This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/0J1Bc7T3_t7yJTtYF6gyqQOIoEY.roa File: 0J1Bc7T3_t7yJTtYF6gyqQOIoEY.roa (raw, json) Hash identifier: 3ugWvtC3e0ymV2WWg87hGLJ6EMMogW9erVq2BTyhB5Y= Subject key identifier: D0:9D:41:73:B4:F7:FE:DE:F2:25:3B:58:17:A8:32:A9:03:88:A0:46 Certificate issuer: /CN=58b29e7b8a0ddb9c36c6e0e3f49577817b0ea3a6 Certificate serial: 019B797F311E09882DD759220B4175CFCFE6 Authority key identifier: 58:B2:9E:7B:8A:0D:DB:9C:36:C6:E0:E3:F4:95:77:81:7B:0E:A3:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/0J1Bc7T3_t7yJTtYF6gyqQOIoEY.roa Signing time: Thu 01 Jan 2026 12:18:57 +0000 ROA not before: Thu 01 Jan 2026 12:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29180 IP address blocks: 82.132.128.0/22 maxlen: 24 82.132.132.0/22 maxlen: 24 82.132.136.0/23 maxlen: 24 82.132.140.0/23 maxlen: 24 82.132.142.0/23 maxlen: 24 82.132.144.0/21 maxlen: 24 82.132.152.0/21 maxlen: 24 82.132.178.0/23 maxlen: 24 82.132.188.0/23 maxlen: 24 82.132.190.0/23 maxlen: 24 82.132.192.0/23 maxlen: 24 82.132.194.0/23 maxlen: 24 82.132.196.0/23 maxlen: 24 82.132.200.0/23 maxlen: 24 82.132.202.0/23 maxlen: 24 82.132.204.0/23 maxlen: 24 82.132.206.0/23 maxlen: 24 82.132.208.0/23 maxlen: 24 82.132.250.0/23 maxlen: 24 82.132.254.0/23 maxlen: 24 185.238.16.0/23 maxlen: 24 185.238.18.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:31:1e:09:88:2d:d7:59:22:0b:41:75:cf:cf:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58b29e7b8a0ddb9c36c6e0e3f49577817b0ea3a6 Validity Not Before: Jan 1 12:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d09d4173b4f7fedef2253b5817a832a90388a046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8c:b8:c2:be:71:e2:23:57:02:e6:10:a1:8c: 84:57:26:dc:47:3f:c9:0b:54:90:27:d9:46:0b:7e: bf:8c:c6:2c:77:e6:3b:81:53:ca:4c:c7:19:e0:b5: 14:7b:9a:97:45:2b:12:49:8e:e7:ee:76:f3:33:b4: 08:5d:f5:93:e0:8a:9c:cf:9b:db:35:d7:1f:be:c1: 4e:41:9a:79:90:42:d7:52:b1:85:cd:85:25:4b:65: 19:40:e2:ef:72:52:2c:ab:b7:62:f2:ec:02:23:d0: 78:87:89:14:20:65:84:bf:98:08:1d:1f:21:60:52: 69:49:00:66:22:62:f5:f6:04:e2:e2:67:4d:56:05: fe:22:7b:2f:6b:7b:86:d4:8d:bd:f1:91:24:de:e6: 09:96:fb:2f:30:fb:25:37:dc:c5:6d:93:bb:aa:71: fb:9b:ea:43:7e:eb:75:7a:f8:d7:7d:54:ee:2b:39: 82:52:33:1f:cc:31:1f:90:b5:7b:74:a5:a8:c5:3d: 04:f2:95:33:f1:d3:32:07:f6:7a:e6:f9:a1:ff:a2: 04:6e:4e:7f:ba:f7:84:0d:1a:ea:47:40:93:1c:76: ef:c1:60:27:48:ba:1b:eb:6c:de:ab:48:24:46:75: f7:57:f3:59:0a:b1:4a:f7:d7:ee:16:f7:c6:6d:f5: 50:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:9D:41:73:B4:F7:FE:DE:F2:25:3B:58:17:A8:32:A9:03:88:A0:46 X509v3 Authority Key Identifier: keyid:58:B2:9E:7B:8A:0D:DB:9C:36:C6:E0:E3:F4:95:77:81:7B:0E:A3:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLKee4oN25w2xuDj9JV3gXsOo6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/0J1Bc7T3_t7yJTtYF6gyqQOIoEY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2cb3bb-0ed1-4ecf-8af5-ee73fe21ed23/1/WLKee4oN25w2xuDj9JV3gXsOo6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 