This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/j56JgDQ7deItiz4SwN3u_sTMv1A.roa File: j56JgDQ7deItiz4SwN3u_sTMv1A.roa (raw, json) Hash identifier: Sf7VCDy2DZYrfhfR8bd2YHx/KU03gMpcan4C+fydjnc= Subject key identifier: 8F:9E:89:80:34:3B:75:E2:2D:8B:3E:12:C0:DD:EE:FE:C4:CC:BF:50 Certificate issuer: /CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be Certificate serial: 019B7AC833C0A8B442DC3AEA13D882D9AC9A Authority key identifier: C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/j56JgDQ7deItiz4SwN3u_sTMv1A.roa Signing time: Thu 01 Jan 2026 18:18:19 +0000 ROA not before: Thu 01 Jan 2026 18:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19905 IP address blocks: 31.200.128.0/18 maxlen: 24 62.40.32.0/19 maxlen: 24 80.233.0.0/17 maxlen: 24 83.136.40.0/21 maxlen: 24 89.204.160.0/19 maxlen: 24 89.204.192.0/18 maxlen: 24 92.251.128.0/17 maxlen: 24 92.251.240.0/21 maxlen: 24 95.83.192.0/18 maxlen: 24 95.83.196.0/22 maxlen: 24 95.83.196.0/23 maxlen: 24 95.83.229.0/24 maxlen: 24 178.167.128.0/17 maxlen: 24 185.60.124.0/22 maxlen: 24 213.191.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:33:c0:a8:b4:42:dc:3a:ea:13:d8:82:d9:ac:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be Validity Not Before: Jan 1 18:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8f9e8980343b75e22d8b3e12c0ddeefec4ccbf50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f8:03:88:d3:7e:4c:58:ac:7e:0e:05:50:69: d5:38:8b:78:66:a5:ae:10:f1:3a:c2:5a:26:be:c1: 01:f0:6d:67:2a:4c:c3:a9:bb:5a:68:49:95:13:9a: b0:b9:7c:c3:a6:7d:f6:cd:b8:95:70:da:94:29:6e: 5c:2b:1f:a8:4f:97:5d:00:36:0f:10:25:b2:28:8d: 9b:2f:35:59:cd:a6:18:83:bb:cd:77:56:ef:df:19: aa:a9:4b:86:eb:42:35:9c:41:77:e4:6a:76:00:fe: 76:f1:67:b7:81:5f:06:07:d3:bc:fe:38:43:68:2b: 00:51:9e:0d:81:d3:4e:c8:11:03:9d:ff:78:31:83: 76:89:4f:2b:26:ad:6c:12:69:9a:1b:b8:92:f3:11: 27:d3:e0:f9:56:4a:e9:c7:ef:1d:5d:7a:e7:98:38: 09:b6:bd:2f:06:e3:0d:d6:f7:ad:01:f8:d9:fc:c0: 46:98:03:ee:b8:08:04:37:ab:f1:fd:a9:71:7a:44: 1f:2e:d2:0c:87:d9:8a:fe:a0:ec:7c:57:dc:b4:56: 22:0a:dc:6b:7a:e1:0c:b2:0b:a5:01:be:d1:38:0d: dd:10:6c:84:ab:b8:fe:e1:19:16:34:5d:ce:92:62: e6:ac:2b:9c:d2:77:57:a2:8f:5b:44:61:ff:e6:95: a0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:9E:89:80:34:3B:75:E2:2D:8B:3E:12:C0:DD:EE:FE:C4:CC:BF:50 X509v3 Authority Key Identifier: keyid:C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/j56JgDQ7deItiz4SwN3u_sTMv1A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.200.128.0/18 62.40.32.0/19 80.233.0.0/17 83.136.40.0/21 89.204.160.0-89.204.255.255 92.251.128.0/17 95.83.192.0/18 178.167.128.0/17 185.60.124.0/22 213.191.224.0/19 