This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/w7NAr2u_fskJOiH5ZL_DBig50oc.roa File: w7NAr2u_fskJOiH5ZL_DBig50oc.roa (raw, json) Hash identifier: S337FZgQBWH3kGuKNK3U/HNaRNmRFoOB+d+zWxnLtV8= Subject key identifier: C3:B3:40:AF:6B:BF:7E:C9:09:3A:21:F9:64:BF:C3:06:28:39:D2:87 Certificate issuer: /CN=65121c3f9207a37345e38702c89d179bf444aa08 Certificate serial: 019B7AC8A17E4B018EC81266EB63422AA8A0 Authority key identifier: 65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/w7NAr2u_fskJOiH5ZL_DBig50oc.roa Signing time: Thu 01 Jan 2026 18:18:47 +0000 ROA not before: Thu 01 Jan 2026 18:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 17621 IP address blocks: 194.138.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.mft rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:a1:7e:4b:01:8e:c8:12:66:eb:63:42:2a:a8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65121c3f9207a37345e38702c89d179bf444aa08 Validity Not Before: Jan 1 18:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3b340af6bbf7ec9093a21f964bfc3062839d287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:19:aa:9a:1a:14:50:1f:a3:9e:e8:e7:b7:f6: d7:2a:14:6e:33:e2:ab:0a:64:a4:04:89:b6:48:41: 63:a4:41:04:10:1c:6d:04:87:87:18:a5:d1:cf:46: 05:3e:82:47:ab:95:00:16:f8:05:33:8b:9d:f1:c4: f1:32:aa:22:47:09:ae:29:22:8a:a2:12:6a:a5:51: 7e:e4:d0:18:82:f8:d8:16:91:29:78:7c:24:a7:fe: 1b:ba:a0:f1:a6:af:e3:7c:64:2a:a9:5a:13:ba:21: 1a:4f:2e:b0:74:f1:87:fe:78:41:81:02:c1:c3:87: 0a:6b:6a:82:ae:4d:a3:01:a9:7f:8d:2f:61:d0:23: 10:18:04:7c:70:39:f8:44:34:e4:ae:2c:b9:4e:ae: c9:81:b5:f8:29:38:32:a5:77:18:d5:61:e4:b8:27: 54:eb:c8:b4:4b:13:f7:0c:b5:6b:7c:b9:24:a3:72: 97:e5:18:0e:a1:9d:c6:a1:f4:fe:88:10:9f:48:93: e6:ea:c7:a5:d3:1b:bd:35:ad:2b:16:fe:73:b2:62: 17:8b:57:90:cf:45:6c:73:84:4c:99:50:4a:66:df: 67:f9:a9:67:fc:57:72:84:2e:eb:f5:dd:b7:52:2c: da:b4:f3:3b:3c:48:f5:2a:e7:3d:65:52:b1:3a:30: 27:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B3:40:AF:6B:BF:7E:C9:09:3A:21:F9:64:BF:C3:06:28:39:D2:87 X509v3 Authority Key Identifier: keyid:65:12:1C:3F:92:07:A3:73:45:E3:87:02:C8:9D:17:9B:F4:44:AA:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/w7NAr2u_fskJOiH5ZL_DBig50oc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/12c13e-f675-4882-bbe6-48d3ca161bb0/1/ZRIcP5IHo3NF44cCyJ0Xm_REqgg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.138.203.