This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/w2-qYaghmoafRduGM784BXKEDOc.roa File: w2-qYaghmoafRduGM784BXKEDOc.roa (raw, json) Hash identifier: hsq/kaLWVFBw1VLdikb24btA8t/Mb4PbJLUevEVWF+U= Subject key identifier: C3:6F:AA:61:A8:21:9A:86:9F:45:DB:86:33:BF:38:05:72:84:0C:E7 Certificate issuer: /CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Certificate serial: 019B7C803FFE79D3929585E67E256D21BF8E Authority key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/w2-qYaghmoafRduGM784BXKEDOc.roa Signing time: Fri 02 Jan 2026 02:18:58 +0000 ROA not before: Fri 02 Jan 2026 02:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57665 IP address blocks: 31.222.16.0/21 maxlen: 21 185.226.44.0/22 maxlen: 22 185.241.104.0/22 maxlen: 22 185.241.104.0/23 maxlen: 23 185.241.104.0/24 maxlen: 24 185.241.105.0/24 maxlen: 24 185.241.106.0/23 maxlen: 23 185.241.106.0/24 maxlen: 24 185.241.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:3f:fe:79:d3:92:95:85:e6:7e:25:6d:21:bf:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c Validity Not Before: Jan 2 02:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c36faa61a8219a869f45db8633bf380572840ce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:cb:d6:ed:9e:04:2a:67:cf:7c:a0:b4:00:18: d7:28:db:74:8a:00:4f:a1:21:27:78:d4:3e:a2:96: 43:5d:8d:79:42:04:d6:ef:4c:ca:2e:9e:cc:fe:6c: 87:4e:9f:7e:ac:33:80:a7:e4:29:e1:7f:cc:16:e0: 72:98:ca:b7:7a:2a:57:4f:10:d2:9f:26:37:3a:12: 85:26:dd:84:ce:25:80:69:94:ff:b1:ac:4c:26:60: c4:ab:f5:df:52:d4:dc:c0:0d:e6:0d:52:06:5e:0e: 89:2d:64:99:19:8f:47:6d:fe:f0:86:b8:8b:c2:80: bc:9b:25:11:f5:c7:a6:05:70:ba:2a:59:84:57:60: ef:75:9a:ce:bd:26:25:b5:36:71:9f:a4:1f:33:4b: 1b:d9:91:c2:6a:01:fe:3d:8e:17:41:fc:40:38:1f: 87:83:4b:69:54:91:f9:91:d5:75:f8:ca:7a:7b:67: 54:56:e0:a9:00:1c:a0:bd:ab:2f:bb:6d:39:c2:a6: ac:a7:84:a2:5d:4d:84:f0:03:61:15:42:a0:e7:f2: 8f:08:24:53:f3:03:17:7e:ca:e5:10:50:b2:94:9e: cc:a3:25:7d:a6:4e:a3:b7:ed:99:95:a7:c9:9a:49: f8:c8:4e:f4:65:29:a9:18:38:a5:15:3a:97:9e:91: aa:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:6F:AA:61:A8:21:9A:86:9F:45:DB:86:33:BF:38:05:72:84:0C:E7 X509v3 Authority Key Identifier: keyid:BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/w2-qYaghmoafRduGM784BXKEDOc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.222.16.0/21 185.226.44.0/22 185.241.104.0/22 Signature Algorithm: sha256WithRSAEncryption 