This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/wf4Dioz38ILB4v1B0ECWLEz6X7c.roa File: wf4Dioz38ILB4v1B0ECWLEz6X7c.roa (raw, json) Hash identifier: EBxrOoYlpbtk2ShhC7WmcBl12gxV4Wa50Z9TM1JzCUc= Subject key identifier: C1:FE:03:8A:8C:F7:F0:82:C1:E2:FD:41:D0:40:96:2C:4C:FA:5F:B7 Certificate issuer: /CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef Certificate serial: 019B78A37DCD53922FDD3A68215C565C8641 Authority key identifier: D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/wf4Dioz38ILB4v1B0ECWLEz6X7c.roa Signing time: Thu 01 Jan 2026 08:18:59 +0000 ROA not before: Thu 01 Jan 2026 08:18:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196883 IP address blocks: 109.196.112.0/20 maxlen: 24 109.196.112.0/21 maxlen: 24 109.196.112.0/24 maxlen: 24 109.196.113.0/24 maxlen: 24 109.196.114.0/24 maxlen: 24 109.196.115.0/24 maxlen: 24 109.196.116.0/24 maxlen: 24 109.196.117.0/24 maxlen: 24 109.196.118.0/24 maxlen: 24 109.196.119.0/24 maxlen: 24 109.196.120.0/21 maxlen: 24 109.196.120.0/23 maxlen: 23 109.196.120.0/24 maxlen: 24 109.196.121.0/24 maxlen: 24 109.196.122.0/23 maxlen: 23 109.196.122.0/24 maxlen: 24 109.196.123.0/24 maxlen: 24 109.196.124.0/22 maxlen: 23 109.196.124.0/24 maxlen: 24 109.196.125.0/24 maxlen: 24 109.196.126.0/24 maxlen: 24 109.196.127.0/24 maxlen: 24 2001:67c:11c::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.mft rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:7d:cd:53:92:2f:dd:3a:68:21:5c:56:5c:86:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0a16bf7e0e3b9330b54483e19f613b02b627bef Validity Not Before: Jan 1 08:18:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1fe038a8cf7f082c1e2fd41d040962c4cfa5fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e1:a9:8f:53:9d:30:68:9e:32:40:d6:92:bd: 46:fb:e2:cd:59:96:88:d4:28:cf:fc:b4:34:93:db: df:26:c2:a9:59:6f:f3:01:50:d9:aa:76:59:35:2a: 66:c6:ee:b4:b5:da:29:df:ac:87:cb:f4:07:ed:cb: 54:b4:46:e9:9f:50:e4:2a:22:fa:6e:53:9d:4f:8a: a7:e1:30:d5:de:76:98:44:f4:0e:3c:34:1f:95:5a: 62:3b:3e:ce:ce:6d:9d:54:84:7a:25:7f:8a:9e:c6: 48:27:b7:e6:b4:84:81:bd:ee:e2:44:88:d0:9b:4a: d9:77:92:31:98:0d:dd:76:e7:36:ca:c0:d8:fb:8f: f2:3b:af:1b:4e:a8:99:b6:a6:60:4d:83:d5:86:b6: 0e:c1:41:9d:f8:9f:a9:d0:ea:95:23:84:b4:45:69: 71:58:ea:9d:33:b8:a9:79:64:02:b1:fc:a0:74:8a: 3d:dc:aa:4d:bc:30:c2:9d:c3:32:fb:93:b7:00:22: 49:39:aa:c0:56:ce:4c:81:3d:04:bb:65:1d:ba:a5: 63:0a:b5:77:c5:5c:76:4f:1d:a1:26:e8:5b:a7:41: 29:ec:66:50:c3:ab:43:7b:16:a7:a7:4d:a0:74:c7: 48:10:f4:5c:b8:d5:97:dc:38:49:62:f3:a2:f5:ec: 8f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:FE:03:8A:8C:F7:F0:82:C1:E2:FD:41:D0:40:96:2C:4C:FA:5F:B7 X509v3 Authority Key Identifier: