This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Wrhjb1hAMnvMEFNhZPfM1B86lVE.roa File: Wrhjb1hAMnvMEFNhZPfM1B86lVE.roa (raw, json) Hash identifier: Gv1vEyePcq9xp58SSBlXaTFRs6qrhv7RxJOEp83e6n8= Subject key identifier: 5A:B8:63:6F:58:40:32:7B:CC:10:53:61:64:F7:CC:D4:1F:3A:95:51 Certificate issuer: /CN=2ac89af05d20711e0a94e84bf4b44766362c5083 Certificate serial: 019B7E375D4E34BEE04C054BC885B3070085 Authority key identifier: 2A:C8:9A:F0:5D:20:71:1E:0A:94:E8:4B:F4:B4:47:66:36:2C:50:83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ksia8F0gcR4KlOhL9LRHZjYsUIM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Wrhjb1hAMnvMEFNhZPfM1B86lVE.roa Signing time: Fri 02 Jan 2026 10:18:36 +0000 ROA not before: Fri 02 Jan 2026 10:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210657 IP address blocks: 194.62.60.0/24 maxlen: 24 194.62.61.0/24 maxlen: 24 194.62.62.0/24 maxlen: 24 194.62.63.0/24 maxlen: 24 2a0c:fcc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.crl rsync://rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.mft rsync://rpki.ripe.net/repository/DEFAULT/Ksia8F0gcR4KlOhL9LRHZjYsUIM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:5d:4e:34:be:e0:4c:05:4b:c8:85:b3:07:00:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac89af05d20711e0a94e84bf4b44766362c5083 Validity Not Before: Jan 2 10:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5ab8636f5840327bcc10536164f7ccd41f3a9551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:24:d8:ce:38:6f:db:64:cb:9b:2e:9e:e1:ce: 96:f4:7e:e0:c6:09:50:51:b1:c2:5d:f0:94:36:be: 3f:18:a1:bf:53:b2:5b:29:e8:23:95:f1:b1:d2:f6: de:03:67:90:8f:51:df:dd:d0:a5:2e:cb:38:a0:69: 53:e3:2c:a8:12:ec:91:df:12:d6:d9:06:97:e0:b5: c5:c6:54:49:81:ce:e2:f4:42:b1:50:5d:d3:fc:96: 0c:1e:79:32:b2:77:2a:1e:1c:05:14:aa:d8:11:1d: 02:b6:c3:c2:6d:52:1e:b0:10:bb:49:de:89:18:8c: ea:72:16:be:41:38:1f:03:cc:e1:cd:f1:d7:f7:2e: 35:c4:55:c2:34:04:01:3f:17:49:d9:6b:b4:76:4a: 62:0b:17:59:07:99:68:7f:05:eb:41:2f:4e:31:af: 09:78:a1:e8:61:a8:b0:40:af:56:7a:63:65:03:a9: 27:56:43:96:9c:ef:a0:b7:c5:ab:31:a4:b4:34:8e: 36:ac:5e:68:fe:37:9a:08:8a:2d:e4:ef:16:93:54: d7:53:30:86:38:d2:cc:1f:60:e3:43:5c:46:07:42: 47:9d:24:61:8a:0a:53:32:2f:c6:85:68:b2:94:c5: 13:b6:f4:d6:13:0b:8e:11:48:ee:ea:20:bd:d9:0e: 93:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:B8:63:6F:58:40:32:7B:CC:10:53:61:64:F7:CC:D4:1F:3A:95:51 X509v3 Authority Key Identifier: keyid:2A:C8:9A:F0:5D:20:71:1E:0A:94:E8:4B:F4:B4:47:66:36:2C:50:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ksia8F0gcR4KlOhL9LRHZjYsUIM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Wrhjb1hAMnvMEFNhZPfM1B86lVE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.62.60.0/22 