This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/w3bUx21EelQe6cP2sWw-f16bOSc.roa File: w3bUx21EelQe6cP2sWw-f16bOSc.roa (raw, json) Hash identifier: hXS9wDSgqG6sE79J34bqDzQpJHEpUBu8b6eirVvBO14= Subject key identifier: C3:76:D4:C7:6D:44:7A:54:1E:E9:C3:F6:B1:6C:3E:7F:5E:9B:39:27 Certificate issuer: /CN=b209308540c4df9b9bb7d6327fa7b5d49008068c Certificate serial: 019B797F48DCAF02A98ADA110683B4291987 Authority key identifier: B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/w3bUx21EelQe6cP2sWw-f16bOSc.roa Signing time: Thu 01 Jan 2026 12:19:03 +0000 ROA not before: Thu 01 Jan 2026 12:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201746 IP address blocks: 45.66.212.0/23 maxlen: 23 45.66.212.0/24 maxlen: 24 45.66.213.0/24 maxlen: 24 45.131.28.0/24 maxlen: 24 94.158.253.0/24 maxlen: 24 94.158.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:48:dc:af:02:a9:8a:da:11:06:83:b4:29:19:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b209308540c4df9b9bb7d6327fa7b5d49008068c Validity Not Before: Jan 1 12:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c376d4c76d447a541ee9c3f6b16c3e7f5e9b3927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e9:66:99:db:c1:ee:0a:96:3a:89:72:63:ed: f4:5a:2b:05:b7:d6:9b:ec:b5:69:55:59:c6:bb:8a: 38:29:4a:83:a7:31:c6:69:63:76:1a:46:13:06:4d: a0:41:6b:52:59:50:50:5e:f0:46:85:87:f4:e5:f8: 07:a3:f6:83:da:ea:34:84:02:56:33:64:80:c0:5f: be:53:94:dd:ae:6c:58:eb:57:cf:3b:03:c8:f9:ca: 53:b3:f4:42:cd:f0:a7:69:64:3a:69:14:a7:54:f2: af:15:a0:95:1d:ae:29:4c:0c:6a:59:82:4a:14:fa: 8c:cb:0d:a0:2f:d4:10:4b:c5:74:85:e7:04:2d:7c: 91:c5:26:ff:5e:78:fe:01:d0:62:bd:63:7e:08:ca: e4:63:10:ed:54:4e:60:25:72:f3:f2:b3:c8:d1:24: 0f:a9:20:ab:0c:5b:5e:52:ba:7a:a5:dd:62:e9:59: 2e:6e:c2:32:1d:cd:4b:1c:cf:5a:87:48:cc:9b:e5: 8b:cf:73:04:4f:40:df:59:b1:4d:69:97:28:6f:08: 23:f9:71:f1:b7:ad:fa:be:11:78:ba:e4:ef:be:e9: f5:5a:fc:03:22:03:ca:68:96:68:81:ad:61:f0:46: 24:1d:f6:5e:fe:89:6b:ae:bd:13:89:5b:ac:f1:3c: 5b:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:76:D4:C7:6D:44:7A:54:1E:E9:C3:F6:B1:6C:3E:7F:5E:9B:39:27 X509v3 Authority Key Identifier: keyid:B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/w3bUx21EelQe6cP2sWw-f16bOSc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.66.212.0/23 45.131.28.0/24 94.158.253.0-94.158.254.255 Signature Algorithm: sha256WithRSAEncryption 22:99:84:ff:9c:b2:4f:47:b6:76:0d:df:2b:d8:4c:35:23:66: f7:10:85:e6:63:8e:0e:59:56:c2:69:ff:64:8d:53:2d:b6:b4: