This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/a2wJLV7P5DGWhusYzf4J4uUDAug.roa File: a2wJLV7P5DGWhusYzf4J4uUDAug.roa (raw, json) Hash identifier: q6iaHsPiufcNlLRUKtOJ5vKMvHcKJCFipIPxXUmEW6U= Subject key identifier: 6B:6C:09:2D:5E:CF:E4:31:96:86:EB:18:CD:FE:09:E2:E5:03:02:E8 Certificate issuer: /CN=c2902f769bf681b1039f2cee61e9e0f975e4e56b Certificate serial: 019B79EC66218A0A8986DC1D6E6251BD14D6 Authority key identifier: C2:90:2F:76:9B:F6:81:B1:03:9F:2C:EE:61:E9:E0:F9:75:E4:E5:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wpAvdpv2gbEDnyzuYeng-XXk5Ws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/a2wJLV7P5DGWhusYzf4J4uUDAug.roa Signing time: Thu 01 Jan 2026 14:18:14 +0000 ROA not before: Thu 01 Jan 2026 14:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34359 IP address blocks: 195.225.144.0/22 maxlen: 22 195.225.144.0/24 maxlen: 24 195.225.145.0/24 maxlen: 24 195.225.146.0/24 maxlen: 24 195.225.147.0/24 maxlen: 24 213.109.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.crl rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.mft rsync://rpki.ripe.net/repository/DEFAULT/wpAvdpv2gbEDnyzuYeng-XXk5Ws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:66:21:8a:0a:89:86:dc:1d:6e:62:51:bd:14:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2902f769bf681b1039f2cee61e9e0f975e4e56b Validity Not Before: Jan 1 14:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6b6c092d5ecfe4319686eb18cdfe09e2e50302e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:71:74:ba:93:3b:15:e8:97:1c:66:04:ba:fe: fd:e2:ea:28:30:27:ed:ff:fa:b7:a2:e4:4a:5b:48: fb:74:16:e9:97:09:bc:9b:e4:33:82:df:82:61:da: 01:91:23:e6:4c:01:04:b5:50:45:91:de:fe:51:24: 9e:31:51:b8:e0:31:fa:ad:79:4f:9f:72:2a:a7:4b: 9e:f3:b2:a4:ed:b0:ba:cd:59:0a:92:c5:be:5a:71: f2:ae:ec:2b:24:8b:ba:ed:17:75:ef:50:bf:b1:3b: 1a:2c:15:77:e1:fc:f9:da:63:38:f2:88:6e:b1:1c: 24:ea:9e:83:4d:d4:50:e9:18:5e:19:47:11:ac:76: 6d:b6:3c:f6:67:5c:39:4a:2d:c4:f6:37:0f:b9:8e: 5a:f8:1e:9f:5a:9c:e6:d3:7e:db:d8:39:f4:61:21: a6:cf:77:e2:a2:1c:b4:8c:09:e2:c8:d1:5e:90:15: 61:0c:4c:d4:23:81:dd:7a:c2:d5:cd:91:87:96:5c: b3:f0:03:d9:e1:49:2e:89:b2:06:2a:56:15:90:c9: 4d:ac:c3:40:26:b5:b3:57:b0:84:48:bf:0b:49:40: 82:28:79:15:32:49:73:a1:35:00:7e:43:74:60:5c: 13:e4:42:c1:e4:4f:34:70:da:be:3a:6a:32:25:a1: 82:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:6C:09:2D:5E:CF:E4:31:96:86:EB:18:CD:FE:09:E2:E5:03:02:E8 X509v3 Authority Key Identifier: keyid:C2:90:2F:76:9B:F6:81:B1:03:9F:2C:EE:61:E9:E0:F9:75:E4:E5:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wpAvdpv2gbEDnyzuYeng-XXk5Ws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/a2wJLV7P5DGWhusYzf4J4uUDAug.