This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/w6PRimv4AQwUjZljEFUbn9_lMpE.roa File: w6PRimv4AQwUjZljEFUbn9_lMpE.roa (raw, json) Hash identifier: 1BAWM7GxFGhcr0Nj+ZV21NpmZtGOTmrrpW3/r3X5CNo= Subject key identifier: C3:A3:D1:8A:6B:F8:01:0C:14:8D:99:63:10:55:1B:9F:DF:E5:32:91 Certificate issuer: /CN=4f2f3bc99a79503e09757477e8ef643e11886c8b Certificate serial: 019B76EAC708C688A2B833E3C49330E84BF3 Authority key identifier: 4F:2F:3B:C9:9A:79:50:3E:09:75:74:77:E8:EF:64:3E:11:88:6C:8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty87yZp5UD4JdXR36O9kPhGIbIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/w6PRimv4AQwUjZljEFUbn9_lMpE.roa Signing time: Thu 01 Jan 2026 00:17:36 +0000 ROA not before: Thu 01 Jan 2026 00:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207741 IP address blocks: 77.81.143.0/24 maxlen: 24 193.192.0.0/24 maxlen: 24 212.102.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft rsync://rpki.ripe.net/repository/DEFAULT/Ty87yZp5UD4JdXR36O9kPhGIbIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:c7:08:c6:88:a2:b8:33:e3:c4:93:30:e8:4b:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f2f3bc99a79503e09757477e8ef643e11886c8b Validity Not Before: Jan 1 00:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3a3d18a6bf8010c148d996310551b9fdfe53291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ab:04:d2:45:fc:4d:4b:16:25:f2:d1:ad:4b: 2a:a4:c7:68:42:3c:b5:7b:d3:94:58:91:42:38:68: f4:5a:8b:4a:e4:ee:51:33:83:2b:b3:7e:db:7c:7b: 06:37:66:d9:fc:06:1c:74:b0:63:45:89:23:4b:8b: a8:55:14:a1:77:41:78:30:ec:03:3a:ab:03:4f:74: 6f:f9:71:6c:61:0a:d6:27:6c:9b:21:1e:ba:3f:cd: 19:ab:0d:9f:54:65:11:c0:f3:38:4a:5a:1a:bf:57: 65:b4:19:d2:64:12:6b:cf:ce:95:92:63:2e:1a:0a: b9:f2:c3:f1:c5:e7:95:86:9a:30:a3:88:cd:e9:7e: e6:77:e8:d8:ce:f8:94:51:6f:11:23:37:2e:8e:20: bb:d7:75:7f:cf:84:0e:8f:c6:e4:5f:45:cb:e9:08: ce:e5:0c:63:26:63:36:f9:92:bb:e4:ec:f0:23:08: 84:a7:b0:ea:ea:9b:89:04:41:e1:0e:15:d8:1e:c8: 37:7e:27:f0:f5:b8:9e:29:84:39:be:69:6b:f0:f4: e5:b9:99:41:f5:91:20:9c:ef:f9:b8:f9:13:65:1e: 02:1c:f5:20:e2:19:c7:40:f5:57:7a:02:62:ae:c7: 07:47:7b:44:cb:00:67:50:d6:50:d1:b8:01:0f:92: 8f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:A3:D1:8A:6B:F8:01:0C:14:8D:99:63:10:55:1B:9F:DF:E5:32:91 X509v3 Authority Key Identifier: keyid:4F:2F:3B:C9:9A:79:50:3E:09:75:74:77:E8:EF:64:3E:11:88:6C:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty87yZp5UD4JdXR36O9kPhGIbIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/w6PRimv4AQwUjZljEFUbn9_lMpE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.81.143.0/24 193.192.0.0/24 212.102.117.