b1:1e:6e:11:eb:49:0f:b3:5e:2b:34:dd:c2:46:b5:3d:36:4c: 47:90:82:d6:b5:89:54:79:8a:17:9f:2b:71:74:c2:bd:87:0e: 06:b1:ac:0b:ee:c0:1d:e0:25:0e:b6:aa:13:31:d7:61:cd:c2: 23:2d:0f:c9:cd:82:14:4e:4c:27:5a:9e:fb:53:90:ae:f2:71: 4b:dc:e3:10:00:53:e9:a3:1d:b0:23:18:f1:61:17:3f:62:9d: a5:69:9d:a0:1f:e3:36:95:bb:d4:b4:8c:d3:2c:ca:2a:ac:86: 09:a6:68:15:7c:3e:92:90:e2:c7:0b:54:3d:f0:c6:c3:72:97: a2:d7:40:0b:c0:9a:9c:49:9b:2b:ba:10:d0:79:31:d4:c3:b2: 2e:f4:d1:b6:be:a9:0c:82:d9:4f:06:0d:fe:47:86:29:f5:30: f9:ae:89:40:49:44:93:e9:d0:85:99:5a:e6:36:11:ee:8a:2e: c4:d0:6b:fe:60:0e:eb:e6:09:0f:83:62:b2:9d:b2:21:b9:d0: 93:fb:df:01:67:fc:e5:61:71:33:45:00:de:d5:cd:52:3b:fd: 75:36:8d:be -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt5f0jcrwKpitoRBoO0KRmHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyMDkzMDg1NDBjNGRmOWI5YmI3ZDYzMjdmYTdiNWQ0OTAw ODA2OGMwHhcNMjYwMTAxMTIxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzc2ZDRjNzZkNDQ3YTU0MWVlOWMzZjZiMTZjM2U3ZjVlOWIzOTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+lmmdvB7gqWOolyY+30WisFt9ab 7LVpVVnGu4o4KUqDpzHGaWN2GkYTBk2gQWtSWVBQXvBGhYf05fgHo/aD2uo0hAJW M2SAwF++U5TdrmxY61fPOwPI+cpTs/RCzfCnaWQ6aRSnVPKvFaCVHa4pTAxqWYJK FPqMyw2gL9QQS8V0hecELXyRxSb/Xnj+AdBivWN+CMrkYxDtVE5gJXLz8rPI0SQP qSCrDFteUrp6pd1i6VkubsIyHc1LHM9ah0jMm+WLz3MET0DfWbFNaZcobwgj+XHx t636vhF4uuTvvun1WvwDIgPKaJZoga1h8EYkHfZe/olrrr0TiVus8TxbsQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFMN21MdtRHpUHunD9rFsPn9emzknMB8GA1UdIwQY MBaAFLIJMIVAxN+bm7fWMn+ntdSQCAaMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2drd2hVREUzNXVidDlZeWY2ZTExSkFJQm93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84ODBlYjItZmE2NS00N2NhLThhMDAt NjQ4MGMzZDFmNGU0LzEvdzNiVXgyMUVlbFFlNmNQMnNXdy1mMTZiT1NjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi84ODBlYjItZmE2NS00N2NhLThhMDAtNjQ4MGMzZDFmNGU0 LzEvc2drd2hVREUzNXVidDlZeWY2ZTExSkFJQm93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBLULUAwQA LYMcMAwDBABenv0DBABenv4wDQYJKoZIhvcNAQELBQADggEBACKZhP+csk9HtnYN 3yvYTDUjZvcQheZjjg5ZVsJp/2SNUy22tLEebhHrSQ+zXis03cJGtT02TEeQgta1 iVR5ihefK3F0wr2HDgaxrAvuwB3gJQ62qhMx12HNwiMtD8nNghROTCdanvtTkK7y cUvc4xAAU+mjHbAjGPFhFz9inaVpnaAf4zaVu9S0jNMsyiqshgmmaBV8PpKQ4scL VD3wxsNyl6LXQAvAmpxJmyu6ENB5MdTDsi700ba+qQyC2U8GDf5Hhin1MPmuiUBJ RJPp0IWZWuY2Ee6KLsTQa/5gDuvmCQ+DYrKdsiG50JP73wFn/OVhcTNFAN7VzVI7 /XU2jb4= -----END CERTIFICATE-----Generated at Mon Jan 26 05:02:18 2026 by rpki-client