This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/waG1eA35mYOGcUBVM-FbxSNRyyk.roa File: waG1eA35mYOGcUBVM-FbxSNRyyk.roa (raw, json) Hash identifier: FKDStAiUb+S8r1SpA772Zv1NE7mSEWsxGO8Mok4cRZM= Subject key identifier: C1:A1:B5:78:0D:F9:99:83:86:71:40:55:33:E1:5B:C5:23:51:CB:29 Certificate issuer: /CN=8c186a56ea84c13c62768a9d17bae133cedf1045 Certificate serial: 019B7B3677078540471EA9899E3C50DF832E Authority key identifier: 8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/waG1eA35mYOGcUBVM-FbxSNRyyk.roa Signing time: Thu 01 Jan 2026 20:18:45 +0000 ROA not before: Thu 01 Jan 2026 20:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208189 IP address blocks: 31.22.12.0/22 maxlen: 24 31.22.12.0/23 maxlen: 23 31.22.14.0/23 maxlen: 23 193.17.86.0/23 maxlen: 24 193.17.86.0/24 maxlen: 24 193.17.176.0/23 maxlen: 24 212.132.160.0/19 maxlen: 24 212.132.160.0/20 maxlen: 20 212.132.160.0/24 maxlen: 24 212.132.163.0/24 maxlen: 24 2a04:c880::/32 maxlen: 48 2a0f:9d80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.mft rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:77:07:85:40:47:1e:a9:89:9e:3c:50:df:83:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c186a56ea84c13c62768a9d17bae133cedf1045 Validity Not Before: Jan 1 20:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1a1b5780df999838671405533e15bc52351cb29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:45:a9:e3:62:14:a6:7f:fa:e6:09:ba:8f:08: 6e:39:fe:33:fc:a8:92:3e:1c:d8:fc:11:3e:a0:3b: 7c:6f:68:05:30:48:06:da:b0:2f:16:c7:86:7e:b2: 02:9d:ef:b6:ad:99:b1:a7:1f:37:b2:1f:8c:87:c5: 00:fb:83:e9:ce:90:5a:8d:fb:78:1d:b4:67:8c:38: e0:9c:a1:6e:6e:4b:2d:eb:9d:96:8d:d9:bd:10:c4: 18:30:aa:37:c6:5d:44:dd:5c:d8:8b:aa:7a:1a:2b: 0b:79:60:f7:7a:6a:31:49:37:55:e9:35:6a:52:c8: 40:f8:73:54:3d:a1:26:5b:b0:b9:b7:68:30:fd:f2: 9e:09:79:5a:aa:af:b0:0c:ee:76:e7:b9:ad:96:1e: d2:f5:b9:d9:4c:f7:0d:f5:e1:c2:11:fb:80:04:c0: 5e:27:4e:00:e6:f5:fe:56:c8:3a:26:e8:38:06:9d: 75:e4:51:75:d7:1a:3d:2d:27:a4:90:28:7e:0e:e0: 15:ba:61:c1:56:ed:7d:9f:d2:f2:e5:68:38:e1:97: b4:e1:eb:da:f2:24:e4:a9:52:f7:9e:77:a0:d4:65: d3:aa:48:de:ad:39:f6:c0:53:87:cf:19:f6:76:48: 5f:4a:cb:e4:3e:33:7a:7e:dd:24:1b:ae:6c:56:04: 84:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A1:B5:78:0D:F9:99:83:86:71:40:55:33:E1:5B:C5:23:51:CB:29 X509v3 Authority Key Identifier: keyid:8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/waG1eA35mYOGcUBVM-FbxSNRyyk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.22.12.0/22 193.17.86.0/23 193.17.176.0/23 212.132.160.0/19 IPv6: 2a04:c880::/32 2a0f:9d80::/32 