This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/W1zfSNwcgs-y5SSZb47tu0FT-KM.roa File: W1zfSNwcgs-y5SSZb47tu0FT-KM.roa (raw, json) Hash identifier: PKno3zqDpF8qtsZ9i2U+bSxkoAN1EVRq5I5yGi83v34= Subject key identifier: 5B:5C:DF:48:DC:1C:82:CF:B2:E5:24:99:6F:8E:ED:BB:41:53:F8:A3 Certificate issuer: /CN=ea32adc8569cfcb35e75c7cefd46d5ed00f0e028 Certificate serial: 019B7A5AA2EC2ABF4C1B11BE23D567DC6A69 Authority key identifier: EA:32:AD:C8:56:9C:FC:B3:5E:75:C7:CE:FD:46:D5:ED:00:F0:E0:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6jKtyFac_LNedcfO_UbV7QDw4Cg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/W1zfSNwcgs-y5SSZb47tu0FT-KM.roa Signing time: Thu 01 Jan 2026 16:18:38 +0000 ROA not before: Thu 01 Jan 2026 16:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57961 IP address blocks: 37.139.112.0/21 maxlen: 22 37.139.112.0/22 maxlen: 22 37.139.112.0/24 maxlen: 24 37.139.114.0/24 maxlen: 24 37.139.116.0/22 maxlen: 22 37.139.116.0/24 maxlen: 24 37.139.117.0/24 maxlen: 24 37.139.118.0/24 maxlen: 24 37.139.119.0/24 maxlen: 24 185.63.176.0/22 maxlen: 22 2a00:9f40::/32 maxlen: 32 2a00:9f40:1::/48 maxlen: 48 2a00:9f40:5::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/6jKtyFac_LNedcfO_UbV7QDw4Cg.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/6jKtyFac_LNedcfO_UbV7QDw4Cg.mft rsync://rpki.ripe.net/repository/DEFAULT/6jKtyFac_LNedcfO_UbV7QDw4Cg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:a2:ec:2a:bf:4c:1b:11:be:23:d5:67:dc:6a:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea32adc8569cfcb35e75c7cefd46d5ed00f0e028 Validity Not Before: Jan 1 16:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b5cdf48dc1c82cfb2e524996f8eedbb4153f8a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:99:dc:54:87:79:a7:35:8f:32:e9:10:83:9d: 56:c6:75:99:c5:bd:3f:be:b7:0e:c3:03:7f:c9:3b: f9:f8:aa:28:35:f3:e6:31:41:9c:c0:55:a1:4b:f7: 8e:6a:b3:f3:af:9a:a7:7c:bb:6f:74:0b:12:0f:17: 1e:25:b4:8f:c9:19:9d:b7:a7:ed:c1:72:b8:ef:8e: fe:a1:ad:81:85:68:e7:51:be:9d:6e:64:04:ec:00: a5:95:28:0a:15:40:d8:0a:7f:6c:48:ca:18:74:76: 51:9a:c5:53:c7:95:a0:95:c0:5c:6d:a3:03:3f:9a: 55:32:53:d8:4b:23:17:54:ed:08:18:23:27:b9:e4: 79:90:13:e1:b8:0a:f6:99:31:78:46:53:8a:f0:a3: 1e:8f:d8:7b:28:02:3e:7e:e6:03:b0:e0:db:b4:28: 23:67:f8:a9:8d:71:74:42:82:67:1d:5c:92:af:74: 08:c1:84:89:59:b9:bb:d2:2f:a0:01:57:91:43:d1: dd:38:15:d9:68:50:66:b1:36:a0:f0:c6:7b:4b:a7: b0:9f:9c:db:5f:62:f7:50:20:d8:ed:bd:35:30:63: 0f:e6:7b:9b:55:11:33:a0:1c:2d:e3:e0:9b:dc:3e: f4:48:53:00:cf:06:7f:44:8a:4b:5c:68:0e:b7:aa: e5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:5C:DF:48:DC:1C:82:CF:B2:E5:24:99:6F:8E:ED:BB:41:53:F8:A3 X509v3 Authority Key Identifier: keyid:EA:32:AD:C8:56:9C:FC:B3:5E:75:C7:CE:FD:46:D5:ED:00:F0:E0:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jKtyFac_LNedcfO_UbV7QDw4Cg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/W1zfSNwcgs-y5SSZb47tu0FT-KM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/8f8c55-04ae-434c-ac42-42b4c88d74ca/1/6jKtyFac_LNedcfO_UbV7QDw4Cg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.139.112.0/21 185.63.176.0/22 IPv6: 2a00:9f40::/32 Signature Algorithm: sha256WithRSAEncryption 77:e6:b1:18:3a:70:7d:a4:74:d5:36:9a:4c:61:07:c7:82:e9: 76:5a:82:4e:1d:bc:9f:a5:42:af:79:a2:83:b1:f8:cb:3d:36: c1:3b:e5:2a:65:95:99:7c:cf:79:30:d9:f5:76:4a:08:15:c7: 96:24:15:6e:5a:28:85:c2:a5:8a:de:12:49:23:c0:9c:e8:ba: 9b:ab:eb:63:88:16:85:ab:68:fa:80:e3:47:9d:05:da:ee:b9: e0:db:c5:83:d0:71:ee:08:4f:d9:a7:fe:2b:b7:35:23:95:f3: a3:a9:3b:f5:db:c7:5d:1e:e3:3b:89:ae:93:8a:f3:26:82:f9: 9d:6d:81:fa:14:e5:96:fc:51:e6:72:9b:d8:d2:48:95:94:94: 74:e6:53:43:24:47:65:24:bc:1e:51:11:c9:eb:8a:db:ab:85: 3e:38:ea:8a:cb:1e:a5:25:60:89:2d:47:bb:28:01:25:3d:aa: b5:ed:63:39:91:d0:95:dc:5f:0b:e2:48:75:ac:92:0a:df:7f: 86:d1:81:81:00:8a:c0:8c:ae:36:b2:7b:37:4d:92:87:3f:9c: 8d:7d:cf:44:3e:6c:bb:56:9d:a6:44:34:8a:cb:34:ec:4d:7c: 22:63:5c:1f:6e:21:f5:4a:f3:06:d9:13:78:f3:0b:24:69:73: c6:f5:6a:89 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6WqLsKr9MGxG+I9Vn3GppMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhMzJhZGM4NTY5Y2ZjYjM1ZTc1YzdjZWZkNDZkNWVkMDBm MGUwMjgwHhcNMjYwMTAxMTYxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjVjZGY0OGRjMWM4MmNmYjJlNTI0OTk2ZjhlZWRiYjQxNTNmOGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZncVId5pzWPMukQg51WxnWZxb0/ vrcOwwN/yTv5+KooNfPmMUGcwFWhS/eOarPzr5qnfLtvdAsSDxceJbSPyRmdt6ft wXK4747+oa2BhWjnUb6dbmQE7ACllSgKFUDYCn9sSMoYdHZRmsVTx5WglcBcbaMD P5pVMlPYSyMXVO0IGCMnueR5kBPhuAr2mTF4RlOK8KMej9h7KAI+fuYDsODbtCgj Z/ipjXF0QoJnHVySr3QIwYSJWbm70i+gAVeRQ9HdOBXZaFBmsTag8MZ7S6ewn5zb X2L3UCDY7b01MGMP5nubVREzoBwt4+Cb3D70SFMAzwZ/RIpLXGgOt6rlYwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFFtc30jcHILPsuUkmW+O7btBU/ijMB8GA1UdIwQY MBaAFOoyrchWnPyzXnXHzv1G1e0A8OAoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmpLdHlGYWNfTE5lZGNmT19VYlY3UUR3NENnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy84ZjhjNTUtMDRhZS00MzRjLWFjNDIt NDJiNGM4OGQ3NGNhLzEvVzF6ZlNOd2Nncy15NVNTWmI0N3R1MEZULUtNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy84ZjhjNTUtMDRhZS00MzRjLWFjNDItNDJiNGM4OGQ3NGNh LzEvNmpLdHlGYWNfTE5lZGNmT19VYlY3UUR3NENnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDJYtwAwQC uT+wMA0EAgACMAcDBQAqAJ9AMA0GCSqGSIb3DQEBCwUAA4IBAQB35rEYOnB9pHTV NppMYQfHgul2WoJOHbyfpUKveaKDsfjLPTbBO+UqZZWZfM95MNn1dkoIFceWJBVu WiiFwqWK3hJJI8Cc6Lqbq+tjiBaFq2j6gONHnQXa7rng28WD0HHuCE/Zp/4rtzUj lfOjqTv128ddHuM7ia6TivMmgvmdbYH6FOWW/FHmcpvY0kiVlJR05lNDJEdlJLwe URHJ64rbq4U+OOqKyx6lJWCJLUe7KAElPaq17WM5kdCV3F8L4kh1rJIK33+G0YGB AIrAjK42sns3TZKHP5yNfc9EPmy7Vp2mRDSKyzTsTXwiY1wfbiH1SvMG2RN48wsk aXPG9WqJ -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:17 2026 by rpki-client