keyid:D0:A1:6B:F7:E0:E3:B9:33:0B:54:48:3E:19:F6:13:B0:2B:62:7B:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0KFr9-DjuTMLVEg-GfYTsCtie-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/wf4Dioz38ILB4v1B0ECWLEz6X7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ceaffb-ac25-491d-b3cc-4ef03c1081f8/1/0KFr9-DjuTMLVEg-GfYTsCtie-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.196.112.0/20 IPv6: 2001:67c:11c::/48 Signature Algorithm: sha256WithRSAEncryption 84:5b:b7:18:21:33:2a:bd:a3:4b:4d:ee:25:86:09:40:d8:5a: 9f:a8:1f:5e:d0:a4:95:b3:73:4f:e1:59:3c:2e:3b:df:3a:53: 49:73:f0:63:25:9e:29:26:ae:05:3d:6d:6f:23:ef:67:52:10: 55:8c:4a:07:49:d9:93:01:92:b4:cf:d1:98:7a:91:93:43:20: 49:e7:dc:51:a5:41:fb:f6:8d:68:af:01:e3:b1:d4:a9:3e:a7: df:2d:29:20:31:8b:50:68:ca:57:8f:ba:ee:c0:fc:40:f6:73: 83:27:ea:32:75:ac:32:ba:37:6c:ee:6f:ef:e1:61:91:d5:cb: f9:4e:92:69:64:8d:46:90:b8:0c:28:44:6d:82:13:c6:9b:86: 92:ae:88:de:8e:47:8e:0f:de:d4:c2:60:ee:35:d2:1d:95:4a: 2a:ff:41:d6:75:66:21:e9:a2:27:03:2f:ef:e8:25:eb:2d:4c: f9:6f:46:bd:6a:38:f7:f1:26:12:d8:af:b0:d6:3d:45:81:73: 67:70:89:16:a0:67:bc:70:f4:13:66:26:e2:c8:40:a1:b4:7b: c5:01:3b:6f:5b:e2:ac:83:1c:e9:04:44:bd:9a:48:65:54:2f: cf:03:0e:a7:06:f5:a5:a7:cd:9a:fa:14:0d:ab:b0:9d:f5:47: 5d:aa:a1:50 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt4o33NU5Iv3TpoIVxWXIZBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwYTE2YmY3ZTBlM2I5MzMwYjU0NDgzZTE5ZjYxM2IwMmI2 MjdiZWYwHhcNMjYwMTAxMDgxODU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWZlMDM4YThjZjdmMDgyYzFlMmZkNDFkMDQwOTYyYzRjZmE1ZmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuGpj1OdMGieMkDWkr1G++LNWZaI 1CjP/LQ0k9vfJsKpWW/zAVDZqnZZNSpmxu60tdop36yHy/QH7ctUtEbpn1DkKiL6 blOdT4qn4TDV3naYRPQOPDQflVpiOz7Ozm2dVIR6JX+KnsZIJ7fmtISBve7iRIjQ m0rZd5IxmA3dduc2ysDY+4/yO68bTqiZtqZgTYPVhrYOwUGd+J+p0OqVI4S0RWlx WOqdM7ipeWQCsfygdIo93KpNvDDCncMy+5O3ACJJOarAVs5MgT0Eu2UduqVjCrV3 xVx2Tx2hJuhbp0Ep7GZQw6tDexanp02gdMdIEPRcuNWX3DhJYvOi9eyP5QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMH+A4qM9/CCweL9QdBAlixM+l+3MB8GA1UdIwQY MBaAFNCha/fg47kzC1RIPhn2E7ArYnvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEtGcjktRGp1VE1MVkVnLUdmWVRzQ3RpZS04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jZWFmZmItYWMyNS00OTFkLWIzY2Mt NGVmMDNjMTA4MWY4LzEvd2Y0RGlvejM4SUxCNHYxQjBFQ1dMRXo2WDdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9jZWFmZmItYWMyNS00OTFkLWIzY2MtNGVmMDNjMTA4MWY4 LzEvMEtGcjktRGp1VE1MVkVnLUdmWVRzQ3RpZS04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQEbcRwMA8E AgACMAkDBwAgAQZ8ARwwDQYJKoZIhvcNAQELBQADggEBAIRbtxghMyq9o0tN7iWG CUDYWp+oH17QpJWzc0/hWTwuO986U0lz8GMlnikmrgU9bW8j72dSEFWMSgdJ2ZMB krTP0Zh6kZNDIEnn3FGlQfv2jWivAeOx1Kk+p98tKSAxi1BoylePuu7A/ED2c4Mn 6jJ1rDK6N2zub+/hYZHVy/lOkmlkjUaQuAwoRG2CE8abhpKuiN6OR44P3tTCYO41 0h2VSir/QdZ1ZiHpoicDL+/oJestTPlvRr1qOPfxJhLYr7DWPUWBc2dwiRagZ7xw 9BNmJuLIQKG0e8UBO29b4qyDHOkERL2aSGVUL88DDqcG9aWnzZr6FA2rsJ31R12q oVA= -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:38 2026 by rpki-client