This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/w8mU3t4eAhYelsDgAgrn-6wqLH4.roa File: w8mU3t4eAhYelsDgAgrn-6wqLH4.roa (raw, json) Hash identifier: G03HiosMHcQEOceRbwXH5r6VxkCMOBEGzj+w28Sw620= Subject key identifier: C3:C9:94:DE:DE:1E:02:16:1E:96:C0:E0:02:0A:E7:FB:AC:2A:2C:7E Certificate issuer: /CN=1232303d1638e0735240491aaa9e42b1887adaca Certificate serial: 019B7F85118DE9AFDF5154C3B989AA093CB9 Authority key identifier: 12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/w8mU3t4eAhYelsDgAgrn-6wqLH4.roa Signing time: Fri 02 Jan 2026 16:23:05 +0000 ROA not before: Fri 02 Jan 2026 16:23:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197708 IP address blocks: 185.7.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.mft rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:11:8d:e9:af:df:51:54:c3:b9:89:aa:09:3c:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1232303d1638e0735240491aaa9e42b1887adaca Validity Not Before: Jan 2 16:23:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3c994dede1e02161e96c0e0020ae7fbac2a2c7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:39:a1:52:0c:e6:f3:9b:51:c7:a3:92:05:64: ae:74:f8:bb:b3:1f:e8:7c:f8:9e:d5:bc:c4:a9:f0: 6a:99:20:18:21:83:7f:d7:cf:7f:cb:d2:58:80:a7: 53:7f:3e:1f:36:33:40:c4:04:7a:40:c7:e8:f6:48: ec:49:9e:95:ba:40:70:2b:89:37:6c:11:6a:b0:47: 13:07:2d:8e:e4:5e:ea:c5:27:b4:3f:0c:43:9c:06: 8c:4f:5f:bb:67:f4:03:46:1d:cd:89:d4:e8:dd:e6: 99:4c:7d:76:f2:94:0a:cb:26:8b:28:78:5e:13:70: d1:65:a6:f2:d3:a9:72:22:c7:7a:cd:39:e0:b1:b3: 28:7c:b5:55:fb:50:b5:6a:2c:03:12:c5:5a:45:23: 1b:1f:9a:99:d8:de:86:dd:33:bb:30:13:02:21:42: 85:d5:b7:8d:1b:a4:1a:62:48:24:ed:a1:b8:24:c8: f1:9a:a1:7d:3c:74:25:ff:c1:c0:48:42:8d:b3:ec: 71:a0:69:5c:1c:95:59:3d:8b:bb:63:f7:fb:b8:6c: b0:6c:ee:58:ea:85:e0:a7:59:62:2b:75:8f:61:32: 47:68:11:4e:94:5c:f4:7b:76:82:9d:10:1e:ff:e0: 6f:72:ec:e9:cc:02:f9:87:a9:bb:4f:22:8f:53:99: 81:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C9:94:DE:DE:1E:02:16:1E:96:C0:E0:02:0A:E7:FB:AC:2A:2C:7E X509v3 Authority Key Identifier: keyid:12:32:30:3D:16:38:E0:73:52:40:49:1A:AA:9E:42:B1:88:7A:DA:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EjIwPRY44HNSQEkaqp5CsYh62so.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/w8mU3t4eAhYelsDgAgrn-6wqLH4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/0ab167-3094-4103-8131-064414d0340f/1/EjIwPRY44HNSQEkaqp5CsYh62so.