Signature Algorithm: sha256WithRSAEncryption 8a:2f:8c:65:d7:82:a1:17:c4:3e:46:d7:a3:c4:53:6c:71:8b: 04:16:4b:b0:b0:72:c5:0a:d0:ca:f9:87:c1:f1:c2:7f:7e:1d: 08:26:de:2a:a1:ef:e2:b8:57:55:f5:e8:ea:0f:7f:5f:07:d8: a1:84:4a:30:81:ea:34:80:8f:39:1d:20:f2:9c:b6:d8:31:78: a4:5c:a7:27:35:8c:fd:59:a5:d9:12:40:66:b6:fd:ce:0c:21: 8c:bf:ed:81:1d:82:b4:4f:ca:12:62:f7:6f:d4:29:56:dd:50: 45:96:11:f8:c1:0d:03:03:f8:70:d1:7a:25:56:1d:56:c8:69: 77:8e:60:4b:d7:1c:0d:7d:f2:ee:77:ec:c8:49:10:37:ed:d1: bf:46:c4:02:13:78:c9:75:b5:67:f3:dd:91:e2:13:13:b7:05: 74:4f:d8:e0:49:1d:18:45:ce:7f:bb:60:33:06:51:8a:42:7b: c2:90:8b:78:c0:74:7b:49:e2:be:f6:fc:c3:9c:4f:58:2d:7c: 85:98:ac:68:ac:34:08:6f:e9:74:03:23:92:c6:78:73:22:a7: 35:5d:16:83:91:4f:0e:47:12:20:68:c0:2f:c8:ee:5f:02:97: 01:cf:e7:d2:6a:94:92:a0:cb:dc:64:12:06:3d:75:84:93:61: 07:3f:1d:9b -----BEGIN CERTIFICATE----- MIIFJTCCBA2gAwIBAgISAZt7NncHhUBHHqmJnjxQ34MuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjMTg2YTU2ZWE4NGMxM2M2Mjc2OGE5ZDE3YmFlMTMzY2Vk ZjEwNDUwHhcNMjYwMTAxMjAxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWExYjU3ODBkZjk5OTgzODY3MTQwNTUzM2UxNWJjNTIzNTFjYjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUWp42IUpn/65gm6jwhuOf4z/KiS PhzY/BE+oDt8b2gFMEgG2rAvFseGfrICne+2rZmxpx83sh+Mh8UA+4PpzpBajft4 HbRnjDjgnKFubkst652Wjdm9EMQYMKo3xl1E3VzYi6p6GisLeWD3emoxSTdV6TVq UshA+HNUPaEmW7C5t2gw/fKeCXlaqq+wDO5257mtlh7S9bnZTPcN9eHCEfuABMBe J04A5vX+Vsg6Jug4Bp115FF11xo9LSekkCh+DuAVumHBVu19n9Ly5Wg44Ze04eva 8iTkqVL3nneg1GXTqkjerTn2wFOHzxn2dkhfSsvkPjN6ft0kG65sVgSE5QIDAQAB o4ICMTCCAi0wHQYDVR0OBBYEFMGhtXgN+ZmDhnFAVTPhW8UjUcspMB8GA1UdIwQY MBaAFIwYalbqhME8YnaKnRe64TPO3xBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakJocVZ1cUV3VHhpZG9xZEY3cmhNODdmRUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9jOGVjOTUtYjVmNS00NGZiLWI5M2Qt MjA5MmFmNjQ3MDcwLzEvd2FHMWVBMzVtWU9HY1VCVk0tRmJ4U05SeXlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi9jOGVjOTUtYjVmNS00NGZiLWI5M2QtMjA5MmFmNjQ3MDcw LzEvakJocVZ1cUV3VHhpZG9xZEY3cmhNODdmRUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAeBAIAATAYAwQCHxYMAwQB wRFWAwQBwRGwAwQF1ISgMBQEAgACMA4DBQAqBMiAAwUAKg+dgDANBgkqhkiG9w0B AQsFAAOCAQEAii+MZdeCoRfEPkbXo8RTbHGLBBZLsLByxQrQyvmHwfHCf34dCCbe KqHv4rhXVfXo6g9/XwfYoYRKMIHqNICPOR0g8py22DF4pFynJzWM/Vml2RJAZrb9 zgwhjL/tgR2CtE/KEmL3b9QpVt1QRZYR+MENAwP4cNF6JVYdVshpd45gS9ccDX3y 7nfsyEkQN+3Rv0bEAhN4yXW1Z/PdkeITE7cFdE/Y4EkdGEXOf7tgMwZRikJ7wpCL eMB0e0nivvb8w5xPWC18hZisaKw0CG/pdAMjksZ4cyKnNV0Wg5FPDkcSIGjAL8ju XwKXAc/n0mqUkqDL3GQSBj11hJNhBz8dmw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:28 2026 by rpki-client