This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/wH04fJxQ3qU9IbgB_fc0WmmCsVE.roa File: wH04fJxQ3qU9IbgB_fc0WmmCsVE.roa (raw, json) Hash identifier: JaIiaqFbUadXR96s5KJcsIzRyU4XlBt77SuBIAaeHZg= Subject key identifier: C0:7D:38:7C:9C:50:DE:A5:3D:21:B8:01:FD:F7:34:5A:69:82:B1:51 Certificate issuer: /CN=62bd6c2bdf61e23eafe23dde016db8b3e1595f76 Certificate serial: 019B78A2DA6DED01071E052A203875175F4F Authority key identifier: 62:BD:6C:2B:DF:61:E2:3E:AF:E2:3D:DE:01:6D:B8:B3:E1:59:5F:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yr1sK99h4j6v4j3eAW24s-FZX3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/wH04fJxQ3qU9IbgB_fc0WmmCsVE.roa Signing time: Thu 01 Jan 2026 08:18:17 +0000 ROA not before: Thu 01 Jan 2026 08:18:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51380 IP address blocks: 91.218.192.0/23 maxlen: 23 91.218.192.0/24 maxlen: 24 91.218.193.0/24 maxlen: 24 195.20.4.0/23 maxlen: 23 195.20.4.0/24 maxlen: 24 195.20.5.0/24 maxlen: 24 195.20.6.0/24 maxlen: 24 195.20.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/Yr1sK99h4j6v4j3eAW24s-FZX3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:da:6d:ed:01:07:1e:05:2a:20:38:75:17:5f:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62bd6c2bdf61e23eafe23dde016db8b3e1595f76 Validity Not Before: Jan 1 08:18:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c07d387c9c50dea53d21b801fdf7345a6982b151 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d4:9b:f1:56:a5:ca:7e:63:de:e7:35:47:41: 73:6c:d9:a8:47:15:78:cc:b2:ea:99:be:88:ae:72: 8a:93:26:29:c4:ab:16:c1:cc:8e:a1:38:47:9e:e6: 64:37:b7:21:8d:35:a3:52:48:5b:c3:e3:f6:cd:24: 97:28:ad:a6:ec:53:88:df:c8:6e:8e:68:f5:6a:a3: d6:90:32:1e:88:c8:78:8b:20:a5:b9:9f:a6:9d:18: 30:55:2a:11:ca:25:de:f9:92:a6:b7:61:c8:49:81: 2f:a1:c1:ce:58:89:4d:6a:0c:be:0b:88:35:56:1d: de:6f:ae:84:5a:93:8b:d1:c4:3f:5c:bd:15:af:6b: 43:e6:15:a2:22:48:d6:18:5d:e7:9e:db:a8:67:ea: 6e:5a:06:cb:e6:cf:b3:1f:36:fb:84:99:33:6e:7d: 6a:95:33:c9:65:4b:fb:e9:d8:06:87:d4:ad:c5:2c: 48:1e:b9:9c:b7:fd:49:3d:87:1d:13:b5:e5:74:3d: b8:6a:2c:05:2d:52:31:91:f7:88:0f:fa:cf:3b:74: 21:68:eb:89:a1:3a:58:31:f9:48:5f:c1:57:f5:ab: 20:ed:88:08:ea:4a:1c:52:04:34:f8:94:45:3c:6b: 43:36:f9:f0:27:06:62:10:cb:36:ed:e9:68:b0:1c: 76:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:7D:38:7C:9C:50:DE:A5:3D:21:B8:01:FD:F7:34:5A:69:82:B1:51 X509v3 Authority Key Identifier: keyid:62:BD:6C:2B:DF:61:E2:3E:AF:E2:3D:DE:01:6D:B8:B3:E1:59:5F:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr1sK99h4j6v4j3eAW24s-FZX3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/wH04fJxQ3qU9IbgB_fc0WmmCsVE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4c9d73-f805-4d72-8a37-b82b0ed2d323/1/Yr1sK99h4j6v4j3eAW24s-FZX3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.218.192.0/23 