This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/w0HfD9OyluQqly0Onm0X_I_L5yk.roa File: w0HfD9OyluQqly0Onm0X_I_L5yk.roa (raw, json) Hash identifier: Z0gnGoagQr+uA1M5JDoWrnZSUOuqJJgP2N6rVdd6JcY= Subject key identifier: C3:41:DF:0F:D3:B2:96:E4:2A:97:2D:0E:9E:6D:17:FC:8F:CB:E7:29 Certificate issuer: /CN=1ccd05226cb4c1979f96a06d2eb6683b5b0f6a8e Certificate serial: 019B7835086AE7FE21C6F9DBC2C2B4607F93 Authority key identifier: 1C:CD:05:22:6C:B4:C1:97:9F:96:A0:6D:2E:B6:68:3B:5B:0F:6A:8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HM0FImy0wZeflqBtLrZoO1sPao4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/w0HfD9OyluQqly0Onm0X_I_L5yk.roa Signing time: Thu 01 Jan 2026 06:18:20 +0000 ROA not before: Thu 01 Jan 2026 06:18:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15699 IP address blocks: 37.46.72.0/21 maxlen: 32 87.236.216.0/21 maxlen: 32 88.151.208.0/21 maxlen: 32 94.24.112.0/20 maxlen: 32 109.235.128.0/21 maxlen: 32 185.11.200.0/22 maxlen: 32 185.32.28.0/22 maxlen: 32 185.32.28.0/24 maxlen: 32 212.36.64.0/19 maxlen: 32 2a00:6640::/32 maxlen: 32 2a01:1c8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.crl rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.mft rsync://rpki.ripe.net/repository/DEFAULT/HM0FImy0wZeflqBtLrZoO1sPao4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:08:6a:e7:fe:21:c6:f9:db:c2:c2:b4:60:7f:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ccd05226cb4c1979f96a06d2eb6683b5b0f6a8e Validity Not Before: Jan 1 06:18:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c341df0fd3b296e42a972d0e9e6d17fc8fcbe729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:b9:b7:a9:72:79:a1:f9:b9:a6:a8:64:69:11: 15:51:13:ee:a7:42:d6:f2:b1:d5:07:f6:9a:4f:db: e0:2e:81:d5:5d:56:39:22:f0:cd:58:12:7e:a7:38: 8e:9d:9f:d6:39:3c:49:80:16:b2:f8:58:26:da:05: 4a:06:ee:c1:cc:34:48:1f:24:b9:f4:b6:fb:b6:a1: 23:3a:0a:b3:e4:84:ea:3a:7c:76:bc:9a:11:b5:fc: 73:35:ea:92:02:60:c7:3a:97:71:58:61:58:7e:45: 21:1c:95:39:d2:90:84:3e:28:f8:c7:fe:e9:30:df: f9:78:b0:ea:54:18:2e:c1:ce:40:ab:aa:93:2a:62: f6:be:99:c6:1b:c6:9a:b7:1f:ab:7a:bf:6f:a4:8f: a0:16:31:a7:4d:35:1f:7b:1c:a5:0a:a0:61:22:0f: 98:9b:ef:57:b4:c7:0a:af:5a:86:e3:13:b6:6d:15: 91:af:8c:e3:f2:72:78:fb:ec:38:60:bc:15:c7:ce: 81:1a:2b:b7:42:47:e7:ed:d5:e2:55:1b:c2:4c:99: 94:68:4d:13:9b:cf:5e:a4:c5:ed:3e:53:ad:fa:dd: bd:0a:3c:65:a6:10:ec:c2:61:8a:95:9c:b6:e1:b2: d3:36:87:e6:0d:c0:6d:e5:89:54:f6:14:36:b4:99: 56:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:41:DF:0F:D3:B2:96:E4:2A:97:2D:0E:9E:6D:17:FC:8F:CB:E7:29 X509v3 Authority Key Identifier: keyid:1C:CD:05:22:6C:B4:C1:97:9F:96:A0:6D:2E:B6:68:3B:5B:0F:6A:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HM0FImy0wZeflqBtLrZoO1sPao4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/w0HfD9OyluQqly0Onm0X_I_L5yk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e21739-b00b-41c8-a645-db9c3a0c08b9/1/HM0FImy0wZeflqBtLrZoO1sPao4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.46.72.0/21 