This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/wS0apBhtiuVVHFFK87DoMQ3ejQc.roa File: wS0apBhtiuVVHFFK87DoMQ3ejQc.roa (raw, json) Hash identifier: ZNtmxsknYilQpUIhLRK+q8WsjLGRXiSlJ1H3sFAAUI4= Subject key identifier: C1:2D:1A:A4:18:6D:8A:E5:55:1C:51:4A:F3:B0:E8:31:0D:DE:8D:07 Certificate issuer: /CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533 Certificate serial: 019B78A2E3555653FF77CA7535E5F50A817F Authority key identifier: 7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/wS0apBhtiuVVHFFK87DoMQ3ejQc.roa Signing time: Thu 01 Jan 2026 08:18:19 +0000 ROA not before: Thu 01 Jan 2026 08:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210895 IP address blocks: 91.198.166.0/24 maxlen: 24 185.253.7.0/24 maxlen: 24 212.162.154.0/24 maxlen: 24 212.162.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.mft rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:e3:55:56:53:ff:77:ca:75:35:e5:f5:0a:81:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533 Validity Not Before: Jan 1 08:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c12d1aa4186d8ae5551c514af3b0e8310dde8d07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:10:cb:c2:d1:64:91:b0:3e:ea:9e:00:51:01: 28:b9:e0:d7:db:64:b8:7a:e7:e9:fe:42:67:52:34: d8:a0:25:16:08:ef:43:6b:a4:c3:13:cb:39:f7:39: 84:db:3a:2e:a2:0b:b7:d9:d5:41:9e:c7:68:74:27: c5:15:19:97:43:a0:ca:9c:7a:c8:3b:11:d4:ba:02: 29:f6:62:b7:0f:fd:8a:d3:ab:f6:41:c9:eb:e9:ff: e2:f3:ac:b1:e2:87:24:0a:5b:64:62:f5:ac:6c:77: c5:b4:6e:2d:87:d5:14:95:99:29:c9:d0:7e:b4:48: bb:ff:8c:36:55:3f:5a:12:69:e5:89:d7:ec:59:a1: c0:51:f8:4d:bc:8a:35:ad:b4:99:1d:fc:b9:60:8f: 94:a1:5a:88:87:bd:f4:8e:78:b1:11:15:22:cd:d8: 66:d6:c5:83:83:5a:3f:83:85:9a:6a:78:d3:b4:22: 13:1b:3a:63:fd:12:6b:47:61:6a:fe:fc:2a:6a:47: 09:6d:27:fd:77:84:16:00:89:f0:30:1f:2e:b1:95: 62:0a:9c:c2:7e:63:41:05:2f:39:0b:9c:80:75:43: 15:a4:b8:1f:a5:84:d2:80:c3:35:f3:b4:95:7f:94: 7b:77:3f:c6:f1:b6:55:cb:1c:8d:8b:85:86:2d:d9: 78:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:2D:1A:A4:18:6D:8A:E5:55:1C:51:4A:F3:B0:E8:31:0D:DE:8D:07 X509v3 Authority Key Identifier: keyid:7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/wS0apBhtiuVVHFFK87DoMQ3ejQc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.198.166.0/24 185.253.7.0/24 212.162.154.0/23 Signature Algorithm: sha256WithRSAEncryption 43:63:f8:f6:66:ff:e7:fa:77:34:78:50:1a:a2:2c:d5:f8:23: 43:85:d1:37:3c:58:4b:bf:44:92:4b:0d:41:21:14:41:64:67: c6:eb:26:dd:d1:8f:91:c2:0c:8f:f2:01:ae:6d:c4:28:b7:03: 6f:09:26:c1:5e:8d:f0:04:d4:68:50:f9:57:8e:c1:d8:59:a8: e3:0c:85:76:53:b0:cb:ac:f9:a5:d6:78:ce:54:bd:f2:c7:11: 3a:42:4c:f5:96:86:ca:7c:d6:c8:ab:34:ba:68:bd:bf:2b:37: 36:eb:c1:25:79:83:71:87:da:2d:77:cb:16:06:a0:82:af:46: a7:a4:42:dd:68:eb:b7:f6:b5:c3:88:25:dc:89:0f:0a:6b:5d: ea:09:46:95:9f:57:6b:45:44:0e:eb:30:fa:5a:ad:94:a4:36: c4:c0:df:2f:c3:ea:a0:72:c0:8b:ea:f8:79:c8:a9:50:65:f5: da:fc:69:b8:15:11:db:75:97:20:6a:4b:b5:0f:12:88:20:d5: 40:e7:49:ef:f5:80:eb:0a:d4:57:77:ab:e0:a0:78:d9:8d:61: 6a:a2:f5:ce:08:28:e0:fa:ce:bb:df:ff:1e:bb:da:08:47:37: 81:7d:b8:fd:d4:5a:b6:09:b5:0a:2c:e0:0b:48:2b:d3:0f:6b: 35:84:3c:50 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt4ouNVVlP/d8p1NeX1CoF/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmY2FkODlkZjFiZjk5YTM2ZjI5MGNjM2VmMGYxZTdiNGQw Mjc1MzMwHhcNMjYwMTAxMDgxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTJkMWFhNDE4NmQ4YWU1NTUxYzUxNGFmM2IwZTgzMTBkZGU4ZDA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRDLwtFkkbA+6p4AUQEoueDX22S4 eufp/kJnUjTYoCUWCO9Da6TDE8s59zmE2zouogu32dVBnsdodCfFFRmXQ6DKnHrI OxHUugIp9mK3D/2K06v2Qcnr6f/i86yx4ockCltkYvWsbHfFtG4th9UUlZkpydB+ tEi7/4w2VT9aEmnlidfsWaHAUfhNvIo1rbSZHfy5YI+UoVqIh730jnixERUizdhm 1sWDg1o/g4WaanjTtCITGzpj/RJrR2Fq/vwqakcJbSf9d4QWAInwMB8usZViCpzC fmNBBS85C5yAdUMVpLgfpYTSgMM187SVf5R7dz/G8bZVyxyNi4WGLdl4OwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMEtGqQYbYrlVRxRSvOw6DEN3o0HMB8GA1UdIwQY MBaAFH/K2J3xv5mjbykMw+8PHntNAnUzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjhyWW5mR19tYU52S1F6RDd3OGVlMDBDZFRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85ZjhiMTYtMjg0Zi00NTEyLWIzZGMt MDE1ZDlmMWI0YjUwLzEvd1MwYXBCaHRpdVZWSEZGSzg3RG9NUTNlalFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85ZjhiMTYtMjg0Zi00NTEyLWIzZGMtMDE1ZDlmMWI0YjUw LzEvZjhyWW5mR19tYU52S1F6RDd3OGVlMDBDZFRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW8amAwQA uf0HAwQB1KKaMA0GCSqGSIb3DQEBCwUAA4IBAQBDY/j2Zv/n+nc0eFAaoizV+CND hdE3PFhLv0SSSw1BIRRBZGfG6ybd0Y+RwgyP8gGubcQotwNvCSbBXo3wBNRoUPlX jsHYWajjDIV2U7DLrPml1njOVL3yxxE6Qkz1lobKfNbIqzS6aL2/Kzc268EleYNx h9otd8sWBqCCr0anpELdaOu39rXDiCXciQ8Ka13qCUaVn1drRUQO6zD6Wq2UpDbE wN8vw+qgcsCL6vh5yKlQZfXa/Gm4FRHbdZcgaku1DxKIINVA50nv9YDrCtRXd6vg oHjZjWFqovXOCCjg+s673/8eu9oIRzeBfbj91Fq2CbUKLOALSCvTD2s1hDxQ -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:38 2026 by rpki-client