This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/wOsAS5ybZu5Qe3WMJA8kSzFuNKI.roa File: wOsAS5ybZu5Qe3WMJA8kSzFuNKI.roa (raw, json) Hash identifier: seUk9h3ey2Wa7VmriDcaQjTazptLlbD0e18k3NuA6C4= Subject key identifier: C0:EB:00:4B:9C:9B:66:EE:50:7B:75:8C:24:0F:24:4B:31:6E:34:A2 Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019B77C69DD095F46075553A04D8985D8351 Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/wOsAS5ybZu5Qe3WMJA8kSzFuNKI.roa Signing time: Thu 01 Jan 2026 04:17:43 +0000 ROA not before: Thu 01 Jan 2026 04:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213686 IP address blocks: 109.167.1.0/24 maxlen: 24 109.167.82.0/24 maxlen: 24 151.237.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:9d:d0:95:f4:60:75:55:3a:04:d8:98:5d:83:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Jan 1 04:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0eb004b9c9b66ee507b758c240f244b316e34a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:39:e3:8d:c5:f5:6b:aa:f8:94:8c:0e:85:bb: af:50:a4:bf:02:9b:e7:c0:58:56:bc:22:42:69:e7: 5b:9a:64:94:88:0c:1a:6e:03:5a:6d:b4:80:81:a1: 2a:23:0b:08:9f:4b:a7:4c:e8:42:8f:b0:28:d3:ce: 21:c0:45:9e:02:39:bf:91:d6:bf:d4:bf:4f:a3:32: 5c:b7:68:b3:94:b7:1c:4d:2b:9f:c1:37:e5:fa:b1: c6:f8:a3:0c:54:87:77:ee:40:03:a9:99:4b:96:0b: 38:f3:aa:4f:7b:84:a5:77:94:70:9e:24:67:2f:fc: 63:c8:b0:44:d6:12:c1:5b:d0:e5:c2:31:9a:4e:dd: b5:84:8e:7a:f2:60:96:6c:3c:fb:a4:28:aa:8a:28: 4d:10:e8:84:c1:c6:b1:e0:7b:66:f7:25:77:41:cb: b9:64:02:50:9c:8f:55:ad:2c:94:18:08:0e:fe:58: 35:69:ee:2b:cc:f9:5c:22:1f:4b:f5:b8:a8:f2:00: 92:5f:36:f0:c2:94:82:88:38:f7:0c:42:05:d2:13: e3:a1:8c:b2:f1:96:5a:96:dd:71:ce:e5:c3:a8:db: 89:34:ea:c4:b9:16:97:98:3e:ce:b8:45:ed:f9:7c: 4c:50:e5:62:99:67:3e:f4:0f:52:35:0a:a4:fd:a1: 82:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:EB:00:4B:9C:9B:66:EE:50:7B:75:8C:24:0F:24:4B:31:6E:34:A2 X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/wOsAS5ybZu5Qe3WMJA8kSzFuNKI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.167.1.0/24 109.167.82.0/24 151.237.211.0/24 Signature Algorithm: sha256WithRSAEncryption 75:13:a8:0f:56:3d:f1:d9:4f:b3:11:fd:4f:82:44:20:38:70: e2:be:30:d5:9a:9f:6b:93:95:33:0d:e4:0a:5d:dc:96:e3:ec: a3:92:e8:b6:58:52:0e:9f:7f:57:e4:95:15:bf:c6:d8:b5:8c: 43:90:7d:cb:1d:7c:ae:e9:44:63:bb:ec:1c:c0:da:8f:eb:3c: 88:df:bd:45:80:8b:eb:df:2c:d0:c9:e3:fe:08:02:13:a6:6f: 35:d9:f4:18:b7:0d:06:a3:ce:73:5a:84:d8:59:cd:95:d6:a5: f9:44:f1:70:95:8c:45:d8:06:7f:d8:ad:a2:30:94:94:80:57: fb:c0:47:15:dc:8d:4a:c0:cd:81:2f:81:16:cd:bc:a5:4f:51: d0:bf:03:64:fd:23:41:17:a8:41:0f:11:6e:99:31:4b:fc:61: 5c:41:d7:b6:01:cd:d9:61:fe:46:38:76:16:83:ab:d3:dd:2c: b4:18:5d:89:aa:88:c3:07:26:41:2d:73:d0:62:dc:4f:4c:61: c1:83:3c:f3:90:0f:a9:d7:48:79:86:0b:cc:3d:d6:44:90:15: 2c:cb:8c:24:a4:2d:3d:ff:7f:14:ff:80:e6:d0:10:2b:6d:44: 0b:52:d0:8c:d5:21:b5:0d:c2:b1:ee:92:85:ae:8f:66:2c:4c: 7c:32:5b:b5 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt3xp3QlfRgdVU6BNiYXYNRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjYwMTAxMDQxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMGViMDA0YjljOWI2NmVlNTA3Yjc1OGMyNDBmMjQ0YjMxNmUzNGEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxznjjcX1a6r4lIwOhbuvUKS/Apvn wFhWvCJCaedbmmSUiAwabgNabbSAgaEqIwsIn0unTOhCj7Ao084hwEWeAjm/kda/ 1L9PozJct2izlLccTSufwTfl+rHG+KMMVId37kADqZlLlgs486pPe4Sld5RwniRn L/xjyLBE1hLBW9DlwjGaTt21hI568mCWbDz7pCiqiihNEOiEwcax4Htm9yV3Qcu5 ZAJQnI9VrSyUGAgO/lg1ae4rzPlcIh9L9bio8gCSXzbwwpSCiDj3DEIF0hPjoYyy 8ZZalt1xzuXDqNuJNOrEuRaXmD7OuEXt+XxMUOVimWc+9A9SNQqk/aGCZQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMDrAEucm2buUHt1jCQPJEsxbjSiMB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvd09zQVM1eWJadTVRZTNXTUpBOGtTekZ1TktJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAbacBAwQA badSAwQAl+3TMA0GCSqGSIb3DQEBCwUAA4IBAQB1E6gPVj3x2U+zEf1PgkQgOHDi vjDVmp9rk5UzDeQKXdyW4+yjkui2WFIOn39X5JUVv8bYtYxDkH3LHXyu6URju+wc wNqP6zyI371FgIvr3yzQyeP+CAITpm812fQYtw0Go85zWoTYWc2V1qX5RPFwlYxF 2AZ/2K2iMJSUgFf7wEcV3I1KwM2BL4EWzbylT1HQvwNk/SNBF6hBDxFumTFL/GFc Qde2Ac3ZYf5GOHYWg6vT3Sy0GF2JqojDByZBLXPQYtxPTGHBgzzzkA+p10h5hgvM PdZEkBUsy4wkpC09/38U/4Dm0BArbUQLUtCM1SG1DcKx7pKFro9mLEx8Mlu1 -----END CERTIFICATE-----Generated at Sun Jan 25 07:15:30 2026 by rpki-client