This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/wzvlYmTV-9nsSGFn0dstmC1HmEk.roa File: wzvlYmTV-9nsSGFn0dstmC1HmEk.roa (raw, json) Hash identifier: kl+8hGqZ5wyjtFNiWYNpl45G6d3B4Xj29eq45toQRJY= Subject key identifier: C3:3B:E5:62:64:D5:FB:D9:EC:48:61:67:D1:DB:2D:98:2D:47:98:49 Certificate issuer: /CN=afe6f8cae7492d064e03071c9147392eedd45bc7 Certificate serial: 019B7834E6EA318D8EBD50AD264D1088B534 Authority key identifier: AF:E6:F8:CA:E7:49:2D:06:4E:03:07:1C:91:47:39:2E:ED:D4:5B:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/wzvlYmTV-9nsSGFn0dstmC1HmEk.roa Signing time: Thu 01 Jan 2026 06:18:11 +0000 ROA not before: Thu 01 Jan 2026 06:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213329 IP address blocks: 185.220.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.mft rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:e6:ea:31:8d:8e:bd:50:ad:26:4d:10:88:b5:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afe6f8cae7492d064e03071c9147392eedd45bc7 Validity Not Before: Jan 1 06:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c33be56264d5fbd9ec486167d1db2d982d479849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8c:ff:f4:92:ec:06:f8:6d:81:bb:df:67:a9: f6:6a:b0:34:fb:7d:18:09:57:cc:55:2d:b0:04:f9: d1:f4:89:d7:e8:a9:8e:60:6f:aa:20:41:ff:31:5b: c7:17:d5:ff:91:8b:83:63:97:38:96:cf:d3:75:b5: c7:ef:1d:54:aa:c2:85:c7:e6:85:3f:29:ad:97:56: ba:de:6b:ff:a4:05:ed:2e:1e:5c:1e:5e:81:77:a4: cd:f1:c5:ef:4a:8a:35:57:e2:4c:3b:db:46:84:dd: e5:7c:a6:7a:68:08:ce:8c:28:fd:6c:26:72:0b:45: 88:6e:a4:20:66:72:ff:ff:a6:70:a4:a4:63:69:d0: 1a:13:b9:92:b4:f2:6a:74:d3:51:fb:fe:e5:40:ae: 4f:e5:5b:9e:87:b1:95:79:88:29:f7:a7:3e:ce:71: ae:d0:83:ca:60:21:d2:0c:0e:f4:19:d0:9a:f4:9c: e9:c0:a7:6e:4b:f5:fc:e4:90:e1:4f:ab:6c:12:36: 6c:86:ef:8b:e5:22:04:07:4e:e7:f3:e1:6c:b9:4a: 94:43:0c:24:29:ac:a4:3d:fa:f9:b8:66:14:8f:1b: ac:d2:5c:78:70:29:8c:18:76:45:0d:6e:30:c0:37: 50:c1:4b:5e:5c:84:2a:ac:a6:2d:03:e7:55:49:e2: 7a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:3B:E5:62:64:D5:FB:D9:EC:48:61:67:D1:DB:2D:98:2D:47:98:49 X509v3 Authority Key Identifier: keyid:AF:E6:F8:CA:E7:49:2D:06:4E:03:07:1C:91:47:39:2E:ED:D4:5B:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-b4yudJLQZOAwcckUc5Lu3UW8c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/wzvlYmTV-9nsSGFn0dstmC1HmEk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c987b6-ef00-4d28-a4ae-6549cd59aa4f/1/r-b4yudJLQZOAwcckUc5Lu3UW8c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.220.221.0/24 Signature