This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/D1F4AwDSP0DpFXVKqtO62poYhGo.roa File: D1F4AwDSP0DpFXVKqtO62poYhGo.roa (raw, json) Hash identifier: HFTwrntOgjxmxHVlJcT3YFDvFfol8GOo19TviMZdSu8= Subject key identifier: 0F:51:78:03:00:D2:3F:40:E9:15:75:4A:AA:D3:BA:DA:9A:18:84:6A Certificate issuer: /CN=58bb8ee3a747ed8b578657cdd4737586f5fdb931 Certificate serial: 019B7B35E5BB479EE7A350A89943EF5B6B34 Authority key identifier: 58:BB:8E:E3:A7:47:ED:8B:57:86:57:CD:D4:73:75:86:F5:FD:B9:31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WLuO46dH7YtXhlfN1HN1hvX9uTE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/D1F4AwDSP0DpFXVKqtO62poYhGo.roa Signing time: Thu 01 Jan 2026 20:18:08 +0000 ROA not before: Thu 01 Jan 2026 20:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8356 IP address blocks: 185.109.124.0/22 maxlen: 24 217.198.56.0/21 maxlen: 24 2001:768::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/WLuO46dH7YtXhlfN1HN1hvX9uTE.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/WLuO46dH7YtXhlfN1HN1hvX9uTE.mft rsync://rpki.ripe.net/repository/DEFAULT/WLuO46dH7YtXhlfN1HN1hvX9uTE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 08:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:e5:bb:47:9e:e7:a3:50:a8:99:43:ef:5b:6b:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58bb8ee3a747ed8b578657cdd4737586f5fdb931 Validity Not Before: Jan 1 20:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0f51780300d23f40e915754aaad3bada9a18846a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:a7:12:5a:b3:dd:bf:18:38:43:47:ed:d9:a1: da:d6:dc:0e:00:fe:79:e4:c7:cc:14:84:b2:7d:66: 4d:8f:40:0a:f9:9b:c2:11:a2:09:e0:2c:6a:0f:ad: d0:8e:35:f1:1f:da:79:d4:36:25:58:05:80:cb:39: 72:ac:d3:b2:2a:a8:bc:f5:16:81:df:53:cd:3a:a7: f9:ca:58:9e:f6:be:bd:c5:1e:c9:16:e2:99:31:bb: 86:b9:b6:c4:65:bd:a3:02:ce:64:58:6a:d2:39:b9: b3:ac:30:d2:45:83:9e:cf:7e:57:e7:74:11:26:e1: 29:3b:89:23:a3:34:6c:fb:60:2c:6f:75:a6:a9:c9: 8c:45:17:8d:f5:0e:15:97:9e:14:16:43:00:2e:37: aa:eb:cc:6a:14:15:09:d9:a9:28:37:20:db:88:6a: 56:cc:df:21:3c:55:7a:3b:b3:41:36:5a:cd:43:b6: 6a:0c:90:41:a4:13:96:36:92:04:ee:a3:6f:99:9f: 94:b5:d9:3a:57:1b:b7:cb:75:e6:fb:c3:d1:81:4a: 94:92:3a:b2:22:51:bc:93:11:4b:9f:b6:84:27:30: 3a:48:f0:ac:18:1f:c6:cf:61:7e:66:80:b8:62:fa: 8b:da:43:eb:2a:0f:7c:b9:00:17:f1:e1:71:4e:ba: 80:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:51:78:03:00:D2:3F:40:E9:15:75:4A:AA:D3:BA:DA:9A:18:84:6A X509v3 Authority Key Identifier: keyid:58:BB:8E:E3:A7:47:ED:8B:57:86:57:CD:D4:73:75:86:F5:FD:B9:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WLuO46dH7YtXhlfN1HN1hvX9uTE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/D1F4AwDSP0DpFXVKqtO62poYhGo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/03a70b-3bc6-4339-9e49-a83f914035b3/1/WLuO46dH7YtXhlfN1HN1hvX9uTE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.109.124.0/22 