This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/68fd0f-2b87-4704-a32f-d711e84c29a1/1/wq9tYLfVQC77CHQnEGOwVihriSc.roa File: wq9tYLfVQC77CHQnEGOwVihriSc.roa (raw, json) Hash identifier: tQsNymN61pdlaZw2p685YQ4hLAz1lZz1V7NLew6Ch8g= Subject key identifier: C2:AF:6D:60:B7:D5:40:2E:FB:08:74:27:10:63:B0:56:28:6B:89:27 Certificate issuer: /CN=a2d3f9bc9656badc26e7de1abb0fa72c3d728dd8 Certificate serial: 019B7EA53B610C3100B6D0DC91333A815A5E Authority key identifier: A2:D3:F9:BC:96:56:BA:DC:26:E7:DE:1A:BB:0F:A7:2C:3D:72:8D:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/otP5vJZWutwm594auw-nLD1yjdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/68fd0f-2b87-4704-a32f-d711e84c29a1/1/wq9tYLfVQC77CHQnEGOwVihriSc.roa Signing time: Fri 02 Jan 2026 12:18:36 +0000 ROA not before: Fri 02 Jan 2026 12:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51935 IP address blocks: 46.163.192.0/18 maxlen: 24 62.220.240.0/21 maxlen: 24 62.220.248.0/22 maxlen: 24 83.146.160.0/19 maxlen: 24 185.192.24.0/22 maxlen: 24 2a02:6fa0::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/68fd0f-2b87-4704-a32f-d711e84c29a1/1/otP5vJZWutwm594auw-nLD1yjdg.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/68fd0f-2b87-4704-a32f-d711e84c29a1/1/otP5vJZWutwm594auw-nLD1yjdg.mft rsync://rpki.ripe.net/repository/DEFAULT/otP5vJZWutwm594auw-nLD1yjdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:3b:61:0c:31:00:b6:d0:dc:91:33:3a:81:5a:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2d3f9bc9656badc26e7de1abb0fa72c3d728dd8 Validity Not Before: Jan 2 12:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2af6d60b7d5402efb0874271063b056286b8927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:78:a0:14:75:c2:bc:f9:cf:c3:c9:4e:71:f3: 6e:66:d6:72:c6:7b:dc:8b:d5:5c:77:31:a0:70:eb: fc:7a:88:a1:23:77:b7:5b:b5:52:a2:68:8c:ea:31: 98:79:9a:f4:fd:fb:6b:11:64:35:17:a8:da:c7:5e: 01:83:39:22:fa:3c:d6:dd:16:0c:3a:84:7e:0b:c6: 46:ef:53:95:d0:3b:91:95:b3:59:51:3c:a1:31:5a: 41:ca:62:32:35:94:dc:aa:47:87:74:d0:5a:b1:72: 7c:13:95:dc:8e:bc:0b:40:26:33:bc:7a:4b:6d:1b: c2:3b:5a:bc:b6:ee:24:33:25:b5:0e:66:b2:32:b4: 43:22:38:49:b8:6b:d1:ca:6f:3a:4c:fa:e0:8b:ec: 37:e8:f8:94:34:11:75:a6:f5:68:3a:41:0f:9e:03: b4:5b:1e:85:f9:d6:57:29:d3:af:e9:7e:2f:47:0e: 53:24:e3:ba:42:4f:8f:46:dc:5e:2c:9e:10:e9:5b: 34:e2:7f:dd:b6:12:c1:28:1f:3f:99:7e:9a:04:f6: 3d:ae:84:39:c6:d9:ba:55:ca:d9:33:49:86:28:eb: 52:15:19:21:a0:dc:10:15:c9:c5:12:e8:22:15:07: 12:f4:df:5b:fc:f9:3f:84:16:13:f7:4a:3a:4e:28: fc:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:AF:6D:60:B7:D5:40:2E:FB:08:74:27:10:63:B0:56:28:6B:89:27 X509v3 Authority Key Identifier: keyid:A2:D3:F9:BC:96:56:BA:DC:26:E7:DE:1A:BB:0F:A7:2C:3D:72:8D:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/otP5vJZWutwm594auw-nLD1yjdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/68fd0f-2b87-4704-a32f-d711e84c29a1/1/wq9tYLfVQC77CHQnEGOwVihriSc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/68fd0f-2b87-4704-a32f-d711e84c29a1/1/otP5vJZWutwm594auw-nLD1yjdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.163.192.0/18 