This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/gWr1ggUi-QJWyPVvyMkseYk2qYM.roa File: gWr1ggUi-QJWyPVvyMkseYk2qYM.roa (raw, json) Hash identifier: SOpvQTd7ZBeB4IAsIyy40Ns/wcdF1JI7SbfSeVH0FHo= Subject key identifier: 81:6A:F5:82:05:22:F9:02:56:C8:F5:6F:C8:C9:2C:79:89:36:A9:83 Certificate issuer: /CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b Certificate serial: 019B7B367CFE9D0178436E7666772442508C Authority key identifier: A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/gWr1ggUi-QJWyPVvyMkseYk2qYM.roa Signing time: Thu 01 Jan 2026 20:18:46 +0000 ROA not before: Thu 01 Jan 2026 20:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51269 IP address blocks: 185.149.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.mft rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:7c:fe:9d:01:78:43:6e:76:66:77:24:42:50:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a49f6266f61a1eccd4dee094cc71c6db86bbb37b Validity Not Before: Jan 1 20:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=816af5820522f90256c8f56fc8c92c798936a983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f9:ef:e8:28:65:2e:42:f9:5a:54:41:5e:3f: 4f:59:dd:99:f7:7b:2a:fa:39:c8:e6:9a:79:a5:ac: 3c:91:32:33:4f:e2:a1:83:d3:3f:6c:7c:3e:19:a7: 4f:b3:5b:fd:35:12:06:d4:35:16:34:5c:13:e6:76: a1:81:13:49:4c:44:66:1b:22:42:e4:e1:41:17:3c: 92:a1:2c:40:65:af:4f:4f:6e:cb:d8:6c:02:8a:17: a1:7f:39:79:3a:ab:bf:ec:60:99:3f:ee:e8:37:e0: cf:a7:f9:e1:f5:b9:46:ac:79:59:70:12:79:d1:38: ac:6d:47:92:49:11:6a:60:18:e6:ee:66:a1:31:8e: 9d:94:c7:f2:b8:58:4d:77:3d:d1:72:de:19:61:52: dc:c0:d1:f5:d9:8b:fc:77:6b:46:2a:72:17:54:73: 99:48:23:02:a3:93:b1:ad:25:6b:37:ed:d0:78:63: 57:32:d3:ea:15:29:cf:29:3b:ad:da:6e:09:b6:95: 28:b2:d0:3f:23:d4:4f:cd:71:d1:79:c9:81:a0:39: 01:87:50:fb:11:0e:08:10:e6:61:00:7d:79:f3:49: 36:b5:ca:ee:cd:bc:b5:40:5b:01:44:ad:6b:8b:4c: ea:04:5b:7e:40:bc:a0:d6:63:f1:9e:33:93:e6:27: c1:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:6A:F5:82:05:22:F9:02:56:C8:F5:6F:C8:C9:2C:79:89:36:A9:83 X509v3 Authority Key Identifier: keyid:A4:9F:62:66:F6:1A:1E:CC:D4:DE:E0:94:CC:71:C6:DB:86:BB:B3:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ9iZvYaHszU3uCUzHHG24a7s3s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/gWr1ggUi-QJWyPVvyMkseYk2qYM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/476253-2788-4519-beba-98be335f3c54/1/pJ9iZvYaHszU3uCUzHHG24a7s3s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.149.68.0/24 Signature Algorithm: sha256WithRSAEncryption 