This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/wS-jaaEMUTGS5DqxQuN95qXPBc8.roa File: wS-jaaEMUTGS5DqxQuN95qXPBc8.roa (raw, json) Hash identifier: 06h366lvWqKC+ftnxISHm/f+AJodcmHOYMbCi4Dh0pY= Subject key identifier: C1:2F:A3:69:A1:0C:51:31:92:E4:3A:B1:42:E3:7D:E6:A5:CF:05:CF Certificate issuer: /CN=b2a4fe3c371955b9212cade649cbf17c5fc58ee2 Certificate serial: 019B7BA4869450BC06C59A75BEA10859E2F6 Authority key identifier: B2:A4:FE:3C:37:19:55:B9:21:2C:AD:E6:49:CB:F1:7C:5F:C5:8E:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/wS-jaaEMUTGS5DqxQuN95qXPBc8.roa Signing time: Thu 01 Jan 2026 22:18:58 +0000 ROA not before: Thu 01 Jan 2026 22:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214794 IP address blocks: 185.199.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.crl rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.mft rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:86:94:50:bc:06:c5:9a:75:be:a1:08:59:e2:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2a4fe3c371955b9212cade649cbf17c5fc58ee2 Validity Not Before: Jan 1 22:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c12fa369a10c513192e43ab142e37de6a5cf05cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d3:e9:6f:97:cb:59:4e:59:eb:ee:a5:d1:7a: ed:cb:82:4a:4a:5e:fe:ec:0a:15:45:ec:78:b8:47: 72:49:fe:66:3e:f1:eb:e2:37:b6:dc:9e:56:39:8b: ce:e8:61:38:e3:b7:6f:32:73:f4:75:dc:20:48:71: 6a:e8:a7:04:3e:0e:b7:5e:98:1c:af:fa:3a:c5:a9: 04:8d:83:ee:36:60:0d:88:03:bf:6d:14:f1:38:e6: 63:04:13:91:9c:88:04:f1:00:70:6e:2a:29:43:52: e9:75:fa:20:b3:8c:0a:bf:db:ce:2c:7e:93:bb:8e: 43:90:e5:91:e4:fd:f3:47:4d:a7:5c:76:a0:16:2c: 24:b6:ab:60:44:f5:8e:01:99:93:b2:78:af:52:91: c0:b7:3a:96:e7:95:b8:76:a2:84:ab:52:23:49:63: 6c:2a:7a:f5:69:5c:19:5b:b5:f2:80:4e:98:ae:8e: 7f:21:d3:79:f6:4f:7c:63:6e:2a:8a:10:f7:a5:2d: c9:c6:94:0c:9f:22:b0:d5:f4:d2:cf:2b:4c:5f:a0: e1:f4:4f:f0:e5:d7:5c:17:33:a8:a5:7c:db:fb:06: 82:64:7a:56:5d:eb:7b:93:3a:5d:3e:49:4b:a7:1e: db:64:f0:0d:6e:cb:6b:e1:23:5b:11:96:7c:ab:82: 45:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:2F:A3:69:A1:0C:51:31:92:E4:3A:B1:42:E3:7D:E6:A5:CF:05:CF X509v3 Authority Key Identifier: keyid:B2:A4:FE:3C:37:19:55:B9:21:2C:AD:E6:49:CB:F1:7C:5F:C5:8E:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sqT-PDcZVbkhLK3mScvxfF_FjuI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/wS-jaaEMUTGS5DqxQuN95qXPBc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/537d65-c34f-4bda-a17f-c8ccdd9e687a/1/sqT-PDcZVbkhLK3mScvxfF_FjuI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.199.146.0/23 