217.198.56.0/21 IPv6: 2001:768::/32 Signature Algorithm: sha256WithRSAEncryption aa:4f:cb:5d:99:a5:de:3b:d5:35:37:f8:8c:71:b6:2b:b5:e8: 36:e0:c2:db:1a:e6:1e:9a:14:04:8f:ab:10:0b:2c:60:bd:cd: d5:35:db:19:71:1f:92:2c:a4:26:47:8e:56:fb:0b:bf:40:df: 4f:04:c4:4e:ce:d5:40:c3:76:00:9e:dc:f3:f8:40:a6:d4:bd: a2:db:5e:e0:c1:e8:ed:94:c1:de:bd:51:fa:5f:14:ab:c2:3f: 4d:df:ae:ad:e0:43:fd:e3:77:1a:db:fe:7b:01:d5:9c:ff:17: d1:1d:19:2c:37:63:40:14:1e:62:64:65:02:39:b5:91:ce:77: 3d:d0:a9:5f:46:cc:87:93:af:51:2f:ab:4d:3f:04:97:35:89: 64:a4:43:73:ee:11:16:2f:ab:be:dd:7c:22:dd:8c:36:12:38: 7c:db:cb:d0:10:d7:f2:77:37:fe:cf:ea:b3:c4:e4:78:4f:f8: 01:d1:fd:a6:cb:4b:32:fe:b8:66:bc:42:4c:0b:19:ed:4e:bf: 59:7f:9b:28:d0:1c:6b:34:2e:4d:52:df:df:85:d1:ec:20:d1: 7e:2b:b5:df:c0:15:f5:f2:3c:3d:55:b2:5d:05:a6:92:dc:8f: 2a:41:06:b4:a6:e1:e7:3a:94:ae:75:49:5d:25:fa:69:9e:a4: 48:be:dc:94 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7NeW7R57no1ComUPvW2s0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4YmI4ZWUzYTc0N2VkOGI1Nzg2NTdjZGQ0NzM3NTg2ZjVm ZGI5MzEwHhcNMjYwMTAxMjAxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZjUxNzgwMzAwZDIzZjQwZTkxNTc1NGFhYWQzYmFkYTlhMTg4NDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKcSWrPdvxg4Q0ft2aHa1twOAP55 5MfMFISyfWZNj0AK+ZvCEaIJ4CxqD63QjjXxH9p51DYlWAWAyzlyrNOyKqi89RaB 31PNOqf5ylie9r69xR7JFuKZMbuGubbEZb2jAs5kWGrSObmzrDDSRYOez35X53QR JuEpO4kjozRs+2Asb3WmqcmMRReN9Q4Vl54UFkMALjeq68xqFBUJ2akoNyDbiGpW zN8hPFV6O7NBNlrNQ7ZqDJBBpBOWNpIE7qNvmZ+Utdk6Vxu3y3Xm+8PRgUqUkjqy IlG8kxFLn7aEJzA6SPCsGB/Gz2F+ZoC4YvqL2kPrKg98uQAX8eFxTrqA5QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFA9ReAMA0j9A6RV1SqrTutqaGIRqMB8GA1UdIwQY MBaAFFi7juOnR+2LV4ZXzdRzdYb1/bkxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0x1TzQ2ZEg3WXRYaGxmTjFITjFodlg5dVRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wM2E3MGItM2JjNi00MzM5LTllNDkt YTgzZjkxNDAzNWIzLzEvRDFGNEF3RFNQMERwRlhWS3F0TzYycG9ZaEdvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi8wM2E3MGItM2JjNi00MzM5LTllNDktYTgzZjkxNDAzNWIz LzEvV0x1TzQ2ZEg3WXRYaGxmTjFITjFodlg5dVRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuW18AwQD 2cY4MA0EAgACMAcDBQAgAQdoMA0GCSqGSIb3DQEBCwUAA4IBAQCqT8tdmaXeO9U1 N/iMcbYrteg24MLbGuYemhQEj6sQCyxgvc3VNdsZcR+SLKQmR45W+wu/QN9PBMRO ztVAw3YAntzz+ECm1L2i217gwejtlMHevVH6XxSrwj9N366t4EP943ca2/57AdWc /xfRHRksN2NAFB5iZGUCObWRznc90KlfRsyHk69RL6tNPwSXNYlkpENz7hEWL6u+ 3Xwi3Yw2Ejh828vQENfydzf+z+qzxOR4T/gB0f2my0sy/rhmvEJMCxntTr9Zf5so 0BxrNC5NUt/fhdHsINF+K7XfwBX18jw9VbJdBaaS3I8qQQa0puHnOpSudUldJfpp nqRIvtyU -----END CERTIFICATE-----Generated at Mon Feb 2 17:30:24 2026 by rpki-client