This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/w_ptOPR66g-2hUDEWzrs74clcAE.roa File: w_ptOPR66g-2hUDEWzrs74clcAE.roa (raw, json) Hash identifier: 6vuuqzAxRKqIgwnNrTyFV+eVf/OZTeXgi5JQBVeXXCI= Subject key identifier: C3:FA:6D:38:F4:7A:EA:0F:B6:85:40:C4:5B:3A:EC:EF:87:25:70:01 Certificate issuer: /CN=c7983b3a9758fcbe78733d9155aed266c882a23c Certificate serial: 019B76EB3D49EA893A692F37EEEAE2554E3F Authority key identifier: C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/w_ptOPR66g-2hUDEWzrs74clcAE.roa Signing time: Thu 01 Jan 2026 00:18:06 +0000 ROA not before: Thu 01 Jan 2026 00:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42927 IP address blocks: 185.91.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.mft rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:3d:49:ea:89:3a:69:2f:37:ee:ea:e2:55:4e:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c7983b3a9758fcbe78733d9155aed266c882a23c Validity Not Before: Jan 1 00:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3fa6d38f47aea0fb68540c45b3aecef87257001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d1:55:1b:62:ab:88:e2:ef:5d:66:4a:6d:a4: fd:3c:3b:d7:ad:57:6c:73:9a:0e:b5:b5:04:09:34: 99:55:8c:a6:21:f1:75:4b:42:f7:aa:58:67:31:84: ff:28:59:95:33:8d:78:20:1c:5e:f2:92:83:ea:ff: 34:43:e0:e7:92:a5:4d:18:c5:14:80:7e:39:08:9a: 54:6b:bd:15:75:7a:44:9f:dc:af:8a:9e:3b:5a:ca: 46:c2:ba:6c:f3:8c:f2:4e:61:30:bc:88:de:49:17: c1:28:be:ff:76:da:bb:b1:5e:68:3a:4b:c2:1a:bc: 91:53:ec:60:be:4d:c1:ee:32:b1:a2:e3:cc:d4:08: fd:be:fc:af:d3:9f:30:ec:05:a6:0b:f5:af:5b:1e: 52:ad:76:f4:f6:c0:fd:bd:1e:b0:af:6f:02:b6:cc: a8:21:f0:bb:23:71:85:3f:09:36:34:d2:e0:64:87: 69:be:61:74:5f:d3:fd:fd:96:92:2b:cb:5d:c3:18: c4:40:4b:b1:43:c1:a6:6a:4d:47:01:f2:55:7b:2c: 3c:7d:26:2d:0d:67:0d:9a:12:df:8f:e8:e5:89:94: bf:69:1f:ae:11:80:8f:39:9d:15:03:7f:b8:c2:5a: 8f:ff:e7:d2:39:5c:7f:1b:cf:3b:b5:29:a0:10:8a: 3b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:FA:6D:38:F4:7A:EA:0F:B6:85:40:C4:5B:3A:EC:EF:87:25:70:01 X509v3 Authority Key Identifier: keyid:C7:98:3B:3A:97:58:FC:BE:78:73:3D:91:55:AE:D2:66:C8:82:A2:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x5g7OpdY_L54cz2RVa7SZsiCojw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/w_ptOPR66g-2hUDEWzrs74clcAE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/811d16-b513-47ed-9e71-238405f2cde9/1/x5g7OpdY_L54cz2RVa7SZsiCojw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.91.215.