This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/WNvdK2G6VGfovAlyzdy5qA0oBTc.roa File: WNvdK2G6VGfovAlyzdy5qA0oBTc.roa (raw, json) Hash identifier: T/wqo/8dAPv9d0Xqoe1ZG886rDX3diZQucP4pDiIbtI= Subject key identifier: 58:DB:DD:2B:61:BA:54:67:E8:BC:09:72:CD:DC:B9:A8:0D:28:05:37 Certificate issuer: /CN=c7a8246f70ae18e736e4e53981480d58616af2e8 Certificate serial: 019B7910EF301E4016E396F65D164CAF0FC0 Authority key identifier: C7:A8:24:6F:70:AE:18:E7:36:E4:E5:39:81:48:0D:58:61:6A:F2:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6gkb3CuGOc25OU5gUgNWGFq8ug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/WNvdK2G6VGfovAlyzdy5qA0oBTc.roa Signing time: Thu 01 Jan 2026 10:18:31 +0000 ROA not before: Thu 01 Jan 2026 10:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41960 IP address blocks: 194.32.206.0/24 maxlen: 24 194.32.220.0/24 maxlen: 24 194.33.10.0/24 maxlen: 24 194.33.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.mft rsync://rpki.ripe.net/repository/DEFAULT/x6gkb3CuGOc25OU5gUgNWGFq8ug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ef:30:1e:40:16:e3:96:f6:5d:16:4c:af:0f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7a8246f70ae18e736e4e53981480d58616af2e8 Validity Not Before: Jan 1 10:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58dbdd2b61ba5467e8bc0972cddcb9a80d280537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bd:ba:d0:1b:90:f1:4a:99:1d:25:80:0b:91: 4c:a1:76:ee:c5:26:67:64:d4:36:d3:c2:48:4c:51: 4d:e7:a5:d0:35:93:fb:db:56:8b:79:51:20:d0:72: 0f:00:21:02:3b:ec:02:21:3f:95:83:2e:3e:48:93: 11:95:75:c1:5a:16:10:7c:c0:0f:8c:0e:0d:34:e2: ad:f4:2b:d6:7c:eb:65:bb:33:65:75:ee:38:ef:01: c6:c1:7b:38:42:76:02:ce:c2:42:fd:6b:48:2b:6f: ac:8e:b4:ca:49:05:0b:57:0c:99:82:9c:ed:01:ec: c6:cd:21:a6:3e:9c:5c:f5:91:6e:11:4e:76:16:60: e0:b0:88:2b:ee:b0:fc:9e:18:1b:bb:23:46:ff:b4: d5:05:97:9e:16:25:e1:f0:ba:c5:c1:cf:2e:61:0b: 43:ad:e2:6c:34:eb:07:a0:84:86:b8:ac:0a:b8:f5: 5b:79:18:01:b0:4b:1a:f8:21:63:b7:d4:15:3b:6c: ea:2f:18:6e:50:05:9b:3f:e1:2c:8f:f0:5e:0d:db: c9:cb:3d:bd:6d:93:f3:4b:58:4c:1d:7d:e3:5f:86: 3d:18:b8:7a:a4:93:5a:85:e3:dc:05:d7:d1:55:db: 5c:10:22:14:24:33:0a:1b:c8:4c:e8:04:e6:1d:0b: b7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:DB:DD:2B:61:BA:54:67:E8:BC:09:72:CD:DC:B9:A8:0D:28:05:37 X509v3 Authority Key Identifier: keyid:C7:A8:24:6F:70:AE:18:E7:36:E4:E5:39:81:48:0D:58:61:6A:F2:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6gkb3CuGOc25OU5gUgNWGFq8ug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/WNvdK2G6VGfovAlyzdy5qA0oBTc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/ad563e-5cbe-4e15-824d-e3d286d20e52/1/x6gkb3CuGOc25OU5gUgNWGFq8ug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.32.206.0/24 194.32.220.0/24 194.33.10.0/24 194.33.16.