This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/w0ihDXGfTZCgkEenDCg532cQiaA.roa File: w0ihDXGfTZCgkEenDCg532cQiaA.roa (raw, json) Hash identifier: FD0rcoCr63ClMKaKqYqlIdIfUuQ7pv+xZCDIgLRthGs= Subject key identifier: C3:48:A1:0D:71:9F:4D:90:A0:90:47:A7:0C:28:39:DF:67:10:89:A0 Certificate issuer: /CN=e5cf78f5f339ee777da749210a96eced96b7f2e7 Certificate serial: 019B7B359C744935B6E8E263255AC7C84557 Authority key identifier: E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/w0ihDXGfTZCgkEenDCg532cQiaA.roa Signing time: Thu 01 Jan 2026 20:17:49 +0000 ROA not before: Thu 01 Jan 2026 20:17:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207021 IP address blocks: 185.80.188.0/24 maxlen: 24 185.80.189.0/24 maxlen: 24 185.80.190.0/24 maxlen: 24 185.80.191.0/24 maxlen: 24 2a05:7f00:188::/48 maxlen: 48 2a05:7f00:189::/48 maxlen: 48 2a05:7f00:190::/48 maxlen: 48 2a05:7f00:191::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.mft rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 23:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:9c:74:49:35:b6:e8:e2:63:25:5a:c7:c8:45:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5cf78f5f339ee777da749210a96eced96b7f2e7 Validity Not Before: Jan 1 20:17:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c348a10d719f4d90a09047a70c2839df671089a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:49:9a:bf:e2:a4:6c:e6:1b:23:04:95:ee:44: fb:65:cd:6a:45:de:6e:4a:71:89:73:40:39:07:b1: 95:55:ed:75:0c:bb:df:6e:29:90:c3:85:91:1a:80: 6d:20:1c:9e:7a:ff:fe:69:c4:db:30:e8:c9:a7:4e: 9d:cc:01:0a:b9:56:44:4d:b6:62:dc:bd:2b:48:d7: 27:df:ad:c0:bc:6f:19:23:d0:71:df:ce:70:98:21: 33:8a:77:18:16:cf:cc:b0:89:68:b2:d7:c1:f1:17: b3:44:4d:0e:f5:93:eb:08:24:f6:a6:4a:00:ce:3a: f6:2d:8d:41:41:a6:32:61:90:96:b6:33:af:2f:45: 3c:e5:32:96:e5:0e:e0:05:fb:80:e6:38:a1:18:75: e3:bb:f0:e2:cb:4c:5d:43:cf:b3:3d:a6:e8:10:53: 40:a3:3d:98:46:29:00:5f:49:0e:90:21:f4:49:4f: ce:99:52:ce:09:01:43:de:1b:09:41:0d:25:eb:a2: 9a:dd:9f:dc:94:b3:ff:34:88:4f:86:e3:f2:1f:20: 74:af:be:92:7d:70:c4:2b:2c:a9:bc:61:aa:ee:63: af:8a:25:f0:69:c4:17:87:14:a7:fb:4c:05:7c:0c: d5:ca:04:56:b8:e5:23:39:78:60:31:e3:42:7c:d3: 57:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:48:A1:0D:71:9F:4D:90:A0:90:47:A7:0C:28:39:DF:67:10:89:A0 X509v3 Authority Key Identifier: keyid:E5:CF:78:F5:F3:39:EE:77:7D:A7:49:21:0A:96:EC:ED:96:B7:F2:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c949fM57nd9p0khCpbs7Za38uc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/w0ihDXGfTZCgkEenDCg532cQiaA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/c4bd95-c670-490d-8cc0-b7dc83706a2a/1/5c949fM57nd9p0khCpbs7Za38uc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.80.188.0/22 