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:d5:eb:06:8c:e3:c2:a9:2e:28:72:95:ab:cc:33:ec:d6:f3: 0d:29:a9:c2:ed:40:6a:f2:f2:db:6d:d4:93:59:3d:77:0d:48: 6c:47:74:9f:5d:4c:58:4a:ac:56:27:a5:6d:4b:81:98:6e:4b: 78:0f:d9:a1:62:55:f1:e2:65:ca:eb:26:fc:98:4e:ba:0a:6a: d6:67:52:cb:db:20:85:23:c9:91:8c:3b:b4:22:aa:88:bb:4b: 6f:88:7d:25:ae:8c:26:39:0d:04:96:8b:1e:3e:b9:ec:a2:7c: ef:e8:dd:ef:8d:6c:ea:78:9e:fe:45:4f:60:6e:f5:a1:a1:f4: b4:c8:3d:76:30:4e:4f:d7:f9:b6:80:a8:e5:66:68:04:d8:79: 23:22:ec:ba:b0:37:6c:2c:b9:a0:ef:9c:f5:a3:dd:ea:b0:49: 49:92:56:dd:f3:6d:9f:84:16:b3:3f:57:3c:16:a6:fa:3e:89: 20:3a:f8:47:64:9d:06:b8:42:75:2a:38:9e:66:b9:85:32:e8: ff:70:64:59:ee:da:63:53:b3:c6:18:5b:23:14:05:9e:5a:62: 25:35:bd:54:38:57:9f:ba:ef:54:39:b2:96:a6:ea:be:93:29: a8:d6:7f:d9:7e:46:11:7f:9f:de:a5:25:5b:60:ce:0b:25:4f: 9f:74:81:0e -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt26scIxoiiuDPjxJMw6EvzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMmYzYmM5OWE3OTUwM2UwOTc1NzQ3N2U4ZWY2NDNlMTE4 ODZjOGIwHhcNMjYwMTAxMDAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjM2EzZDE4YTZiZjgwMTBjMTQ4ZDk5NjMxMDU1MWI5ZmRmZTUzMjkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApasE0kX8TUsWJfLRrUsqpMdoQjy1 e9OUWJFCOGj0WotK5O5RM4Mrs37bfHsGN2bZ/AYcdLBjRYkjS4uoVRShd0F4MOwD OqsDT3Rv+XFsYQrWJ2ybIR66P80Zqw2fVGURwPM4Sloav1dltBnSZBJrz86VkmMu Ggq58sPxxeeVhpowo4jN6X7md+jYzviUUW8RIzcujiC713V/z4QOj8bkX0XL6QjO 5QxjJmM2+ZK75OzwIwiEp7Dq6puJBEHhDhXYHsg3fifw9bieKYQ5vmlr8PTluZlB 9ZEgnO/5uPkTZR4CHPUg4hnHQPVXegJirscHR3tEywBnUNZQ0bgBD5KPIQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMOj0Ypr+AEMFI2ZYxBVG5/f5TKRMB8GA1UdIwQY MBaAFE8vO8maeVA+CXV0d+jvZD4RiGyLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHk4N3lacDVVRDRKZFhSMzZPOWtQaEdJYklzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8xZTFhYzYtZmNkNi00YWU4LWFkNzct NTFlNGJiYTZiZjViLzEvdzZQUmltdjRBUXdValpsakVGVWJuOV9sTXBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8xZTFhYzYtZmNkNi00YWU4LWFkNzctNTFlNGJiYTZiZjVi LzEvVHk4N3lacDVVRDRKZFhSMzZPOWtQaEdJYklzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQATVGPAwQA wcAAAwQA1GZ1MA0GCSqGSIb3DQEBCwUAA4IBAQA81esGjOPCqS4ocpWrzDPs1vMN KanC7UBq8vLbbdSTWT13DUhsR3SfXUxYSqxWJ6VtS4GYbkt4D9mhYlXx4mXK6yb8 mE66CmrWZ1LL2yCFI8mRjDu0IqqIu0tviH0lrowmOQ0ElosePrnsonzv6N3vjWzq eJ7+RU9gbvWhofS0yD12ME5P1/m2gKjlZmgE2HkjIuy6sDdsLLmg75z1o93qsElJ klbd822fhBazP1c8Fqb6PokgOvhHZJ0GuEJ1KjieZrmFMuj/cGRZ7tpjU7PGGFsj FAWeWmIlNb1UOFefuu9UObKWpuq+kymo1n/ZfkYRf5/epSVbYM4LJU+fdIEO -----END CERTIFICATE-----Generated at Mon Feb 9 23:57:27 2026 by rpki-client