This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/Rw7bO49wARtLW7cvAr1hGR-8Dgs.roa File: Rw7bO49wARtLW7cvAr1hGR-8Dgs.roa (raw, json) Hash identifier: PLBVzKzfY6V8bQMUJREfJf+D4bMzTqr7tyLzjpGHOPk= Subject key identifier: 47:0E:DB:3B:8F:70:01:1B:4B:5B:B7:2F:02:BD:61:19:1F:BC:0E:0B Certificate issuer: /CN=ffbcae2b290c801d57d09d025a9348e16706f182 Certificate serial: 019B7AC7BBB43AAEFB3219CA6D2DD2A09F2E Authority key identifier: FF:BC:AE:2B:29:0C:80:1D:57:D0:9D:02:5A:93:48:E1:67:06:F1:82 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/Rw7bO49wARtLW7cvAr1hGR-8Dgs.roa Signing time: Thu 01 Jan 2026 18:17:48 +0000 ROA not before: Thu 01 Jan 2026 18:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198537 IP address blocks: 37.221.100.0/22 maxlen: 24 45.159.236.0/22 maxlen: 24 77.83.40.0/22 maxlen: 24 91.209.115.0/24 maxlen: 24 91.209.149.0/24 maxlen: 24 91.209.151.0/24 maxlen: 24 91.236.32.0/22 maxlen: 24 185.146.52.0/22 maxlen: 24 194.50.253.0/24 maxlen: 24 194.53.1.0/24 maxlen: 24 194.53.2.0/24 maxlen: 24 194.53.61.0/24 maxlen: 24 195.14.26.0/23 maxlen: 24 195.14.112.0/23 maxlen: 24 2a07:4bc0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:bb:b4:3a:ae:fb:32:19:ca:6d:2d:d2:a0:9f:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffbcae2b290c801d57d09d025a9348e16706f182 Validity Not Before: Jan 1 18:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=470edb3b8f70011b4b5bb72f02bd61191fbc0e0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f1:61:43:b8:90:c5:96:0f:c4:0d:99:62:a4: 79:d1:8e:35:bb:aa:75:98:a2:30:0a:8d:e7:e7:af: b0:63:b9:8c:b0:c3:66:1f:ad:24:81:22:b5:eb:1c: 9c:7f:dc:73:f7:77:db:4c:02:a5:2b:d2:11:86:f7: 6b:89:d5:4a:ef:47:5d:9e:8d:f7:de:ed:67:ea:8a: ed:51:73:7e:e2:44:d1:53:a6:c9:64:2e:0c:84:f2: eb:33:98:0f:2f:3c:87:cf:e8:03:80:68:fe:e5:0d: b7:e7:24:76:c6:a7:3d:9a:77:56:1d:a6:75:53:2c: 19:bd:80:cc:d5:41:40:29:30:1b:ae:dd:65:2b:09: 4d:20:4e:85:12:30:df:73:e7:fc:da:8a:6e:a5:7b: b0:ff:7f:30:6f:76:f1:62:cd:30:cb:40:15:71:dc: 0a:f2:cd:7f:81:ce:04:cd:e3:e8:84:41:a8:ec:c7: ec:42:75:29:d9:a2:16:b5:ba:c4:41:a4:b4:88:37: 9c:d8:a5:9e:72:85:dc:15:7a:ec:29:a1:ea:0c:ec: c9:6b:1e:13:0b:02:d2:63:38:2c:a3:eb:4f:52:06: f7:eb:6d:c1:e7:cb:64:ce:1d:df:5f:ba:ec:ce:1e: 89:7f:7a:c8:45:bd:d0:fa:de:8c:44:87:a2:da:83: f3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:0E:DB:3B:8F:70:01:1B:4B:5B:B7:2F:02:BD:61:19:1F:BC:0E:0B X509v3 Authority Key Identifier: keyid:FF:BC:AE:2B:29:0C:80:1D:57:D0:9D:02:5A:93:48:E1:67:06:F1:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/Rw7bO49wARtLW7cvAr1hGR-8Dgs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.221.100.0/22 45.159.236.0/22 77.83.40.0/22 91.209.115.0/24 91.209.149.0/24 91.209.151.0/24 91.236.32.0/22 185.146.52.0/22 194.50.253.0/24 194.53.1.0-194.53.2.255 