This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/1-WPRdVqmtlIyUI0vqU9PWtdt-gM.roa File: 1-WPRdVqmtlIyUI0vqU9PWtdt-gM.roa (raw, json) Hash identifier: XWiIX8j8IwmwPP0JVAl2lLSxTvvYR4DX3aF34HbG+KQ= Subject key identifier: F9:63:D1:75:5A:A6:B6:52:32:50:8D:2F:A9:4F:4F:5A:D7:6D:FA:03 Certificate issuer: /CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45 Certificate serial: 019B7DCB090DAEC2C1C91264C5B6E32DC7A5 Authority key identifier: 1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/1-WPRdVqmtlIyUI0vqU9PWtdt-gM.roa Signing time: Fri 02 Jan 2026 08:20:16 +0000 ROA not before: Fri 02 Jan 2026 08:20:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49859 IP address blocks: 194.32.111.0/24 maxlen: 24 2a00:e780:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.mft rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:09:0d:ae:c2:c1:c9:12:64:c5:b6:e3:2d:c7:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aa19c92e96677f5f96f68f1ca0aad9fa311eb45 Validity Not Before: Jan 2 08:20:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f963d1755aa6b65232508d2fa94f4f5ad76dfa03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:11:c9:d3:f0:f8:ec:bb:87:1c:7f:fd:95:01: 41:77:bf:d2:39:58:9c:78:bc:f4:54:02:ed:05:04: 7f:c0:da:e5:26:08:bd:5f:32:41:e5:ce:76:2b:8e: 3c:42:fe:db:e9:47:ca:b3:93:34:3f:ae:d9:c6:db: 47:fe:d5:1b:3a:6c:e9:f2:66:99:16:57:80:55:e7: 9c:bc:13:e4:b6:98:8a:b3:c4:8b:d1:a4:1d:f0:48: 92:91:38:ff:9a:c6:3c:ea:be:ba:86:7c:42:58:e3: 08:11:a4:b6:a3:e4:45:f3:9d:87:e1:a4:74:f9:c9: 05:ca:3b:55:fd:c3:ad:e0:8b:3f:48:80:20:91:78: 22:9b:c6:f6:75:0e:06:e4:3f:55:1c:be:cb:fc:7b: 5e:01:e8:33:19:23:55:a4:cf:3c:2c:17:87:64:6c: 84:91:2e:93:30:1c:c0:eb:b8:d9:d2:1d:91:79:7b: 66:0e:4f:f1:fc:35:93:be:b2:c6:0c:c7:10:c9:78: 18:c9:3a:0a:a2:96:cb:f0:4f:ce:1c:b5:24:dc:27: 97:71:46:28:32:69:ee:e6:ad:de:fb:04:35:a7:4f: 07:96:4d:14:06:e8:3c:f1:e2:87:24:02:71:06:af: 8d:5f:8b:5e:ab:19:86:3f:28:26:48:aa:54:c2:77: 93:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:63:D1:75:5A:A6:B6:52:32:50:8D:2F:A9:4F:4F:5A:D7:6D:FA:03 X509v3 Authority Key Identifier: keyid:1A:A1:9C:92:E9:66:77:F5:F9:6F:68:F1:CA:0A:AD:9F:A3:11:EB:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GqGckulmd_X5b2jxygqtn6MR60U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/1-WPRdVqmtlIyUI0vqU9PWtdt-gM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/00adb0-890d-47ad-a18c-4ad0abec275e/1/GqGckulmd_X5b2jxygqtn6MR60U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.32.111.0/24 IPv6: 2a00:e780:1::/48 Signature Algorithm: sha256WithRSAEncryption 20:40:58:46:d1:4a:4f:b5:1d:e0:60:97:9e:62:42:b0:05:1f: 3c:10:08:a7:34:f9:cd:ba:e7:13:82:fa:c6:91:67:c8:90:aa: d5:a6:65:29:a0:45:c9:0c:43:e7:7f:fe:85:2c:f2:43:0c:b2: d3:a3:f6:a7:60:6e:e2:6c:51:a0:cd:11:83:4d:4c:33:8e:42: 92:41:d0:70:90:b1:65:db:f0:72:95:67:fc:bf:b0:2d:fa:32: 24:f8:f6:41:8d:17:a5:b3:4b:b5:fd:0e:2a:17:0d:f4:0e:9a: cb:90:14:81:40:38:45:5a:ff:cf:d2:a8:e6:44:a3:f9:39:c2: f9:a2:09:33:25:8c:03:8f:67:a0:6e:83:d7:9d:81:ba:3f:32: 3c:32:02:b3:0d:00:c4:5a:b9:a0:86:4f:b5:f5:a4:95:a8:08: 78:e2:99:db:1a:d1:4c:34:0e:d7:a0:92:94:76:ad:5f:53:5b: 17:43:75:46:17:08:1b:95:ae:5c:3d:44:bd:7b:44:56:d1:db: 01:7b:00:db:c4:11:5f:b4:57:e8:a8:2c:69:3b:ec:87:ac:b1: 84:88:d6:87:ae:ad:e8:9c:de:3f:12:9f:21:db:47:16:c5:56: 5a:af:7c:1d:f6:1a:c6:8f:91:6f:96:24:89:f1:d3:c5:05:0d: 3b:18:ba:37 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt9ywkNrsLByRJkxbbjLcelMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhYTE5YzkyZTk2Njc3ZjVmOTZmNjhmMWNhMGFhZDlmYTMx MWViNDUwHhcNMjYwMTAyMDgyMDE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOTYzZDE3NTVhYTZiNjUyMzI1MDhkMmZhOTRmNGY1YWQ3NmRmYTAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhHJ0/D47LuHHH/9lQFBd7/SOVic eLz0VALtBQR/wNrlJgi9XzJB5c52K448Qv7b6UfKs5M0P67ZxttH/tUbOmzp8maZ FleAVeecvBPktpiKs8SL0aQd8EiSkTj/msY86r66hnxCWOMIEaS2o+RF852H4aR0 +ckFyjtV/cOt4Is/SIAgkXgim8b2dQ4G5D9VHL7L/HteAegzGSNVpM88LBeHZGyE kS6TMBzA67jZ0h2ReXtmDk/x/DWTvrLGDMcQyXgYyToKopbL8E/OHLUk3CeXcUYo Mmnu5q3e+wQ1p08Hlk0UBug88eKHJAJxBq+NX4teqxmGPygmSKpUwneTyQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFPlj0XVaprZSMlCNL6lPT1rXbfoDMB8GA1UdIwQY MBaAFBqhnJLpZnf1+W9o8coKrZ+jEetFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3FHY2t1bG1kX1g1YjJqeHlncXRuNk1SNjBVLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS8wMGFkYjAtODkwZC00N2FkLWExOGMt NGFkMGFiZWMyNzVlLzEvMS1XUFJkVnFtdGxJeVVJMHZxVTlQV3RkdC1nTS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvNmEvMDBhZGIwLTg5MGQtNDdhZC1hMThjLTRhZDBhYmVjMjc1 ZS8xL0dxR2NrdWxtZF9YNWIyanh5Z3F0bjZNUjYwVS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAMIgbzAP BAIAAjAJAwcAKgDngAABMA0GCSqGSIb3DQEBCwUAA4IBAQAgQFhG0UpPtR3gYJee YkKwBR88EAinNPnNuucTgvrGkWfIkKrVpmUpoEXJDEPnf/6FLPJDDLLTo/anYG7i bFGgzRGDTUwzjkKSQdBwkLFl2/BylWf8v7At+jIk+PZBjRels0u1/Q4qFw30DprL kBSBQDhFWv/P0qjmRKP5OcL5ogkzJYwDj2egboPXnYG6PzI8MgKzDQDEWrmghk+1 9aSVqAh44pnbGtFMNA7XoJKUdq1fU1sXQ3VGFwgbla5cPUS9e0RW0dsBewDbxBFf tFfoqCxpO+yHrLGEiNaHrq3onN4/Ep8h20cWxVZar3wd9hrGj5FvliSJ8dPFBQ07 GLo3 -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:41 2026 by rpki-client