This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/iWV4WLVJUcdCZGsBsKcAbZqr7OA.roa File: iWV4WLVJUcdCZGsBsKcAbZqr7OA.roa (raw, json) Hash identifier: Jw2uDah2aZrJKX8xXNZAur8yCPsGVL0mZjfBiouvu/w= Subject key identifier: 89:65:78:58:B5:49:51:C7:42:64:6B:01:B0:A7:00:6D:9A:AB:EC:E0 Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b Certificate serial: 019BFFBDD9813806F27748C81D8CE32AFD13 Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/iWV4WLVJUcdCZGsBsKcAbZqr7OA.roa Signing time: Tue 27 Jan 2026 13:56:30 +0000 ROA not before: Tue 27 Jan 2026 13:56:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205570 IP address blocks: 131.222.255.0/24 maxlen: 24 203.202.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ff:bd:d9:81:38:06:f2:77:48:c8:1d:8c:e3:2a:fd:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b Validity Not Before: Jan 27 13:56:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=89657858b54951c742646b01b0a7006d9aabece0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:26:ff:f2:5e:76:f0:96:2d:19:c3:b6:37:57: 35:55:24:21:b0:e1:47:e1:34:7a:07:fb:2f:0d:d8: eb:51:34:01:87:5e:fe:d7:77:c9:7e:6c:30:2c:69: 9f:dd:8e:a9:31:99:f0:23:2f:e2:bb:38:ad:c4:b0: 73:be:db:6e:fc:59:93:f6:fd:bc:b4:8f:1b:a4:1e: e0:9d:94:b2:05:9d:d6:41:5f:71:81:33:86:e1:d2: 3b:6f:c5:d1:f0:49:75:e0:7f:bc:e6:a8:0f:2a:36: dd:3c:85:f9:83:e7:80:75:b0:03:a3:c8:24:46:6b: 9c:60:b3:0e:17:80:31:ad:9e:0c:3d:64:50:9a:90: a8:29:3c:f7:55:e5:35:00:a5:b6:2d:38:ab:f3:0a: c7:b6:ae:cf:70:94:12:ab:30:65:e4:04:43:0e:db: 41:8b:5a:10:70:72:d2:7f:97:d2:38:75:c2:26:bc: fa:62:df:4e:4a:b9:4b:23:17:ef:23:54:a9:f7:63: dd:e6:4e:e6:fe:fb:0b:b0:dc:f8:1a:e0:8b:c4:70: 33:d8:9c:33:5c:be:68:fa:50:a8:d6:ee:c4:af:03: ca:b4:57:a5:62:3c:bc:eb:79:00:f6:62:7b:53:72: e9:1a:e9:a9:67:9c:26:29:a5:14:9a:21:0b:1f:18: f8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:65:78:58:B5:49:51:C7:42:64:6B:01:B0:A7:00:6D:9A:AB:EC:E0 X509v3 Authority Key Identifier: keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/iWV4WLVJUcdCZGsBsKcAbZqr7OA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.222.255.0/24 203.202.233.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:92:7a:c7:9b:ed:f6:b5:70:37:22:24:84:b4:fc:bc:9a:8c: b4:0d:0d:d2:09:43:32:e0:de:96:45:23:ce:39:f2:4f:28:2f: 24:b0:5f:36:79:6f:b3:13:6e:f7:25:c5:06:da:a6:62:9e:29: c4:bd:1d:7b:a6:68:c6:76:77:52:3e:9f:19:d4:b9:35:49:4d: f5:43:19:02:b8:de:9b:9f:36:ef:5e:ad:26:a1:10:05:81:a9: cd:a5:14:f4:d4:d5:59:09:86:88:f8:82:a5:89:e0:ec:d4:c0: 9f:36:6a:1b:f2:ce:b0:11:9f:24:a0:67:a0:66:bb:b4:ef:6d: 9d:75:84:5e:26:ce:0b:8d:6f:25:90:0d:c7:4c:e0:1a:11:a6: c8:53:01:ff:80:9d:65:0b:ee:34:e8:44:25:36:5a:6f:61:6b: 80:ef:e2:02:8e:48:c9:66:1e:f1:cc:d9:2f:f1:19:98:d9:b5: f5:0a:06:8d:b4:ac:1c:39:06:15:85:26:ad:a1:42:ec:cd:2e: d4:0a:52:75:9f:78:76:ed:8e:4f:59:e5:32:aa:f6:88:fc:d9: 5c:46:08:c5:0a:cf:c8:97:59:0f:02:03:71:2e:85:b1:19:0e: 7c:b2:00:47:ae:a5:4c:f5:7a:df:b8:3b:11:95:b7:43:b5:0a: 55:19:91:3e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZv/vdmBOAbyd0jIHYzjKv0TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNTU5Y2U4ODlhZTQyNDExMjFmZTBhMTY1M2U0Yjk1NWYz ZWRmNGIwHhcNMjYwMTI3MTM1NjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTY1Nzg1OGI1NDk1MWM3NDI2NDZiMDFiMGE3MDA2ZDlhYWJlY2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCb/8l528JYtGcO2N1c1VSQhsOFH 4TR6B/svDdjrUTQBh17+13fJfmwwLGmf3Y6pMZnwIy/iuzitxLBzvttu/FmT9v28 tI8bpB7gnZSyBZ3WQV9xgTOG4dI7b8XR8El14H+85qgPKjbdPIX5g+eAdbADo8gk RmucYLMOF4AxrZ4MPWRQmpCoKTz3VeU1AKW2LTir8wrHtq7PcJQSqzBl5ARDDttB i1oQcHLSf5fSOHXCJrz6Yt9OSrlLIxfvI1Sp92Pd5k7m/vsLsNz4GuCLxHAz2Jwz XL5o+lCo1u7ErwPKtFelYjy863kA9mJ7U3LpGumpZ5wmKaUUmiELHxj4gwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIlleFi1SVHHQmRrAbCnAG2aq+zgMB8GA1UdIwQY MBaAFOBVnOiJrkJBEh/goWU+S5VfPt9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYt OTQ0OTk1N2ZkNWE1LzEvaVdWNFdMVkpVY2RDWkdzQnNLY0FiWnFyN09BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8xZmE0YTEtOWExYy00N2RlLWFjYTYtOTQ0OTk1N2ZkNWE1 LzEvNEZXYzZJbXVRa0VTSC1DaFpUNUxsVjgtMzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAg97/AwQA y8rpMA0GCSqGSIb3DQEBCwUAA4IBAQBMknrHm+32tXA3IiSEtPy8moy0DQ3SCUMy 4N6WRSPOOfJPKC8ksF82eW+zE273JcUG2qZininEvR17pmjGdndSPp8Z1Lk1SU31 QxkCuN6bnzbvXq0moRAFganNpRT01NVZCYaI+IKlieDs1MCfNmob8s6wEZ8koGeg Zru0722ddYReJs4LjW8lkA3HTOAaEabIUwH/gJ1lC+406EQlNlpvYWuA7+ICjkjJ Zh7xzNkv8RmY2bX1CgaNtKwcOQYVhSatoULszS7UClJ1n3h27Y5PWeUyqvaI/Nlc RgjFCs/Il1kPAgNxLoWxGQ58sgBHrqVM9XrfuDsRlbdDtQpVGZE+ -----END CERTIFICATE-----Generated at Tue Feb 10 07:11:46 2026 by rpki-client