This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/wmftFtvbm2f7JWmltpRyVvfDvRg.roa File: wmftFtvbm2f7JWmltpRyVvfDvRg.roa (raw, json) Hash identifier: ifS1jUFk0Eu0JB0mDMS9nd/R8eNPClng/HidlRk7lts= Subject key identifier: C2:67:ED:16:DB:DB:9B:67:FB:25:69:A5:B6:94:72:56:F7:C3:BD:18 Certificate issuer: /CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9 Certificate serial: 019B7834DFA5DCAED8F85D2B667CC70B4855 Authority key identifier: 3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/wmftFtvbm2f7JWmltpRyVvfDvRg.roa Signing time: Thu 01 Jan 2026 06:18:09 +0000 ROA not before: Thu 01 Jan 2026 06:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 195.20.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.mft rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:df:a5:dc:ae:d8:f8:5d:2b:66:7c:c7:0b:48:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ffc6cdfe196d5b39d2ea60e90c95db70445d9b9 Validity Not Before: Jan 1 06:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c267ed16dbdb9b67fb2569a5b6947256f7c3bd18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:7a:83:02:db:9a:c4:98:8a:2a:79:c2:02:ac: 3a:9a:a3:14:15:0c:cb:57:7c:7b:c6:f6:46:04:b2: b0:23:0a:71:b1:a5:fa:19:17:f2:a3:f7:0a:fa:e9: 9b:97:5e:2f:18:10:3b:f8:ce:ff:0b:3e:16:f2:6f: 1f:86:c2:87:c0:1b:ae:34:7a:9f:55:80:6c:82:26: 88:61:df:dd:37:bf:44:61:e7:ed:74:38:28:f2:da: ed:88:f6:21:00:8d:0d:34:7b:11:34:d1:29:89:c2: 1c:23:38:9a:e7:d1:80:3a:8a:a8:4f:07:c7:b5:5e: fa:8e:28:ae:bd:83:37:71:e6:9b:2b:b6:59:fa:bc: 56:36:b6:8e:ff:eb:01:b3:93:32:4f:18:70:50:96: a8:94:e6:e3:b8:47:09:de:29:82:35:40:b8:46:54: 26:68:cf:33:68:20:e5:50:79:75:bf:c8:5f:69:08: 0f:f6:ab:fb:e2:0a:81:92:cb:dd:e9:eb:b5:f8:c6: 7c:1a:9b:5f:9b:30:04:10:68:73:67:70:d1:b4:2e: de:32:38:46:e3:36:fe:76:80:6a:ae:47:20:1a:56: dd:9f:43:99:6c:9a:ac:1c:ff:59:69:36:b4:96:c8: b6:42:83:d7:61:e1:a1:29:c2:78:f1:92:fe:fa:42: d7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:67:ED:16:DB:DB:9B:67:FB:25:69:A5:B6:94:72:56:F7:C3:BD:18 X509v3 Authority Key Identifier: keyid:3F:FC:6C:DF:E1:96:D5:B3:9D:2E:A6:0E:90:C9:5D:B7:04:45:D9:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P_xs3-GW1bOdLqYOkMldtwRF2bk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/wmftFtvbm2f7JWmltpRyVvfDvRg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4abf81-5417-43ac-b59c-155b39e076c2/1/P_xs3-GW1bOdLqYOkMldtwRF2bk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.20.146.0/24 Signature Algorithm: sha256WithRSAEncryption 