This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/WIl0Xqb_jjioT10im6ZilazK9oU.roa File: WIl0Xqb_jjioT10im6ZilazK9oU.roa (raw, json) Hash identifier: bnIVhAkmyrGOEI0F1P6+uWii6pOvIBe20BCtDnQhbkw= Subject key identifier: 58:89:74:5E:A6:FF:8E:38:A8:4F:5D:22:9B:A6:62:95:AC:CA:F6:85 Certificate issuer: /CN=ad102f1af17d00fd80a3d9fe9ffe81d04ce17447 Certificate serial: 019B7E37708CA5EFB1B8F5A8B45966BC1961 Authority key identifier: AD:10:2F:1A:F1:7D:00:FD:80:A3:D9:FE:9F:FE:81:D0:4C:E1:74:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/WIl0Xqb_jjioT10im6ZilazK9oU.roa Signing time: Fri 02 Jan 2026 10:18:41 +0000 ROA not before: Fri 02 Jan 2026 10:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202022 IP address blocks: 185.56.32.0/22 maxlen: 22 185.160.56.0/23 maxlen: 23 185.160.58.0/24 maxlen: 24 2a04:d7c0::/29 maxlen: 29 2a07:ba40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.mft rsync://rpki.ripe.net/repository/DEFAULT/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:70:8c:a5:ef:b1:b8:f5:a8:b4:59:66:bc:19:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad102f1af17d00fd80a3d9fe9ffe81d04ce17447 Validity Not Before: Jan 2 10:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5889745ea6ff8e38a84f5d229ba66295accaf685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:93:7e:ce:42:70:e9:b7:88:8c:36:53:03:41: 69:cf:97:d4:b7:99:53:b8:4e:35:ff:92:e3:24:89: d7:d5:73:7c:50:aa:cc:d1:f1:4f:bc:0d:10:5c:44: 9d:f9:d9:46:88:b8:6c:f6:2d:63:e7:df:19:6a:fb: c9:19:d7:ef:ff:82:42:bb:a3:eb:38:ea:71:d0:f3: de:08:24:c3:67:6c:8b:f9:71:a5:d1:3f:0d:73:06: 08:22:28:e2:cd:a1:0b:c5:63:5f:36:37:60:f0:ba: 7e:db:d6:51:78:84:39:db:a2:4f:9a:43:c6:f8:b3: ed:eb:98:95:f9:96:82:c5:19:07:0a:7d:6f:65:c5: 67:85:73:c8:c8:17:2b:27:b1:21:e9:7c:5f:c7:9a: e0:9e:3c:d4:b5:4e:d8:94:9b:c9:fb:4d:87:f2:7a: 87:22:84:57:eb:34:dd:f2:b0:0f:d2:29:8b:ed:73: ab:ef:60:21:07:d7:e4:7b:76:1b:51:49:1e:3f:92: d3:72:6c:90:9d:23:27:5f:e5:81:7b:44:2a:e1:2c: f9:ea:5d:65:e4:c4:3f:8e:33:a4:c3:a3:0f:4f:ce: 08:03:72:80:07:64:c5:b8:fa:fd:04:c9:5c:08:11: 7f:2f:67:ab:55:ef:d6:55:4a:e2:cb:af:c5:df:cb: 66:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:89:74:5E:A6:FF:8E:38:A8:4F:5D:22:9B:A6:62:95:AC:CA:F6:85 X509v3 Authority Key Identifier: keyid:AD:10:2F:1A:F1:7D:00:FD:80:A3:D9:FE:9F:FE:81:D0:4C:E1:74:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/WIl0Xqb_jjioT10im6ZilazK9oU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e1a78b-dd36-4ee9-a260-3b1aad9fdd57/1/rRAvGvF9AP2Ao9n-n_6B0EzhdEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.56.32.0/22 185.160.56.0-185.160.58.255 IPv6: 2a04:d7c0::/29 