84:0d:da:ba:02:9f:6d:d4:bf:5d:16:13:50:23:24:e2:22:99: 66:a2:2a:81:d5:72:c8:8c:b2:30:1d:59:62:ed:05:43:bc:e9: be:dd:d7:56:ac:f1:72:13:8c:86:5c:92:6e:37:84:4d:5f:bd: 9c:5f:e2:20:19:3b:f5:cf:af:1a:8d:23:db:7a:86:18:42:53: 62:5f:d5:31:68:e8:49:32:b6:39:99:db:bd:35:8b:9b:78:6e: c5:74:22:de:d1:24:8f:39:02:3e:d9:42:58:c0:02:e3:44:a2: 76:42:c2:85:d9:f0:ff:93:02:be:7c:ca:a3:36:7b:28:1a:0c: b1:09:31:d8:df:65:e8:9c:3e:0f:2f:8c:48:8d:e3:92:75:42: b6:a2:8a:95:61:d2:0b:8e:d9:9a:36:9e:9c:3f:fc:6b:6f:4d: 24:dc:3e:48:94:17:66:97:99:f2:1d:11:0d:85:65:0e:69:75: 29:35:5e:5f:be:08:72:d1:51:fc:13:41:48:7b:7b:ba:c8:ab: aa:0e:a3:2c:b1:51:b9:7c:84:dd:58:59:85:a1:6b:82:45:75: 07:e3:9e:68:85:fe:d4:7a:99:d4:b6:74:e9:e8:d0:d8:6f:51: 3d:3a:76:b8:61:fc:51:f2:c8:c7:a3:f0:99:85:39:ab:70:89: 16:b2:94:46 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt8gD/+edOSlYXmfiVtIb+OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjNDcwM2UwOGNhMGQ2YTMxMGNiYzY0M2ZmY2IzMDdmZjZj ZGM2NWMwHhcNMjYwMTAyMDIxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzZmYWE2MWE4MjE5YTg2OWY0NWRiODYzM2JmMzgwNTcyODQwY2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMvW7Z4EKmfPfKC0ABjXKNt0igBP oSEneNQ+opZDXY15QgTW70zKLp7M/myHTp9+rDOAp+Qp4X/MFuBymMq3eipXTxDS nyY3OhKFJt2EziWAaZT/saxMJmDEq/XfUtTcwA3mDVIGXg6JLWSZGY9Hbf7whriL woC8myUR9cemBXC6KlmEV2DvdZrOvSYltTZxn6QfM0sb2ZHCagH+PY4XQfxAOB+H g0tpVJH5kdV1+Mp6e2dUVuCpABygvasvu205wqasp4SiXU2E8ANhFUKg5/KPCCRT 8wMXfsrlEFCylJ7MoyV9pk6jt+2ZlafJmkn4yE70ZSmpGDilFTqXnpGqgwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMNvqmGoIZqGn0XbhjO/OAVyhAznMB8GA1UdIwQY MBaAFLxHA+CMoNajEMvGQ//LMH/2zcZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTct NjZlZGEyMjhmZWM3LzEvdzItcVlhZ2htb2FmUmR1R003ODRCWEtFRE9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy84NjNiYTAtMDQ3Ni00M2Q3LThiZTctNjZlZGEyMjhmZWM3 LzEvdkVjRDRJeWcxcU1ReThaRF84c3dmX2JOeGx3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDH94QAwQC ueIsAwQCufFoMA0GCSqGSIb3DQEBCwUAA4IBAQCEDdq6Ap9t1L9dFhNQIyTiIplm oiqB1XLIjLIwHVli7QVDvOm+3ddWrPFyE4yGXJJuN4RNX72cX+IgGTv1z68ajSPb eoYYQlNiX9UxaOhJMrY5mdu9NYubeG7FdCLe0SSPOQI+2UJYwALjRKJ2QsKF2fD/ kwK+fMqjNnsoGgyxCTHY32XonD4PL4xIjeOSdUK2ooqVYdILjtmaNp6cP/xrb00k 3D5IlBdml5nyHRENhWUOaXUpNV5fvghy0VH8E0FIe3u6yKuqDqMssVG5fITdWFmF oWuCRXUH455ohf7UepnUtnTp6NDYb1E9Ona4YfxR8sjHo/CZhTmrcIkWspRG -----END CERTIFICATE-----Generated at Mon Jan 26 14:08:15 2026 by rpki-client