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:3f:cb:d1:39:49:54:ab:4f:06:6a:cb:98:80:89:f6:a9:27: e8:f3:46:5f:83:bb:ce:ff:51:38:da:d5:d2:80:37:13:aa:04: 9d:f7:bb:be:6e:56:2c:3f:1d:bd:9c:57:b6:2b:ff:06:21:76: 95:34:95:a7:11:d8:fe:b8:92:91:4d:59:54:cc:b6:a0:e2:56: 0f:c0:0f:6b:53:60:17:22:56:d1:fe:55:2e:d6:69:cc:85:13: 14:32:2b:0f:7e:ef:cc:1a:f4:bf:5c:56:55:10:bd:c2:2d:17: df:bd:3a:15:e4:05:44:3a:fd:c3:ed:9d:9f:4d:b2:5e:94:d2: f4:b1:b3:0a:58:5b:e4:13:df:b1:3f:bd:0d:a4:ba:94:f7:d5: 07:37:17:19:b3:01:63:61:cf:9b:3b:3a:d0:b7:29:29:37:77: c6:1e:9c:b5:63:f8:0d:44:01:29:e1:f4:4b:0a:95:96:d9:69: ea:96:b7:3f:e2:f6:21:43:c3:ad:1a:b1:e4:56:d8:77:17:7b: 62:51:2c:d9:10:2d:47:5b:36:51:26:7e:40:6b:79:fc:26:14: f1:0d:36:4a:95:3d:b0:10:20:2e:c2:ac:3f:dc:d9:f3:de:9b: a7:da:7b:c2:46:48:a2:2f:f6:30:63:67:40:67:50:29:68:b9: 78:73:f3:41 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yKF+SwGOyBJm62NCKqigMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1MTIxYzNmOTIwN2EzNzM0NWUzODcwMmM4OWQxNzliZjQ0 NGFhMDgwHhcNMjYwMTAxMTgxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjM2IzNDBhZjZiYmY3ZWM5MDkzYTIxZjk2NGJmYzMwNjI4MzlkMjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxmqmhoUUB+jnujnt/bXKhRuM+Kr CmSkBIm2SEFjpEEEEBxtBIeHGKXRz0YFPoJHq5UAFvgFM4ud8cTxMqoiRwmuKSKK ohJqpVF+5NAYgvjYFpEpeHwkp/4buqDxpq/jfGQqqVoTuiEaTy6wdPGH/nhBgQLB w4cKa2qCrk2jAal/jS9h0CMQGAR8cDn4RDTkriy5Tq7JgbX4KTgypXcY1WHkuCdU 68i0SxP3DLVrfLkko3KX5RgOoZ3GofT+iBCfSJPm6sel0xu9Na0rFv5zsmIXi1eQ z0Vsc4RMmVBKZt9n+aln/FdyhC7r9d23UizatPM7PEj1Kuc9ZVKxOjAnDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMOzQK9rv37JCToh+WS/wwYoOdKHMB8GA1UdIwQY MBaAFGUSHD+SB6NzReOHAsidF5v0RKoIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlJJY1A1SUhvM05GNDRjQ3lKMFhtX1JFcWdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8xMmMxM2UtZjY3NS00ODgyLWJiZTYt NDhkM2NhMTYxYmIwLzEvdzdOQXIydV9mc2tKT2lINVpMX0RCaWc1MG9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy8xMmMxM2UtZjY3NS00ODgyLWJiZTYtNDhkM2NhMTYxYmIw LzEvWlJJY1A1SUhvM05GNDRjQ3lKMFhtX1JFcWdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAworLMA0G CSqGSIb3DQEBCwUAA4IBAQA/P8vROUlUq08GasuYgIn2qSfo80Zfg7vO/1E42tXS gDcTqgSd97u+blYsPx29nFe2K/8GIXaVNJWnEdj+uJKRTVlUzLag4lYPwA9rU2AX IlbR/lUu1mnMhRMUMisPfu/MGvS/XFZVEL3CLRffvToV5AVEOv3D7Z2fTbJelNL0 sbMKWFvkE9+xP70NpLqU99UHNxcZswFjYc+bOzrQtykpN3fGHpy1Y/gNRAEp4fRL CpWW2Wnqlrc/4vYhQ8OtGrHkVth3F3tiUSzZEC1HWzZRJn5Aa3n8JhTxDTZKlT2w ECAuwqw/3Nnz3pun2nvCRkiiL/YwY2dAZ1ApaLl4c/NB -----END CERTIFICATE-----Generated at Sun Jan 25 18:09:04 2026 by rpki-client