSz6DME8kpFM+lJ/SOwTPwgRtoilCXRFiWk1Y0yv0CM8D16GOD v1yAUR/s8Dti4lObvXCN/aWuxheh0xk4BfIhsz/FSKuejf5DVX6EhCP79/U9XdPa 3aR+L2/g3NBFCxwtydqMxJrD7FD3BTzchMu+EJY2bb5TJwVCWjPi -----END CERTIFICATE-----Generated at Mon Jan 19 10:37:59 2026 by rpki-client