This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/wVhr9fNebt7ao_oIsxRkpb1DYtU.roa File: wVhr9fNebt7ao_oIsxRkpb1DYtU.roa (raw, json) Hash identifier: Zq5CrZMlYnhfNYKFoV1YjUW/LX6JKwqLSmhoDdjZDyE= Subject key identifier: C1:58:6B:F5:F3:5E:6E:DE:DA:A3:FA:08:B3:14:64:A5:BD:43:62:D5 Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528 Certificate serial: 019B783444F0AA6BCDFEC08BF396B081A8C4 Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/wVhr9fNebt7ao_oIsxRkpb1DYtU.roa Signing time: Thu 01 Jan 2026 06:17:30 +0000 ROA not before: Thu 01 Jan 2026 06:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199159 IP address blocks: 217.146.7.0/24 maxlen: 24 2a05:8900:36::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:12:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:44:f0:aa:6b:cd:fe:c0:8b:f3:96:b0:81:a8:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528 Validity Not Before: Jan 1 06:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1586bf5f35e6ededaa3fa08b31464a5bd4362d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1d:01:ae:cc:56:64:27:21:c7:76:00:35:4e: 2c:73:8b:10:56:1a:80:63:c5:44:f2:db:39:59:66: 8f:d2:82:40:bd:ce:c7:ea:a7:ae:44:34:d6:48:aa: 88:65:a6:b2:22:54:5b:d8:36:9a:d7:e4:48:4a:e7: 1b:a0:8a:49:13:e7:a9:72:ac:4e:75:11:8b:d1:19: c5:9f:ce:df:b7:f7:5c:cb:9a:a8:26:47:82:c5:04: f0:16:ce:9d:58:f2:9c:67:e9:1c:54:5f:05:a4:02: e5:aa:f3:eb:d8:9c:68:73:15:ff:ab:0c:09:b1:06: b7:85:30:84:ec:6c:6a:e4:b0:32:40:09:a9:7d:18: 53:69:58:02:7f:95:b2:b7:f5:26:fa:83:5a:24:7a: 12:3e:5d:a0:74:a2:24:07:ac:01:af:de:80:90:e8: b1:b3:33:3e:ef:52:04:53:5b:48:1f:a7:df:27:b4: e7:97:2a:f1:32:41:bf:4d:47:02:d8:b3:e6:59:14: fc:72:13:c1:2c:3c:14:a3:c3:a0:41:8f:af:cd:db: 61:dd:00:ab:a4:fa:f4:11:91:52:45:20:31:d0:ec: 2c:07:8e:63:31:4c:fb:71:4d:10:e5:9f:e4:6d:6a: b4:32:4f:15:21:b1:fe:c4:4c:c9:43:86:b0:8a:bc: 44:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:58:6B:F5:F3:5E:6E:DE:DA:A3:FA:08:B3:14:64:A5:BD:43:62:D5 X509v3 Authority Key Identifier: keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/wVhr9fNebt7ao_oIsxRkpb1DYtU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.146.7.0/24 IPv6: 2a05:8900:36::/48 Signature Algorithm: sha256WithRSAEncryption 7e:9d:29:2d:22:26:3a:de:d6:c4:b9:f2:b0:bc:93:c4:13:b4: 37:a1:19:00:cf:c9:97:04:56:a1:2d:c1:df:7f:fc:34:ed:92: 4e:1c:d3:96:cd:4d:9d:59:86:d6:ec:bb:e0:f5:be:d5:4e:c0: 