IPv6: 2a0c:fcc0::/32 Signature Algorithm: sha256WithRSAEncryption b0:49:13:57:4f:f7:12:57:10:a8:43:3c:93:10:ec:ea:fc:ce: 8a:2c:0d:b9:27:6f:36:30:33:19:51:4d:3d:4f:a5:ac:bf:ce: 4d:db:0e:27:d7:73:df:4e:f9:08:f8:fc:b6:a0:73:20:fa:98: 4d:ea:f0:a7:5c:20:31:3b:63:54:8b:d4:1a:7b:b9:b9:37:32: 63:33:a3:af:13:89:91:ee:c1:f5:ba:27:16:3b:59:c5:1b:52: f5:87:bd:d5:fd:6f:c9:97:d8:61:3c:a0:24:97:da:a6:2f:d4: d2:fb:eb:c5:7b:50:ca:cd:15:be:eb:7f:f0:77:9e:1f:7e:fc: 0f:5c:59:40:76:93:2c:d9:5a:f0:ad:1a:3b:cb:82:dd:dd:19: fc:e4:23:be:32:b0:0e:f0:6d:a0:2f:c4:48:6e:21:0b:6d:f2: 4b:ad:4a:60:6d:b4:19:ee:5b:c5:49:34:33:eb:60:a2:ec:0e: 75:88:3b:5e:30:8e:71:53:c9:f3:30:ec:2b:71:dc:e5:3c:93: c9:bf:c9:e4:ba:28:86:c6:1b:6a:34:f7:b9:47:52:e7:57:6a: 9c:3b:c3:d7:0d:13:d8:bd:1f:14:0e:19:05:11:72:08:d2:f2: 59:4e:0e:5c:4d:dd:95:ef:b3:02:7f:e7:2f:66:41:43:d0:e1: 80:6f:4c:aa -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+N11ONL7gTAVLyIWzBwCFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzg5YWYwNWQyMDcxMWUwYTk0ZTg0YmY0YjQ0NzY2MzYy YzUwODMwHhcNMjYwMTAyMTAxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWI4NjM2ZjU4NDAzMjdiY2MxMDUzNjE2NGY3Y2NkNDFmM2E5NTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iTYzjhv22TLmy6e4c6W9H7gxglQ UbHCXfCUNr4/GKG/U7JbKegjlfGx0vbeA2eQj1Hf3dClLss4oGlT4yyoEuyR3xLW 2QaX4LXFxlRJgc7i9EKxUF3T/JYMHnkysncqHhwFFKrYER0CtsPCbVIesBC7Sd6J GIzqcha+QTgfA8zhzfHX9y41xFXCNAQBPxdJ2Wu0dkpiCxdZB5lofwXrQS9OMa8J eKHoYaiwQK9WemNlA6knVkOWnO+gt8WrMaS0NI42rF5o/jeaCIot5O8Wk1TXUzCG ONLMH2DjQ1xGB0JHnSRhigpTMi/GhWiylMUTtvTWEwuOEUju6iC92Q6TIQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFq4Y29YQDJ7zBBTYWT3zNQfOpVRMB8GA1UdIwQY MBaAFCrImvBdIHEeCpToS/S0R2Y2LFCDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NpYThGMGdjUjRLbE9oTDlMUkhaallzVUlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9jOTMzMGQtNGQ0YS00NDU4LTg4OGEt ZTM2MmE5MGVkZWMxLzEvV3JoamIxaEFNbnZNRUZOaFpQZk0xQjg2bFZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yy9jOTMzMGQtNGQ0YS00NDU4LTg4OGEtZTM2MmE5MGVkZWMx LzEvS3NpYThGMGdjUjRLbE9oTDlMUkhaallzVUlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwj48MA0E AgACMAcDBQAqDPzAMA0GCSqGSIb3DQEBCwUAA4IBAQCwSRNXT/cSVxCoQzyTEOzq /M6KLA25J282MDMZUU09T6Wsv85N2w4n13PfTvkI+Py2oHMg+phN6vCnXCAxO2NU i9Qae7m5NzJjM6OvE4mR7sH1uicWO1nFG1L1h73V/W/Jl9hhPKAkl9qmL9TS++vF e1DKzRW+63/wd54ffvwPXFlAdpMs2VrwrRo7y4Ld3Rn85CO+MrAO8G2gL8RIbiEL bfJLrUpgbbQZ7lvFSTQz62Ci7A51iDteMI5xU8nzMOwrcdzlPJPJv8nkuiiGxhtq NPe5R1LnV2qcO8PXDRPYvR8UDhkFEXII0vJZTg5cTd2V77MCf+cvZkFD0OGAb0yq -----END CERTIFICATE-----Generated at Tue Feb 10 04:14:21 2026 by rpki-client