This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/W7Nqc3czjNAYZf0VQNvsKz30Xk0.roa File: W7Nqc3czjNAYZf0VQNvsKz30Xk0.roa (raw, json) Hash identifier: hAWsOVPPXMqcq+BZ016Ik0VLGyZQz9IjdlVeqa+qtVI= Subject key identifier: 5B:B3:6A:73:77:33:8C:D0:18:65:FD:15:40:DB:EC:2B:3D:F4:5E:4D Certificate issuer: /CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00 Certificate serial: 019B7B36B7C70DAA57C36E132DFF8A94CE82 Authority key identifier: AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/W7Nqc3czjNAYZf0VQNvsKz30Xk0.roa Signing time: Thu 01 Jan 2026 20:19:02 +0000 ROA not before: Thu 01 Jan 2026 20:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209974 IP address blocks: 46.243.185.0/24 maxlen: 24 77.105.148.0/24 maxlen: 24 77.105.152.0/23 maxlen: 23 77.105.154.0/23 maxlen: 23 93.183.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.mft rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:b7:c7:0d:aa:57:c3:6e:13:2d:ff:8a:94:ce:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa44eb091b3a33a87beb8e004ab15ef178fbaa00 Validity Not Before: Jan 1 20:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5bb36a7377338cd01865fd1540dbec2b3df45e4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:61:aa:33:eb:de:a7:93:20:36:a7:66:f3:e7: 93:a9:64:e1:da:ab:f8:1b:d5:82:18:03:b3:f1:04: 7b:69:f9:eb:14:54:45:98:5c:0e:07:20:c7:37:21: 70:bd:c5:ee:4c:70:f9:b2:2c:72:59:38:fc:11:a3: 10:9e:51:32:52:84:84:d8:d7:6c:a6:f3:55:81:67: 1a:9f:df:d8:aa:59:d7:76:6f:99:ff:fb:83:6c:b1: 57:c5:ba:a5:53:7b:7d:90:9d:bb:2d:76:93:9c:62: 52:29:08:25:f0:a9:67:3b:c3:db:ad:a8:16:e7:c1: ac:bd:06:78:35:81:83:50:e9:2e:ae:90:84:00:e8: ca:6b:36:b2:67:44:fa:d2:87:58:76:2d:96:55:b0: b7:8b:fa:10:14:e2:2f:04:a4:24:c5:4b:97:26:bc: 4b:cf:ff:8a:1e:e1:c1:62:9a:e9:41:0e:d3:ed:60: 0d:4d:a3:d2:fe:fa:89:63:b0:25:1f:85:8f:7a:89: 3d:b4:0f:61:fb:4e:45:c3:b5:ac:49:a8:5c:cc:0b: 87:f8:77:46:10:26:c0:0f:81:a9:17:0c:b2:c8:c1: 32:36:0c:f1:31:26:8a:a9:f8:30:7b:bb:76:fd:fc: df:b4:1d:0c:b2:7a:45:9b:41:0b:b1:a5:37:62:50: c9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B3:6A:73:77:33:8C:D0:18:65:FD:15:40:DB:EC:2B:3D:F4:5E:4D X509v3 Authority Key Identifier: keyid:AA:44:EB:09:1B:3A:33:A8:7B:EB:8E:00:4A:B1:5E:F1:78:FB:AA:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTrCRs6M6h7644ASrFe8Xj7qgA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/W7Nqc3czjNAYZf0VQNvsKz30Xk0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/fb7a7d-0655-4587-8af9-7700e25ff769/1/qkTrCRs6M6h7644ASrFe8Xj7qgA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.243.185.0/24 77.105.148.0/24 77.105.152.0/22 93.183.78.