Signature Algorithm: sha256WithRSAEncryption 2a:d8:72:e7:5e:3c:0a:77:a7:9b:9d:52:9c:6c:54:9f:1d:0b: 97:c0:97:c1:62:f4:c7:85:61:e6:f7:e3:82:ca:ca:ad:af:cd: 5f:eb:82:2c:3c:c4:be:34:0d:21:bb:c6:bc:77:4c:45:4c:bd: 50:16:d5:f3:04:0b:58:2a:f5:45:a5:70:39:dc:5e:25:1e:11: 54:92:e0:b1:ab:6d:30:1b:e5:58:e3:02:4c:b8:64:69:b1:61: b9:25:4b:38:77:fc:f7:a5:8c:87:06:90:40:95:24:97:f8:6f: df:dc:e0:7a:73:d2:a5:7d:2c:15:6c:ba:14:c3:60:58:ac:9e: 3d:d6:d8:e2:69:f6:4e:65:e6:5e:c2:80:1f:68:3d:8b:99:e8: d3:23:00:f1:7d:3c:31:eb:44:bc:56:99:e4:e7:06:ce:1c:de: 84:fe:67:63:00:82:05:04:74:4b:21:73:e6:79:91:f1:dd:5b: ee:16:05:a6:f6:1c:77:84:38:6b:7b:8a:85:15:b3:66:02:71: 5a:53:db:e1:51:05:6f:03:8b:6f:c5:c9:51:7f:12:5e:22:a9: 0e:f6:2a:cf:2f:db:9f:47:4d:eb:16:33:80:83:71:a3:51:31: 07:90:72:76:d8:7f:6f:be:39:2f:25:1c:a3:a0:26:89:42:7d: c8:d9:c0:d1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pIaUULwGxZp1vqEIWeL2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyYTRmZTNjMzcxOTU1YjkyMTJjYWRlNjQ5Y2JmMTdjNWZj NThlZTIwHhcNMjYwMTAxMjIxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTJmYTM2OWExMGM1MTMxOTJlNDNhYjE0MmUzN2RlNmE1Y2YwNWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNPpb5fLWU5Z6+6l0Xrty4JKSl7+ 7AoVRex4uEdySf5mPvHr4je23J5WOYvO6GE447dvMnP0ddwgSHFq6KcEPg63Xpgc r/o6xakEjYPuNmANiAO/bRTxOOZjBBORnIgE8QBwbiopQ1Lpdfogs4wKv9vOLH6T u45DkOWR5P3zR02nXHagFiwktqtgRPWOAZmTsnivUpHAtzqW55W4dqKEq1IjSWNs Knr1aVwZW7XygE6Yro5/IdN59k98Y24qihD3pS3JxpQMnyKw1fTSzytMX6Dh9E/w 5ddcFzOopXzb+waCZHpWXet7kzpdPklLpx7bZPANbstr4SNbEZZ8q4JFswIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMEvo2mhDFExkuQ6sULjfealzwXPMB8GA1UdIwQY MBaAFLKk/jw3GVW5ISyt5knL8XxfxY7iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc3FULVBEY1pWYmtoTEszbVNjdnhmRl9GanVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81MzdkNjUtYzM0Zi00YmRhLWExN2Yt YzhjY2RkOWU2ODdhLzEvd1MtamFhRU1VVEdTNURxeFF1Tjk1cVhQQmM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81MzdkNjUtYzM0Zi00YmRhLWExN2YtYzhjY2RkOWU2ODdh LzEvc3FULVBEY1pWYmtoTEszbVNjdnhmRl9GanVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuceSMA0G CSqGSIb3DQEBCwUAA4IBAQAq2HLnXjwKd6ebnVKcbFSfHQuXwJfBYvTHhWHm9+OC ysqtr81f64IsPMS+NA0hu8a8d0xFTL1QFtXzBAtYKvVFpXA53F4lHhFUkuCxq20w G+VY4wJMuGRpsWG5JUs4d/z3pYyHBpBAlSSX+G/f3OB6c9KlfSwVbLoUw2BYrJ49 1tjiafZOZeZewoAfaD2LmejTIwDxfTwx60S8Vpnk5wbOHN6E/mdjAIIFBHRLIXPm eZHx3VvuFgWm9hx3hDhre4qFFbNmAnFaU9vhUQVvA4tvxclRfxJeIqkO9irPL9uf R03rFjOAg3GjUTEHkHJ22H9vvjkvJRyjoCaJQn3I2cDR -----END CERTIFICATE-----Generated at Sun Jan 25 14:31:48 2026 by rpki-client