This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/WsRPhT9Oh-9n_aMNy1_PxDNMYcI.roa File: WsRPhT9Oh-9n_aMNy1_PxDNMYcI.roa (raw, json) Hash identifier: /TTOGt1K8yp5w1qqEg6jDasBjpl22O3FqBsf/BAjXeM= Subject key identifier: 5A:C4:4F:85:3F:4E:87:EF:67:FD:A3:0D:CB:5F:CF:C4:33:4C:61:C2 Certificate issuer: /CN=e2af6af6d199f11ecba4355510e99b7e271ab540 Certificate serial: 019B7F855758F6E394EFD73FF961D6D23E02 Authority key identifier: E2:AF:6A:F6:D1:99:F1:1E:CB:A4:35:55:10:E9:9B:7E:27:1A:B5:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q9q9tGZ8R7LpDVVEOmbficatUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/WsRPhT9Oh-9n_aMNy1_PxDNMYcI.roa Signing time: Fri 02 Jan 2026 16:23:23 +0000 ROA not before: Fri 02 Jan 2026 16:23:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31561 IP address blocks: 185.1.14.0/24 maxlen: 24 2001:7f8:12e::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.crl rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft rsync://rpki.ripe.net/repository/DEFAULT/4q9q9tGZ8R7LpDVVEOmbficatUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:57:58:f6:e3:94:ef:d7:3f:f9:61:d6:d2:3e:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2af6af6d199f11ecba4355510e99b7e271ab540 Validity Not Before: Jan 2 16:23:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ac44f853f4e87ef67fda30dcb5fcfc4334c61c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:8b:ec:46:58:a6:74:f6:6b:54:d7:51:b4:09: 36:d3:0f:a9:04:17:b5:6c:e9:d3:1f:c3:be:40:83: 5b:83:45:27:4e:05:db:29:9f:69:1e:6a:42:05:d3: 5b:26:3f:19:fa:74:77:c8:3e:90:2f:f1:07:bb:4b: 05:69:98:9d:6e:ba:ed:6e:68:a6:b9:83:58:cf:fe: b7:e5:8d:e1:0c:50:8e:83:2f:1b:34:96:6f:90:45: eb:80:b0:8e:18:90:9a:95:34:cd:4c:25:81:70:9f: 5d:87:1a:f6:bd:8b:f2:50:ba:a9:95:b0:e9:6a:12: 60:ad:10:0b:79:ae:35:32:15:3f:5d:04:96:83:59: b6:20:60:3e:c1:14:94:24:7a:e6:69:f2:af:2a:9e: 6b:d4:84:17:a4:c6:98:4e:7a:f5:e4:2e:61:be:c5: 8d:34:ec:08:46:64:6f:5b:d6:a8:7f:88:b2:08:05: bd:b3:46:27:bb:29:ee:26:e5:e1:3c:7e:3b:e5:e3: a9:05:6c:65:33:01:1f:3c:46:93:3c:a5:1c:f3:1c: 01:95:08:a7:ea:1a:3e:8f:23:d3:45:a1:f0:83:cf: ac:55:eb:d8:73:89:a4:33:04:76:f0:f4:cc:cf:01: a0:23:39:33:b8:cb:73:dc:30:76:a9:40:0d:1e:7d: 14:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C4:4F:85:3F:4E:87:EF:67:FD:A3:0D:CB:5F:CF:C4:33:4C:61:C2 X509v3 Authority Key Identifier: keyid:E2:AF:6A:F6:D1:99:F1:1E:CB:A4:35:55:10:E9:9B:7E:27:1A:B5:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q9q9tGZ8R7LpDVVEOmbficatUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/WsRPhT9Oh-9n_aMNy1_PxDNMYcI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.1.14.0/24 