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:45:75:e2:3d:61:5a:0f:16:34:bb:3d:58:fd:f4:68:69:4e: ef:99:1a:6f:a5:7c:42:0c:98:33:31:b3:ce:87:5b:75:08:06: 4a:a9:fd:e9:1d:f2:e6:44:fd:df:8c:50:da:d1:21:1f:df:7d: 7e:76:f5:eb:43:eb:4f:66:cc:29:fa:88:fb:35:41:84:32:e5: 2e:27:51:fe:cd:f7:54:f8:0e:b1:23:90:37:35:9d:f7:06:5a: 5b:88:b4:47:fa:c7:6f:8c:40:38:01:7b:0d:5f:f0:29:19:a2: 5f:29:cb:a3:5a:5d:56:43:83:97:c2:6a:06:d5:ae:2c:4f:16: b0:48:5d:1f:49:34:b6:ef:8c:25:d0:b0:65:59:2a:ec:22:99: fd:ca:91:0b:c6:e6:ea:0e:9b:a7:c6:f0:14:38:59:97:32:a3: de:39:6d:94:b8:28:57:58:68:33:b3:1e:1b:38:2b:15:13:ff: 0d:d2:3b:bb:f2:03:99:ae:8e:c4:44:12:7c:15:9b:b6:e1:b2: a2:e2:c0:98:bd:f3:69:c7:08:7d:47:a2:82:7a:1e:f4:43:3f: 98:73:da:f2:76:88:d5:7f:91:47:a0:54:a1:78:f6:22:96:69: 91:71:85:fb:1d:5c:a8:e9:32:72:25:ba:e2:73:ce:69:38:9b: 69:3a:1d:33 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt7NrfHDapXw24TLf+KlM6CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNDRlYjA5MWIzYTMzYTg3YmViOGUwMDRhYjE1ZWYxNzhm YmFhMDAwHhcNMjYwMTAxMjAxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmIzNmE3Mzc3MzM4Y2QwMTg2NWZkMTU0MGRiZWMyYjNkZjQ1ZTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmGqM+vep5MgNqdm8+eTqWTh2qv4 G9WCGAOz8QR7afnrFFRFmFwOByDHNyFwvcXuTHD5sixyWTj8EaMQnlEyUoSE2Nds pvNVgWcan9/YqlnXdm+Z//uDbLFXxbqlU3t9kJ27LXaTnGJSKQgl8KlnO8PbragW 58GsvQZ4NYGDUOkurpCEAOjKazayZ0T60odYdi2WVbC3i/oQFOIvBKQkxUuXJrxL z/+KHuHBYprpQQ7T7WANTaPS/vqJY7AlH4WPeok9tA9h+05Fw7WsSahczAuH+HdG ECbAD4GpFwyyyMEyNgzxMSaKqfgwe7t2/fzftB0MsnpFm0ELsaU3YlDJQQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFFuzanN3M4zQGGX9FUDb7Cs99F5NMB8GA1UdIwQY MBaAFKpE6wkbOjOoe+uOAEqxXvF4+6oAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWtUckNSczZNNmg3NjQ0QVNyRmU4WGo3cWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mYjdhN2QtMDY1NS00NTg3LThhZjkt NzcwMGUyNWZmNzY5LzEvVzdOcWMzY3pqTkFZWmYwVlFOdnNLejMwWGswLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9mYjdhN2QtMDY1NS00NTg3LThhZjktNzcwMGUyNWZmNzY5 LzEvcWtUckNSczZNNmg3NjQ0QVNyRmU4WGo3cWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALvO5AwQA TWmUAwQCTWmYAwQAXbdOMA0GCSqGSIb3DQEBCwUAA4IBAQAMRXXiPWFaDxY0uz1Y /fRoaU7vmRpvpXxCDJgzMbPOh1t1CAZKqf3pHfLmRP3fjFDa0SEf331+dvXrQ+tP Zswp+oj7NUGEMuUuJ1H+zfdU+A6xI5A3NZ33BlpbiLRH+sdvjEA4AXsNX/ApGaJf KcujWl1WQ4OXwmoG1a4sTxawSF0fSTS274wl0LBlWSrsIpn9ypELxubqDpunxvAU OFmXMqPeOW2UuChXWGgzsx4bOCsVE/8N0ju78gOZro7ERBJ8FZu24bKi4sCYvfNp xwh9R6KCeh70Qz+Yc9rydojVf5FHoFShePYilmmRcYX7HVyo6TJyJbric85pOJtp Oh0z -----END CERTIFICATE-----Generated at Mon Jan 12 03:10:58 2026 by rpki-client