This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/0Wr6LOc9-cDRRvk8SfBTZvB7uNg.roa File: 0Wr6LOc9-cDRRvk8SfBTZvB7uNg.roa (raw, json) Hash identifier: UTyLCGmKuWfBIlDRUPRnAFKlYcgHZ6JkYyOZKP8cKhY= Subject key identifier: D1:6A:FA:2C:E7:3D:F9:C0:D1:46:F9:3C:49:F0:53:66:F0:7B:B8:D8 Certificate issuer: /CN=6c03a2caf298019fbd668621516c8c6e1d10e83c Certificate serial: 019B76EB8DD657D77A39A55AA8A40349C678 Authority key identifier: 6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/0Wr6LOc9-cDRRvk8SfBTZvB7uNg.roa Signing time: Thu 01 Jan 2026 00:18:27 +0000 ROA not before: Thu 01 Jan 2026 00:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203061 IP address blocks: 185.25.107.0/24 maxlen: 32 185.144.13.0/24 maxlen: 32 185.222.213.0/24 maxlen: 32 193.104.96.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:8d:d6:57:d7:7a:39:a5:5a:a8:a4:03:49:c6:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c03a2caf298019fbd668621516c8c6e1d10e83c Validity Not Before: Jan 1 00:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d16afa2ce73df9c0d146f93c49f05366f07bb8d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d8:7f:9f:f3:34:ab:0d:3f:62:a1:eb:10:b0: d9:78:33:63:93:88:50:f6:73:68:1f:9a:11:a8:b4: c8:53:7d:d2:01:88:61:7f:fc:69:cf:7b:5f:32:52: 2d:06:b8:6c:dd:6e:6b:19:ef:3c:b8:fd:66:ff:0e: 8c:7c:b4:3e:58:56:4f:cd:09:1b:61:2c:80:3a:2c: f0:e9:a1:da:e4:c9:eb:42:f3:a4:95:41:5f:a5:e9: 5b:06:36:f8:07:83:15:6c:b8:86:85:c4:20:34:e4: 3a:7f:59:7a:d2:fa:fb:58:e5:3a:1b:39:dc:9e:a4: 48:fe:f6:fc:50:94:4d:df:70:75:4b:f9:ab:af:af: f9:02:dd:f9:a3:10:bd:7a:1d:0a:64:a5:4b:1b:fc: b0:10:1e:9e:66:07:83:8d:04:ba:4e:bf:d8:d7:c5: 7e:cd:55:01:da:56:79:d6:45:50:7e:de:86:4e:14: e9:60:21:42:a2:fa:d3:0e:5e:8a:43:de:04:52:6d: 52:ea:d7:a3:fb:0b:b4:fa:0e:55:10:39:b1:53:c1: e3:a1:1d:95:e0:4a:fd:9c:d4:4e:d3:4a:cb:86:d1: 55:04:e9:b7:d1:54:38:97:fd:37:a7:1f:f3:57:99: 9a:7d:d7:37:f6:67:9a:dc:34:0d:05:f0:25:c5:a6: be:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:6A:FA:2C:E7:3D:F9:C0:D1:46:F9:3C:49:F0:53:66:F0:7B:B8:D8 X509v3 Authority Key Identifier: keyid:6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/0Wr6LOc9-cDRRvk8SfBTZvB7uNg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.25.107.0/24 185.144.13.0/24 185.222.213.0/24 193.104.96.0/24 Signature Algorithm: sha256WithRSAEncryption b6:12:a9:9a:a9:f4:77:73:c6:9f:a6:d0:21:11:c3:a4:e0:39: b7:74:f1:39:7d:6d:5c:2a:d1:25:a8:6a:46:4c:24:8c:d5:d2: 