This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/gWRBDddMyWqh-LIfhr099iJ3yoM.roa File: gWRBDddMyWqh-LIfhr099iJ3yoM.roa (raw, json) Hash identifier: miOqJ9LKG8Eyc/AIL8Ov13TsNXdMaSWxli/p6/FIhTs= Subject key identifier: 81:64:41:0D:D7:4C:C9:6A:A1:F8:B2:1F:86:BD:3D:F6:22:77:CA:83 Certificate issuer: /CN=43fad79548afc5c83e59bbfe388c64492cb55013 Certificate serial: 019B7A5B6F568F670D788AB1FE886D8BFD1A Authority key identifier: 43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/gWRBDddMyWqh-LIfhr099iJ3yoM.roa Signing time: Thu 01 Jan 2026 16:19:31 +0000 ROA not before: Thu 01 Jan 2026 16:19:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49594 IP address blocks: 95.174.72.0/21 maxlen: 21 185.29.32.0/22 maxlen: 22 188.73.0.0/18 maxlen: 18 213.151.160.0/22 maxlen: 22 213.151.164.0/23 maxlen: 23 213.151.167.0/24 maxlen: 24 2a02:468::/29 maxlen: 29 2a03:800::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.mft rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:6f:56:8f:67:0d:78:8a:b1:fe:88:6d:8b:fd:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43fad79548afc5c83e59bbfe388c64492cb55013 Validity Not Before: Jan 1 16:19:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8164410dd74cc96aa1f8b21f86bd3df62277ca83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c0:ac:75:ea:06:81:c7:8b:39:bc:8d:87:15: 3b:60:6a:b1:3b:91:ee:0b:6a:df:4c:fd:3e:c6:70: 2e:7c:67:a5:78:25:8d:51:dc:fa:7b:92:ca:78:c6: f2:01:93:21:c5:0b:a0:ac:07:3c:32:9e:de:2b:c6: e6:3e:46:c9:ee:b5:ee:ec:c5:d1:85:0f:c7:6b:b8: bd:9a:3d:68:c6:b3:27:ec:a2:5c:3a:a6:df:eb:ac: 0f:7f:70:77:02:f8:1b:94:0f:25:3a:ee:bb:83:bf: 3e:86:02:02:9a:74:2d:56:f2:bc:ad:97:d9:62:47: c7:e6:a3:ff:f0:56:eb:4e:f8:a0:48:de:8e:42:7a: fb:24:7b:97:c2:ef:63:f5:f6:65:39:52:04:ff:09: 9b:f1:bd:08:fb:8f:8b:f7:cd:6e:33:11:dd:cd:15: 40:0b:fc:c3:34:f6:76:a8:50:e4:1b:f9:fb:57:21: 24:b9:b0:8e:26:f5:77:53:03:64:91:62:3d:fd:56: 0a:ea:fa:d9:f3:6f:4a:4f:66:b6:e2:a2:88:73:e9: 1a:77:aa:2c:a4:6f:60:a9:00:22:03:07:3c:a0:63: 7c:27:8b:62:9b:a5:93:06:19:7d:d3:02:c7:97:f8: 58:93:a8:b5:26:cf:be:6a:5d:85:fc:aa:55:d7:33: 13:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:64:41:0D:D7:4C:C9:6A:A1:F8:B2:1F:86:BD:3D:F6:22:77:CA:83 X509v3 Authority Key Identifier: keyid:43:FA:D7:95:48:AF:C5:C8:3E:59:BB:FE:38:8C:64:49:2C:B5:50:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/gWRBDddMyWqh-LIfhr099iJ3yoM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cf2c1-1962-4b70-9e5b-fe855dabb75e/1/Q_rXlUivxcg-Wbv-OIxkSSy1UBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 95.174.72.0/21 185.29.32.0/22 188.73.0.0/18 213.151.160.0-213.151.165.255 213.151.167.0/24 IPv6: 