This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/wQm0gT6YRgZ2nqvvbdZP8HABX1g.roa File: wQm0gT6YRgZ2nqvvbdZP8HABX1g.roa (raw, json) Hash identifier: lv0NLhocLe+FJTNGQJeE7nOCNJ41Pw/iis4OedPiswI= Subject key identifier: C1:09:B4:81:3E:98:46:06:76:9E:AB:EF:6D:D6:4F:F0:70:01:5F:58 Certificate issuer: /CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6 Certificate serial: 019B7F800AE141D2306730FA88E9D072BCAA Authority key identifier: 8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/wQm0gT6YRgZ2nqvvbdZP8HABX1g.roa Signing time: Fri 02 Jan 2026 16:17:36 +0000 ROA not before: Fri 02 Jan 2026 16:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202475 IP address blocks: 193.57.52.0/24 maxlen: 24 193.57.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.mft rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:80:0a:e1:41:d2:30:67:30:fa:88:e9:d0:72:bc:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f0064c6f80e0967fbe4e4b8fb24a4143c4857c6 Validity Not Before: Jan 2 16:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c109b4813e984606769eabef6dd64ff070015f58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:77:7c:0f:cc:e6:9a:b1:27:4c:66:62:e1:55: 29:71:27:f2:3b:2f:e7:ee:50:9f:16:4d:7f:3d:d3: 29:eb:84:9c:08:38:2e:de:b0:47:03:4e:83:68:aa: 3d:6b:3a:82:79:d2:2d:8d:24:7a:68:39:44:6d:b8: 63:52:66:84:d6:8f:22:4e:56:ce:8a:18:8c:12:96: eb:7a:15:b3:82:90:c9:18:b7:6f:d3:6e:a9:92:40: de:a1:7e:04:30:ad:9d:07:c1:e3:52:f9:61:99:c2: 17:d8:e1:07:23:b7:66:cc:b5:ce:b0:f8:95:10:54: b2:3a:e5:a2:bc:ff:d8:c1:b7:9c:ed:69:17:31:3b: 52:7f:5e:7a:3b:b4:92:ae:dc:89:9d:4c:fe:62:5a: 50:75:31:ab:9b:4b:82:58:4a:77:df:cc:36:52:c2: c3:e3:ba:fc:bb:7d:1a:08:57:ca:10:c7:16:ac:a8: fa:a2:0d:17:58:ec:72:10:d2:24:d7:ee:8d:ec:cd: 2a:f2:b4:f5:0e:ef:af:95:bb:fd:54:00:fb:28:39: e3:78:76:c5:b4:88:69:45:f8:9a:cf:c7:2a:81:81: 09:7e:da:95:d2:19:61:7e:fa:e2:a5:4f:ad:fa:0e: a3:0a:71:b6:a2:17:ac:17:26:4b:1d:8e:8d:b8:9e: c5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:09:B4:81:3E:98:46:06:76:9E:AB:EF:6D:D6:4F:F0:70:01:5F:58 X509v3 Authority Key Identifier: keyid:8F:00:64:C6:F8:0E:09:67:FB:E4:E4:B8:FB:24:A4:14:3C:48:57:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jwBkxvgOCWf75OS4-ySkFDxIV8Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/wQm0gT6YRgZ2nqvvbdZP8HABX1g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/5bab79-afaa-4cdd-bc23-40314fc3d874/1/jwBkxvgOCWf75OS4-ySkFDxIV8Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.57.52.0/23 Signature Algorithm: sha256WithRSAEncryption 42:2d:14:ef:bb:50:54:29:91:ef:46:ba:d4:58:6e:38:61:f4: 8c:2c:24:2e:4f:db:bd:3f:01:f5:31:93:7a:fd:d3:58:0a:58: 24:40:79:5c:24:ef:12:9b:8c:f4:7d:7f:51:17:0b:7d:70:b0: 48:20:df:05:51:4e:98:fa:e6:7a:fd:47:29:28:ef:2a:78:13: d2:9d:b1:2e:0d:9a:a2:5d:51:0d:a3:8f:8a:b3:d6:66:65:df: 81:fb:b7:06:07:57:8a:de:fe:33:16:81:7a:b0:8c:75:04:0a: 79:ad:b3:f2:1c:66:26:eb:2b:0b:cb:2b:2b:87:cb:16:4d:4d: f5:38:48:97:e5:2d:37:8c:8e:8d:e2:c2:c8:4d:4b:d5:10:b7: 34:af:55:27:a8:f0:c2:a4:93:47:80:8a:17:6f:78:0b:bd:24: c9:f9:1a:86:b9:f8:6f:a7:2a:9e:5e:28:f6:5b:d0:91:c8:7d: 9a:08:ca:2e:fd:24:0c:9c:73:76:3c:f0:6e:67:b3:a1:d2:7c: 36:d6:f3:09:fb:52:ea:89:d2:36:5c:cd:0b:b0:79:f4:d2:e0: 4f:59:59:dd:4b:55:08:d1:e5:83:85:b2:0a:cc:9c:6e:c0:32: be:96:9e:cd:05:77:24:9d:15:d2:bd:0e:25:a2:e7:ec:eb:73: 98:2b:a4:2c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gArhQdIwZzD6iOnQcryqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMDA2NGM2ZjgwZTA5NjdmYmU0ZTRiOGZiMjRhNDE0M2M0 ODU3YzYwHhcNMjYwMTAyMTYxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTA5YjQ4MTNlOTg0NjA2NzY5ZWFiZWY2ZGQ2NGZmMDcwMDE1ZjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Xd8D8zmmrEnTGZi4VUpcSfyOy/n 7lCfFk1/PdMp64ScCDgu3rBHA06DaKo9azqCedItjSR6aDlEbbhjUmaE1o8iTlbO ihiMEpbrehWzgpDJGLdv026pkkDeoX4EMK2dB8HjUvlhmcIX2OEHI7dmzLXOsPiV EFSyOuWivP/Ywbec7WkXMTtSf156O7SSrtyJnUz+YlpQdTGrm0uCWEp338w2UsLD 47r8u30aCFfKEMcWrKj6og0XWOxyENIk1+6N7M0q8rT1Du+vlbv9VAD7KDnjeHbF tIhpRfiaz8cqgYEJftqV0hlhfvripU+t+g6jCnG2ohesFyZLHY6NuJ7FcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMEJtIE+mEYGdp6r723WT/BwAV9YMB8GA1UdIwQY MBaAFI8AZMb4Dgln++TkuPskpBQ8SFfGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvandCa3h2Z09DV2Y3NU9TNC15U2tGRHhJVjhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy81YmFiNzktYWZhYS00Y2RkLWJjMjMt NDAzMTRmYzNkODc0LzEvd1FtMGdUNllSZ1oybnF2dmJkWlA4SEFCWDFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy81YmFiNzktYWZhYS00Y2RkLWJjMjMtNDAzMTRmYzNkODc0 LzEvandCa3h2Z09DV2Y3NU9TNC15U2tGRHhJVjhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwTk0MA0G CSqGSIb3DQEBCwUAA4IBAQBCLRTvu1BUKZHvRrrUWG44YfSMLCQuT9u9PwH1MZN6 /dNYClgkQHlcJO8Sm4z0fX9RFwt9cLBIIN8FUU6Y+uZ6/UcpKO8qeBPSnbEuDZqi XVENo4+Ks9ZmZd+B+7cGB1eK3v4zFoF6sIx1BAp5rbPyHGYm6ysLyysrh8sWTU31 OEiX5S03jI6N4sLITUvVELc0r1UnqPDCpJNHgIoXb3gLvSTJ+RqGufhvpyqeXij2 W9CRyH2aCMou/SQMnHN2PPBuZ7Oh0nw21vMJ+1LqidI2XM0LsHn00uBPWVndS1UI 0eWDhbIKzJxuwDK+lp7NBXcknRXSvQ4loufs63OYK6Qs -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:30 2026 by rpki-client