This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/T6WYRwpE69f1_segiofKG18EyPU.roa File: T6WYRwpE69f1_segiofKG18EyPU.roa (raw, json) Hash identifier: 3vUaTy7e4xNC9BeIg1lJuy2BS6buPbgL42kyIYgUPsw= Subject key identifier: 4F:A5:98:47:0A:44:EB:D7:F5:FE:C7:A0:8A:87:CA:1B:5F:04:C8:F5 Certificate issuer: /CN=c1098a1905bbd3381533828f6b7fd227170431ef Certificate serial: 019B7AC94E5AA8736BF46D22DC0DC2A9A2A7 Authority key identifier: C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/T6WYRwpE69f1_segiofKG18EyPU.roa Signing time: Thu 01 Jan 2026 18:19:31 +0000 ROA not before: Thu 01 Jan 2026 18:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57324 IP address blocks: 79.132.196.0/24 maxlen: 24 79.132.197.0/24 maxlen: 24 79.132.198.0/24 maxlen: 24 79.132.199.0/24 maxlen: 24 86.111.144.0/24 maxlen: 24 86.111.145.0/24 maxlen: 24 86.111.146.0/24 maxlen: 24 86.111.147.0/24 maxlen: 24 109.230.112.0/24 maxlen: 24 109.230.114.0/24 maxlen: 24 109.230.115.0/24 maxlen: 24 109.230.120.0/24 maxlen: 24 109.230.123.0/24 maxlen: 24 109.230.126.0/24 maxlen: 24 122.102.117.0/24 maxlen: 24 122.102.118.0/24 maxlen: 24 185.113.105.0/24 maxlen: 24 202.164.192.0/24 maxlen: 24 202.164.193.0/24 maxlen: 24 202.164.194.0/24 maxlen: 24 202.164.195.0/24 maxlen: 24 202.164.197.0/24 maxlen: 24 202.164.198.0/24 maxlen: 24 202.164.199.0/24 maxlen: 24 202.164.200.0/24 maxlen: 24 202.164.201.0/24 maxlen: 24 202.164.202.0/24 maxlen: 24 202.164.203.0/24 maxlen: 24 202.164.204.0/24 maxlen: 24 202.164.205.0/24 maxlen: 24 2a03:c340::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.mft rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 20:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:4e:5a:a8:73:6b:f4:6d:22:dc:0d:c2:a9:a2:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1098a1905bbd3381533828f6b7fd227170431ef Validity Not Before: Jan 1 18:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4fa598470a44ebd7f5fec7a08a87ca1b5f04c8f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0f:25:96:22:93:79:e1:22:80:be:a8:5a:8e: 39:f8:37:f4:98:54:89:44:35:63:67:c3:81:54:5a: b4:7d:5c:ed:a3:3d:af:25:63:80:fd:52:aa:85:f4: 6b:ce:fc:a0:b9:31:57:e7:63:99:1f:96:f0:26:72: c0:1f:b2:9f:5c:1c:10:d3:86:ff:36:ec:23:40:2f: f6:2c:2a:a0:cb:ae:72:3e:52:50:97:e8:00:54:6c: 1f:77:be:0f:ff:99:00:3d:02:7b:3c:d8:0a:d9:9a: 7c:7b:4e:11:6c:27:79:ad:cc:bc:ae:1d:51:34:08: b2:26:e5:c3:69:9c:bb:87:6c:08:33:92:55:c8:bd: d1:52:64:1f:3f:51:59:3b:8d:d5:c3:58:90:d9:eb: ae:8f:82:3b:22:79:5e:3d:8f:19:c4:ce:96:a2:51: dc:f5:58:28:58:d2:77:0b:a4:15:95:57:31:5d:7b: 37:dd:fa:49:04:08:1f:48:e6:32:75:42:98:cf:5b: 26:d7:55:3d:6d:52:fa:f0:dc:15:02:82:0d:88:fd: 92:8d:d9:8d:f5:12:ec:86:4d:b2:cf:3c:73:40:ea: 9b:fc:3d:47:43:4d:10:81:54:fe:e9:31:ea:e6:3c: e8:84:f6:7c:0c:94:df:85:25:43:cb:18:c4:a4:08: 99:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A5:98:47:0A:44:EB:D7:F5:FE:C7:A0:8A:87:CA:1B:5F:04:C8:F5 X509v3 Authority Key Identifier: keyid:C1:09:8A:19:05:BB:D3:38:15:33:82:8F:6B:7F:D2:27:17:04:31:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQmKGQW70zgVM4KPa3_SJxcEMe8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/T6WYRwpE69f1_segiofKG18EyPU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2eed71-4665-4948-a3c5-b2a713d2eab2/1/wQmKGQW70zgVM4KPa3_SJxcEMe8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.132.196.0/22 86.111.144.0/22 109.230.112.0/24 109.230.114.0/23 109.230.120.0/24 109.230.123.0/24 109.230.126.0/24 122.102.117.0-122.102.118.255 185.113.105.0/24 202.164.192.0/22 202.164.197.0-202.164.205.255 IPv6: 2a03:c340::/32 Signature Algorithm: sha256WithRSAEncryption 6a:1c:63:74:1f:3d:da:26:8f:6c:67:06:06:5f:2b:5f:b2:d6: 4a:c2:0d:e2:bb:4d:36:bd:00:d9:cb:ef:ba:b3:13:98:3a:7b: 7b:d2:3f:24:24:ed:ea:0f:44:73:cd:96:94:60:49:e3:6e:2e: cb:45:dc:13:d8:1d:f3:3f:ca:c4:31:72:2c:e4:bd:21:91:c2: fe:36:82:06:97:41:7d:6d:75:2a:c2:1b:24:03:60:08:3d:bc: 22:b6:c7:b9:ee:51:6c:2a:eb:2e:53:e7:b2:15:45:52:50:44: 9f:a1:42:2c:3c:98:94:1c:85:32:95:d7:da:f4:de:af:47:70: 8e:0a:df:a0:26:bd:19:59:76:79:28:76:46:0e:81:56:4b:83: f1:a6:3c:4d:5a:3b:65:40:6a:c9:8f:f5:9c:dd:b3:b0:da:80: 52:e2:e7:2c:39:0f:18:a5:f3:27:c2:69:12:d7:5c:2d:bc:45: 81:b5:5d:1d:9c:c0:34:87:fc:2a:90:d1:bc:27:c2:30:a4:99: b2:b8:b2:ef:99:f0:7d:00:b3:f9:11:2f:dc:73:20:40:e5:ba: 74:9d:67:88:36:03:24:ee:c3:64:65:e6:dd:aa:e2:78:c9:a2: 52:a1:98:24:2c:54:58:f5:3a:50:79:c2:54:54:ad:41:58:c8: d9:fb:61:26 -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgISAZt6yU5aqHNr9G0i3A3CqaKnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMDk4YTE5MDViYmQzMzgxNTMzODI4ZjZiN2ZkMjI3MTcw NDMxZWYwHhcNMjYwMTAxMTgxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZmE1OTg0NzBhNDRlYmQ3ZjVmZWM3YTA4YTg3Y2ExYjVmMDRjOGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1A8lliKTeeEigL6oWo45+Df0mFSJ RDVjZ8OBVFq0fVztoz2vJWOA/VKqhfRrzvyguTFX52OZH5bwJnLAH7KfXBwQ04b/ NuwjQC/2LCqgy65yPlJQl+gAVGwfd74P/5kAPQJ7PNgK2Zp8e04RbCd5rcy8rh1R NAiyJuXDaZy7h2wIM5JVyL3RUmQfP1FZO43Vw1iQ2euuj4I7InlePY8ZxM6WolHc 9VgoWNJ3C6QVlVcxXXs33fpJBAgfSOYydUKYz1sm11U9bVL68NwVAoINiP2SjdmN 9RLshk2yzzxzQOqb/D1HQ00QgVT+6THq5jzohPZ8DJTfhSVDyxjEpAiZrwIDAQAB o4ICZDCCAmAwHQYDVR0OBBYEFE+lmEcKROvX9f7HoIqHyhtfBMj1MB8GA1UdIwQY MBaAFMEJihkFu9M4FTOCj2t/0icXBDHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1FtS0dRVzcwemdWTTRLUGEzX1NKeGNFTWU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8yZWVkNzEtNDY2NS00OTQ4LWEzYzUt YjJhNzEzZDJlYWIyLzEvVDZXWVJ3cEU2OWYxX3NlZ2lvZktHMThFeVBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi8yZWVkNzEtNDY2NS00OTQ4LWEzYzUtYjJhNzEzZDJlYWIy LzEvd1FtS0dRVzcwemdWTTRLUGEzX1NKeGNFTWU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHoGCCsGAQUFBwEHAQH/BGswaTBYBAIAATBSAwQCT4TEAwQC Vm+QAwQAbeZwAwQBbeZyAwQAbeZ4AwQAbeZ7AwQAbeZ+MAwDBAB6ZnUDBAB6ZnYD BAC5cWkDBALKpMAwDAMEAMqkxQMEAcqkzDANBAIAAjAHAwUAKgPDQDANBgkqhkiG 9w0BAQsFAAOCAQEAahxjdB892iaPbGcGBl8rX7LWSsIN4rtNNr0A2cvvurMTmDp7 e9I/JCTt6g9Ec82WlGBJ424uy0XcE9gd8z/KxDFyLOS9IZHC/jaCBpdBfW11KsIb JANgCD28IrbHue5RbCrrLlPnshVFUlBEn6FCLDyYlByFMpXX2vTer0dwjgrfoCa9 GVl2eSh2Rg6BVkuD8aY8TVo7ZUBqyY/1nN2zsNqAUuLnLDkPGKXzJ8JpEtdcLbxF gbVdHZzANIf8KpDRvCfCMKSZsriy75nwfQCz+REv3HMgQOW6dJ1niDYDJO7DZGXm 3arieMmiUqGYJCxUWPU6UHnCVFStQVjI2fthJg== -----END CERTIFICATE-----Generated at Tue Jan 20 04:46:11 2026 by rpki-client