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.7.120.0/24 Signature Algorithm: sha256WithRSAEncryption c5:b6:de:ea:99:2c:7e:d0:af:41:55:2f:29:67:4f:3e:37:b6: c0:aa:2a:e2:8d:f2:dc:da:2f:25:1b:b7:ac:4a:e7:58:b8:a0: 72:63:bb:a0:a0:0b:0a:bd:cb:83:a2:fb:63:8c:34:ed:55:76: 3a:eb:e3:8e:b8:60:f5:50:0b:56:9c:2f:e3:37:05:15:a6:00: f2:03:c7:4f:82:dc:49:5d:59:e4:f0:83:6a:e5:71:15:e7:e5: bb:9f:53:b2:51:ac:c7:fb:65:61:d9:e6:e0:6b:52:01:86:1e: c9:59:0b:ae:e8:e1:ec:f4:c6:9d:1c:f8:1e:c6:02:cd:78:d1: a5:27:c2:07:37:6d:55:4f:8e:db:40:c6:f8:ab:dd:80:ec:3e: e4:64:88:b0:49:1d:ef:0a:75:3f:4d:46:3a:33:5a:77:1d:4a: 35:ea:52:e9:19:3d:fa:3d:ec:a2:16:b1:49:c2:4b:91:3d:82: 78:dd:c2:93:6e:ff:cd:9b:3b:37:0b:80:8d:79:1c:ad:9a:5e: f2:eb:a1:aa:cf:3b:65:4d:be:b4:2f:02:4b:c4:8a:67:7a:bf: 7e:55:03:49:4b:f9:e6:5b:25:cf:c8:b8:65:c4:25:49:9d:fd: be:3d:c0:1b:a8:cd:65:59:94:6c:d3:88:79:c2:bd:86:f3:d9: 20:f9:6b:98 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hRGN6a/fUVTDuYmqCTy5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMzIzMDNkMTYzOGUwNzM1MjQwNDkxYWFhOWU0MmIxODg3 YWRhY2EwHhcNMjYwMTAyMTYyMzA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjM2M5OTRkZWRlMWUwMjE2MWU5NmMwZTAwMjBhZTdmYmFjMmEyYzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDmhUgzm85tRx6OSBWSudPi7sx/o fPie1bzEqfBqmSAYIYN/189/y9JYgKdTfz4fNjNAxAR6QMfo9kjsSZ6VukBwK4k3 bBFqsEcTBy2O5F7qxSe0PwxDnAaMT1+7Z/QDRh3NidTo3eaZTH128pQKyyaLKHhe E3DRZaby06lyIsd6zTngsbMofLVV+1C1aiwDEsVaRSMbH5qZ2N6G3TO7MBMCIUKF 1beNG6QaYkgk7aG4JMjxmqF9PHQl/8HASEKNs+xxoGlcHJVZPYu7Y/f7uGywbO5Y 6oXgp1liK3WPYTJHaBFOlFz0e3aCnRAe/+BvcuzpzAL5h6m7TyKPU5mBmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMPJlN7eHgIWHpbA4AIK5/usKix+MB8GA1UdIwQY MBaAFBIyMD0WOOBzUkBJGqqeQrGIetrKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWpJd1BSWTQ0SE5TUUVrYXFwNUNzWWg2MnNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8wYWIxNjctMzA5NC00MTAzLTgxMzEt MDY0NDE0ZDAzNDBmLzEvdzhtVTN0NGVBaFllbHNEZ0Fncm4tNndxTEg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8wYWIxNjctMzA5NC00MTAzLTgxMzEtMDY0NDE0ZDAzNDBm LzEvRWpJd1BSWTQ0SE5TUUVrYXFwNUNzWWg2MnNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQd4MA0G CSqGSIb3DQEBCwUAA4IBAQDFtt7qmSx+0K9BVS8pZ08+N7bAqirijfLc2i8lG7es SudYuKByY7ugoAsKvcuDovtjjDTtVXY66+OOuGD1UAtWnC/jNwUVpgDyA8dPgtxJ XVnk8INq5XEV5+W7n1OyUazH+2Vh2ebga1IBhh7JWQuu6OHs9MadHPgexgLNeNGl J8IHN21VT47bQMb4q92A7D7kZIiwSR3vCnU/TUY6M1p3HUo16lLpGT36PeyiFrFJ wkuRPYJ43cKTbv/Nmzs3C4CNeRytml7y66GqzztlTb60LwJLxIpner9+VQNJS/nm WyXPyLhlxCVJnf2+PcAbqM1lWZRs04h5wr2G89kg+WuY -----END CERTIFICATE-----Generated at Sun Jan 25 22:51:58 2026 by rpki-client