This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/1qW--QY8J1san0DCq3XFGd9u7ik.roa File: 1qW--QY8J1san0DCq3XFGd9u7ik.roa (raw, json) Hash identifier: bJslM3RYasT/v3+ePs6DdTJE6TErE+KsU8otE8iOBSk= Subject key identifier: D6:A5:BE:F9:06:3C:27:5B:1A:9F:40:C2:AB:75:C5:19:DF:6E:EE:29 Certificate issuer: /CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Certificate serial: 019B7CECF98446C66BC14EE4A0DEE5F2A204 Authority key identifier: 5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/1qW--QY8J1san0DCq3XFGd9u7ik.roa Signing time: Fri 02 Jan 2026 04:17:43 +0000 ROA not before: Fri 02 Jan 2026 04:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8581 IP address blocks: 83.212.184.0/21 maxlen: 21 83.212.192.0/21 maxlen: 21 194.177.199.0/24 maxlen: 24 195.130.72.0/23 maxlen: 23 195.130.74.0/24 maxlen: 24 195.130.112.0/21 maxlen: 21 195.130.120.0/23 maxlen: 23 195.251.192.0/21 maxlen: 21 195.251.200.0/23 maxlen: 23 2001:648:2e01::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.mft rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ec:f9:84:46:c6:6b:c1:4e:e4:a0:de:e5:f2:a2:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a6f9295521df30a158f506ba7cb873ab9529dc3 Validity Not Before: Jan 2 04:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6a5bef9063c275b1a9f40c2ab75c519df6eee29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:96:34:c4:5d:2b:a3:1f:59:7d:fa:92:72:f3: 1d:de:bf:40:dd:bc:8a:8e:8e:36:8d:39:2c:2a:a1: fc:37:1d:d7:f3:a3:a7:c9:48:3e:83:9e:c3:96:8a: 36:bf:97:99:4a:1a:e3:4a:8a:fa:f3:a7:a6:b4:6c: f0:55:96:da:36:ad:a0:cb:fd:2e:5f:e0:6d:bb:b0: fc:59:d3:3e:c2:a5:1f:11:10:e9:4e:d6:58:b9:83: 68:d2:4a:3c:46:12:e7:07:4a:be:99:c7:93:9e:63: 3a:26:76:9f:89:74:5a:0d:f0:ca:78:48:26:79:e6: b5:67:44:b5:e4:f1:2d:e4:46:33:21:89:c1:3a:3e: 11:4b:fc:65:57:c2:9a:4b:8e:10:db:43:43:b6:ad: cf:e0:33:c2:36:76:e0:b5:77:bf:b9:12:d0:8f:41: 53:30:7b:e7:ee:e9:c2:f7:d3:46:4e:35:36:7d:84: 55:4e:8f:38:b1:03:72:5b:cc:e8:7b:3b:e6:22:31: d1:be:2e:db:4b:43:24:52:f0:88:f9:d0:0c:a1:33: 2b:8b:9c:8c:e8:66:57:3c:05:31:b7:87:6f:7f:79: 9e:97:0c:06:1b:a6:c5:32:c0:f7:ee:fb:66:d8:de: 2f:dd:91:3a:12:69:f8:e3:1f:6c:85:72:0b:91:57: 55:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A5:BE:F9:06:3C:27:5B:1A:9F:40:C2:AB:75:C5:19:DF:6E:EE:29 X509v3 Authority Key Identifier: keyid:5A:6F:92:95:52:1D:F3:0A:15:8F:50:6B:A7:CB:87:3A:B9:52:9D:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wm-SlVId8woVj1Brp8uHOrlSncM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/1qW--QY8J1san0DCq3XFGd9u7ik.