2a02:468::/29 2a03:800::/32 Signature Algorithm: sha256WithRSAEncryption 23:99:ab:7c:89:61:73:1d:c7:bc:dd:dd:5d:14:62:48:d5:e0: ae:74:8d:d8:21:8c:07:22:60:66:d4:75:33:c0:6b:ba:d3:d0: f8:ac:2d:dd:b4:57:0a:b6:44:92:c3:96:18:64:54:c7:aa:cb: 2a:35:eb:a8:8d:d3:b4:f9:97:24:0c:66:80:ba:32:37:0b:a7: 39:f2:11:15:a9:2b:d9:7f:64:05:43:2f:a1:79:1b:2b:af:44: d5:e7:f0:5c:f3:52:0c:46:ee:34:5c:42:55:34:29:c3:fd:4f: 04:a2:3a:8e:3e:bc:42:7d:0b:25:6f:59:93:2b:61:f4:4d:4e: 28:89:71:5f:e0:b0:51:8c:a6:6d:1b:a3:d0:de:53:7b:51:d8: 1b:41:ab:d1:41:31:78:af:8c:89:77:da:16:86:7d:c3:17:09: 84:c5:25:34:9f:25:27:64:75:88:f5:d8:ff:3b:72:5c:45:d6: 5e:e1:6d:97:4a:36:39:c3:bc:c5:f0:9e:89:73:e7:be:06:7a: a9:5a:05:46:d7:bd:91:85:13:0b:9c:af:64:ae:d3:6f:c6:59: 9b:eb:ee:49:f2:0e:86:b0:46:93:6f:fe:42:2a:cb:04:d9:71: 33:32:ca:cd:5f:6c:2e:57:db:cf:c2:68:17:af:2a:32:6d:c8: d7:ec:fc:d2 -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZt6W29Wj2cNeIqx/ohti/0aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZmFkNzk1NDhhZmM1YzgzZTU5YmJmZTM4OGM2NDQ5MmNi NTUwMTMwHhcNMjYwMTAxMTYxOTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTY0NDEwZGQ3NGNjOTZhYTFmOGIyMWY4NmJkM2RmNjIyNzdjYTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusCsdeoGgceLObyNhxU7YGqxO5Hu C2rfTP0+xnAufGeleCWNUdz6e5LKeMbyAZMhxQugrAc8Mp7eK8bmPkbJ7rXu7MXR hQ/Ha7i9mj1oxrMn7KJcOqbf66wPf3B3AvgblA8lOu67g78+hgICmnQtVvK8rZfZ YkfH5qP/8FbrTvigSN6OQnr7JHuXwu9j9fZlOVIE/wmb8b0I+4+L981uMxHdzRVA C/zDNPZ2qFDkG/n7VyEkubCOJvV3UwNkkWI9/VYK6vrZ829KT2a24qKIc+kad6os pG9gqQAiAwc8oGN8J4tim6WTBhl90wLHl/hYk6i1Js++al2F/KpV1zMTWwIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFIFkQQ3XTMlqofiyH4a9PfYid8qDMB8GA1UdIwQY MBaAFEP615VIr8XIPlm7/jiMZEkstVATMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUV9yWGxVaXZ4Y2ctV2J2LU9JeGtTU3kxVUJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8yY2YyYzEtMTk2Mi00YjcwLTllNWIt ZmU4NTVkYWJiNzVlLzEvZ1dSQkRkZE15V3FoLUxJZmhyMDk5aUozeW9NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8yY2YyYzEtMTk2Mi00YjcwLTllNWItZmU4NTVkYWJiNzVl LzEvUV9yWGxVaXZ4Y2ctV2J2LU9JeGtTU3kxVUJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDAsBAIAATAmAwQDX65IAwQC uR0gAwQGvEkAMAwDBAXVl6ADBAHVl6QDBADVl6cwFAQCAAIwDgMFAyoCBGgDBQAq AwgAMA0GCSqGSIb3DQEBCwUAA4IBAQAjmat8iWFzHce83d1dFGJI1eCudI3YIYwH ImBm1HUzwGu609D4rC3dtFcKtkSSw5YYZFTHqssqNeuojdO0+ZckDGaAujI3C6c5 8hEVqSvZf2QFQy+heRsrr0TV5/Bc81IMRu40XEJVNCnD/U8EojqOPrxCfQslb1mT K2H0TU4oiXFf4LBRjKZtG6PQ3lN7UdgbQavRQTF4r4yJd9oWhn3DFwmExSU0nyUn ZHWI9dj/O3JcRdZe4W2XSjY5w7zF8J6Jc+e+BnqpWgVG172RhRMLnK9krtNvxlmb 6+5J8g6GsEaTb/5CKssE2XEzMsrNX2wuV9vPwmgXryoybcjX7PzS -----END CERTIFICATE-----Generated at Wed Jan 21 10:28:37 2026 by rpki-client