This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/cWNFEgb5xBu8gcFLrQKsIN_qlUo.roa File: cWNFEgb5xBu8gcFLrQKsIN_qlUo.roa (raw, json) Hash identifier: 64u+n0vfU41PR2W4WUgYuL5mbl/6P/UD0NVgWR/oiEY= Subject key identifier: 71:63:45:12:06:F9:C4:1B:BC:81:C1:4B:AD:02:AC:20:DF:EA:95:4A Certificate issuer: /CN=456ecb3be1065e1e71589508bec6d74b5a7b1ed7 Certificate serial: 019B7834C8B32E55FA172E427AB32076CE23 Authority key identifier: 45:6E:CB:3B:E1:06:5E:1E:71:58:95:08:BE:C6:D7:4B:5A:7B:1E:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/cWNFEgb5xBu8gcFLrQKsIN_qlUo.roa Signing time: Thu 01 Jan 2026 06:18:03 +0000 ROA not before: Thu 01 Jan 2026 06:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196921 IP address blocks: 94.187.165.0/24 maxlen: 24 94.187.166.0/24 maxlen: 24 94.187.167.0/24 maxlen: 24 94.187.168.0/21 maxlen: 21 94.187.168.0/22 maxlen: 22 94.187.171.0/24 maxlen: 24 94.187.172.0/24 maxlen: 24 94.187.173.0/24 maxlen: 24 94.187.174.0/24 maxlen: 24 94.187.175.0/24 maxlen: 24 94.187.176.0/21 maxlen: 21 94.187.176.0/24 maxlen: 24 94.187.177.0/24 maxlen: 24 94.187.178.0/24 maxlen: 24 94.187.179.0/24 maxlen: 24 94.187.180.0/24 maxlen: 24 94.187.181.0/24 maxlen: 24 94.187.182.0/24 maxlen: 24 94.187.183.0/24 maxlen: 24 94.187.184.0/21 maxlen: 21 94.187.184.0/23 maxlen: 23 94.187.187.0/24 maxlen: 24 94.187.190.0/24 maxlen: 24 94.187.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.mft rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:c8:b3:2e:55:fa:17:2e:42:7a:b3:20:76:ce:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=456ecb3be1065e1e71589508bec6d74b5a7b1ed7 Validity Not Before: Jan 1 06:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7163451206f9c41bbc81c14bad02ac20dfea954a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f8:51:8c:73:c2:07:02:5a:a5:36:da:38:52: c0:4c:de:eb:cb:b4:66:e3:76:45:23:65:28:0c:50: ce:74:d6:42:1a:00:52:47:c3:58:40:e2:6a:f2:9e: b6:f9:7a:97:a6:9c:07:af:7f:31:ec:35:2e:0f:e3: b2:89:ae:e9:13:a9:03:f6:3d:e6:b2:84:10:18:5d: 5a:bd:1e:38:3f:52:05:50:f0:62:bc:c0:c6:9c:46: f1:5b:df:cd:3d:9f:a2:10:89:6e:a8:a5:c0:d7:10: f1:02:a9:dd:8e:0d:f7:d3:7e:6b:e1:3d:2f:6a:1f: 06:07:d9:36:5a:10:68:7e:70:b0:db:69:22:f2:f0: 1a:da:71:98:b2:79:f9:56:3f:ed:10:b6:44:32:ae: af:01:4d:00:60:4c:40:8b:27:1c:3a:0d:9e:bd:0d: 65:96:39:7f:bb:cb:59:f1:c3:ba:cf:38:dc:91:d5: c9:fe:0d:0f:02:4d:8b:1b:32:70:93:67:90:c5:1a: 5e:58:db:5d:2f:08:5a:de:6b:08:15:c0:c7:3d:26: 07:0d:db:5c:45:cf:35:a8:11:fa:8f:4c:f7:7e:2c: 7e:81:d9:52:c8:5e:b9:6a:2e:e1:9e:c7:e8:75:d0: 3b:ff:ec:f7:4a:04:d6:8d:06:d1:19:46:de:ee:c8: ab:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:63:45:12:06:F9:C4:1B:BC:81:C1:4B:AD:02:AC:20:DF:EA:95:4A X509v3 Authority Key Identifier: keyid:45:6E:CB:3B:E1:06:5E:1E:71:58:95:08:BE:C6:D7:4B:5A:7B:1E:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RW7LO-EGXh5xWJUIvsbXS1p7Htc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/cWNFEgb5xBu8gcFLrQKsIN_qlUo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/36715a-32fc-4e9f-a577-5ac74dba17b8/1/RW7LO-EGXh5xWJUIvsbXS1p7Htc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.187.165.0-94.187.191.255 Signature Algorithm: sha256WithRSAEncryption ab:b2:2e:25:2a:73:b3:45:be:fe:31:de:75:ad:44:44:2b:85: ea:b4:11:16:a6:81:7b:36:85:64:d4:5b:b8:a9:ec:db:52:83: 16:34:de:ab:33:c0:6e:60:c6:91:fe:c0:6d:82:7f:c9:59:90: a6:f1:05:a9:c0:c8:5b:8e:1e:7d:07:93:0e:73:e1:a0:35:a2: 93:aa:17:76:b3:f7:84:2f:0b:be:50:f7:de:e2:68:4a:6c:df: b3:fe:a8:3e:14:33:b0:7a:60:16:1a:9f:65:69:0d:52:35:b1: b1:e0:52:8e:83:78:dc:ea:78:2f:ce:aa:c8:15:fc:ba:73:15: a7:f8:50:2d:64:be:d2:d4:a3:13:8d:fd:eb:0a:12:8d:79:5a: 47:b1:0c:e3:0a:7a:d2:82:56:32:5e:dd:ff:ab:37:0f:3d:4a: 03:72:ff:10:74:fa:ce:ff:7d:97:29:b3:2a:d3:7c:b5:cf:ae: 1c:b9:64:e6:59:f8:2d:00:39:09:6f:8b:63:c5:7c:20:d7:47: 6b:34:11:4a:57:15:ae:d7:6d:a0:2f:44:bf:3b:40:23:e8:18: fb:44:c2:bb:31:ea:96:2c:c1:59:40:f0:f2:04:40:c4:07:10: 51:94:38:01:25:a0:85:09:c2:96:01:10:9c:a3:35:30:ad:f5: de:1c:ee:f4 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt4NMizLlX6Fy5CerMgds4jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1NmVjYjNiZTEwNjVlMWU3MTU4OTUwOGJlYzZkNzRiNWE3 YjFlZDcwHhcNMjYwMTAxMDYxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTYzNDUxMjA2ZjljNDFiYmM4MWMxNGJhZDAyYWMyMGRmZWE5NTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvhRjHPCBwJapTbaOFLATN7ry7Rm 43ZFI2UoDFDOdNZCGgBSR8NYQOJq8p62+XqXppwHr38x7DUuD+Oyia7pE6kD9j3m soQQGF1avR44P1IFUPBivMDGnEbxW9/NPZ+iEIluqKXA1xDxAqndjg33035r4T0v ah8GB9k2WhBofnCw22ki8vAa2nGYsnn5Vj/tELZEMq6vAU0AYExAiyccOg2evQ1l ljl/u8tZ8cO6zzjckdXJ/g0PAk2LGzJwk2eQxRpeWNtdLwha3msIFcDHPSYHDdtc Rc81qBH6j0z3fix+gdlSyF65ai7hnsfoddA7/+z3SgTWjQbRGUbe7sirtQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFHFjRRIG+cQbvIHBS60CrCDf6pVKMB8GA1UdIwQY MBaAFEVuyzvhBl4ecViVCL7G10taex7XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlc3TE8tRUdYaDV4V0pVSXZzYlhTMXA3SHRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zNjcxNWEtMzJmYy00ZTlmLWE1Nzct NWFjNzRkYmExN2I4LzEvY1dORkVnYjV4QnU4Z2NGTHJRS3NJTl9xbFVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8zNjcxNWEtMzJmYy00ZTlmLWE1NzctNWFjNzRkYmExN2I4 LzEvUlc3TE8tRUdYaDV4V0pVSXZzYlhTMXA3SHRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABeu6UD BAZeu4AwDQYJKoZIhvcNAQELBQADggEBAKuyLiUqc7NFvv4x3nWtREQrheq0ERam gXs2hWTUW7ip7NtSgxY03qszwG5gxpH+wG2Cf8lZkKbxBanAyFuOHn0Hkw5z4aA1 opOqF3az94QvC75Q997iaEps37P+qD4UM7B6YBYan2VpDVI1sbHgUo6DeNzqeC/O qsgV/LpzFaf4UC1kvtLUoxON/esKEo15WkexDOMKetKCVjJe3f+rNw89SgNy/xB0 +s7/fZcpsyrTfLXPrhy5ZOZZ+C0AOQlvi2PFfCDXR2s0EUpXFa7XbaAvRL87QCPo GPtEwrsx6pYswVlA8PIEQMQHEFGUOAEloIUJwpYBEJyjNTCt9d4c7vQ= -----END CERTIFICATE-----Generated at Tue Jan 20 12:27:27 2026 by rpki-client