IPv6: 2a05:7f00:188::/47 2a05:7f00:190::/47 Signature Algorithm: sha256WithRSAEncryption 23:f4:d6:ff:29:4c:9c:5e:66:7f:b9:3f:18:49:7d:43:05:b6: 6b:92:01:3d:98:5b:99:f2:04:65:ba:bf:cc:75:c2:78:5e:56: 5e:22:6b:97:b5:9a:d4:a7:47:a9:95:b0:18:46:9b:d5:63:df: 20:45:3a:06:e8:ed:d9:cd:1a:63:83:6f:b0:07:d9:cb:f7:09: b5:cb:fe:85:26:19:cf:8e:75:9e:18:85:04:89:ba:11:2b:58: 3f:92:4f:a3:ab:29:5e:bd:89:01:48:d7:0f:06:75:f6:e8:d9: ad:55:fe:24:4f:b9:71:3a:a8:e7:b1:30:e1:ea:e4:3d:32:a0: f1:c1:27:16:1a:de:1e:e0:7b:b8:3f:3e:88:bb:4c:6b:3a:12: 51:e1:41:6e:05:11:d6:65:58:73:32:40:f0:68:d1:f5:2d:8d: f9:ca:f1:c6:64:bb:5d:49:8e:00:ef:d6:e8:00:10:f1:88:50: c3:74:38:da:e8:fa:85:8c:9e:3a:a5:06:db:db:1b:7f:d3:ba: 24:e3:9d:e8:53:dc:7a:bf:4c:94:df:77:6f:1e:fc:6d:60:96: 3d:06:69:69:7c:a2:cb:1d:43:bd:5c:c7:9b:49:7f:b8:d0:23: 3e:54:53:1f:a2:d9:8c:16:91:bf:0c:99:7d:b2:bf:a6:b1:cd: 45:6b:dd:32 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt7NZx0STW26OJjJVrHyEVXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1Y2Y3OGY1ZjMzOWVlNzc3ZGE3NDkyMTBhOTZlY2VkOTZi N2YyZTcwHhcNMjYwMTAxMjAxNzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzQ4YTEwZDcxOWY0ZDkwYTA5MDQ3YTcwYzI4MzlkZjY3MTA4OWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0mav+KkbOYbIwSV7kT7Zc1qRd5u SnGJc0A5B7GVVe11DLvfbimQw4WRGoBtIByeev/+acTbMOjJp06dzAEKuVZETbZi 3L0rSNcn363AvG8ZI9Bx385wmCEzincYFs/MsIlostfB8RezRE0O9ZPrCCT2pkoA zjr2LY1BQaYyYZCWtjOvL0U85TKW5Q7gBfuA5jihGHXju/Diy0xdQ8+zPaboEFNA oz2YRikAX0kOkCH0SU/OmVLOCQFD3hsJQQ0l66Ka3Z/clLP/NIhPhuPyHyB0r76S fXDEKyypvGGq7mOviiXwacQXhxSn+0wFfAzVygRWuOUjOXhgMeNCfNNX1wIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFMNIoQ1xn02QoJBHpwwoOd9nEImgMB8GA1UdIwQY MBaAFOXPePXzOe53fadJIQqW7O2Wt/LnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWM5NDlmTTU3bmQ5cDBraENwYnM3WmEzOHVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9jNGJkOTUtYzY3MC00OTBkLThjYzAt YjdkYzgzNzA2YTJhLzEvdzBpaERYR2ZUWkNna0VlbkRDZzUzMmNRaWFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9jNGJkOTUtYzY3MC00OTBkLThjYzAtYjdkYzgzNzA2YTJh LzEvNWM5NDlmTTU3bmQ5cDBraENwYnM3WmEzOHVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQCuVC8MBgE AgACMBIDBwEqBX8AAYgDBwEqBX8AAZAwDQYJKoZIhvcNAQELBQADggEBACP01v8p TJxeZn+5PxhJfUMFtmuSAT2YW5nyBGW6v8x1wnheVl4ia5e1mtSnR6mVsBhGm9Vj 3yBFOgbo7dnNGmODb7AH2cv3CbXL/oUmGc+OdZ4YhQSJuhErWD+ST6OrKV69iQFI 1w8Gdfbo2a1V/iRPuXE6qOexMOHq5D0yoPHBJxYa3h7ge7g/Poi7TGs6ElHhQW4F EdZlWHMyQPBo0fUtjfnK8cZku11JjgDv1ugAEPGIUMN0ONro+oWMnjqlBtvbG3/T uiTjnehT3Hq/TJTfd28e/G1glj0GaWl8ossdQ71cx5tJf7jQIz5UUx+i2YwWkb8M mX2yv6axzUVr3TI= -----END CERTIFICATE-----Generated at Tue Jan 27 07:12:20 2026 by rpki-client