This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/W2ifOrhN8XKMgVXk_yqwQmU4tZA.roa File: W2ifOrhN8XKMgVXk_yqwQmU4tZA.roa (raw, json) Hash identifier: RoZTZalHouz/5mT7p1eNKVRbeaGCPt3XY2qpyiJFuNE= Subject key identifier: 5B:68:9F:3A:B8:4D:F1:72:8C:81:55:E4:FF:2A:B0:42:65:38:B5:90 Certificate issuer: /CN=96e82ab648b8b3f8857569c39af9544adfc17c01 Certificate serial: 019B77C70B01BD44F81D0324D5DB16674406 Authority key identifier: 96:E8:2A:B6:48:B8:B3:F8:85:75:69:C3:9A:F9:54:4A:DF:C1:7C:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/W2ifOrhN8XKMgVXk_yqwQmU4tZA.roa Signing time: Thu 01 Jan 2026 04:18:11 +0000 ROA not before: Thu 01 Jan 2026 04:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13065 IP address blocks: 89.28.224.0/21 maxlen: 21 185.9.56.0/22 maxlen: 22 212.109.144.0/20 maxlen: 20 2a00:6c40:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.mft rsync://rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:0b:01:bd:44:f8:1d:03:24:d5:db:16:67:44:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96e82ab648b8b3f8857569c39af9544adfc17c01 Validity Not Before: Jan 1 04:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b689f3ab84df1728c8155e4ff2ab0426538b590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:bc:77:c9:5e:eb:65:c8:ac:67:16:b9:b2:d6: 19:ae:3d:44:12:7c:16:72:14:c4:45:35:6c:34:24: cc:4b:12:58:de:67:fb:f4:54:69:5b:d5:fe:48:6e: 5f:1b:f5:36:17:5f:ce:a8:62:5a:a1:8c:26:8a:41: 04:1d:f0:c7:72:31:64:fe:4d:77:28:50:94:80:5c: c4:ab:40:7a:84:5d:90:83:69:7c:ce:25:2a:7f:8a: 78:c6:57:4c:34:32:0b:27:9e:32:5f:db:ce:b6:22: c6:e8:a6:66:9d:15:06:85:02:a9:29:30:a8:db:b7: 51:a0:ef:28:1b:2f:82:6b:0f:f9:d5:ff:1c:e4:2c: e9:5d:1f:59:e8:b3:d3:62:ac:41:f2:77:67:f1:cc: 58:c0:6a:05:45:81:c9:76:74:d9:1b:72:1f:b9:51: f8:58:e8:11:dd:19:66:39:1d:e1:2d:0f:84:e2:ed: ed:3f:bf:17:43:3d:7b:9c:4c:d9:74:89:0c:0c:94: 38:30:d6:b4:78:20:49:a2:50:d1:b8:b5:26:f3:da: 07:d1:e8:a4:98:17:38:d9:93:5f:2f:31:05:ac:b5: 41:69:ee:0a:4d:96:d4:23:c8:c4:85:88:aa:2d:5c: 7a:37:65:cf:e0:a7:5c:b2:cf:a2:7a:d3:24:85:41: bd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:68:9F:3A:B8:4D:F1:72:8C:81:55:E4:FF:2A:B0:42:65:38:B5:90 X509v3 Authority Key Identifier: keyid:96:E8:2A:B6:48:B8:B3:F8:85:75:69:C3:9A:F9:54:4A:DF:C1:7C:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lugqtki4s_iFdWnDmvlUSt_BfAE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/W2ifOrhN8XKMgVXk_yqwQmU4tZA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2426f1-8f2a-49ff-8643-193ad5c79b83/1/lugqtki4s_iFdWnDmvlUSt_BfAE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.28.224.0/21 185.9.56.0/22 212.109.144.0/20 