This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/w7bLCCx1wCzEhIJTLJSgrAAyI94.roa File: w7bLCCx1wCzEhIJTLJSgrAAyI94.roa (raw, json) Hash identifier: xKotcxgu+SFt13dTwTupn3pf3OXdH+smODfsZIVeV0A= Subject key identifier: C3:B6:CB:08:2C:75:C0:2C:C4:84:82:53:2C:94:A0:AC:00:32:23:DE Certificate issuer: /CN=f2e2810f49b36fdd641c326bd1de4e42d128b046 Certificate serial: 019B7C120F67C5BA074BEF7FAAD5C94DFCAE Authority key identifier: F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/w7bLCCx1wCzEhIJTLJSgrAAyI94.roa Signing time: Fri 02 Jan 2026 00:18:36 +0000 ROA not before: Fri 02 Jan 2026 00:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198949 IP address blocks: 46.218.0.0/16 maxlen: 24 77.104.0.0/18 maxlen: 24 82.101.0.0/18 maxlen: 24 83.145.64.0/18 maxlen: 24 89.224.0.0/14 maxlen: 24 92.102.0.0/15 maxlen: 24 185.204.172.0/22 maxlen: 24 195.167.192.0/20 maxlen: 24 195.167.224.0/20 maxlen: 24 195.248.0.0/19 maxlen: 24 212.99.0.0/17 maxlen: 24 212.103.0.0/19 maxlen: 24 213.30.128.0/18 maxlen: 24 213.244.0.0/19 maxlen: 24 217.66.112.0/20 maxlen: 24 2a02:e000::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.mft rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:0f:67:c5:ba:07:4b:ef:7f:aa:d5:c9:4d:fc:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2e2810f49b36fdd641c326bd1de4e42d128b046 Validity Not Before: Jan 2 00:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3b6cb082c75c02cc48482532c94a0ac003223de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b8:10:4b:34:15:ae:be:5b:43:53:ca:b4:7c: 7b:03:f7:23:3d:6c:5e:6f:41:9d:58:21:99:c9:6d: 4c:a6:ab:d4:65:69:09:c0:29:d2:f1:0c:59:e5:6e: b9:f9:41:4f:f0:ab:a9:23:d1:4b:3c:57:dc:f8:a0: 85:6c:0c:d0:f4:ea:97:81:d7:87:91:23:26:49:bd: 50:64:c1:b1:28:67:d9:35:08:f6:4d:eb:30:d9:03: 36:69:2d:f3:ef:18:1f:fd:64:39:ff:b4:89:1f:69: 53:91:28:ad:b6:f9:41:b7:d3:3d:ea:24:16:16:5f: 8d:0f:2e:2d:19:ea:02:b1:d5:7c:d1:3b:dc:c0:34: 08:14:09:8d:eb:a9:37:5c:fd:f9:9f:ea:66:fa:6e: 88:4c:de:62:78:f1:17:cd:4a:3f:c0:ef:80:b9:ef: d1:ce:0f:aa:77:11:1d:5d:30:9e:0d:c0:d5:ac:5e: f0:f4:2e:35:5f:d2:89:55:86:64:eb:b4:59:31:e0: ea:6a:80:f4:91:89:01:11:8a:f1:e2:e6:94:e1:99: b2:ba:7c:49:5d:bf:8a:74:19:ec:07:ac:03:9d:e2: 1d:38:48:10:44:9d:08:69:8a:51:ca:fe:63:82:44: 4c:93:e2:3c:f7:dc:5b:ee:1f:27:b9:29:e4:07:7e: 93:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B6:CB:08:2C:75:C0:2C:C4:84:82:53:2C:94:A0:AC:00:32:23:DE X509v3 Authority Key Identifier: keyid:F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/w7bLCCx1wCzEhIJTLJSgrAAyI94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.218.0.0/16 77.104.0.0/18 82.101.0.0/18 83.145.64.0/18 89.224.0.0/14 92.102.0.0/15 185.204.172.0/22 195.167.192.0/20 195.167.224.0/20 195.248.0.0/19 212.99.0.0/17 212.103.0.0/19 