82.132.128.0-82.132.137.255 82.132.140.0-82.132.159.255 82.132.178.0/23 82.132.188.0-82.132.197.255 82.132.200.0-82.132.209.255 82.132.250.0/23 82.132.254.0/23 185.238.16.0/22 Signature Algorithm: sha256WithRSAEncryption 41:13:68:e6:4e:41:6a:5d:c5:cc:83:2f:b9:97:72:e7:0e:ec: fc:1c:d4:e3:e7:24:bd:6a:2d:c6:8c:02:88:53:3a:de:7b:45: 48:56:88:1e:61:d7:3d:27:da:c6:f7:e1:54:c2:83:da:5d:d5: 6c:dc:1f:94:79:9e:6c:2f:32:6b:f5:37:3b:74:a4:98:6c:d1: 18:4c:07:34:48:12:fb:fb:ea:b6:be:d7:a0:ad:c5:fe:fb:1a: 07:e0:8c:f4:34:2e:a5:a0:37:d9:20:ae:fa:0e:7d:ed:cc:44: e9:4f:0d:ee:55:7b:3a:e7:83:45:9e:06:29:83:c1:50:44:77: 16:ec:f3:ea:39:e2:f1:e2:33:b5:37:73:6b:60:d9:b0:b3:ec: cf:89:a2:ea:98:7a:66:9a:3c:e6:4a:6f:85:d3:1a:7c:bb:8c: a2:09:7b:7e:92:36:82:0a:8b:40:f6:d9:d7:48:37:44:9e:cc: bc:a8:97:23:57:70:36:07:e1:e6:8e:66:85:4a:b6:6f:cf:17: dd:3c:6f:ae:aa:7d:8b:a9:a9:1c:f2:a5:1e:fe:a3:2f:0e:ac: 99:f3:e5:40:37:e9:e7:41:1b:64:73:50:7b:f3:9b:a4:11:51: 4b:cc:57:34:62:72:77:4c:28:af:68:d8:1d:b3:ee:2b:f9:d3: 02:88:b4:6e -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgISAZt5fzEeCYgt11kiC0F1z8/mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YjI5ZTdiOGEwZGRiOWMzNmM2ZTBlM2Y0OTU3NzgxN2Iw ZWEzYTYwHhcNMjYwMTAxMTIxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDlkNDE3M2I0ZjdmZWRlZjIyNTNiNTgxN2E4MzJhOTAzODhhMDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Iy4wr5x4iNXAuYQoYyEVybcRz/J C1SQJ9lGC36/jMYsd+Y7gVPKTMcZ4LUUe5qXRSsSSY7n7nbzM7QIXfWT4Iqcz5vb NdcfvsFOQZp5kELXUrGFzYUlS2UZQOLvclIsq7di8uwCI9B4h4kUIGWEv5gIHR8h YFJpSQBmImL19gTi4mdNVgX+Insva3uG1I298ZEk3uYJlvsvMPslN9zFbZO7qnH7 m+pDfut1evjXfVTuKzmCUjMfzDEfkLV7dKWoxT0E8pUz8dMyB/Z65vmh/6IEbk5/ uveEDRrqR0CTHHbvwWAnSLob62zeq0gkRnX3V/NZCrFK99fuFvfGbfVQ9QIDAQAB o4ICUzCCAk8wHQYDVR0OBBYEFNCdQXO09/7e8iU7WBeoMqkDiKBGMB8GA1UdIwQY MBaAFFiynnuKDducNsbg4/SVd4F7DqOmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0xLZWU0b04yNXcyeHVEajlKVjNnWHNPbzZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yY2IzYmItMGVkMS00ZWNmLThhZjUt ZWU3M2ZlMjFlZDIzLzEvMEoxQmM3VDNfdDd5SlR0WUY2Z3lxUU9Jb0VZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS8yY2IzYmItMGVkMS00ZWNmLThhZjUtZWU3M2ZlMjFlZDIz LzEvV0xLZWU0b04yNXcyeHVEajlKVjNnWHNPbzZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGkGCCsGAQUFBwEHAQH/BFowWDBWBAIAATBQMAwDBAdShIAD BAFShIgwDAMEAlKEjAMEBVKEgAMEAVKEsjAMAwQCUoS8AwQBUoTEMAwDBANShMgD BAFShNADBAFShPoDBAFShP4DBAK57hAwDQYJKoZIhvcNAQELBQADggEBAEETaOZO QWpdxcyDL7mXcucO7Pwc1OPnJL1qLcaMAohTOt57RUhWiB5h1z0n2sb34VTCg9pd 1WzcH5R5nmwvMmv1Nzt0pJhs0RhMBzRIEvv76ra+16Ctxf77GgfgjPQ0LqWgN9kg rvoOfe3MROlPDe5Vezrng0WeBimDwVBEdxbs8+o54vHiM7U3c2tg2bCz7M+JouqY emaaPOZKb4XTGny7jKIJe36SNoIKi0D22ddIN0SezLyolyNXcDYH4eaOZoVKtm/P F908b66qfYupqRzypR7+oy8OrJnz5UA36edBG2RzUHvzm6QRUUvMVzRicndMKK9o 2B2z7iv50wKItG4= -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:13 2026 by rpki-client