This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/S01_WqX5A8fIJ61TCAKKbSOBBxA.roa File: S01_WqX5A8fIJ61TCAKKbSOBBxA.roa (raw, json) Hash identifier: kl6QxoWn5nkjbADcqJQCEzgHvLeLucFm5DAq4mJA9hQ= Subject key identifier: 4B:4D:7F:5A:A5:F9:03:C7:C8:27:AD:53:08:02:8A:6D:23:81:07:10 Certificate issuer: /CN=b22640351ab21a0dc7aaa15fab5b110977714a3c Certificate serial: 019B7F157F7207CEE80484F8B8D775DEAD1E Authority key identifier: B2:26:40:35:1A:B2:1A:0D:C7:AA:A1:5F:AB:5B:11:09:77:71:4A:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/S01_WqX5A8fIJ61TCAKKbSOBBxA.roa Signing time: Fri 02 Jan 2026 14:21:13 +0000 ROA not before: Fri 02 Jan 2026 14:21:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215231 IP address blocks: 194.117.72.0/24 maxlen: 24 2a14:2ec6::/31 maxlen: 31 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.crl rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:7f:72:07:ce:e8:04:84:f8:b8:d7:75:de:ad:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b22640351ab21a0dc7aaa15fab5b110977714a3c Validity Not Before: Jan 2 14:21:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b4d7f5aa5f903c7c827ad5308028a6d23810710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:d1:41:8b:9c:c8:28:c7:8b:3c:a8:10:41:2f: 47:84:de:54:44:4d:90:0d:8d:4b:06:54:13:f4:10: b1:17:fd:45:66:93:6e:c3:19:f7:d5:19:0d:5d:bb: a6:a4:78:31:50:db:a7:6e:b3:d8:34:08:60:85:4a: e2:f4:c2:61:e4:c9:16:6a:b1:5b:2a:f2:0b:a0:fe: f7:f1:3e:18:28:23:91:a6:9a:b7:c4:02:d2:e5:0a: c9:c7:b0:2a:28:8c:67:5a:a1:b6:ac:26:ca:bc:4b: 1b:bc:1f:20:09:38:cc:d4:7a:07:6d:7e:19:ff:1b: c0:7f:a5:01:c1:01:b5:76:87:b0:84:4a:be:49:04: df:ff:af:e9:6b:4f:38:eb:ec:36:dc:69:61:56:a0: 24:b8:4a:68:8b:bb:66:2e:02:ef:dc:9a:68:68:01: 68:dd:aa:0d:f6:e9:4d:1a:f2:68:d4:fb:05:b0:03: 82:8d:10:db:a1:70:d0:65:85:d5:59:12:5b:74:16: 9a:ae:9a:36:ea:c2:62:2b:34:3a:f2:16:df:c0:6f: bc:d3:63:14:57:55:45:d2:dd:96:4a:3c:ac:e3:38: 14:2e:2d:7a:cb:59:55:55:fe:ad:c9:bf:6d:17:eb: 46:bd:eb:4d:c5:10:b0:f9:a9:3e:b3:89:a9:b0:89: 52:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:4D:7F:5A:A5:F9:03:C7:C8:27:AD:53:08:02:8A:6D:23:81:07:10 X509v3 Authority Key Identifier: keyid:B2:26:40:35:1A:B2:1A:0D:C7:AA:A1:5F:AB:5B:11:09:77:71:4A:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/S01_WqX5A8fIJ61TCAKKbSOBBxA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.117.72.0/24 IPv6: 2a14:2ec6::/31 Signature Algorithm: sha256WithRSAEncryption 8c:72:f8:43:51:76:b2:f2:b9:55:5c:27:a1:89:82:a1:68:68: 