This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/wiDFkfiaWzWpD_tVbguM9Bo-GVE.roa File: wiDFkfiaWzWpD_tVbguM9Bo-GVE.roa (raw, json) Hash identifier: pdxPvrOjk1+lQMigHKyH1m1Ifes98OBo27mnYPtXJ3s= Subject key identifier: C2:20:C5:91:F8:9A:5B:35:A9:0F:FB:55:6E:0B:8C:F4:1A:3E:19:51 Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Certificate serial: 019B77C7761A58D3F6471DB738E696D403C2 Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/wiDFkfiaWzWpD_tVbguM9Bo-GVE.roa Signing time: Thu 01 Jan 2026 04:18:39 +0000 ROA not before: Thu 01 Jan 2026 04:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48870 IP address blocks: 62.122.16.0/21 maxlen: 21 194.213.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:76:1a:58:d3:f6:47:1d:b7:38:e6:96:d4:03:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc Validity Not Before: Jan 1 04:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c220c591f89a5b35a90ffb556e0b8cf41a3e1951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2b:78:de:c5:10:8e:57:cf:c6:b2:58:44:94: 49:fc:eb:9c:82:0f:21:ac:b7:89:c0:d5:c9:94:19: fc:64:b5:df:46:b4:77:10:a7:53:57:51:2c:14:a6: ce:cf:fc:3b:9c:83:1c:e9:15:98:8d:d9:a1:8e:52: 86:86:7f:24:3a:3a:77:aa:d3:45:8f:9e:f3:28:b3: 7c:ed:17:e0:1e:64:da:0f:16:ff:e6:8b:af:58:90: 70:2a:21:84:c8:8d:17:f4:f2:a6:fd:35:ab:79:2d: fa:0c:a3:bf:bb:5c:96:0f:69:11:08:3a:de:42:83: ae:87:08:17:28:03:da:b7:80:21:a2:bd:75:a0:92: bf:e5:64:5d:e6:e6:84:f2:e8:f8:db:aa:61:95:c0: 5c:5a:ce:29:21:ef:f3:a7:48:a3:91:4b:88:f1:9f: c5:b1:e4:95:4b:00:b2:50:85:c6:7d:ea:42:3a:5e: 5c:1f:41:c2:cd:1b:ca:01:0f:2d:52:4a:eb:32:63: 79:5e:b5:84:5f:f0:98:17:fc:9c:be:df:27:0b:15: 19:63:7c:c1:0d:8e:de:d8:4b:37:ec:93:8b:48:99: 72:fe:63:e7:e1:d2:a4:16:d7:49:36:ee:fa:5c:8b: 74:4c:ea:c7:ad:fc:5d:32:8f:39:ae:f9:ef:7b:d0: 6a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:20:C5:91:F8:9A:5B:35:A9:0F:FB:55:6E:0B:8C:F4:1A:3E:19:51 X509v3 Authority Key Identifier: keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/wiDFkfiaWzWpD_tVbguM9Bo-GVE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.122.16.0/21 194.213.100.0/23 Signature Algorithm: sha256WithRSAEncryption 78:3e:9d:b3:b5:81:82:0d:22:53:27:2e:5f:0e:a0:96:8c:c2: 32:ed:9f:a3:89:1b:f8:01:c8:6b:17:0f:f9:32:78:53:70:31: 89:21:c6:1f:44:50:e9:4f:b4:b6:15:42:12:65:9b:4e:99:a7: c1:4c:a5:2b:b6:6d:87:ca:0f:c4:9b:c3:b2:a6:b5:e1:eb:7c: 9e:c1:18:b0:ff:35:ee:4f:08:1a:46:f5:8b:de:8a:87:3e:d0: 54:25:65:fd:45:cf:4d:35:57:66:1f:f5:71:0b:79:e6:71:42: 20:65:a1:3f:e8:cb:ee:12:c4:83:6a:02:c6:49:96:22:d9:22: 26:24:69:43:6e:ea:f6:63:2d:d0:e9:a4:f0:87:24:e2:d9:6b: 80:87:1f:b9:b7:fe:77:f4:1a:76:8a:26:66:ac:ad:38:72:10: f1:9b:61:ad:b5:7c:43:f3:18:8c:1a:20:54:aa:02:7c:e6:f2: aa:c6:cb:62:dd:76:4b:f7:37:30:54:8d:c0:c0:39:08:b5:a9: 85:eb:a2:6b:6d:8d:bd:fb:0d:11:7f:81:99:a6:9a:5f:5a:be: d8:37:ca:c5:3c:20:1c:b5:ed:10:f8:0a:53:78:31:3a:ea:0c: a5:bd:80:ac:7b:6d:c4:58:52:1f:1c:34:9f:7c:f4:05:b9:42: 37:e6:cb:44 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3x3YaWNP2Rx23OOaW1APCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4 ZjY2Y2MwHhcNMjYwMTAxMDQxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjIwYzU5MWY4OWE1YjM1YTkwZmZiNTU2ZTBiOGNmNDFhM2UxOTUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryt43sUQjlfPxrJYRJRJ/Oucgg8h rLeJwNXJlBn8ZLXfRrR3EKdTV1EsFKbOz/w7nIMc6RWYjdmhjlKGhn8kOjp3qtNF j57zKLN87RfgHmTaDxb/5ouvWJBwKiGEyI0X9PKm/TWreS36DKO/u1yWD2kRCDre QoOuhwgXKAPat4Ahor11oJK/5WRd5uaE8uj426phlcBcWs4pIe/zp0ijkUuI8Z/F seSVSwCyUIXGfepCOl5cH0HCzRvKAQ8tUkrrMmN5XrWEX/CYF/ycvt8nCxUZY3zB DY7e2Es37JOLSJly/mPn4dKkFtdJNu76XIt0TOrHrfxdMo85rvnve9Bq8wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMIgxZH4mls1qQ/7VW4LjPQaPhlRMB8GA1UdIwQY MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt YTFiOTZiOWI3MGY4LzEvd2lERmtmaWFXeldwRF90VmJndU05Qm8tR1ZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4 LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDPnoQAwQB wtVkMA0GCSqGSIb3DQEBCwUAA4IBAQB4Pp2ztYGCDSJTJy5fDqCWjMIy7Z+jiRv4 AchrFw/5MnhTcDGJIcYfRFDpT7S2FUISZZtOmafBTKUrtm2Hyg/Em8OyprXh63ye wRiw/zXuTwgaRvWL3oqHPtBUJWX9Rc9NNVdmH/VxC3nmcUIgZaE/6MvuEsSDagLG SZYi2SImJGlDbur2Yy3Q6aTwhyTi2WuAhx+5t/539Bp2iiZmrK04chDxm2GttXxD 8xiMGiBUqgJ85vKqxsti3XZL9zcwVI3AwDkItamF66JrbY29+w0Rf4GZpppfWr7Y N8rFPCActe0Q+ApTeDE66gylvYCse23EWFIfHDSffPQFuUI35stE -----END CERTIFICATE-----Generated at Sun Jan 25 13:32:04 2026 by rpki-client