IPv6: 2a00:6c40:8000::/33 Signature Algorithm: sha256WithRSAEncryption 45:f4:5b:78:14:52:45:7f:e1:3d:8f:ad:f7:a4:dc:b2:27:aa: 5f:c5:07:94:ea:c6:23:85:d9:93:49:ef:a1:1a:bd:6d:77:20: 2d:6b:40:d9:74:44:29:73:02:7f:a1:64:75:25:3f:d0:7e:c9: 8e:a9:e3:c3:98:f2:60:d1:82:fe:dc:f6:78:3a:04:90:78:d6: 42:98:2a:34:a7:76:ce:92:4a:cc:ca:ee:2c:a8:af:97:b7:c3: eb:e5:ed:57:35:39:6f:de:af:e4:ec:f5:19:17:b1:ff:32:98: 21:97:42:b6:98:da:63:2b:20:cc:03:4a:2d:ff:8e:99:16:df: 8c:f9:a1:c0:1a:39:55:34:26:ac:5f:0b:f2:58:52:0c:05:bd: d5:b0:6e:ea:99:4b:af:bf:b3:9c:98:41:18:eb:2e:b7:9f:16: 33:49:53:0d:4d:2c:d3:77:af:95:31:cd:1e:5a:c5:67:aa:f6: a3:27:2d:79:72:0a:f5:b1:b0:0f:98:92:a6:af:4c:c5:40:0b: d7:69:f9:70:29:9b:12:d1:60:79:3f:93:8f:a3:e0:b8:cf:3a: b4:ed:51:67:5b:74:22:97:ae:19:c0:66:17:11:72:14:c5:03: 83:d1:b3:60:39:46:ba:1a:01:0f:4a:dc:e8:e6:1c:e8:f0:50: 8e:25:14:fd -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt3xwsBvUT4HQMk1dsWZ0QGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk2ZTgyYWI2NDhiOGIzZjg4NTc1NjljMzlhZjk1NDRhZGZj MTdjMDEwHhcNMjYwMTAxMDQxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjY4OWYzYWI4NGRmMTcyOGM4MTU1ZTRmZjJhYjA0MjY1MzhiNTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkrx3yV7rZcisZxa5stYZrj1EEnwW chTERTVsNCTMSxJY3mf79FRpW9X+SG5fG/U2F1/OqGJaoYwmikEEHfDHcjFk/k13 KFCUgFzEq0B6hF2Qg2l8ziUqf4p4xldMNDILJ54yX9vOtiLG6KZmnRUGhQKpKTCo 27dRoO8oGy+Caw/51f8c5CzpXR9Z6LPTYqxB8ndn8cxYwGoFRYHJdnTZG3IfuVH4 WOgR3RlmOR3hLQ+E4u3tP78XQz17nEzZdIkMDJQ4MNa0eCBJolDRuLUm89oH0eik mBc42ZNfLzEFrLVBae4KTZbUI8jEhYiqLVx6N2XP4Kdcss+ietMkhUG9bQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFFtonzq4TfFyjIFV5P8qsEJlOLWQMB8GA1UdIwQY MBaAFJboKrZIuLP4hXVpw5r5VErfwXwBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbHVncXRraTRzX2lGZFduRG12bFVTdF9CZkFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8yNDI2ZjEtOGYyYS00OWZmLTg2NDMt MTkzYWQ1Yzc5YjgzLzEvVzJpZk9yaE44WEtNZ1ZYa195cXdRbVU0dFpBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8yNDI2ZjEtOGYyYS00OWZmLTg2NDMtMTkzYWQ1Yzc5Yjgz LzEvbHVncXRraTRzX2lGZFduRG12bFVTdF9CZkFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAYBAIAATASAwQDWRzgAwQC uQk4AwQE1G2QMA4EAgACMAgDBgcqAGxAgDANBgkqhkiG9w0BAQsFAAOCAQEARfRb eBRSRX/hPY+t96TcsieqX8UHlOrGI4XZk0nvoRq9bXcgLWtA2XREKXMCf6FkdSU/ 0H7Jjqnjw5jyYNGC/tz2eDoEkHjWQpgqNKd2zpJKzMruLKivl7fD6+XtVzU5b96v 5Oz1GRex/zKYIZdCtpjaYysgzANKLf+OmRbfjPmhwBo5VTQmrF8L8lhSDAW91bBu 6plLr7+znJhBGOsut58WM0lTDU0s03evlTHNHlrFZ6r2oycteXIK9bGwD5iSpq9M xUAL12n5cCmbEtFgeT+Tj6PguM86tO1RZ1t0IpeuGcBmFxFyFMUDg9GzYDlGuhoB D0rc6OYc6PBQjiUU/Q== -----END CERTIFICATE-----Generated at Tue Feb 10 03:12:17 2026 by rpki-client