1a:eb:50:af:e3:d3:69:e6:77:a2:79:87:67:bf:72:97:cc:9f: 44:08:13:dd:c7:76:e3:a2:1a:d2:6b:af:ab:54:64:02:26:b6: 91:21:e8:02:ff:4a:18:78:78:d4:ba:60:f0:01:56:df:94:ae: f1:85:16:ff:e3:1c:fb:1f:9c:8f:43:d4:d0:85:51:47:a9:66: 5e:32:ff:ef:0a:f4:94:5c:05:f2:bc:01:6b:0a:6c:bd:9d:83: 6b:75:b4:84:14:39:4b:4d:9b:06:f4:a2:dd:00:71:ec:e8:93: 7c:7c:7d:16:18:c1:e3:c4:ac:c7:4f:47:a5:35:f1:44:08:45: 01:c5:9b:ce:e8:a4:c8:14:09:c0:7a:66:62:8f:5d:03:69:2b: 75:f0:57:d3:2c:a4:ff:86:14:ac:30:e9:90:57:16:01:73:1f: be:4a:91:7a:68:4b:2c:59:87:35:95:61:04:86:3c:c6:6b:3f: 99:a6:71:88:09:2b:a9:15:ab:e8:6a:d9:5a:c8:4c:68:e1:7a: 9e:1d:30:f1 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4NETwqmvN/sCL85awgajEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1MzlhZmViYWNlODk5YThlZTBiYjRmOGJiNDQ3NWZlMjQ3 YTE1MjgwHhcNMjYwMTAxMDYxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTU4NmJmNWYzNWU2ZWRlZGFhM2ZhMDhiMzE0NjRhNWJkNDM2MmQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqx0BrsxWZCchx3YANU4sc4sQVhqA Y8VE8ts5WWaP0oJAvc7H6qeuRDTWSKqIZaayIlRb2Daa1+RISucboIpJE+epcqxO dRGL0RnFn87ft/dcy5qoJkeCxQTwFs6dWPKcZ+kcVF8FpALlqvPr2JxocxX/qwwJ sQa3hTCE7Gxq5LAyQAmpfRhTaVgCf5Wyt/Um+oNaJHoSPl2gdKIkB6wBr96AkOix szM+71IEU1tIH6ffJ7TnlyrxMkG/TUcC2LPmWRT8chPBLDwUo8OgQY+vzdth3QCr pPr0EZFSRSAx0OwsB45jMUz7cU0Q5Z/kbWq0Mk8VIbH+xEzJQ4awirxEvwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMFYa/XzXm7e2qP6CLMUZKW9Q2LVMB8GA1UdIwQY MBaAFKU5r+us6Jmo7gu0+LtEdf4kehUoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFRtdjY2em9tYWp1QzdUNHUwUjFfaVI2RlNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85OGM0ZWUtMmY1OS00NWE3LWFkYjYt NzQxMzk1OTEzMTJlLzEvd1ZocjlmTmVidDdhb19vSXN4UmtwYjFEWXRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS85OGM0ZWUtMmY1OS00NWE3LWFkYjYtNzQxMzk1OTEzMTJl LzEvcFRtdjY2em9tYWp1QzdUNHUwUjFfaVI2RlNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA2ZIHMA8E AgACMAkDBwAqBYkAADYwDQYJKoZIhvcNAQELBQADggEBAH6dKS0iJjre1sS58rC8 k8QTtDehGQDPyZcEVqEtwd9//DTtkk4c05bNTZ1Zhtbsu+D1vtVOwBrrUK/j02nm d6J5h2e/cpfMn0QIE93HduOiGtJrr6tUZAImtpEh6AL/Shh4eNS6YPABVt+UrvGF Fv/jHPsfnI9D1NCFUUepZl4y/+8K9JRcBfK8AWsKbL2dg2t1tIQUOUtNmwb0ot0A cezok3x8fRYYwePErMdPR6U18UQIRQHFm87opMgUCcB6ZmKPXQNpK3XwV9MspP+G FKww6ZBXFgFzH75KkXpoSyxZhzWVYQSGPMZrP5mmcYgJK6kVq+hq2VrITGjhep4d MPE= -----END CERTIFICATE-----Generated at Mon Jan 26 12:26:56 2026 by rpki-client