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f93b-be31-45cf-aa7e-aaa4553d2abd/1/Wm-SlVId8woVj1Brp8uHOrlSncM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.212.184.0-83.212.199.255 194.177.199.0/24 195.130.72.0-195.130.74.255 195.130.112.0-195.130.121.255 195.251.192.0-195.251.201.255 IPv6: 2001:648:2e01::/48 Signature Algorithm: sha256WithRSAEncryption 76:49:bf:90:a3:49:81:3d:cf:61:67:b8:e0:80:de:c9:35:0d: f8:da:05:90:00:6a:c2:f2:68:6e:4a:b0:3f:3a:97:f2:4e:23: 43:4c:1b:81:ab:8a:a5:bb:fc:de:6d:ca:03:22:20:48:6b:0f: 3e:f5:d8:b4:6a:02:15:56:44:6d:91:95:d1:f3:62:4e:2a:a8: dd:f0:ab:86:06:70:8b:45:1a:8e:a0:d2:80:b1:a7:ec:1f:b4: e0:10:1c:66:01:86:75:f8:4f:f0:cf:b2:61:68:a1:d1:ff:55: 58:60:20:b5:eb:b3:b5:8d:bb:04:02:d4:6f:91:25:00:0a:73: 4d:03:f3:47:52:e9:4e:6c:c7:8d:36:bb:3d:7e:79:88:93:c4: 2e:3f:f0:dc:08:89:dc:60:fc:da:a4:f4:bc:f9:fa:4b:a9:e5: 04:16:e4:5f:b8:7e:d5:16:88:9f:89:40:3c:b8:d1:8d:a4:97: ad:92:f4:bf:95:14:20:e8:6e:75:2a:14:29:b7:10:76:07:d8: 85:5a:58:67:e7:f3:46:64:ef:23:b6:a8:67:6f:4f:ea:bd:01: c3:75:9a:0b:ba:26:72:d8:cf:38:12:a8:e9:c9:ae:ac:6b:93: cd:fb:8b:33:79:0f:04:6c:06:e4:27:32:5d:e9:7e:1f:cb:b9: 67:da:1e:0d -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgISAZt87PmERsZrwU7koN7l8qIEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNmY5Mjk1NTIxZGYzMGExNThmNTA2YmE3Y2I4NzNhYjk1 MjlkYzMwHhcNMjYwMTAyMDQxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmE1YmVmOTA2M2MyNzViMWE5ZjQwYzJhYjc1YzUxOWRmNmVlZTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpY0xF0rox9ZffqScvMd3r9A3byK jo42jTksKqH8Nx3X86OnyUg+g57Dloo2v5eZShrjSor686emtGzwVZbaNq2gy/0u X+Btu7D8WdM+wqUfERDpTtZYuYNo0ko8RhLnB0q+mceTnmM6JnafiXRaDfDKeEgm eea1Z0S15PEt5EYzIYnBOj4RS/xlV8KaS44Q20NDtq3P4DPCNnbgtXe/uRLQj0FT MHvn7unC99NGTjU2fYRVTo84sQNyW8zoezvmIjHRvi7bS0MkUvCI+dAMoTMri5yM 6GZXPAUxt4dvf3melwwGG6bFMsD37vtm2N4v3ZE6Emn44x9shXILkVdVGQIDAQAB o4ICUjCCAk4wHQYDVR0OBBYEFNalvvkGPCdbGp9Awqt1xRnfbu4pMB8GA1UdIwQY MBaAFFpvkpVSHfMKFY9Qa6fLhzq5Up3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2Ut YWFhNDU1M2QyYWJkLzEvMXFXLS1RWThKMXNhbjBEQ3EzWEZHZDl1N2lrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOWY5M2ItYmUzMS00NWNmLWFhN2UtYWFhNDU1M2QyYWJk LzEvV20tU2xWSWQ4d29WajFCcnA4dUhPcmxTbmNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGgGCCsGAQUFBwEHAQH/BFkwVzBEBAIAATA+MAwDBANT1LgD BANT1MADBADCsccwDAMEA8OCSAMEAMOCSjAMAwQEw4JwAwQBw4J4MAwDBAbD+8AD BAHD+8gwDwQCAAIwCQMHACABBkguATANBgkqhkiG9w0BAQsFAAOCAQEAdkm/kKNJ gT3PYWe44IDeyTUN+NoFkABqwvJobkqwPzqX8k4jQ0wbgauKpbv83m3KAyIgSGsP PvXYtGoCFVZEbZGV0fNiTiqo3fCrhgZwi0UajqDSgLGn7B+04BAcZgGGdfhP8M+y YWih0f9VWGAgteuztY27BALUb5ElAApzTQPzR1LpTmzHjTa7PX55iJPELj/w3AiJ 3GD82qT0vPn6S6nlBBbkX7h+1RaIn4lAPLjRjaSXrZL0v5UUIOhudSoUKbcQdgfY hVpYZ+fzRmTvI7aoZ29P6r0Bw3WaC7omctjPOBKo6cmurGuTzfuLM3kPBGwG5Ccy Xel+H8u5Z9oeDQ== -----END CERTIFICATE-----Generated at Mon Feb 2 09:39:28 2026 by rpki-client