This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/wonfwrKeB1K76TqPsMaqoDKooXU.roa File: wonfwrKeB1K76TqPsMaqoDKooXU.roa (raw, json) Hash identifier: SEBH6WAA2Az371IGZKWSIV+f6pZndD0Bpz9/N1ofv9w= Subject key identifier: C2:89:DF:C2:B2:9E:07:52:BB:E9:3A:8F:B0:C6:AA:A0:32:A8:A1:75 Certificate issuer: /CN=7539b7a123417aa719325946aa89e0f30ab0ca09 Certificate serial: 019B78A2571EC22869D56387DD615EFDE5A7 Authority key identifier: 75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/wonfwrKeB1K76TqPsMaqoDKooXU.roa Signing time: Thu 01 Jan 2026 08:17:43 +0000 ROA not before: Thu 01 Jan 2026 08:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6665 IP address blocks: 194.20.232.0/21 maxlen: 24 194.20.240.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.mft rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:57:1e:c2:28:69:d5:63:87:dd:61:5e:fd:e5:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7539b7a123417aa719325946aa89e0f30ab0ca09 Validity Not Before: Jan 1 08:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c289dfc2b29e0752bbe93a8fb0c6aaa032a8a175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:d3:ec:c6:8a:f2:eb:1f:d0:6b:70:af:21:9a: ca:63:57:f6:7b:2d:01:e2:e2:41:97:fa:8e:aa:7a: 9c:ff:95:4d:93:6c:4c:97:f9:92:2d:43:9b:b5:0f: c9:27:3b:07:72:cc:9f:a8:b9:44:68:3b:08:fc:cb: 80:8f:77:e3:61:08:56:a9:0c:88:ee:61:6f:4e:ca: 6e:a3:ac:c0:4c:04:10:a0:43:ca:4c:4b:fd:c3:a9: 6c:0e:3d:14:17:ee:9a:6d:f9:dc:4f:03:28:5c:ba: 28:42:68:e0:21:cc:f6:30:0c:4d:a9:cd:f7:a7:cc: 6c:b6:96:23:78:00:63:fd:80:54:4e:2d:1f:2a:b5: 99:f6:1e:dd:20:3d:aa:eb:6d:6b:e6:9e:8c:88:62: d9:50:ff:24:72:6e:da:5d:24:8b:63:e0:a9:68:ed: af:25:9a:64:ed:d6:70:19:0b:04:ac:6e:b4:ae:0b: 40:16:aa:c7:0e:fe:be:9e:5a:37:0e:82:59:b0:6b: 11:5c:7b:87:88:f3:56:d5:e6:2a:a6:7b:74:ff:a9: f5:ad:be:d4:36:e8:54:94:e9:08:bc:57:f8:46:7d: 1d:3e:2e:2d:c6:c1:7a:ab:ca:73:84:79:ec:c2:02: be:ff:4f:a2:7c:6c:df:4c:05:c4:5b:96:a9:75:2b: 1a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:89:DF:C2:B2:9E:07:52:BB:E9:3A:8F:B0:C6:AA:A0:32:A8:A1:75 X509v3 Authority Key Identifier: keyid:75:39:B7:A1:23:41:7A:A7:19:32:59:46:AA:89:E0:F3:0A:B0:CA:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTm3oSNBeqcZMllGqong8wqwygk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/wonfwrKeB1K76TqPsMaqoDKooXU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/dTm3oSNBeqcZMllGqong8wqwygk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.20.232.0-194.20.247.255 