Algorithm: sha256WithRSAEncryption aa:59:8d:b6:ba:46:4e:9f:29:12:d7:09:59:d7:56:79:07:1b: 7a:17:a0:fc:8e:95:f4:28:5c:c5:93:01:3d:a6:cc:d6:b1:c6: 7a:59:45:3c:a3:9b:45:9a:e9:1c:7f:16:6c:28:50:cb:5f:a3: 25:f4:06:ff:fe:d9:5a:18:da:a0:8c:fa:8a:94:b5:65:ee:fe: c6:10:0d:77:98:8b:09:e2:84:b6:70:d9:5a:d0:6e:29:41:62: 12:6b:fc:ec:b6:3c:08:be:26:9b:10:5e:dc:48:a3:ec:76:c6: 95:2c:ac:99:0a:00:67:71:42:18:d3:5a:84:96:20:f9:1d:6c: e1:47:1b:25:34:77:54:a1:75:c3:aa:b2:e6:3d:99:50:56:c8: 9d:6c:a5:9f:92:35:6f:12:ac:3c:95:84:d4:9d:45:7b:26:11: 8e:01:e4:53:0a:f5:ab:a0:65:31:92:cb:71:1a:58:41:93:ef: 9e:91:52:54:d2:e6:33:24:07:9c:78:53:53:78:89:53:8e:a5: a2:9d:ab:a3:03:7c:40:87:b3:e0:5a:73:51:af:f4:0a:e5:93: 59:9f:aa:1b:dd:d5:97:86:45:82:e7:87:d7:32:8c:bc:17:8c: 20:79:8b:db:a1:39:6c:6d:25:5f:87:f7:43:41:d4:f1:e2:58: 0b:fb:c9:1b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NObqMY2OvVCtJk0QiLU0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZTZmOGNhZTc0OTJkMDY0ZTAzMDcxYzkxNDczOTJlZWRk NDViYzcwHhcNMjYwMTAxMDYxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzNiZTU2MjY0ZDVmYmQ5ZWM0ODYxNjdkMWRiMmQ5ODJkNDc5ODQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoz/9JLsBvhtgbvfZ6n2arA0+30Y CVfMVS2wBPnR9InX6KmOYG+qIEH/MVvHF9X/kYuDY5c4ls/TdbXH7x1UqsKFx+aF Pymtl1a63mv/pAXtLh5cHl6Bd6TN8cXvSoo1V+JMO9tGhN3lfKZ6aAjOjCj9bCZy C0WIbqQgZnL//6ZwpKRjadAaE7mStPJqdNNR+/7lQK5P5Vueh7GVeYgp96c+znGu 0IPKYCHSDA70GdCa9JzpwKduS/X85JDhT6tsEjZshu+L5SIEB07n8+FsuUqUQwwk KaykPfr5uGYUjxus0lx4cCmMGHZFDW4wwDdQwUteXIQqrKYtA+dVSeJ62QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMM75WJk1fvZ7EhhZ9HbLZgtR5hJMB8GA1UdIwQY MBaAFK/m+MrnSS0GTgMHHJFHOS7t1FvHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvci1iNHl1ZEpMUVpPQXdjY2tVYzVMdTNVVzhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9jOTg3YjYtZWYwMC00ZDI4LWE0YWUt NjU0OWNkNTlhYTRmLzEvd3p2bFltVFYtOW5zU0dGbjBkc3RtQzFIbUVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS9jOTg3YjYtZWYwMC00ZDI4LWE0YWUtNjU0OWNkNTlhYTRm LzEvci1iNHl1ZEpMUVpPQXdjY2tVYzVMdTNVVzhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudzdMA0G CSqGSIb3DQEBCwUAA4IBAQCqWY22ukZOnykS1wlZ11Z5Bxt6F6D8jpX0KFzFkwE9 pszWscZ6WUU8o5tFmukcfxZsKFDLX6Ml9Ab//tlaGNqgjPqKlLVl7v7GEA13mIsJ 4oS2cNla0G4pQWISa/zstjwIviabEF7cSKPsdsaVLKyZCgBncUIY01qEliD5HWzh RxslNHdUoXXDqrLmPZlQVsidbKWfkjVvEqw8lYTUnUV7JhGOAeRTCvWroGUxkstx GlhBk++ekVJU0uYzJAeceFNTeIlTjqWinaujA3xAh7PgWnNRr/QK5ZNZn6ob3dWX hkWC54fXMoy8F4wgeYvboTlsbSVfh/dDQdTx4lgL+8kb -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:58 2026 by rpki-client