This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/W4ezimhOK28HTElZ-mL_VlHTTYY.roa File: W4ezimhOK28HTElZ-mL_VlHTTYY.roa (raw, json) Hash identifier: aW+HAsRTpiBjWIXXUsRRtCgHyvy44DkCN4CGgiTo7pw= Subject key identifier: 5B:87:B3:8A:68:4E:2B:6F:07:4C:49:59:FA:62:FF:56:51:D3:4D:86 Certificate issuer: /CN=70847f8221897d6e952e86ea2c339abaacc131f5 Certificate serial: 019B77C6E578DFBA713129E0BBEE9593CD64 Authority key identifier: 70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/W4ezimhOK28HTElZ-mL_VlHTTYY.roa Signing time: Thu 01 Jan 2026 04:18:02 +0000 ROA not before: Thu 01 Jan 2026 04:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39010 IP address blocks: 185.38.28.0/22 maxlen: 24 185.95.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.mft rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:e5:78:df:ba:71:31:29:e0:bb:ee:95:93:cd:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70847f8221897d6e952e86ea2c339abaacc131f5 Validity Not Before: Jan 1 04:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b87b38a684e2b6f074c4959fa62ff5651d34d86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:2d:f7:5a:d9:82:58:d4:dc:92:94:fc:12:aa: fb:c3:ea:f3:b1:de:3e:65:06:c9:12:c8:eb:58:25: f5:df:ee:08:db:4c:08:67:7a:6f:2f:f0:e5:50:3d: 73:8c:27:2a:59:a6:37:1a:12:ef:32:61:c7:85:79: bd:8c:fd:97:b7:d4:01:cf:7a:58:07:94:3c:d6:36: da:6f:13:15:e6:24:95:c1:42:08:da:62:64:c7:52: ef:3d:ae:12:a7:9a:cc:4a:0a:fd:aa:5f:c5:ea:42: 8c:40:ec:27:f9:ea:25:84:00:79:b8:fe:54:0c:51: 99:ad:fb:b4:f7:ed:07:4b:43:31:d3:7e:44:fe:50: ba:4c:ec:d5:b7:cf:76:24:c5:6a:6e:17:09:71:d9: cd:b9:c0:1e:d8:21:9e:70:d2:e1:22:1b:50:32:4a: 60:6e:ee:cb:d4:36:12:1b:ba:fa:f8:27:fb:4e:af: 72:40:2d:7f:85:ec:37:20:88:7d:92:5e:53:06:17: b5:2b:66:5a:2b:87:c5:75:f2:3a:b4:3e:20:e2:6a: cc:8e:8e:c4:08:ab:7f:39:cb:6d:bf:63:34:e4:c8: b3:5d:1a:4d:26:f0:46:16:4a:83:eb:f4:7e:da:f8: 10:5f:74:34:99:f5:b8:16:f9:c1:c8:0d:ec:ac:19: 59:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:87:B3:8A:68:4E:2B:6F:07:4C:49:59:FA:62:FF:56:51:D3:4D:86 X509v3 Authority Key Identifier: keyid:70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/W4ezimhOK28HTElZ-mL_VlHTTYY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.38.28.0/22 185.95.252.0/22 Signature Algorithm: sha256WithRSAEncryption a5:c5:b6:ab:bf:f8:df:1d:ed:e5:a7:dc:9e:d0:e3:5c:c8:66: b8:7d:4e:e1:a3:c1:93:81:28:01:cb:6a:eb:8b:35:cc:56:cf: ac:96:dc:54:25:47:19:54:68:48:81:84:74:6f:bb:c9:96:08: 6e:24:dd:59:30:95:e4:31:48:f5:ff:08:9a:65:3a:df:fb:ca: ad:81:a7:c2:34:27:67:ae:46:bb:c2:0c:1b:37:ab:8d:84:88: 4c:b6:92:89:4b:8b:a0:a2:dd:c7:2f:d4:3e:7f:23:fd:bf:38: 0d:0f:a8:3c:e8:ff:28:ec:5e:d6:d4:02:61:78:05:a8:67:65: 88:1d:d8:4a:63:25:58:bc:07:51:fa:f4:26:88:c2:d6:a8:a9: 95:4c:68:32:f1:a1:83:52:6b:e4:43:14:dc:ae:55:e0:1a:2a: 91:b3:bd:13:1c:81:a7:e0:b9:7a:59:8d:e9:76:fd:05:52:c4: 71:26:62:79:62:b7:4c:e7:37:04:98:4c:32:69:ab:bd:cd:e1: c8:e3:8a:2c:8c:31:f2:53:9e:58:e0:57:c0:69:ec:ca:3f:ac: f8:7f:27:9c:45:6b:03:01:f7:54:3c:7a:30:51:9f:0e:29:4e: e0:41:61:4d:fa:5b:87:3d:cb:8c:fb:5d:5a:69:52:78:af:31: 98:67:2d:3c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xuV437pxMSngu+6Vk81kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwODQ3ZjgyMjE4OTdkNmU5NTJlODZlYTJjMzM5YWJhYWNj MTMxZjUwHhcNMjYwMTAxMDQxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Yjg3YjM4YTY4NGUyYjZmMDc0YzQ5NTlmYTYyZmY1NjUxZDM0ZDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzi33WtmCWNTckpT8Eqr7w+rzsd4+ ZQbJEsjrWCX13+4I20wIZ3pvL/DlUD1zjCcqWaY3GhLvMmHHhXm9jP2Xt9QBz3pY B5Q81jbabxMV5iSVwUII2mJkx1LvPa4Sp5rMSgr9ql/F6kKMQOwn+eolhAB5uP5U DFGZrfu09+0HS0Mx035E/lC6TOzVt892JMVqbhcJcdnNucAe2CGecNLhIhtQMkpg bu7L1DYSG7r6+Cf7Tq9yQC1/hew3IIh9kl5TBhe1K2ZaK4fFdfI6tD4g4mrMjo7E CKt/Octtv2M05MizXRpNJvBGFkqD6/R+2vgQX3Q0mfW4FvnByA3srBlZawIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFuHs4poTitvB0xJWfpi/1ZR002GMB8GA1UdIwQY MBaAFHCEf4IhiX1ulS6G6iwzmrqswTH1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0lSX2dpR0pmVzZWTG9icUxET2F1cXpCTWZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy83MDZjMDMtN2QzNS00OTEzLThhMTgt NmU4Nzg0YTdhZDA5LzEvVzRlemltaE9LMjhIVEVsWi1tTF9WbEhUVFlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy83MDZjMDMtN2QzNS00OTEzLThhMTgtNmU4Nzg0YTdhZDA5 LzEvY0lSX2dpR0pmVzZWTG9icUxET2F1cXpCTWZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCuSYcAwQC uV/8MA0GCSqGSIb3DQEBCwUAA4IBAQClxbarv/jfHe3lp9ye0ONcyGa4fU7ho8GT gSgBy2rrizXMVs+sltxUJUcZVGhIgYR0b7vJlghuJN1ZMJXkMUj1/wiaZTrf+8qt gafCNCdnrka7wgwbN6uNhIhMtpKJS4ugot3HL9Q+fyP9vzgND6g86P8o7F7W1AJh eAWoZ2WIHdhKYyVYvAdR+vQmiMLWqKmVTGgy8aGDUmvkQxTcrlXgGiqRs70THIGn 4Ll6WY3pdv0FUsRxJmJ5YrdM5zcEmEwyaau9zeHI44osjDHyU55Y4FfAaezKP6z4 fyecRWsDAfdUPHowUZ8OKU7gQWFN+luHPcuM+11aaVJ4rzGYZy08 -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:21 2026 by rpki-client