This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/WAm_tIyDAPRV3BNqWG57uTp7CzY.roa File: WAm_tIyDAPRV3BNqWG57uTp7CzY.roa (raw, json) Hash identifier: qS+vZJ+Ti9+HN+VBxaCgQjtizbbFP3FemK3D8+0KoO4= Subject key identifier: 58:09:BF:B4:8C:83:00:F4:55:DC:13:6A:58:6E:7B:B9:3A:7B:0B:36 Certificate issuer: /CN=c35adeebc28d7e27fd9eb9efb23551dae20b1d0f Certificate serial: 019B7B3610F364F116E6C7195AE7A63FAD6C Authority key identifier: C3:5A:DE:EB:C2:8D:7E:27:FD:9E:B9:EF:B2:35:51:DA:E2:0B:1D:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/WAm_tIyDAPRV3BNqWG57uTp7CzY.roa Signing time: Thu 01 Jan 2026 20:18:19 +0000 ROA not before: Thu 01 Jan 2026 20:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47951 IP address blocks: 194.104.137.0/24 maxlen: 24 2a11:5fc0::/29 maxlen: 29 2a11:5fc0::/32 maxlen: 32 2a11:5fc1::/32 maxlen: 32 2a11:5fc2::/32 maxlen: 32 2a11:5fc3::/32 maxlen: 32 2a11:5fc4::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:10:f3:64:f1:16:e6:c7:19:5a:e7:a6:3f:ad:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35adeebc28d7e27fd9eb9efb23551dae20b1d0f Validity Not Before: Jan 1 20:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5809bfb48c8300f455dc136a586e7bb93a7b0b36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d7:3a:38:10:66:66:f1:ec:65:49:b2:1e:ed: 78:d3:6d:28:05:99:28:a5:92:f1:7f:e4:bf:64:e6: e3:53:ee:09:49:b0:6c:da:e9:79:ed:ca:11:39:8b: b9:b5:93:fb:fe:e3:34:50:5c:3f:85:d4:c8:fb:37: d1:4e:1e:35:83:fe:eb:26:b8:c9:46:bf:3b:32:bf: 88:5d:52:6d:45:df:c0:0b:a2:97:e3:75:45:57:85: 6e:ed:cf:02:89:ca:f6:dd:cb:0c:4e:bd:5f:21:99: ab:0a:77:40:03:98:62:ed:bb:28:c0:c3:f2:55:53: 3c:1f:bf:a9:25:97:bc:7c:3e:10:1d:dc:e4:af:e5: 94:5c:35:62:dc:4d:b4:f9:af:91:b7:16:15:2a:68: 10:30:3f:19:a7:e6:48:d4:73:5c:55:22:32:18:7b: bd:0f:49:0a:9b:ba:1d:70:f2:57:97:c0:f4:c5:f0: 26:be:2c:e0:66:e4:7e:d3:13:27:4c:93:c7:06:df: 00:8e:27:e2:b1:ec:dc:22:74:5c:93:9e:88:f1:ef: 30:46:9e:cf:62:37:ba:d7:b2:6d:ee:d2:06:2f:23: fc:a4:3d:e0:ac:ae:46:8d:98:d6:0d:a2:7c:21:d8: f9:ff:94:10:86:ad:3f:0f:8c:39:d9:a6:95:6c:15: 37:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:09:BF:B4:8C:83:00:F4:55:DC:13:6A:58:6E:7B:B9:3A:7B:0B:36 X509v3 Authority Key Identifier: keyid:C3:5A:DE:EB:C2:8D:7E:27:FD:9E:B9:EF:B2:35:51:DA:E2:0B:1D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w1re68KNfif9nrnvsjVR2uILHQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/WAm_tIyDAPRV3BNqWG57uTp7CzY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/839d1c-4db3-45cc-b04f-b55d7d7f2c48/1/w1re68KNfif9nrnvsjVR2uILHQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.104.137.0/24 