09:5a:cc:bf:e8:24:8d:92:db:b9:5f:9b:d4:3d:d9:63:94:4c: 6e:93:28:75:5c:9d:7a:27:ec:19:56:33:05:9f:84:0c:39:d2: 15:e5:55:01:c7:ca:6a:1a:08:72:3a:0c:28:6e:1a:c1:33:a6: 1a:ac:44:46:5b:1b:40:19:f1:13:ba:77:c8:c5:57:cc:67:6a: 4a:f3:15:7f:4f:01:d0:d3:f1:cd:5b:77:c1:af:22:61:a5:e9: 53:83:2b:d6:df:c7:8f:b5:3d:15:8e:fb:36:7f:d2:58:6a:72: 46:69:0a:38:5e:29:03:7f:aa:4c:94:ca:1f:26:6f:d9:24:8a: 70:5d:2a:30:3e:7c:26:93:5c:7a:27:aa:dd:92:03:d0:6b:04: 62:ca:e1:7c:58:fd:89:aa:32:02:a4:d1:1e:0c:97:a6:5b:65: ea:65:4a:a9:81:cd:61:a9:57:9a:c5:c3:96:f4:5f:9b:90:6e: 16:f6:7c:c1:4d:ce:97:c1:16:01:99:02:0b:d2:0e:51:34:5c: 1b:e9:09:6b:af:cd:98:4b:a6:8c:37:79:c8:b1:61:bf:e0:95: 84:ed:ea:90:3c:b8:bf:53:49:6c:ee:d5:cf:6e:25:b5:f1:3b: 70:86:26:1e:81:1c:9e:1f:f5:62:93:01:4e:84:25:e0:10:2a: af:a5:81:dc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NN+l3K7Y+F0rZnzHC0hVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZmM2Y2RmZTE5NmQ1YjM5ZDJlYTYwZTkwYzk1ZGI3MDQ0 NWQ5YjkwHhcNMjYwMTAxMDYxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjY3ZWQxNmRiZGI5YjY3ZmIyNTY5YTViNjk0NzI1NmY3YzNiZDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXqDAtuaxJiKKnnCAqw6mqMUFQzL V3x7xvZGBLKwIwpxsaX6GRfyo/cK+umbl14vGBA7+M7/Cz4W8m8fhsKHwBuuNHqf VYBsgiaIYd/dN79EYeftdDgo8trtiPYhAI0NNHsRNNEpicIcIzia59GAOoqoTwfH tV76jiiuvYM3ceabK7ZZ+rxWNraO/+sBs5MyTxhwUJaolObjuEcJ3imCNUC4RlQm aM8zaCDlUHl1v8hfaQgP9qv74gqBksvd6eu1+MZ8GptfmzAEEGhzZ3DRtC7eMjhG 4zb+doBqrkcgGlbdn0OZbJqsHP9ZaTa0lsi2QoPXYeGhKcJ48ZL++kLX2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMJn7Rbb25tn+yVppbaUclb3w70YMB8GA1UdIwQY MBaAFD/8bN/hltWznS6mDpDJXbcERdm5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUF94czMtR1cxYk9kTHFZT2tNbGR0d1JGMmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy80YWJmODEtNTQxNy00M2FjLWI1OWMt MTU1YjM5ZTA3NmMyLzEvd21mdEZ0dmJtMmY3SldtbHRwUnlWdmZEdlJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy80YWJmODEtNTQxNy00M2FjLWI1OWMtMTU1YjM5ZTA3NmMy LzEvUF94czMtR1cxYk9kTHFZT2tNbGR0d1JGMmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwxSSMA0G CSqGSIb3DQEBCwUAA4IBAQAJWsy/6CSNktu5X5vUPdljlExukyh1XJ16J+wZVjMF n4QMOdIV5VUBx8pqGghyOgwobhrBM6YarERGWxtAGfETunfIxVfMZ2pK8xV/TwHQ 0/HNW3fBryJhpelTgyvW38ePtT0Vjvs2f9JYanJGaQo4XikDf6pMlMofJm/ZJIpw XSowPnwmk1x6J6rdkgPQawRiyuF8WP2JqjICpNEeDJemW2XqZUqpgc1hqVeaxcOW 9F+bkG4W9nzBTc6XwRYBmQIL0g5RNFwb6Qlrr82YS6aMN3nIsWG/4JWE7eqQPLi/ U0ls7tXPbiW18TtwhiYegRyeH/VikwFOhCXgECqvpYHc -----END CERTIFICATE-----Generated at Sun Jan 25 09:18:45 2026 by rpki-client