194.53.61.0/24 195.14.26.0/23 195.14.112.0/23 IPv6: 2a07:4bc0::/29 Signature Algorithm: sha256WithRSAEncryption 33:a4:87:3d:8f:72:0f:cf:62:f1:64:de:35:27:69:9b:82:97: 2d:df:8e:64:81:56:62:0f:4d:90:02:23:1f:59:ff:b9:3f:38: b9:5f:5d:dd:6c:c4:08:66:52:f7:05:c3:1e:12:19:58:0d:b4: e0:ce:91:b2:55:56:74:1f:f0:42:d0:49:86:1f:aa:53:af:e7: b1:35:74:b8:a8:19:a1:6a:a8:fd:e7:56:55:17:27:8a:5a:1e: aa:57:a0:79:1c:f9:4f:b8:69:87:19:e0:c8:50:0c:bf:c0:b8: 14:46:aa:da:ae:fd:1a:dc:71:14:55:71:2b:68:35:a0:12:48: 4c:30:61:9c:60:6a:1b:c8:be:d7:9b:a7:a1:4e:64:ba:72:58: 72:87:39:f0:43:a7:52:29:b3:3e:a5:c0:7b:29:44:58:c6:e8: 8f:8e:8b:2a:49:f1:bf:28:e3:cd:9e:8e:cb:a3:3d:f7:54:e6: 07:ca:f2:c1:c5:b5:37:3c:4e:60:b2:50:ed:0b:71:a2:5a:75: 0e:ef:a0:7b:c9:9e:c2:a9:94:59:ae:1b:9f:9c:98:82:e6:80: 6e:83:05:32:7d:63:88:4b:28:eb:c3:e0:52:7e:aa:73:c8:01: 40:f1:85:8f:4d:ec:5a:ed:84:2f:70:db:c1:e9:cf:5f:c6:ad: d6:37:ca:1a -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgISAZt6x7u0Oq77MhnKbS3SoJ8uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmYmNhZTJiMjkwYzgwMWQ1N2QwOWQwMjVhOTM0OGUxNjcw NmYxODIwHhcNMjYwMTAxMTgxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzBlZGIzYjhmNzAwMTFiNGI1YmI3MmYwMmJkNjExOTFmYmMwZTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPFhQ7iQxZYPxA2ZYqR50Y41u6p1 mKIwCo3n56+wY7mMsMNmH60kgSK16xycf9xz93fbTAKlK9IRhvdridVK70ddno33 3u1n6ortUXN+4kTRU6bJZC4MhPLrM5gPLzyHz+gDgGj+5Q235yR2xqc9mndWHaZ1 UywZvYDM1UFAKTAbrt1lKwlNIE6FEjDfc+f82opupXuw/38wb3bxYs0wy0AVcdwK 8s1/gc4EzePohEGo7MfsQnUp2aIWtbrEQaS0iDec2KWecoXcFXrsKaHqDOzJax4T CwLSYzgso+tPUgb3623B58tkzh3fX7rszh6Jf3rIRb3Q+t6MRIei2oPzkQIDAQAB o4ICaDCCAmQwHQYDVR0OBBYEFEcO2zuPcAEbS1u3LwK9YRkfvA4LMB8GA1UdIwQY MBaAFP+8rispDIAdV9CdAlqTSOFnBvGCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzd5dUt5a01nQjFYMEowQ1dwTkk0V2NHOFlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81OWJjZDEtMWUwYi00ODVkLTk1MTAt MDk2YWY0NzhmMDRiLzEvUnc3Yk80OXdBUnRMVzdjdkFyMWhHUi04RGdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81OWJjZDEtMWUwYi00ODVkLTk1MTAtMDk2YWY0NzhmMDRi LzEvXzd5dUt5a01nQjFYMEowQ1dwTkk0V2NHOFlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH4GCCsGAQUFBwEHAQH/BG8wbTBcBAIAATBWAwQCJd1kAwQC LZ/sAwQCTVMoAwQAW9FzAwQAW9GVAwQAW9GXAwQCW+wgAwQCuZI0AwQAwjL9MAwD BADCNQEDBADCNQIDBADCNT0DBAHDDhoDBAHDDnAwDQQCAAIwBwMFAyoHS8AwDQYJ KoZIhvcNAQELBQADggEBADOkhz2Pcg/PYvFk3jUnaZuCly3fjmSBVmIPTZACIx9Z /7k/OLlfXd1sxAhmUvcFwx4SGVgNtODOkbJVVnQf8ELQSYYfqlOv57E1dLioGaFq qP3nVlUXJ4paHqpXoHkc+U+4aYcZ4MhQDL/AuBRGqtqu/RrccRRVcStoNaASSEww YZxgahvIvtebp6FOZLpyWHKHOfBDp1Ipsz6lwHspRFjG6I+OiypJ8b8o482ejsuj PfdU5gfK8sHFtTc8TmCyUO0LcaJadQ7voHvJnsKplFmuG5+cmILmgG6DBTJ9Y4hL KOvD4FJ+qnPIAUDxhY9N7FrthC9w28Hpz1/GrdY3yho= -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:16 2026 by rpki-client