61:66:ce:9d:10:68:10:e4:42:e3:ee:b8:b0:4a:2b:bd:43:36: d5:df:3e:2f:64:3b:af:db:7b:78:b3:12:4f:77:42:e2:d6:df: 97:4d:09:6f:68:5a:11:4c:38:e1:09:54:96:57:b8:dc:b9:3a: 85:d8:6f:47:ff:c3:1d:83:1f:41:ea:c5:6e:35:cc:24:e6:01: 20:7f:d9:1b:58:43:3e:e9:e5:b8:ec:cc:35:e5:e2:72:60:80: 1c:ae:45:25:c9:a7:89:1d:cf:5e:af:f7:e3:ab:54:7c:a0:0b: bb:39:ee:df:fd:47:a6:da:e8:6e:dd:0c:5c:37:45:1e:7b:6c: cd:90:79:4e:0a:07:8e:b8:da:66:90:70:e8:6d:e2:dd:56:db: 08:47:51:05:a7:52:f6:fd:2c:13:fa:6e:96:ff:a9:f8:67:c6: ac:02:bf:06:3f:ca:99:a4:2a:0c:45:66:86:cc:67:9b:b9:97: 2a:60:96:a2:37:dc:11:c8:5b:cc:9f:e2:73:14:e9:ae:65:bb: 2d:91:69:51:c0:5d:8a:29:14:62:4c:4d:93:72:36:19:17:bd: fc:04:26:b7:44:4a:fa:c3:bb:b0:ff:b9:00:1a:bd:e3:3d:49: aa:b5:87:de -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/FX9yB87oBIT4uNd13q0eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyMjY0MDM1MWFiMjFhMGRjN2FhYTE1ZmFiNWIxMTA5Nzc3 MTRhM2MwHhcNMjYwMTAyMTQyMTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjRkN2Y1YWE1ZjkwM2M3YzgyN2FkNTMwODAyOGE2ZDIzODEwNzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttFBi5zIKMeLPKgQQS9HhN5URE2Q DY1LBlQT9BCxF/1FZpNuwxn31RkNXbumpHgxUNunbrPYNAhghUri9MJh5MkWarFb KvILoP738T4YKCORppq3xALS5QrJx7AqKIxnWqG2rCbKvEsbvB8gCTjM1HoHbX4Z /xvAf6UBwQG1doewhEq+SQTf/6/pa0846+w23GlhVqAkuEpoi7tmLgLv3JpoaAFo 3aoN9ulNGvJo1PsFsAOCjRDboXDQZYXVWRJbdBaarpo26sJiKzQ68hbfwG+802MU V1VF0t2WSjys4zgULi16y1lVVf6tyb9tF+tGvetNxRCw+ak+s4mpsIlSgwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEtNf1ql+QPHyCetUwgCim0jgQcQMB8GA1UdIwQY MBaAFLImQDUashoNx6qhX6tbEQl3cUo8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2laQU5ScXlHZzNIcXFGZnExc1JDWGR4U2p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9lMzhmZjAtNDY5Yi00MWU1LWJiZWQt MTc5ZTZlNDI5MGMwLzEvUzAxX1dxWDVBOGZJSjYxVENBS0tiU09CQnhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNi9lMzhmZjAtNDY5Yi00MWU1LWJiZWQtMTc5ZTZlNDI5MGMw LzEvc2laQU5ScXlHZzNIcXFGZnExc1JDWGR4U2p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwnVIMA0E AgACMAcDBQEqFC7GMA0GCSqGSIb3DQEBCwUAA4IBAQCMcvhDUXay8rlVXCehiYKh aGhhZs6dEGgQ5ELj7riwSiu9QzbV3z4vZDuv23t4sxJPd0Li1t+XTQlvaFoRTDjh CVSWV7jcuTqF2G9H/8Mdgx9B6sVuNcwk5gEgf9kbWEM+6eW47Mw15eJyYIAcrkUl yaeJHc9er/fjq1R8oAu7Oe7f/Uem2uhu3QxcN0Uee2zNkHlOCgeOuNpmkHDobeLd VtsIR1EFp1L2/SwT+m6W/6n4Z8asAr8GP8qZpCoMRWaGzGebuZcqYJaiN9wRyFvM n+JzFOmuZbstkWlRwF2KKRRiTE2TcjYZF738BCa3REr6w7uw/7kAGr3jPUmqtYfe -----END CERTIFICATE-----Generated at Tue Feb 10 03:02:15 2026 by rpki-client