This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/wJqVatnwz_JACg6Z3PJikK2KuzA.roa File: wJqVatnwz_JACg6Z3PJikK2KuzA.roa (raw, json) Hash identifier: qVtqZA2lMr7M1sPO5Sj/r63rOcaQEXbeL0LGhouPaLE= Subject key identifier: C0:9A:95:6A:D9:F0:CF:F2:40:0A:0E:99:DC:F2:62:90:AD:8A:BB:30 Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Certificate serial: 019B77C7433187FAA25C41AEA66425054AEA Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/wJqVatnwz_JACg6Z3PJikK2KuzA.roa Signing time: Thu 01 Jan 2026 04:18:26 +0000 ROA not before: Thu 01 Jan 2026 04:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 10103 IP address blocks: 178.255.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Jan 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:43:31:87:fa:a2:5c:41:ae:a6:64:25:05:4a:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4 Validity Not Before: Jan 1 04:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c09a956ad9f0cff2400a0e99dcf26290ad8abb30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:83:ad:3b:e8:5c:e6:f1:f0:b7:1e:0b:38:a6: b2:4b:f8:46:53:05:f3:30:50:20:d9:ca:e9:bb:d9: 99:97:79:d9:61:ce:8a:4a:34:e0:d6:6c:c6:5e:72: 75:3b:e2:5c:0c:45:4c:98:81:16:5c:a4:00:15:50: 5f:91:35:c4:62:63:f0:ac:42:6c:6a:b9:97:1e:ba: 67:e6:bf:21:0b:51:14:c8:df:eb:40:f4:81:30:1b: 51:0f:72:3c:ec:7b:2e:a8:8e:44:ed:69:7d:22:2c: d6:a7:c2:50:c3:56:fb:03:98:f1:9a:a3:ea:91:07: 8b:c7:9e:41:73:1b:2a:06:eb:4d:77:c4:d3:cc:68: 95:cf:a9:6a:a5:dc:0f:de:b5:03:87:d6:b6:c0:38: 5d:ad:9c:95:88:67:0a:f9:6d:10:50:85:b8:94:59: fa:4b:0d:ae:16:9a:4b:40:f0:8a:27:78:e1:29:61: 4e:63:a2:3d:c6:2e:8a:aa:f7:12:5b:8d:96:f2:c1: 7a:75:44:54:ea:ed:25:79:81:04:65:36:99:c9:96: 07:d8:40:b5:4f:6d:04:ed:87:ff:e7:92:14:33:d8: e5:c6:ba:25:54:b6:ef:3c:74:0c:65:c2:fe:cc:94: 27:38:16:df:5e:a6:ef:b8:2a:19:c7:f0:86:2c:ca: 9f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:9A:95:6A:D9:F0:CF:F2:40:0A:0E:99:DC:F2:62:90:AD:8A:BB:30 X509v3 Authority Key Identifier: keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/wJqVatnwz_JACg6Z3PJikK2KuzA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.255.244.0/23 Signature Algorithm: sha256WithRSAEncryption 99:ef:79:42:44:7e:5a:d6:8c:62:bd:b3:ce:86:11:d4:e7:0a: ec:f1:16:0e:db:4d:b0:b7:ba:0d:b1:f1:2c:c8:20:d2:6c:90: 52:05:ae:62:69:0c:fe:5b:83:e1:97:5f:74:e8:0c:7c:5c:be: aa:4e:26:8a:55:67:eb:68:68:ec:92:5a:d4:81:ec:e2:47:44: 76:e4:88:d6:96:bc:9e:a4:3d:e5:5f:39:f5:ff:29:af:c5:e1: 89:bd:a7:dd:81:ef:7c:f3:67:6c:8c:5a:12:aa:21:c9:63:e2: 41:56:96:37:02:35:77:d9:59:e4:80:c7:9a:5a:88:76:11:d1: a0:02:4a:dd:71:ae:da:cf:aa:1a:96:cd:59:5d:99:02:c6:22: 09:10:78:57:ac:4e:aa:d2:a7:c0:32:12:fb:23:8c:81:a7:fc: 9d:84:9d:84:c4:6b:11:76:9e:45:ab:02:0c:7a:2a:3a:03:fa: 4b:7c:a0:2a:ab:94:c9:6d:b0:91:94:3d:eb:31:c8:01:8f:2c: be:7b:e6:a6:c4:24:9b:d4:6b:90:7d:25:a3:aa:2f:67:cd:42: b7:2a:80:7c:40:76:fd:b0:63:54:1a:bd:86:dd:a0:3a:68:59: 69:35:e5:1a:23:06:b9:dd:7c:72:1b:8c:09:94:17:09:91:df: b6:06:04:ed -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x0Mxh/qiXEGupmQlBUrqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi NWRlZTQwHhcNMjYwMTAxMDQxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDlhOTU2YWQ5ZjBjZmYyNDAwYTBlOTlkY2YyNjI5MGFkOGFiYjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4OtO+hc5vHwtx4LOKayS/hGUwXz MFAg2crpu9mZl3nZYc6KSjTg1mzGXnJ1O+JcDEVMmIEWXKQAFVBfkTXEYmPwrEJs armXHrpn5r8hC1EUyN/rQPSBMBtRD3I87HsuqI5E7Wl9IizWp8JQw1b7A5jxmqPq kQeLx55BcxsqButNd8TTzGiVz6lqpdwP3rUDh9a2wDhdrZyViGcK+W0QUIW4lFn6 Sw2uFppLQPCKJ3jhKWFOY6I9xi6KqvcSW42W8sF6dURU6u0leYEEZTaZyZYH2EC1 T20E7Yf/55IUM9jlxrolVLbvPHQMZcL+zJQnOBbfXqbvuCoZx/CGLMqfdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMCalWrZ8M/yQAoOmdzyYpCtirswMB8GA1UdIwQY MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt NTlmNTk4NGI2NGVhLzEvd0pxVmF0bnd6X0pBQ2c2WjNQSmlrSzJLdXpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBsv/0MA0G CSqGSIb3DQEBCwUAA4IBAQCZ73lCRH5a1oxivbPOhhHU5wrs8RYO202wt7oNsfEs yCDSbJBSBa5iaQz+W4Phl1906Ax8XL6qTiaKVWfraGjsklrUgeziR0R25IjWlrye pD3lXzn1/ymvxeGJvafdge9882dsjFoSqiHJY+JBVpY3AjV32VnkgMeaWoh2EdGg Akrdca7az6oals1ZXZkCxiIJEHhXrE6q0qfAMhL7I4yBp/ydhJ2ExGsRdp5FqwIM eio6A/pLfKAqq5TJbbCRlD3rMcgBjyy+e+amxCSb1GuQfSWjqi9nzUK3KoB8QHb9 sGNUGr2G3aA6aFlpNeUaIwa53XxyG4wJlBcJkd+2BgTt -----END CERTIFICATE-----Generated at Thu Jan 1 20:24:17 2026 by rpki-client