IPv6: 2001:7f8:12e::/48 Signature Algorithm: sha256WithRSAEncryption 67:9b:10:37:85:44:9f:2a:9f:ee:ee:fa:a7:97:a8:c5:7f:c0: 18:15:81:08:ff:b8:56:90:d0:e7:64:c8:6b:5c:81:3e:2d:3e: 0f:3e:68:c8:05:c6:09:d9:af:74:4b:a6:77:a6:ca:2f:8a:ff: 33:8e:ff:c2:72:20:3a:92:1d:65:54:3c:d0:75:1a:53:28:d3: 0f:8f:8a:81:a6:21:85:45:7b:e8:16:f7:2e:04:92:7a:f8:2b: 59:ad:24:40:ce:ed:3f:ec:c2:59:cc:73:d2:28:6b:78:bd:40: ae:cb:1f:e8:17:a1:73:df:61:12:3b:ab:e0:f5:69:1d:de:eb: 47:32:57:4e:65:b5:be:27:bd:4f:42:1b:5a:dd:d6:71:7c:4c: 63:8c:e5:1f:d5:09:42:d6:92:02:6c:ed:57:41:df:78:a3:32: f0:6f:3c:dd:04:ae:9e:3a:e3:ac:af:e9:85:a9:8a:cd:5f:cf: e4:18:00:b4:9a:81:f9:d8:55:eb:63:2e:5a:a4:8e:00:da:91: 37:d2:4d:dd:2a:1b:dd:a1:5b:00:2c:f7:34:99:13:47:fb:02: 60:68:38:63:70:ca:95:c7:9c:db:fb:ad:c5:98:ec:43:95:e3: fd:46:bc:94:47:5e:30:57:c0:11:39:65:34:c3:b3:1b:df:b1: ca:14:72:75 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt/hVdY9uOU79c/+WHW0j4CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYWY2YWY2ZDE5OWYxMWVjYmE0MzU1NTEwZTk5YjdlMjcx YWI1NDAwHhcNMjYwMTAyMTYyMzIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWM0NGY4NTNmNGU4N2VmNjdmZGEzMGRjYjVmY2ZjNDMzNGM2MWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ovsRlimdPZrVNdRtAk20w+pBBe1 bOnTH8O+QINbg0UnTgXbKZ9pHmpCBdNbJj8Z+nR3yD6QL/EHu0sFaZidbrrtbmim uYNYz/635Y3hDFCOgy8bNJZvkEXrgLCOGJCalTTNTCWBcJ9dhxr2vYvyULqplbDp ahJgrRALea41MhU/XQSWg1m2IGA+wRSUJHrmafKvKp5r1IQXpMaYTnr15C5hvsWN NOwIRmRvW9aof4iyCAW9s0YnuynuJuXhPH475eOpBWxlMwEfPEaTPKUc8xwBlQin 6ho+jyPTRaHwg8+sVevYc4mkMwR28PTMzwGgIzkzuMtz3DB2qUANHn0U0QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFFrET4U/TofvZ/2jDctfz8QzTGHCMB8GA1UdIwQY MBaAFOKvavbRmfEey6Q1VRDpm34nGrVAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHE5cTl0R1o4UjdMcERWVkVPbWJmaWNhdFVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS82ODU2OWYtOTZjZi00NWUzLTlkYWIt MmVhNTI4OTZiYWUxLzEvV3NSUGhUOU9oLTluX2FNTnkxX1B4RE5NWWNJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS82ODU2OWYtOTZjZi00NWUzLTlkYWItMmVhNTI4OTZiYWUx LzEvNHE5cTl0R1o4UjdMcERWVkVPbWJmaWNhdFVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAuQEOMA8E AgACMAkDBwAgAQf4AS4wDQYJKoZIhvcNAQELBQADggEBAGebEDeFRJ8qn+7u+qeX qMV/wBgVgQj/uFaQ0OdkyGtcgT4tPg8+aMgFxgnZr3RLpnemyi+K/zOO/8JyIDqS HWVUPNB1GlMo0w+PioGmIYVFe+gW9y4Eknr4K1mtJEDO7T/swlnMc9Ioa3i9QK7L H+gXoXPfYRI7q+D1aR3e60cyV05ltb4nvU9CG1rd1nF8TGOM5R/VCULWkgJs7VdB 33ijMvBvPN0Erp4646yv6YWpis1fz+QYALSagfnYVetjLlqkjgDakTfSTd0qG92h WwAs9zSZE0f7AmBoOGNwypXHnNv7rcWY7EOV4/1GvJRHXjBXwBE5ZTTDsxvfscoU cnU= -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:20 2026 by rpki-client