IPv6: 2a11:5fc0::/29 Signature Algorithm: sha256WithRSAEncryption 87:c6:00:67:95:dc:1f:b5:e1:eb:dd:05:a7:8c:d7:26:1f:05: 2d:70:03:c7:96:5d:d4:12:e2:de:3f:0b:6e:cc:cc:96:c6:39: e2:6f:99:7d:00:f0:db:7e:bc:29:80:2f:67:6d:96:cc:05:2c: 45:79:57:8a:29:ed:0e:9b:bb:12:4c:c6:9f:bd:93:72:14:fa: ad:9c:03:ee:f1:df:6a:e0:4e:9c:0d:95:0e:90:f4:d1:36:5c: 7c:5e:5c:61:b4:db:65:fd:64:a3:ce:39:e3:1e:5b:5b:18:ad: bb:cd:68:b7:e1:06:60:df:30:1b:10:ac:8b:c7:74:d6:be:74: bb:ae:cc:17:2a:1f:9b:6e:ca:4a:18:cb:33:90:5b:ba:95:e8: 57:db:31:13:90:c8:63:ef:1c:e0:32:25:9d:02:0d:0a:77:fe: cd:36:15:78:8b:5d:19:ee:ff:e0:5c:d4:a8:2e:e6:41:8a:2a: c1:eb:ca:08:9d:70:34:c4:88:94:cf:f1:c9:88:e7:3b:e9:4b: 20:4e:52:27:52:0d:99:ea:67:76:a7:2e:06:d5:8a:e8:ca:41: 63:e1:ea:87:47:e6:2a:ee:03:fc:91:92:e7:8c:eb:7b:ca:c1: 98:89:7a:ab:13:62:48:24:88:7c:cc:22:a9:e1:03:92:e6:95: 45:7f:57:c7 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7NhDzZPEW5scZWuemP61sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWFkZWViYzI4ZDdlMjdmZDllYjllZmIyMzU1MWRhZTIw YjFkMGYwHhcNMjYwMTAxMjAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODA5YmZiNDhjODMwMGY0NTVkYzEzNmE1ODZlN2JiOTNhN2IwYjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dc6OBBmZvHsZUmyHu14020oBZko pZLxf+S/ZObjU+4JSbBs2ul57coROYu5tZP7/uM0UFw/hdTI+zfRTh41g/7rJrjJ Rr87Mr+IXVJtRd/AC6KX43VFV4Vu7c8Cicr23csMTr1fIZmrCndAA5hi7bsowMPy VVM8H7+pJZe8fD4QHdzkr+WUXDVi3E20+a+RtxYVKmgQMD8Zp+ZI1HNcVSIyGHu9 D0kKm7odcPJXl8D0xfAmvizgZuR+0xMnTJPHBt8AjifisezcInRck56I8e8wRp7P Yje617Jt7tIGLyP8pD3grK5GjZjWDaJ8Idj5/5QQhq0/D4w52aaVbBU3pQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFgJv7SMgwD0VdwTalhue7k6ews2MB8GA1UdIwQY MBaAFMNa3uvCjX4n/Z6577I1UdriCx0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzFyZTY4S05maWY5bnJudnNqVlIydUlMSFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy84MzlkMWMtNGRiMy00NWNjLWIwNGYt YjU1ZDdkN2YyYzQ4LzEvV0FtX3RJeURBUFJWM0JOcVdHNTd1VHA3Q3pZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy84MzlkMWMtNGRiMy00NWNjLWIwNGYtYjU1ZDdkN2YyYzQ4 LzEvdzFyZTY4S05maWY5bnJudnNqVlIydUlMSFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwmiJMA0E AgACMAcDBQMqEV/AMA0GCSqGSIb3DQEBCwUAA4IBAQCHxgBnldwfteHr3QWnjNcm HwUtcAPHll3UEuLePwtuzMyWxjnib5l9APDbfrwpgC9nbZbMBSxFeVeKKe0Om7sS TMafvZNyFPqtnAPu8d9q4E6cDZUOkPTRNlx8XlxhtNtl/WSjzjnjHltbGK27zWi3 4QZg3zAbEKyLx3TWvnS7rswXKh+bbspKGMszkFu6lehX2zETkMhj7xzgMiWdAg0K d/7NNhV4i10Z7v/gXNSoLuZBiirB68oInXA0xIiUz/HJiOc76UsgTlInUg2Z6md2 py4G1YroykFj4eqHR+Yq7gP8kZLnjOt7ysGYiXqrE2JIJIh8zCKp4QOS5pVFf1fH -----END CERTIFICATE-----Generated at Mon Jan 26 14:44:59 2026 by rpki-client