87.236.216.0/21 88.151.208.0/21 94.24.112.0/20 109.235.128.0/21 185.11.200.0/22 185.32.28.0/22 212.36.64.0/19 IPv6: 2a00:6640::/32 2a01:1c8::/32 Signature Algorithm: sha256WithRSAEncryption 57:4b:06:bf:d1:e4:a6:cf:83:72:8b:79:d9:32:87:5b:ba:1b: f1:ec:bd:19:9e:04:79:10:4a:cb:01:f6:15:cc:92:21:2b:96: b8:f8:96:3f:8b:a8:3e:f4:f8:95:65:92:b9:b3:3e:89:73:dd: f9:09:40:45:a7:24:c5:2b:0e:7b:a8:ce:67:ec:06:07:64:52: 5b:69:d2:91:e3:14:b7:4c:72:a3:49:26:8d:83:d5:14:fe:43: 63:80:f6:b6:0a:27:7a:10:80:61:3d:f3:4c:32:93:c1:fe:3a: 8d:82:72:98:3d:d0:17:9c:cd:28:ea:4e:31:76:5a:49:8d:27: c8:6f:91:67:ec:d6:ea:d3:5d:75:a8:06:5b:da:ba:51:be:58: 09:b5:79:81:57:6c:fc:1b:36:ec:4b:85:6b:42:57:4b:74:a7: b5:b9:e9:72:f5:22:ad:2e:f1:75:a7:b1:f7:c4:a4:48:e2:8c: f0:9a:9d:90:5b:fd:bb:63:cd:b7:2e:92:ce:d5:2d:69:a4:b9: e5:1d:4a:6a:95:8e:2b:0f:f6:96:23:ce:d3:8a:03:01:05:91: 2c:a1:a9:33:14:31:3b:4c:83:2f:98:03:0e:7d:67:b8:8d:47: 74:14:c9:e6:b2:ae:59:f7:66:1e:2f:11:7e:18:b4:6a:a0:58: c6:ee:28:c5 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgISAZt4NQhq5/4hxvnbwsK0YH+TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjY2QwNTIyNmNiNGMxOTc5Zjk2YTA2ZDJlYjY2ODNiNWIw ZjZhOGUwHhcNMjYwMTAxMDYxODIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzQxZGYwZmQzYjI5NmU0MmE5NzJkMGU5ZTZkMTdmYzhmY2JlNzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA77m3qXJ5ofm5pqhkaREVURPup0LW 8rHVB/aaT9vgLoHVXVY5IvDNWBJ+pziOnZ/WOTxJgBay+Fgm2gVKBu7BzDRIHyS5 9Lb7tqEjOgqz5ITqOnx2vJoRtfxzNeqSAmDHOpdxWGFYfkUhHJU50pCEPij4x/7p MN/5eLDqVBguwc5Aq6qTKmL2vpnGG8aatx+rer9vpI+gFjGnTTUfexylCqBhIg+Y m+9XtMcKr1qG4xO2bRWRr4zj8nJ4++w4YLwVx86BGiu3Qkfn7dXiVRvCTJmUaE0T m89epMXtPlOt+t29CjxlphDswmGKlZy24bLTNofmDcBt5YlU9hQ2tJlWywIDAQAB o4ICSTCCAkUwHQYDVR0OBBYEFMNB3w/TspbkKpctDp5tF/yPy+cpMB8GA1UdIwQY MBaAFBzNBSJstMGXn5agbS62aDtbD2qOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE0wRklteTB3WmVmbHFCdExyWm9PMXNQYW80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9lMjE3MzktYjAwYi00MWM4LWE2NDUt ZGI5YzNhMGMwOGI5LzEvdzBIZkQ5T3lsdVFxbHkwT25tMFhfSV9MNXlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC9lMjE3MzktYjAwYi00MWM4LWE2NDUtZGI5YzNhMGMwOGI5 LzEvSE0wRklteTB3WmVmbHFCdExyWm9PMXNQYW80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF8GCCsGAQUFBwEHAQH/BFAwTjA2BAIAATAwAwQDJS5IAwQD V+zYAwQDWJfQAwQEXhhwAwQDbeuAAwQCuQvIAwQCuSAcAwQF1CRAMBQEAgACMA4D BQAqAGZAAwUAKgEByDANBgkqhkiG9w0BAQsFAAOCAQEAV0sGv9Hkps+Dcot52TKH W7ob8ey9GZ4EeRBKywH2FcySISuWuPiWP4uoPvT4lWWSubM+iXPd+QlARackxSsO e6jOZ+wGB2RSW2nSkeMUt0xyo0kmjYPVFP5DY4D2tgonehCAYT3zTDKTwf46jYJy mD3QF5zNKOpOMXZaSY0nyG+RZ+zW6tNddagGW9q6Ub5YCbV5gVds/Bs27EuFa0JX S3SntbnpcvUirS7xdaex98SkSOKM8JqdkFv9u2PNty6SztUtaaS55R1KapWOKw/2 liPO04oDAQWRLKGpMxQxO0yDL5gDDn1nuI1HdBTJ5rKuWfdmHi8Rfhi0aqBYxu4o xQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:00 2026 by rpki-client