2a07:ba40::/29 Signature Algorithm: sha256WithRSAEncryption 44:b4:fa:fb:b9:4f:f3:f1:90:c9:b2:b7:ec:10:81:9d:09:9e: ac:73:9d:20:5a:3b:09:27:a7:e2:8b:3e:68:3b:b2:a1:d0:56: c3:39:6e:b3:75:50:ed:e1:8b:9d:ac:9b:26:60:83:ac:a5:81: 0f:8b:aa:98:88:35:5e:78:e9:0d:f1:66:5a:23:be:29:94:8e: b0:4b:5d:46:6d:1a:d6:a1:c0:61:00:95:b6:03:f5:53:20:ec: b8:0c:0e:a9:38:b4:9e:18:74:93:fe:b5:57:33:1b:25:16:b2: 53:8b:63:91:fb:01:09:89:37:d3:4c:dc:01:35:44:df:31:a3: 3c:d4:f2:59:e9:41:38:79:0e:9c:bc:03:0c:94:85:ee:3f:7c: 66:81:c2:7d:5f:84:38:13:60:f1:ef:7b:a7:40:ae:37:ee:cd: 39:ef:68:5e:5e:f3:af:36:5b:66:d4:e8:89:98:16:b4:18:dd: 3c:90:9e:ca:c7:1f:9a:ae:80:31:68:4a:8b:eb:90:09:73:d5: 14:18:65:d8:c7:4b:8a:94:12:ec:6d:29:80:73:1b:db:f7:f7: fe:a5:a5:d4:d9:8a:e7:6e:d1:7d:b8:26:82:dd:67:b1:5e:52: 1c:3f:d4:00:92:3f:f7:4b:c3:4e:98:1c:d6:98:21:8f:6e:ec: ed:95:e4:1e -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt+N3CMpe+xuPWotFlmvBlhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMTAyZjFhZjE3ZDAwZmQ4MGEzZDlmZTlmZmU4MWQwNGNl MTc0NDcwHhcNMjYwMTAyMTAxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODg5NzQ1ZWE2ZmY4ZTM4YTg0ZjVkMjI5YmE2NjI5NWFjY2FmNjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8JN+zkJw6beIjDZTA0Fpz5fUt5lT uE41/5LjJInX1XN8UKrM0fFPvA0QXESd+dlGiLhs9i1j598ZavvJGdfv/4JCu6Pr OOpx0PPeCCTDZ2yL+XGl0T8NcwYIIijizaELxWNfNjdg8Lp+29ZReIQ526JPmkPG +LPt65iV+ZaCxRkHCn1vZcVnhXPIyBcrJ7Eh6Xxfx5rgnjzUtU7YlJvJ+02H8nqH IoRX6zTd8rAP0imL7XOr72AhB9fke3YbUUkeP5LTcmyQnSMnX+WBe0Qq4Sz56l1l 5MQ/jjOkw6MPT84IA3KAB2TFuPr9BMlcCBF/L2erVe/WVUriy6/F38tmewIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFFiJdF6m/444qE9dIpumYpWsyvaFMB8GA1UdIwQY MBaAFK0QLxrxfQD9gKPZ/p/+gdBM4XRHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclJBdkd2RjlBUDJBbzluLW5fNkIwRXpoZEVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9lMWE3OGItZGQzNi00ZWU5LWEyNjAt M2IxYWFkOWZkZDU3LzEvV0lsMFhxYl9qamlvVDEwaW02WmlsYXpLOW9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9lMWE3OGItZGQzNi00ZWU5LWEyNjAtM2IxYWFkOWZkZDU3 LzEvclJBdkd2RjlBUDJBbzluLW5fNkIwRXpoZEVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAaBAIAATAUAwQCuTggMAwD BAO5oDgDBAC5oDowFAQCAAIwDgMFAyoE18ADBQMqB7pAMA0GCSqGSIb3DQEBCwUA A4IBAQBEtPr7uU/z8ZDJsrfsEIGdCZ6sc50gWjsJJ6fiiz5oO7Kh0FbDOW6zdVDt 4YudrJsmYIOspYEPi6qYiDVeeOkN8WZaI74plI6wS11GbRrWocBhAJW2A/VTIOy4 DA6pOLSeGHST/rVXMxslFrJTi2OR+wEJiTfTTNwBNUTfMaM81PJZ6UE4eQ6cvAMM lIXuP3xmgcJ9X4Q4E2Dx73unQK437s0572heXvOvNltm1OiJmBa0GN08kJ7Kxx+a roAxaEqL65AJc9UUGGXYx0uKlBLsbSmAcxvb9/f+paXU2YrnbtF9uCaC3WexXlIc P9QAkj/3S8NOmBzWmCGPbuztleQe -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:48 2026 by rpki-client