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:98:a3:2c:c6:04:fb:b5:fc:c5:75:d3:3a:0f:e0:fc:ac:06: 80:6f:7e:0e:e9:da:50:ba:a7:99:b5:13:92:b5:e7:aa:f0:fb: dd:b0:15:5a:3e:c7:e9:fc:b5:38:44:dc:63:ad:7e:c4:f4:da: e1:08:a0:9d:41:6e:e1:3d:f7:cd:d9:7a:6d:34:32:c9:7d:18: 00:9d:4c:89:d0:fd:f8:4c:65:be:7a:42:08:99:7d:32:9b:37: a4:b4:ee:e5:da:cd:c9:84:fa:ce:f9:93:e6:3d:9f:88:d1:2f: 07:ad:b6:b5:f4:49:12:19:7c:e3:d7:4e:09:bd:c3:72:bf:8d: 0a:e6:4f:01:69:12:f8:7e:11:ea:3a:76:41:c3:78:da:59:f0: 41:63:06:d2:b9:78:d1:55:05:5b:00:d3:f4:49:fe:3e:4b:2d: 7c:67:0c:ef:62:92:f6:ff:07:ad:b1:4c:c0:5d:e8:e7:64:6c: 88:c9:c0:0f:55:f3:3e:8b:89:93:d9:bd:19:6d:ac:c9:61:f0: 18:87:55:45:d2:85:94:19:bd:97:bd:b5:c5:bf:20:70:06:25: 8e:09:71:b6:c0:6c:f0:dc:34:2f:5d:a1:43:67:e0:c7:19:b5: c7:4b:9d:ae:1d:ab:2a:19:ac:6c:f7:3a:8d:16:b2:2e:23:49: 3b:2a:51:b3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26z1J6ok6aS837uriVU4/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM3OTgzYjNhOTc1OGZjYmU3ODczM2Q5MTU1YWVkMjY2Yzg4 MmEyM2MwHhcNMjYwMTAxMDAxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjM2ZhNmQzOGY0N2FlYTBmYjY4NTQwYzQ1YjNhZWNlZjg3MjU3MDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldFVG2KriOLvXWZKbaT9PDvXrVds c5oOtbUECTSZVYymIfF1S0L3qlhnMYT/KFmVM414IBxe8pKD6v80Q+DnkqVNGMUU gH45CJpUa70VdXpEn9yvip47WspGwrps84zyTmEwvIjeSRfBKL7/dtq7sV5oOkvC GryRU+xgvk3B7jKxouPM1Aj9vvyv058w7AWmC/WvWx5SrXb09sD9vR6wr28Ctsyo IfC7I3GFPwk2NNLgZIdpvmF0X9P9/ZaSK8tdwxjEQEuxQ8Gmak1HAfJVeyw8fSYt DWcNmhLfj+jliZS/aR+uEYCPOZ0VA3+4wlqP/+fSOVx/G887tSmgEIo7BQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMP6bTj0euoPtoVAxFs67O+HJXABMB8GA1UdIwQY MBaAFMeYOzqXWPy+eHM9kVWu0mbIgqI8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveDVnN09wZFlfTDU0Y3oyUlZhN1Nac2lDb2p3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MTFkMTYtYjUxMy00N2VkLTllNzEt MjM4NDA1ZjJjZGU5LzEvd19wdE9QUjY2Zy0yaFVERVd6cnM3NGNsY0FFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC84MTFkMTYtYjUxMy00N2VkLTllNzEtMjM4NDA1ZjJjZGU5 LzEveDVnN09wZFlfTDU0Y3oyUlZhN1Nac2lDb2p3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVvXMA0G CSqGSIb3DQEBCwUAA4IBAQA/mKMsxgT7tfzFddM6D+D8rAaAb34O6dpQuqeZtROS teeq8PvdsBVaPsfp/LU4RNxjrX7E9NrhCKCdQW7hPffN2XptNDLJfRgAnUyJ0P34 TGW+ekIImX0ymzektO7l2s3JhPrO+ZPmPZ+I0S8Hrba19EkSGXzj104JvcNyv40K 5k8BaRL4fhHqOnZBw3jaWfBBYwbSuXjRVQVbANP0Sf4+Sy18ZwzvYpL2/wetsUzA XejnZGyIycAPVfM+i4mT2b0ZbazJYfAYh1VF0oWUGb2XvbXFvyBwBiWOCXG2wGzw 3DQvXaFDZ+DHGbXHS52uHasqGaxs9zqNFrIuI0k7KlGz -----END CERTIFICATE-----Generated at Sun Jan 25 17:41:36 2026 by rpki-client