195.20.4.0/22 Signature Algorithm: sha256WithRSAEncryption 68:20:49:43:18:23:4d:cb:32:ea:e7:34:90:2f:86:c2:95:0e: 2b:be:f3:0e:33:76:99:66:32:5a:b0:20:38:49:e6:10:03:b0: 99:23:29:23:e2:95:e9:7d:d9:0b:9f:08:11:90:1a:62:01:bb: 7d:44:1d:dd:91:34:6f:51:ff:73:c7:0d:23:31:e9:61:16:c7: 91:da:de:1f:ed:26:d5:00:a0:3f:d5:04:0e:74:e1:20:df:fb: 39:2b:93:67:bf:5b:e1:89:d0:6e:5f:7d:43:7d:29:b1:6e:7e: a0:f3:78:40:19:fb:03:ea:b8:1b:e6:f8:8b:58:42:83:18:42: 09:f3:03:a3:19:49:eb:30:88:39:ee:2f:62:72:e5:60:0c:18: 60:83:c5:0a:3c:bb:92:8b:1d:3a:b3:d9:c2:09:bf:69:a3:37: bf:3b:82:56:3f:a6:8c:b5:c8:71:90:0c:e0:47:23:ec:c2:1c: 78:81:18:b0:fc:94:a7:a0:91:e6:39:57:45:22:0d:c1:2f:08: db:15:65:3b:b0:06:3e:69:ff:eb:26:32:c2:e0:40:0d:83:59: c2:e8:ad:95:44:11:1d:e6:a1:5b:f8:fe:0f:8d:bd:26:82:63: b8:05:a0:da:77:b5:cc:81:10:db:9c:41:98:8f:9f:0e:d6:36: fa:e6:93:62 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4otpt7QEHHgUqIDh1F19PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyYmQ2YzJiZGY2MWUyM2VhZmUyM2RkZTAxNmRiOGIzZTE1 OTVmNzYwHhcNMjYwMTAxMDgxODE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDdkMzg3YzljNTBkZWE1M2QyMWI4MDFmZGY3MzQ1YTY5ODJiMTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NSb8Valyn5j3uc1R0FzbNmoRxV4 zLLqmb6IrnKKkyYpxKsWwcyOoThHnuZkN7chjTWjUkhbw+P2zSSXKK2m7FOI38hu jmj1aqPWkDIeiMh4iyCluZ+mnRgwVSoRyiXe+ZKmt2HISYEvocHOWIlNagy+C4g1 Vh3eb66EWpOL0cQ/XL0Vr2tD5hWiIkjWGF3nntuoZ+puWgbL5s+zHzb7hJkzbn1q lTPJZUv76dgGh9StxSxIHrmct/1JPYcdE7XldD24aiwFLVIxkfeID/rPO3QhaOuJ oTpYMflIX8FX9asg7YgI6kocUgQ0+JRFPGtDNvnwJwZiEMs27elosBx2owIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMB9OHycUN6lPSG4Af33NFppgrFRMB8GA1UdIwQY MBaAFGK9bCvfYeI+r+I93gFtuLPhWV92MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXIxc0s5OWg0ajZ2NGozZUFXMjRzLUZaWDNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi80YzlkNzMtZjgwNS00ZDcyLThhMzct YjgyYjBlZDJkMzIzLzEvd0gwNGZKeFEzcVU5SWJnQl9mYzBXbW1Dc1ZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi80YzlkNzMtZjgwNS00ZDcyLThhMzctYjgyYjBlZDJkMzIz LzEvWXIxc0s5OWg0ajZ2NGozZUFXMjRzLUZaWDNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW9rAAwQC wxQEMA0GCSqGSIb3DQEBCwUAA4IBAQBoIElDGCNNyzLq5zSQL4bClQ4rvvMOM3aZ ZjJasCA4SeYQA7CZIykj4pXpfdkLnwgRkBpiAbt9RB3dkTRvUf9zxw0jMelhFseR 2t4f7SbVAKA/1QQOdOEg3/s5K5Nnv1vhidBuX31DfSmxbn6g83hAGfsD6rgb5viL WEKDGEIJ8wOjGUnrMIg57i9icuVgDBhgg8UKPLuSix06s9nCCb9poze/O4JWP6aM tchxkAzgRyPswhx4gRiw/JSnoJHmOVdFIg3BLwjbFWU7sAY+af/rJjLC4EANg1nC 6K2VRBEd5qFb+P4Pjb0mgmO4BaDad7XMgRDbnEGYj58O1jb65pNi -----END CERTIFICATE-----Generated at Mon Feb 9 18:21:41 2026 by rpki-client