This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c8dc11-90ef-487e-a073-df2bbc9d0473/1/WqyJg34u4FI46gK9TN4Mq-Smgwk.roa File: WqyJg34u4FI46gK9TN4Mq-Smgwk.roa (raw, json) Hash identifier: 44JWX3VffsyLbQNR5KdwRNSUjOwcRvsLpWZgi4VqbS0= Subject key identifier: 5A:AC:89:83:7E:2E:E0:52:38:EA:02:BD:4C:DE:0C:AB:E4:A6:83:09 Certificate issuer: /CN=6c0946c081b32be848cb00d8d932e8c1f7179668 Certificate serial: 019B7C80BD74274C282057BBEDD1A84F539A Authority key identifier: 6C:09:46:C0:81:B3:2B:E8:48:CB:00:D8:D9:32:E8:C1:F7:17:96:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAlGwIGzK-hIywDY2TLowfcXlmg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c8dc11-90ef-487e-a073-df2bbc9d0473/1/WqyJg34u4FI46gK9TN4Mq-Smgwk.roa Signing time: Fri 02 Jan 2026 02:19:30 +0000 ROA not before: Fri 02 Jan 2026 02:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200318 IP address blocks: 194.169.60.0/22 maxlen: 22 194.169.60.0/24 maxlen: 24 194.169.61.0/24 maxlen: 24 194.169.62.0/24 maxlen: 24 194.169.63.0/24 maxlen: 24 2a0d:d40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c8dc11-90ef-487e-a073-df2bbc9d0473/1/bAlGwIGzK-hIywDY2TLowfcXlmg.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/c8dc11-90ef-487e-a073-df2bbc9d0473/1/bAlGwIGzK-hIywDY2TLowfcXlmg.mft rsync://rpki.ripe.net/repository/DEFAULT/bAlGwIGzK-hIywDY2TLowfcXlmg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:bd:74:27:4c:28:20:57:bb:ed:d1:a8:4f:53:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c0946c081b32be848cb00d8d932e8c1f7179668 Validity Not Before: Jan 2 02:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5aac89837e2ee05238ea02bd4cde0cabe4a68309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:65:30:35:16:90:89:96:46:bc:fe:61:9b:50: eb:56:1b:06:fb:81:bd:23:d9:9a:95:37:ca:72:d2: 0e:da:8b:9d:33:fa:15:fc:05:92:ea:48:ea:db:0f: 53:4a:fa:cc:34:87:16:1d:6d:47:b3:9f:52:e9:1c: 58:3c:f9:07:1f:c4:db:50:2a:97:ed:d8:f9:28:fb: 09:52:1c:42:b3:79:a2:8a:2e:0d:a4:52:09:08:3b: 36:b5:6d:12:59:16:73:84:4a:0e:03:8e:ee:b2:35: 4a:5f:0f:50:c3:28:1d:3d:12:cf:6f:37:f4:73:e7: 78:a4:c1:6c:5c:f1:7e:78:4c:4e:b2:0f:1e:12:de: a3:ac:41:48:b9:c5:f2:fa:3b:ee:a4:40:44:0b:ca: 8a:8b:26:85:40:e9:61:12:9d:24:0f:8f:b0:16:0c: 06:5b:87:7e:ac:b1:77:b3:bc:49:e3:3a:79:58:c2: e8:b5:1f:84:a4:a4:62:8a:ca:ca:f3:f3:c3:80:a7: 57:a0:32:9a:de:de:35:9d:4a:32:d5:7f:75:72:f1: 10:49:e9:7e:b4:79:39:b7:64:c3:27:72:82:2b:4a: d8:b5:5d:80:c2:b1:f1:f9:45:f6:03:26:c2:92:f2: 7f:a2:63:7a:24:40:47:31:c8:2b:33:c0:dd:c6:14: c6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:AC:89:83:7E:2E:E0:52:38:EA:02:BD:4C:DE:0C:AB:E4:A6:83:09 X509v3 Authority Key Identifier: keyid:6C:09:46:C0:81:B3:2B:E8:48:CB:00:D8:D9:32:E8:C1:F7:17:96:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAlGwIGzK-hIywDY2TLowfcXlmg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c8dc11-90ef-487e-a073-df2bbc9d0473/1/WqyJg34u4FI46gK9TN4Mq-Smgwk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c8dc11-90ef-487e-a073-df2bbc9d0473/1/bAlGwIGzK-hIywDY2TLowfcXlmg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.169.60.0/22 IPv6: 2a0d:d40::/32 Signature Algorithm: sha256WithRSAEncryption 58:fd:d2:c6:56:bd:1e:bf:a8:82:c2:f4:b0:ce:c2:f8:d0:1f: 5b:3b:e8:ba:c6:6c:40:23:d8:53:de:c9:f8:a6:a9:87:71:d8: 0b:21:d1:0e:ba:aa:8b:fa:53:ed:2a:a3:ac:9f:3a:cb:b5:c0: 4c:b5:22:e0:47:5d:5a:17:85:a9:d0:31:da:6b:f7:0c:9b:c6: bb:2c:07:ef:7c:d0:f4:e2:e0:bc:c3:94:b0:85:d0:a3:c4:3c: 0d:0d:49:b6:26:03:68:b8:bc:b0:1b:5f:e8:f8:43:89:01:08: db:30:11:52:9a:e0:1d:3d:80:ad:04:5e:fb:57:ba:d3:15:99: 92:2a:75:73:e4:42:b4:b4:84:3c:de:21:82:d0:26:88:df:09: d7:21:e4:2c:27:35:ca:54:49:88:11:7c:4b:ef:24:cc:cc:fc: fa:11:39:e5:d4:74:9c:75:07:23:71:4c:94:de:2d:21:ae:64: df:38:97:61:dc:53:1f:8c:88:57:2c:1b:20:53:36:7a:91:39: c5:9d:a9:ce:59:32:17:7c:b8:2f:4a:31:17:8e:87:a8:53:48: 04:38:76:8e:e8:31:f7:67:ab:da:ef:5c:2a:9b:de:db:81:37: de:28:f1:48:3c:28:6c:75:ed:c1:1f:95:aa:1d:4c:de:73:07: 39:f2:c5:b7 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8gL10J0woIFe77dGoT1OaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMDk0NmMwODFiMzJiZTg0OGNiMDBkOGQ5MzJlOGMxZjcx Nzk2NjgwHhcNMjYwMTAyMDIxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWFjODk4MzdlMmVlMDUyMzhlYTAyYmQ0Y2RlMGNhYmU0YTY4MzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GUwNRaQiZZGvP5hm1DrVhsG+4G9 I9malTfKctIO2oudM/oV/AWS6kjq2w9TSvrMNIcWHW1Hs59S6RxYPPkHH8TbUCqX 7dj5KPsJUhxCs3miii4NpFIJCDs2tW0SWRZzhEoOA47usjVKXw9QwygdPRLPbzf0 c+d4pMFsXPF+eExOsg8eEt6jrEFIucXy+jvupEBEC8qKiyaFQOlhEp0kD4+wFgwG W4d+rLF3s7xJ4zp5WMLotR+EpKRiisrK8/PDgKdXoDKa3t41nUoy1X91cvEQSel+ tHk5t2TDJ3KCK0rYtV2AwrHx+UX2AybCkvJ/omN6JEBHMcgrM8DdxhTGmwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFqsiYN+LuBSOOoCvUzeDKvkpoMJMB8GA1UdIwQY MBaAFGwJRsCBsyvoSMsA2Nky6MH3F5ZoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkFsR3dJR3pLLWhJeXdEWTJUTG93ZmNYbG1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9jOGRjMTEtOTBlZi00ODdlLWEwNzMt ZGYyYmJjOWQwNDczLzEvV3F5SmczNHU0Rkk0NmdLOVRONE1xLVNtZ3drLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9jOGRjMTEtOTBlZi00ODdlLWEwNzMtZGYyYmJjOWQwNDcz LzEvYkFsR3dJR3pLLWhJeXdEWTJUTG93ZmNYbG1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwqk8MA0E AgACMAcDBQAqDQ1AMA0GCSqGSIb3DQEBCwUAA4IBAQBY/dLGVr0ev6iCwvSwzsL4 0B9bO+i6xmxAI9hT3sn4pqmHcdgLIdEOuqqL+lPtKqOsnzrLtcBMtSLgR11aF4Wp 0DHaa/cMm8a7LAfvfND04uC8w5SwhdCjxDwNDUm2JgNouLywG1/o+EOJAQjbMBFS muAdPYCtBF77V7rTFZmSKnVz5EK0tIQ83iGC0CaI3wnXIeQsJzXKVEmIEXxL7yTM zPz6ETnl1HScdQcjcUyU3i0hrmTfOJdh3FMfjIhXLBsgUzZ6kTnFnanOWTIXfLgv SjEXjoeoU0gEOHaO6DH3Z6va71wqm97bgTfeKPFIPChsde3BH5WqHUzecwc58sW3 -----END CERTIFICATE-----Generated at Tue Feb 10 04:31:17 2026 by rpki-client