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/54d413-40f5-4ae2-aca9-ff3936fe9946/1/wpAvdpv2gbEDnyzuYeng-XXk5Ws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.225.144.0/22 213.109.128.0/20 Signature Algorithm: sha256WithRSAEncryption 27:c9:c4:c7:3d:c7:66:f0:04:16:85:17:ea:b9:8c:46:74:9a: 9b:df:22:dc:67:c8:37:6a:8c:a7:42:4d:6a:b7:7b:23:40:48: 52:52:a3:c7:7a:e4:9d:5d:62:80:42:2e:15:cd:b5:40:01:e0: f2:8a:c8:c0:89:17:3f:14:43:5f:57:db:46:95:12:af:4e:c7: 96:47:83:70:9e:a7:97:67:85:ac:dc:1f:d7:db:15:7d:b4:2d: 57:f1:41:bc:19:9d:4b:c7:ec:63:c5:60:9f:ec:30:28:10:8c: a0:cb:82:22:c8:ae:12:bc:68:53:a0:10:95:19:41:dc:6d:14: 9b:be:6a:f2:37:fc:0f:8f:39:0a:b8:84:4a:6b:7c:ca:65:38: 14:5c:14:7d:79:a1:dd:78:c6:43:78:a0:8a:d6:fe:fd:60:f2: ca:e3:b6:22:af:83:34:df:fb:8b:48:40:41:93:0e:2f:23:71: f7:8a:a8:c0:eb:ff:61:e0:31:42:e4:1f:aa:b5:05:2b:fc:12: 6c:c4:04:02:49:d9:2f:f6:9d:b7:25:de:2e:ca:0b:96:2a:5c: dc:cf:4c:e5:a2:db:50:a7:00:47:11:9a:04:fc:68:9a:07:b0: 40:58:58:48:83:83:65:53:34:7b:69:59:12:c8:49:2f:93:d5: 2f:76:63:a7 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt57GYhigqJhtwdbmJRvRTWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyOTAyZjc2OWJmNjgxYjEwMzlmMmNlZTYxZTllMGY5NzVl NGU1NmIwHhcNMjYwMTAxMTQxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YjZjMDkyZDVlY2ZlNDMxOTY4NmViMThjZGZlMDllMmU1MDMwMmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonF0upM7FeiXHGYEuv794uooMCft //q3ouRKW0j7dBbplwm8m+Qzgt+CYdoBkSPmTAEEtVBFkd7+USSeMVG44DH6rXlP n3Iqp0ue87Kk7bC6zVkKksW+WnHyruwrJIu67Rd171C/sTsaLBV34fz52mM48ohu sRwk6p6DTdRQ6RheGUcRrHZttjz2Z1w5Si3E9jcPuY5a+B6fWpzm037b2Dn0YSGm z3fiohy0jAniyNFekBVhDEzUI4HdesLVzZGHllyz8APZ4UkuibIGKlYVkMlNrMNA JrWzV7CESL8LSUCCKHkVMklzoTUAfkN0YFwT5ELB5E80cNq+OmoyJaGCIQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFGtsCS1ez+QxlobrGM3+CeLlAwLoMB8GA1UdIwQY MBaAFMKQL3ab9oGxA58s7mHp4Pl15OVrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3BBdmRwdjJnYkVEbnl6dVllbmctWFhrNVdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My81NGQ0MTMtNDBmNS00YWUyLWFjYTkt ZmYzOTM2ZmU5OTQ2LzEvYTJ3SkxWN1A1REdXaHVzWXpmNEo0dVVEQXVnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My81NGQ0MTMtNDBmNS00YWUyLWFjYTktZmYzOTM2ZmU5OTQ2 LzEvd3BBdmRwdjJnYkVEbnl6dVllbmctWFhrNVdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCw+GQAwQE 1W2AMA0GCSqGSIb3DQEBCwUAA4IBAQAnycTHPcdm8AQWhRfquYxGdJqb3yLcZ8g3 aoynQk1qt3sjQEhSUqPHeuSdXWKAQi4VzbVAAeDyisjAiRc/FENfV9tGlRKvTseW R4NwnqeXZ4Ws3B/X2xV9tC1X8UG8GZ1Lx+xjxWCf7DAoEIygy4IiyK4SvGhToBCV GUHcbRSbvmryN/wPjzkKuIRKa3zKZTgUXBR9eaHdeMZDeKCK1v79YPLK47Yir4M0 3/uLSEBBkw4vI3H3iqjA6/9h4DFC5B+qtQUr/BJsxAQCSdkv9p23Jd4uyguWKlzc z0zlottQpwBHEZoE/GiaB7BAWFhIg4NlUzR7aVkSyEkvk9UvdmOn -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:04 2026 by rpki-client