17:2c:c2:9e:c3:05:c9:33:95:95:1b:f0:1a:90:1a:12:b8:d2: 1c:c2:cd:aa:a9:6f:d9:bc:96:1e:f0:af:18:35:0d:7d:ee:fe: d5:13:e6:04:b8:cd:fe:28:a1:5e:66:90:42:e0:22:c5:ff:8b: 65:67:67:1a:85:1e:df:f0:7e:14:96:3b:56:a6:38:59:23:3f: 4e:fd:ac:24:56:b9:de:eb:0a:4c:6e:13:6c:92:fa:ad:3c:b2: a2:a0:ef:13:2c:b1:79:a7:bf:dc:9e:45:f8:a2:76:a8:e5:1e: f1:f7:55:f5:50:05:7f:c8:db:da:c3:48:a3:a2:4c:d2:d8:75: ee:9a:1e:01:59:97:8d:a2:95:78:af:58:a6:08:ad:8f:cd:2e: fd:0e:d9:80:29:ae:3c:01:82:93:32:c1:da:ec:2a:fe:69:51: e0:02:96:60:5e:4b:37:dc:97:15:79:c5:2f:1e:80:a9:85:b7: ba:28:32:b3:fd:cc:c7:82:c3:e5:9b:63:0a:17:77:ec:b6:b9: 3d:1e:87:c4:71:c8:9e:6d:29:8e:e3:09:ea:9d:7d:f7:9c:61: 57:6e:3f:8d -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt2643WV9d6OaVaqKQDScZ4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMDNhMmNhZjI5ODAxOWZiZDY2ODYyMTUxNmM4YzZlMWQx MGU4M2MwHhcNMjYwMTAxMDAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTZhZmEyY2U3M2RmOWMwZDE0NmY5M2M0OWYwNTM2NmYwN2JiOGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnth/n/M0qw0/YqHrELDZeDNjk4hQ 9nNoH5oRqLTIU33SAYhhf/xpz3tfMlItBrhs3W5rGe88uP1m/w6MfLQ+WFZPzQkb YSyAOizw6aHa5MnrQvOklUFfpelbBjb4B4MVbLiGhcQgNOQ6f1l60vr7WOU6Gznc nqRI/vb8UJRN33B1S/mrr6/5At35oxC9eh0KZKVLG/ywEB6eZgeDjQS6Tr/Y18V+ zVUB2lZ51kVQft6GThTpYCFCovrTDl6KQ94EUm1S6tej+wu0+g5VEDmxU8HjoR2V 4Er9nNRO00rLhtFVBOm30VQ4l/03px/zV5mafdc39mea3DQNBfAlxaa+EQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFNFq+iznPfnA0Ub5PEnwU2bwe7jYMB8GA1UdIwQY MBaAFGwDosrymAGfvWaGIVFsjG4dEOg8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkFPaXl2S1lBWi05Wm9ZaFVXeU1iaDBRNkR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8xNmI4ZTQtMTI1My00ZDllLWJkNDkt ZmMzN2ZiMGNkNDNiLzEvMFdyNkxPYzktY0RSUnZrOFNmQlRadkI3dU5nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8xNmI4ZTQtMTI1My00ZDllLWJkNDktZmMzN2ZiMGNkNDNi LzEvYkFPaXl2S1lBWi05Wm9ZaFVXeU1iaDBRNkR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAuRlrAwQA uZANAwQAud7VAwQAwWhgMA0GCSqGSIb3DQEBCwUAA4IBAQC2EqmaqfR3c8afptAh EcOk4Dm3dPE5fW1cKtElqGpGTCSM1dIXLMKewwXJM5WVG/AakBoSuNIcws2qqW/Z vJYe8K8YNQ197v7VE+YEuM3+KKFeZpBC4CLF/4tlZ2cahR7f8H4UljtWpjhZIz9O /awkVrne6wpMbhNskvqtPLKioO8TLLF5p7/cnkX4onao5R7x91X1UAV/yNvaw0ij okzS2HXumh4BWZeNopV4r1imCK2PzS79DtmAKa48AYKTMsHa7Cr+aVHgApZgXks3 3JcVecUvHoCphbe6KDKz/czHgsPlm2MKF3fstrk9HofEcciebSmO4wnqnX33nGFX bj+N -----END CERTIFICATE-----Generated at Wed Jan 21 07:24:40 2026 by rpki-client