213.30.128.0/18 213.244.0.0/19 217.66.112.0/20 IPv6: 2a02:e000::/29 Signature Algorithm: sha256WithRSAEncryption 2d:93:4a:cd:a8:25:2a:7b:83:b3:74:fc:b7:e8:ad:90:e1:4a: a0:57:fa:db:0a:5b:b7:24:53:f1:1c:16:2e:f4:b6:42:a6:a6: 15:da:29:04:cc:05:64:14:55:2d:80:ad:ad:eb:7d:b4:62:f4: 79:f5:c8:d3:93:9e:0e:ee:e8:b8:90:58:5d:cf:c2:40:ff:c3: 04:1e:4c:f4:d3:8b:85:7a:40:bd:5c:91:8b:c2:e7:c3:b8:42: 96:e7:76:bb:6b:61:07:3f:bc:77:c8:39:4a:08:8b:f3:24:51: a7:b6:63:6e:27:2d:ba:d1:31:60:f8:49:96:a0:73:9d:ca:c0: 10:a5:a8:84:74:83:fa:2c:6f:51:d4:a7:91:e8:60:dc:61:b8: 22:80:a5:7a:77:4a:e0:7a:b4:78:8c:c9:f9:18:31:53:af:a4: 69:b6:d7:3e:4a:03:cb:30:65:4b:95:49:51:99:f1:fb:2f:8f: 19:10:ed:51:64:83:68:ad:6d:bb:d6:a5:d8:9c:b2:c0:f5:16: ed:31:0b:bd:95:b8:2a:ec:97:be:bb:06:1b:73:e4:84:39:0a: eb:8a:ac:48:59:0e:83:a5:b9:f0:1d:5c:31:30:f2:47:c0:43: 54:97:ee:a6:1f:f7:ce:d4:d7:9e:25:12:2d:7b:b6:64:76:f8: 2a:5d:be:18 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgISAZt8Eg9nxboHS+9/qtXJTfyuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyZTI4MTBmNDliMzZmZGQ2NDFjMzI2YmQxZGU0ZTQyZDEy OGIwNDYwHhcNMjYwMTAyMDAxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjM2I2Y2IwODJjNzVjMDJjYzQ4NDgyNTMyYzk0YTBhYzAwMzIyM2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrgQSzQVrr5bQ1PKtHx7A/cjPWxe b0GdWCGZyW1MpqvUZWkJwCnS8QxZ5W65+UFP8KupI9FLPFfc+KCFbAzQ9OqXgdeH kSMmSb1QZMGxKGfZNQj2Tesw2QM2aS3z7xgf/WQ5/7SJH2lTkSittvlBt9M96iQW Fl+NDy4tGeoCsdV80TvcwDQIFAmN66k3XP35n+pm+m6ITN5iePEXzUo/wO+Aue/R zg+qdxEdXTCeDcDVrF7w9C41X9KJVYZk67RZMeDqaoD0kYkBEYrx4uaU4ZmyunxJ Xb+KdBnsB6wDneIdOEgQRJ0IaYpRyv5jgkRMk+I899xb7h8nuSnkB36T3QIDAQAB o4ICaTCCAmUwHQYDVR0OBBYEFMO2ywgsdcAsxISCUyyUoKwAMiPeMB8GA1UdIwQY MBaAFPLigQ9Js2/dZBwya9HeTkLRKLBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHVLQkQwbXpiOTFrSERKcjBkNU9RdEVvc0VZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi83OWU5MDUtZmIwZC00YjhiLTkzOTAt NTBkMmI3MGJjZjMxLzEvdzdiTENDeDF3Q3pFaElKVExKU2dyQUF5STk0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi83OWU5MDUtZmIwZC00YjhiLTkzOTAtNTBkMmI3MGJjZjMx LzEvOHVLQkQwbXpiOTFrSERKcjBkNU9RdEVvc0VZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH8GCCsGAQUFBwEHAQH/BHAwbjBdBAIAATBXAwMALtoDBAZN aAADBAZSZQADBAZTkUADAwJZ4AMDAVxmAwQCucysAwQEw6fAAwQEw6fgAwQFw/gA AwQH1GMAAwQF1GcAAwQG1R6AAwQF1fQAAwQE2UJwMA0EAgACMAcDBQMqAuAAMA0G CSqGSIb3DQEBCwUAA4IBAQAtk0rNqCUqe4OzdPy36K2Q4UqgV/rbClu3JFPxHBYu 9LZCpqYV2ikEzAVkFFUtgK2t6320YvR59cjTk54O7ui4kFhdz8JA/8MEHkz004uF ekC9XJGLwufDuEKW53a7a2EHP7x3yDlKCIvzJFGntmNuJy260TFg+EmWoHOdysAQ paiEdIP6LG9R1KeR6GDcYbgigKV6d0rgerR4jMn5GDFTr6Rpttc+SgPLMGVLlUlR mfH7L48ZEO1RZINorW271qXYnLLA9RbtMQu9lbgq7Je+uwYbc+SEOQrriqxIWQ6D pbnwHVwxMPJHwENUl+6mH/fO1NeeJRIte7ZkdvgqXb4Y -----END CERTIFICATE-----Generated at Wed Jan 7 22:33:33 2026 by rpki-client