Signature Algorithm: sha256WithRSAEncryption 01:39:a1:ab:58:7e:a3:d2:e9:69:e4:c6:c4:7b:c0:e0:aa:63: 31:27:7f:d6:1f:d6:90:49:6b:7f:12:fd:1a:db:e5:55:67:bf: 3f:9f:6b:38:c6:65:7b:5c:cc:0c:ed:1e:22:bb:5d:e4:b8:b8: 00:a7:23:dd:a1:d9:83:a6:c8:e1:1d:f8:d4:e8:cb:ff:75:2e: d9:7a:05:91:35:f9:06:8f:e0:90:b4:7d:34:ec:b0:e4:c7:4e: fa:85:56:ba:e5:02:d0:b3:37:a1:d4:35:39:ec:fe:2b:4f:b7: 41:27:73:3d:5e:4b:08:eb:a5:f1:dd:82:3d:98:34:98:30:90: 5e:17:b1:0b:a4:0b:db:dc:5c:c4:07:e4:5f:60:86:1d:64:5b: d1:e8:36:d0:66:ee:a4:7a:42:ea:44:35:e5:45:c1:cb:05:33: 90:ff:0b:14:20:ec:54:e9:97:d2:1d:36:bc:c2:79:6c:38:ab: d2:c0:44:f0:cd:50:9b:9a:29:06:3d:01:3c:43:80:c8:5d:7d: d1:89:67:55:53:87:37:6d:c6:e9:a7:c0:f4:78:a1:6c:5d:30: c2:b9:71:57:d4:4f:70:14:54:a8:12:b1:3a:e6:9d:d5:53:bd: fe:47:1f:4e:13:75:01:de:ea:bb:e8:2a:70:2b:86:37:83:09: 85:7a:aa:20 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt4olcewihp1WOH3WFe/eWnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MzliN2ExMjM0MTdhYTcxOTMyNTk0NmFhODllMGYzMGFi MGNhMDkwHhcNMjYwMTAxMDgxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjg5ZGZjMmIyOWUwNzUyYmJlOTNhOGZiMGM2YWFhMDMyYThhMTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9Psxory6x/Qa3CvIZrKY1f2ey0B 4uJBl/qOqnqc/5VNk2xMl/mSLUObtQ/JJzsHcsyfqLlEaDsI/MuAj3fjYQhWqQyI 7mFvTspuo6zATAQQoEPKTEv9w6lsDj0UF+6abfncTwMoXLooQmjgIcz2MAxNqc33 p8xstpYjeABj/YBUTi0fKrWZ9h7dID2q621r5p6MiGLZUP8kcm7aXSSLY+CpaO2v JZpk7dZwGQsErG60rgtAFqrHDv6+nlo3DoJZsGsRXHuHiPNW1eYqpnt0/6n1rb7U NuhUlOkIvFf4Rn0dPi4txsF6q8pzhHnswgK+/0+ifGzfTAXEW5apdSsaAwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFMKJ38KyngdSu+k6j7DGqqAyqKF1MB8GA1UdIwQY MBaAFHU5t6EjQXqnGTJZRqqJ4PMKsMoJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjct NWI1ZTMzY2U3MGFkLzEvd29uZndyS2VCMUs3NlRxUHNNYXFvREtvb1hVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi84MDdlZDUtNTBiMy00ZTVmLTkzNjctNWI1ZTMzY2U3MGFk LzEvZFRtM29TTkJlcWNaTWxsR3Fvbmc4d3F3eWdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAPCFOgD BAPCFPAwDQYJKoZIhvcNAQELBQADggEBAAE5oatYfqPS6WnkxsR7wOCqYzEnf9Yf 1pBJa38S/Rrb5VVnvz+fazjGZXtczAztHiK7XeS4uACnI92h2YOmyOEd+NToy/91 Ltl6BZE1+QaP4JC0fTTssOTHTvqFVrrlAtCzN6HUNTns/itPt0Encz1eSwjrpfHd gj2YNJgwkF4XsQukC9vcXMQH5F9ghh1kW9HoNtBm7qR6QupENeVFwcsFM5D/CxQg 7FTpl9IdNrzCeWw4q9LARPDNUJuaKQY9ATxDgMhdfdGJZ1VThzdtxumnwPR4oWxd MMK5cVfUT3AUVKgSsTrmndVTvf5HH04TdQHe6rvoKnArhjeDCYV6qiA= -----END CERTIFICATE-----Generated at Tue Jan 27 05:42:00 2026 by rpki-client