This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wfQ7qxLhCG3ihDqmx31z6EYHCH0.roa File: wfQ7qxLhCG3ihDqmx31z6EYHCH0.roa (raw, json) Hash identifier: r8T2yWDUVW5lL79/ww2DeiBNZIMsABJix0Ug1fwA/2c= Subject key identifier: C1:F4:3B:AB:12:E1:08:6D:E2:84:3A:A6:C7:7D:73:E8:46:07:08:7D Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCB8EEC1B3E5ECF51DA0722D7A4407A Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wfQ7qxLhCG3ihDqmx31z6EYHCH0.roa Signing time: Fri 02 Jan 2026 08:20:51 +0000 ROA not before: Fri 02 Jan 2026 08:20:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213791 IP address blocks: 37.202.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:8e:ec:1b:3e:5e:cf:51:da:07:22:d7:a4:40:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1f43bab12e1086de2843aa6c77d73e84607087d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:13:bc:da:57:85:83:fb:db:20:59:34:7c:5d: fc:de:9c:ed:ef:b3:68:a8:d2:aa:00:7d:a5:4c:18: d1:66:1c:f0:e3:b7:75:69:5e:dd:67:f7:f2:64:ad: ce:5e:cb:2a:55:b5:8a:54:b1:a9:c1:8c:8c:d3:9b: af:43:ba:16:72:5c:d9:1b:8d:ae:49:85:20:ed:dd: 06:7a:94:f3:ff:97:e3:f1:cf:69:02:b1:d6:e3:17: 2d:bf:09:94:e9:68:6d:78:35:64:4a:3d:65:03:0d: 97:3a:e4:9b:87:bf:40:4d:1c:f7:c3:e0:08:e3:70: 7b:02:99:3a:bd:b7:d0:53:c3:19:cc:cd:7e:be:2f: 84:9b:f3:2e:09:9b:2f:6b:7f:5e:9e:79:17:49:34: 42:0f:a2:64:25:40:3f:f2:70:18:96:9a:b9:8f:bf: 2c:28:b1:62:d2:69:6f:76:d8:9b:04:dd:ff:65:2c: 12:0a:bc:5f:74:58:d3:11:54:58:18:d6:cc:d7:b7: 7b:c0:1f:dd:57:ac:7b:6b:9f:c9:61:93:fa:6b:23: a0:55:e4:33:07:47:77:fc:7b:61:72:17:24:db:2b: 07:85:93:25:c5:d7:92:ff:b7:3c:e6:cf:66:a0:28: 46:dc:b1:58:ca:2b:10:81:6f:51:83:3a:a3:a5:d6: 90:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F4:3B:AB:12:E1:08:6D:E2:84:3A:A6:C7:7D:73:E8:46:07:08:7D X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wfQ7qxLhCG3ihDqmx31z6EYHCH0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.202.205.0/24 Signature Algorithm: sha256WithRSAEncryption 49:de:3b:f5:3a:a6:0e:04:78:50:3e:66:43:57:cd:6e:e4:99: 17:fd:61:6b:1d:0c:97:21:6a:d7:8d:fa:4c:8b:92:1f:5a:6c: 15:d7:aa:0c:c1:0a:28:39:58:67:95:88:c3:80:ac:b9:94:92: 84:c8:aa:94:c0:de:cb:3f:ed:4d:70:cd:03:e1:2e:b8:ee:d8: 39:44:c6:a5:98:c5:6a:1e:d3:95:5d:b6:62:7d:7f:c6:e1:4c: 5a:2f:e4:81:d2:b7:b8:22:81:e2:93:60:7e:0f:4c:1e:f4:fc: f0:e4:b2:d7:19:a4:1c:28:df:37:cd:f0:e9:8c:f6:30:97:a7: e4:35:fe:3e:d4:d3:bc:41:c8:13:db:f3:40:6d:0f:af:07:cb: 15:37:46:01:44:e6:ea:5e:7e:f2:27:11:a9:8a:39:76:b3:98: fd:88:6c:4f:0e:ba:57:ec:23:41:0e:27:4f:54:ad:d5:f2:3f: 97:55:6c:32:d8:4d:09:57:b0:95:81:2b:69:66:8d:0e:02:f2: d4:3f:24:9d:e8:c3:da:33:b8:26:4d:d5:5d:1c:4f:66:6e:ba: d1:11:88:f8:b5:11:af:68:74:30:ff:d4:5e:6c:d8:6b:9f:ae: da:3f:ca:6b:c5:6a:cf:39:11:c4:b4:ed:68:32:77:6c:a9:90: e4:70:17:90 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y47sGz5ez1HaByLXpEB6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWY0M2JhYjEyZTEwODZkZTI4NDNhYTZjNzdkNzNlODQ2MDcwODdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxO82leFg/vbIFk0fF383pzt77No qNKqAH2lTBjRZhzw47d1aV7dZ/fyZK3OXssqVbWKVLGpwYyM05uvQ7oWclzZG42u SYUg7d0GepTz/5fj8c9pArHW4xctvwmU6WhteDVkSj1lAw2XOuSbh79ATRz3w+AI 43B7Apk6vbfQU8MZzM1+vi+Em/MuCZsva39ennkXSTRCD6JkJUA/8nAYlpq5j78s KLFi0mlvdtibBN3/ZSwSCrxfdFjTEVRYGNbM17d7wB/dV6x7a5/JYZP6ayOgVeQz B0d3/Hthchck2ysHhZMlxdeS/7c85s9moChG3LFYyisQgW9RgzqjpdaQGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMH0O6sS4Qht4oQ6psd9c+hGBwh9MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvd2ZRN3F4TGhDRzNpaERxbXgzMXo2RVlIQ0gwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJcrNMA0G CSqGSIb3DQEBCwUAA4IBAQBJ3jv1OqYOBHhQPmZDV81u5JkX/WFrHQyXIWrXjfpM i5IfWmwV16oMwQooOVhnlYjDgKy5lJKEyKqUwN7LP+1NcM0D4S647tg5RMalmMVq HtOVXbZifX/G4UxaL+SB0re4IoHik2B+D0we9Pzw5LLXGaQcKN83zfDpjPYwl6fk Nf4+1NO8QcgT2/NAbQ+vB8sVN0YBRObqXn7yJxGpijl2s5j9iGxPDrpX7CNBDidP VK3V8j+XVWwy2E0JV7CVgStpZo0OAvLUPySd6MPaM7gmTdVdHE9mbrrREYj4tRGv aHQw/9RebNhrn67aP8prxWrPORHEtO1oMndsqZDkcBeQ -----END CERTIFICATE-----Generated at Sun Jan 18 06:31:07 2026 by rpki-client