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:02:6f:8a:53:95:88:3f:b1:a1:0a:9b:35:85:ee:5b:f0:bc: 92:f9:7e:f1:c7:1d:b5:8e:61:d0:63:11:e8:fa:7f:f5:b2:c1: 65:03:14:31:6f:2a:ef:83:1a:2e:83:fa:9e:e8:7e:e5:86:ea: c8:6d:a5:e1:f2:1b:67:f4:51:cd:25:b8:cf:4b:cc:c3:29:a2: 54:0e:37:e6:aa:05:92:b8:f3:b5:c1:dd:b4:5f:ed:70:9d:69: 61:5c:c1:97:e7:95:33:af:e9:97:30:de:59:09:5c:03:41:43: 7b:4b:81:a6:9c:2f:7e:b0:e0:a0:c5:85:31:47:e6:ab:70:12: 24:fc:ed:07:e0:42:6b:d3:89:32:93:80:c1:68:e1:ab:67:c6: ba:1a:db:30:7a:2f:15:bf:c5:dc:ff:80:09:79:56:38:a6:98: 25:34:c4:d0:24:40:ee:22:35:2e:ad:33:7c:53:11:4f:01:81: 83:68:dd:08:ee:3e:4c:d9:4e:1f:cd:2a:9d:39:6c:9d:f9:5f: 7a:0f:bc:20:da:87:2a:91:6e:ee:07:17:1b:8a:23:7a:1f:05: b5:ba:3b:46:0f:47:dc:78:6f:58:89:fc:24:d9:4d:18:49:61: 65:f9:f7:7a:80:35:0e:95:b1:0c:08:ba:89:8e:b3:0d:2c:0c: 6e:28:ee:87 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt5EO8wHkAW45b2XRZMrw/AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3YTgyNDZmNzBhZTE4ZTczNmU0ZTUzOTgxNDgwZDU4NjE2 YWYyZTgwHhcNMjYwMTAxMTAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGRiZGQyYjYxYmE1NDY3ZThiYzA5NzJjZGRjYjlhODBkMjgwNTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApL260BuQ8UqZHSWAC5FMoXbuxSZn ZNQ208JITFFN56XQNZP721aLeVEg0HIPACECO+wCIT+Vgy4+SJMRlXXBWhYQfMAP jA4NNOKt9CvWfOtluzNlde447wHGwXs4QnYCzsJC/WtIK2+sjrTKSQULVwyZgpzt AezGzSGmPpxc9ZFuEU52FmDgsIgr7rD8nhgbuyNG/7TVBZeeFiXh8LrFwc8uYQtD reJsNOsHoISGuKwKuPVbeRgBsEsa+CFjt9QVO2zqLxhuUAWbP+Esj/BeDdvJyz29 bZPzS1hMHX3jX4Y9GLh6pJNahePcBdfRVdtcECIUJDMKG8hM6ATmHQu3xwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFFjb3SthulRn6LwJcs3cuagNKAU3MB8GA1UdIwQY MBaAFMeoJG9wrhjnNuTlOYFIDVhhavLoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDZna2IzQ3VHT2MyNU9VNWdVZ05XR0ZxOHVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9hZDU2M2UtNWNiZS00ZTE1LTgyNGQt ZTNkMjg2ZDIwZTUyLzEvV052ZEsyRzZWR2ZvdkFseXpkeTVxQTBvQlRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9hZDU2M2UtNWNiZS00ZTE1LTgyNGQtZTNkMjg2ZDIwZTUy LzEveDZna2IzQ3VHT2MyNU9VNWdVZ05XR0ZxOHVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwiDOAwQA wiDcAwQAwiEKAwQAwiEQMA0GCSqGSIb3DQEBCwUAA4IBAQBuAm+KU5WIP7GhCps1 he5b8LyS+X7xxx21jmHQYxHo+n/1ssFlAxQxbyrvgxoug/qe6H7lhurIbaXh8htn 9FHNJbjPS8zDKaJUDjfmqgWSuPO1wd20X+1wnWlhXMGX55Uzr+mXMN5ZCVwDQUN7 S4GmnC9+sOCgxYUxR+arcBIk/O0H4EJr04kyk4DBaOGrZ8a6Gtswei8Vv8Xc/4AJ eVY4ppglNMTQJEDuIjUurTN8UxFPAYGDaN0I7j5M2U4fzSqdOWyd+V96D7wg2ocq kW7uBxcbiiN6HwW1ujtGD0fceG9Yifwk2U0YSWFl+fd6gDUOlbEMCLqJjrMNLAxu KO6H -----END CERTIFICATE-----Generated at Mon Jan 26 23:42:54 2026 by rpki-client