39:09:f9:f9:9f:61:b9:41:5b:94:36:fc:7d:28:79:0e:51:8c: a3:87:8a:78:2c:12:9a:a8:b2:fa:cf:74:c1:95:7f:d5:31:18: 06:10:80:6e:5e:56:d5:dd:b3:ee:e5:0e:69:ca:e7:24:49:9b: 90:dc:a8:c3:11:7c:8b:c9:8b:b4:d6:46:a1:4d:32:1c:80:ce: 8a:ff:d1:d8:29:c4:6f:fd:4c:6f:8a:ef:6d:d6:b8:8d:5a:cd: 8a:10:1a:b9:d3:55:a1:3a:c5:38:44:02:e6:fd:81:96:d6:f0: fb:2f:47:ad:63:e7:b7:52:56:5b:90:b5:e7:af:5c:ca:8a:9e: 56:7c:df:f0:52:75:82:b6:37:79:d6:9a:e4:15:d8:16:9e:62: 26:c2:ee:36:3d:d3:74:c7:88:c6:d8:cd:d7:12:1d:8b:f4:61: 5c:2b:ff:bb:d0:d3:83:c4:66:e4:53:dc:bd:72:70:36:2e:41: e9:b3:1e:39:d6:e3:1e:64:b6:b3:d3:17:72:5a:65:7c:6a:bf: 4f:23:76:46:c8:c3:3c:dc:f3:91:03:3f:21:89:52:37:29:53: c8:93:54:f0:6b:45:86:75:dd:cf:41:ab:9b:53:ef:47:71:ac: 77:5c:e1:a0:0a:07:f1:4e:a2:70:f7:43:9d:62:8c:65:47:46: 45:04:8d:db -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7Nnz+nQF4Q252ZnckQlCMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0OWY2MjY2ZjYxYTFlY2NkNGRlZTA5NGNjNzFjNmRiODZi YmIzN2IwHhcNMjYwMTAxMjAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTZhZjU4MjA1MjJmOTAyNTZjOGY1NmZjOGM5MmM3OTg5MzZhOTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/nv6ChlLkL5WlRBXj9PWd2Z93sq +jnI5pp5paw8kTIzT+Khg9M/bHw+GadPs1v9NRIG1DUWNFwT5nahgRNJTERmGyJC 5OFBFzySoSxAZa9PT27L2GwCihehfzl5Oqu/7GCZP+7oN+DPp/nh9blGrHlZcBJ5 0TisbUeSSRFqYBjm7mahMY6dlMfyuFhNdz3Rct4ZYVLcwNH12Yv8d2tGKnIXVHOZ SCMCo5OxrSVrN+3QeGNXMtPqFSnPKTut2m4JtpUostA/I9RPzXHRecmBoDkBh1D7 EQ4IEOZhAH1580k2tcruzby1QFsBRK1ri0zqBFt+QLyg1mPxnjOT5ifBHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIFq9YIFIvkCVsj1b8jJLHmJNqmDMB8GA1UdIwQY MBaAFKSfYmb2Gh7M1N7glMxxxtuGu7N7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEo5aVp2WWFIc3pVM3VDVXpISEcyNGE3czNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS80NzYyNTMtMjc4OC00NTE5LWJlYmEt OThiZTMzNWYzYzU0LzEvZ1dyMWdnVWktUUpXeVBWdnlNa3NlWWsycVlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS80NzYyNTMtMjc4OC00NTE5LWJlYmEtOThiZTMzNWYzYzU0 LzEvcEo5aVp2WWFIc3pVM3VDVXpISEcyNGE3czNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZVEMA0G CSqGSIb3DQEBCwUAA4IBAQA5Cfn5n2G5QVuUNvx9KHkOUYyjh4p4LBKaqLL6z3TB lX/VMRgGEIBuXlbV3bPu5Q5pyuckSZuQ3KjDEXyLyYu01kahTTIcgM6K/9HYKcRv /Uxviu9t1riNWs2KEBq501WhOsU4RALm/YGW1vD7L0etY+e3UlZbkLXnr1zKip5W fN/wUnWCtjd51prkFdgWnmImwu42PdN0x4jG2M3XEh2L9GFcK/+70NODxGbkU9y9 cnA2LkHpsx451uMeZLaz0xdyWmV8ar9PI3ZGyMM83PORAz8hiVI3KVPIk1Twa0WG dd3PQaubU+9Hcax3XOGgCgfxTqJw90OdYoxlR0ZFBI3b -----END CERTIFICATE-----Generated at Sun Jan 25 19:20:04 2026 by rpki-client