This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/r__WaOcKmtAx8gXbwxmkYZg93vo.roa File: r__WaOcKmtAx8gXbwxmkYZg93vo.roa (raw, json) Hash identifier: dQVWPRytzEKBIkeOfxLsINoVWiI0jdX6igSClXXnN6o= Subject key identifier: AF:FF:D6:68:E7:0A:9A:D0:31:F2:05:DB:C3:19:A4:61:98:3D:DE:FA Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Certificate serial: 019B7E389FA716DFF3E2BEB4986C63999A76 Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/r__WaOcKmtAx8gXbwxmkYZg93vo.roa Signing time: Fri 02 Jan 2026 10:19:58 +0000 ROA not before: Fri 02 Jan 2026 10:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200946 IP address blocks: 84.207.232.0/24 maxlen: 24 84.207.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:9f:a7:16:df:f3:e2:be:b4:98:6c:63:99:9a:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba Validity Not Before: Jan 2 10:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=afffd668e70a9ad031f205dbc319a461983ddefa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:b6:48:87:e8:8f:76:d7:80:76:92:78:8c:f4: 53:26:83:db:f9:8a:a0:44:4f:45:65:5f:c1:1c:05: 34:ae:38:50:e4:cd:6f:cf:b2:49:b3:fc:e1:91:fa: 56:56:8e:22:1a:08:91:22:07:3c:a6:17:90:1f:f9: 7f:e2:2a:2d:c4:c7:89:0a:a5:74:83:a5:e6:ac:31: 43:2e:06:21:85:cd:04:cf:d5:84:6f:4d:35:fb:c7: 36:d0:20:98:41:84:bd:6f:01:6a:08:85:c7:d5:b6: 4c:1b:27:51:2c:73:8f:b0:71:fa:64:bf:3f:61:0d: 95:43:85:67:9c:37:03:b7:ca:cc:cd:9d:72:f1:be: b2:59:60:9c:a6:fb:cb:93:10:cf:27:9c:d3:2b:5c: d3:84:76:6b:a6:93:70:46:aa:58:b0:c4:46:17:fa: 33:62:8d:ce:ab:fc:6a:7d:41:69:49:20:a0:be:d7: 8e:f1:3d:5d:a2:d3:28:ae:78:4b:f7:ec:d8:c7:be: b4:77:1f:4f:30:5b:22:44:50:73:31:cd:5d:32:89: b0:db:51:88:2c:a1:5f:7f:34:9c:98:a4:93:df:7d: 3c:00:8f:fb:7c:eb:5c:bb:41:89:14:55:3f:fd:b9: c4:93:23:77:84:d3:df:95:71:6a:19:90:3b:b9:90: a9:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:FF:D6:68:E7:0A:9A:D0:31:F2:05:DB:C3:19:A4:61:98:3D:DE:FA X509v3 Authority Key Identifier: keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/r__WaOcKmtAx8gXbwxmkYZg93vo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.207.232.0/24 84.207.246.0/24 Signature Algorithm: sha256WithRSAEncryption a1:de:1d:0e:e5:22:98:24:a9:4c:09:e9:ab:2e:a8:69:0a:52: e4:b5:cb:41:dd:11:c2:cc:2a:09:d6:6b:32:b1:4e:1d:11:db: f3:e8:58:03:e9:93:5b:3f:a8:a7:b9:b3:5f:29:fa:3c:2c:c7: 56:dd:e4:a7:1b:5c:be:b0:53:62:a7:d5:ee:a5:1d:fe:ea:b4: 59:74:0e:a8:73:33:9f:87:31:dd:f0:a1:46:1c:ad:8a:f6:6d: 29:ba:99:e5:57:81:3b:76:7e:24:24:78:41:08:ee:16:67:52: 3f:40:4a:24:3c:9e:59:79:d2:4a:b8:2a:70:23:1e:38:4b:a4: 4a:f4:be:cd:17:03:41:8a:d8:cd:c3:80:c3:4f:e6:a0:b6:2a: 02:f3:5c:a4:c0:ec:3b:9f:45:ac:d5:8d:d3:8e:d1:0f:db:e7: 1f:53:af:33:13:04:88:76:b8:62:87:81:a1:f1:81:1e:e3:6a: 48:12:dd:99:e3:c3:51:31:f7:19:58:d6:ff:17:78:5a:dd:1d: 16:64:be:e5:8e:29:75:c7:a2:fc:29:d3:12:de:92:72:66:ad: 45:46:fd:c5:3b:f8:f6:7c:bd:7f:1c:e3:50:b8:53:1e:28:7b: fd:20:89:ac:39:d9:bb:1e:ec:2f:3a:8a:b1:7d:c4:eb:a6:2b: 17:a0:a0:b1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+OJ+nFt/z4r60mGxjmZp2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmZTkwZmRlOTc4NGE5MWQ5M2E3YTJhZjU5ZDRkMDQzZjEx NzFmYmEwHhcNMjYwMTAyMTAxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZmZmZDY2OGU3MGE5YWQwMzFmMjA1ZGJjMzE5YTQ2MTk4M2RkZWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LZIh+iPdteAdpJ4jPRTJoPb+Yqg RE9FZV/BHAU0rjhQ5M1vz7JJs/zhkfpWVo4iGgiRIgc8pheQH/l/4iotxMeJCqV0 g6XmrDFDLgYhhc0Ez9WEb001+8c20CCYQYS9bwFqCIXH1bZMGydRLHOPsHH6ZL8/ YQ2VQ4VnnDcDt8rMzZ1y8b6yWWCcpvvLkxDPJ5zTK1zThHZrppNwRqpYsMRGF/oz Yo3Oq/xqfUFpSSCgvteO8T1dotMornhL9+zYx760dx9PMFsiRFBzMc1dMomw21GI LKFffzScmKST3308AI/7fOtcu0GJFFU//bnEkyN3hNPflXFqGZA7uZCpgwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFK//1mjnCprQMfIF28MZpGGYPd76MB8GA1UdIwQY MBaAFB/pD96XhKkdk6eir1nU0EPxFx+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQt MjM3NzJlN2Y5MmUzLzEvcl9fV2FPY0ttdEF4OGdYYnd4bWtZWmc5M3ZvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi9hOTQ1ZjctNTNiMy00ZGI1LWFlMDQtMjM3NzJlN2Y5MmUz LzEvSC1rUDNwZUVxUjJUcDZLdldkVFFRX0VYSDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVM/oAwQA VM/2MA0GCSqGSIb3DQEBCwUAA4IBAQCh3h0O5SKYJKlMCemrLqhpClLktctB3RHC zCoJ1msysU4dEdvz6FgD6ZNbP6inubNfKfo8LMdW3eSnG1y+sFNip9XupR3+6rRZ dA6oczOfhzHd8KFGHK2K9m0pupnlV4E7dn4kJHhBCO4WZ1I/QEokPJ5ZedJKuCpw Ix44S6RK9L7NFwNBitjNw4DDT+agtioC81ykwOw7n0Ws1Y3TjtEP2+cfU68zEwSI drhih4Gh8YEe42pIEt2Z48NRMfcZWNb/F3ha3R0WZL7ljil1x6L8KdMS3pJyZq1F Rv3FO/j2fL1/HONQuFMeKHv9IImsOdm7HuwvOoqxfcTrpisXoKCx -----END CERTIFICATE-----Generated at Thu Feb 5 13:55:52 2026 by rpki-client