Signature Algorithm: sha256WithRSAEncryption 7a:55:37:bb:4f:93:89:5a:1a:bb:fb:f4:39:1a:af:0d:e0:e3: f9:d9:c8:3d:e3:9a:fe:52:17:f2:4c:12:37:96:fa:11:e5:d5: 30:b2:a7:7d:4a:fb:2c:6a:25:32:dc:f0:5b:ca:af:13:6d:85: c3:d6:9e:bc:00:84:cf:33:d9:77:5c:02:3a:1f:82:ad:1b:99: 5b:af:d9:ed:61:56:07:bf:33:0b:79:cc:63:84:c7:b6:99:b9: 4c:bc:86:7c:6e:d1:1b:e5:c8:83:73:e4:b9:b3:ed:a0:4d:f0: 84:87:c7:fd:e1:0b:39:2e:02:51:0b:2a:2d:4e:6c:f5:02:0a: 90:9e:5f:b0:f9:fd:35:0a:c7:df:c3:21:3b:1f:df:7f:a9:2e: 65:8c:5c:36:fb:f5:b2:d5:e0:29:02:6f:e4:45:bb:c3:39:2d: c9:61:74:74:af:46:e3:14:07:3e:4f:7e:02:1d:30:05:b6:82: 24:ec:2b:b5:2c:d3:e4:9a:82:f5:df:a6:e9:93:39:06:07:f0: 56:49:aa:98:9d:14:0f:1a:e0:88:7d:1f:e9:38:c1:0f:40:a0: fb:48:b2:06:f7:0c:ff:12:d3:8d:f2:17:a7:42:e3:fe:3b:d9: d2:fd:5f:77:7b:e4:46:a6:89:db:49:29:99:a5:b5:a3:fa:0c: cd:be:1e:35 -----BEGIN CERTIFICATE----- MIIFOjCCBCKgAwIBAgISAZt6yDPAqLRC3DrqE9iC2ayaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYWNmMjYwZDIzMjYzYTdjNmJiNmM1OWMxOWVlYmM2NzU5 YjYwYmUwHhcNMjYwMTAxMTgxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZjllODk4MDM0M2I3NWUyMmQ4YjNlMTJjMGRkZWVmZWM0Y2NiZjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfgDiNN+TFisfg4FUGnVOIt4ZqWu EPE6wlomvsEB8G1nKkzDqbtaaEmVE5qwuXzDpn32zbiVcNqUKW5cKx+oT5ddADYP ECWyKI2bLzVZzaYYg7vNd1bv3xmqqUuG60I1nEF35Gp2AP528We3gV8GB9O8/jhD aCsAUZ4NgdNOyBEDnf94MYN2iU8rJq1sEmmaG7iS8xEn0+D5Vkrpx+8dXXrnmDgJ tr0vBuMN1vetAfjZ/MBGmAPuuAgEN6vx/alxekQfLtIMh9mK/qDsfFfctFYiCtxr euEMsgulAb7ROA3dEGyEq7j+4RkWNF3OkmLmrCuc0ndXoo9bRGH/5pWgjQIDAQAB o4ICRjCCAkIwHQYDVR0OBBYEFI+eiYA0O3XiLYs+EsDd7v7EzL9QMB8GA1UdIwQY MBaAFMGs8mDSMmOnxrtsWcGe68Z1m2C+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2F6eVlOSXlZNmZHdTJ4WndaN3J4bldiWUw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9kMGMxN2EtMTliNy00MTQyLWI5NDEt ZmZkNjQ2ZDA1ZjY3LzEvajU2SmdEUTdkZUl0aXo0U3dOM3Vfc1RNdjFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9kMGMxN2EtMTliNy00MTQyLWI5NDEtZmZkNjQ2ZDA1ZjY3 LzEvd2F6eVlOSXlZNmZHdTJ4WndaN3J4bldiWUw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFwGCCsGAQUFBwEHAQH/BE0wSzBJBAIAATBDAwQGH8iAAwQF PiggAwQHUOkAAwQDU4goMAsDBAVZzKADAwBZzAMEB1z7gAMEBl9TwAMEB7KngAME Ark8fAMEBdW/4DANBgkqhkiG9w0BAQsFAAOCAQEAelU3u0+TiVoau/v0ORqvDeDj +dnIPeOa/lIX8kwSN5b6EeXVMLKnfUr7LGolMtzwW8qvE22Fw9aevACEzzPZd1wC Oh+CrRuZW6/Z7WFWB78zC3nMY4THtpm5TLyGfG7RG+XIg3PkubPtoE3whIfH/eEL OS4CUQsqLU5s9QIKkJ5fsPn9NQrH38MhOx/ff6kuZYxcNvv1stXgKQJv5EW7wzkt yWF0dK9G4xQHPk9+Ah0wBbaCJOwrtSzT5JqC9d+m6ZM5BgfwVkmqmJ0UDxrgiH0f 6TjBD0Cg+0iyBvcM/xLTjfIXp0Lj/jvZ0v1fd3vkRqaJ20kpmaW1o/oMzb4eNQ== -----END CERTIFICATE-----Generated at Tue Jan 20 01:20:49 2026 by rpki-client