62.220.240.0-62.220.251.255 83.146.160.0/19 185.192.24.0/22 IPv6: 2a02:6fa0::/32 Signature Algorithm: sha256WithRSAEncryption 6d:22:0c:c0:e8:cb:1b:9c:46:d7:8f:6a:ea:8b:b4:7b:0f:6c: 88:e9:c6:0c:5e:62:65:63:6d:21:03:b9:7c:89:4b:92:14:ac: d8:c2:9e:a0:06:ac:01:b0:2d:ab:8e:31:ea:c1:49:03:3e:32: d2:44:4e:73:26:b3:6a:7d:ba:9e:ff:61:29:a1:e7:04:4b:f3: 2e:f9:a1:98:b6:93:e9:40:aa:f9:16:08:8f:6f:d5:87:39:a8: 20:a1:95:3c:d7:f0:2e:2e:7a:8c:1a:4d:ee:8d:3a:52:55:80: ac:f6:08:6f:14:d7:b8:07:ae:93:9e:ef:9e:79:c0:37:9c:20: 11:c0:2d:00:c0:ff:b6:54:b6:1c:dd:01:be:b4:f7:b0:d7:da: 3e:45:d7:29:6c:b3:f6:d3:40:3c:e1:c2:51:13:35:d7:eb:60: 65:cb:dd:1b:26:26:0e:d6:d4:53:2f:fb:33:b5:22:f3:fb:8e: c4:86:29:49:e6:5a:c2:02:f5:1d:43:dc:93:ff:c3:0b:b9:76: cf:68:72:d1:28:f6:de:3c:2c:1a:c3:9e:da:59:6f:1c:b0:8c: 0e:e7:5c:b1:3d:69:8b:a1:6e:37:25:7f:7e:c2:78:1c:c3:4f: 19:de:6f:6d:eb:68:f6:50:89:21:66:fe:e3:9d:1b:ec:23:2f: f2:7b:77:9c -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt+pTthDDEAttDckTM6gVpeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZDNmOWJjOTY1NmJhZGMyNmU3ZGUxYWJiMGZhNzJjM2Q3 MjhkZDgwHhcNMjYwMTAyMTIxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMmFmNmQ2MGI3ZDU0MDJlZmIwODc0MjcxMDYzYjA1NjI4NmI4OTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3igFHXCvPnPw8lOcfNuZtZyxnvc i9VcdzGgcOv8eoihI3e3W7VSomiM6jGYeZr0/ftrEWQ1F6jax14Bgzki+jzW3RYM OoR+C8ZG71OV0DuRlbNZUTyhMVpBymIyNZTcqkeHdNBasXJ8E5XcjrwLQCYzvHpL bRvCO1q8tu4kMyW1DmayMrRDIjhJuGvRym86TPrgi+w36PiUNBF1pvVoOkEPngO0 Wx6F+dZXKdOv6X4vRw5TJOO6Qk+PRtxeLJ4Q6Vs04n/dthLBKB8/mX6aBPY9roQ5 xtm6VcrZM0mGKOtSFRkhoNwQFcnFEugiFQcS9N9b/Pk/hBYT90o6Tij8swIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFMKvbWC31UAu+wh0JxBjsFYoa4knMB8GA1UdIwQY MBaAFKLT+byWVrrcJufeGrsPpyw9co3YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3RQNXZKWld1dHdtNTk0YXV3LW5MRDF5amRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi82OGZkMGYtMmI4Ny00NzA0LWEzMmYt ZDcxMWU4NGMyOWExLzEvd3E5dFlMZlZRQzc3Q0hRbkVHT3dWaWhyaVNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi82OGZkMGYtMmI4Ny00NzA0LWEzMmYtZDcxMWU4NGMyOWEx LzEvb3RQNXZKWld1dHdtNTk0YXV3LW5MRDF5amRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAmBAIAATAgAwQGLqPAMAwD BAQ+3PADBAI+3PgDBAVTkqADBAK5wBgwDQQCAAIwBwMFACoCb6AwDQYJKoZIhvcN AQELBQADggEBAG0iDMDoyxucRtePauqLtHsPbIjpxgxeYmVjbSEDuXyJS5IUrNjC nqAGrAGwLauOMerBSQM+MtJETnMms2p9up7/YSmh5wRL8y75oZi2k+lAqvkWCI9v 1Yc5qCChlTzX8C4ueowaTe6NOlJVgKz2CG8U17gHrpOe7555wDecIBHALQDA/7ZU thzdAb6097DX2j5F1ylss/bTQDzhwlETNdfrYGXL3RsmJg7W1FMv+zO1IvP7jsSG KUnmWsIC9R1D3JP/wwu5ds9octEo9t48LBrDntpZbxywjA7nXLE9aYuhbjclf37C eBzDTxneb23raPZQiSFm/uOdG+wjL/J7d5w= -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:45 2026 by rpki-client