This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/WArGNGelr1r7NS84iUickHFqYnk.roa File: WArGNGelr1r7NS84iUickHFqYnk.roa (raw, json) Hash identifier: F549c5qhlHTdQg1HJuYk5UKg7MGhA9lxMR7V6QvPJBo= Subject key identifier: 58:0A:C6:34:67:A5:AF:5A:FB:35:2F:38:89:48:9C:90:71:6A:62:79 Certificate issuer: /CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137 Certificate serial: 019B7758A3D2A2A9C5B392C9F5A2DAABC01D Authority key identifier: C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/WArGNGelr1r7NS84iUickHFqYnk.roa Signing time: Thu 01 Jan 2026 02:17:36 +0000 ROA not before: Thu 01 Jan 2026 02:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210659 IP address blocks: 202.181.204.0/24 maxlen: 24 2a13:d8c4:30::/44 maxlen: 48 2a13:d8c4:70::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:a3:d2:a2:a9:c5:b3:92:c9:f5:a2:da:ab:c0:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137 Validity Not Before: Jan 1 02:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=580ac63467a5af5afb352f3889489c90716a6279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:15:18:5c:2e:31:0b:a3:21:0b:2b:28:d5:73: 03:11:9d:ca:7e:d7:0d:8c:b2:a4:3a:d2:a8:16:ec: ea:1f:58:3a:83:ff:f3:e2:81:13:2e:50:23:4d:23: 40:7f:7a:f0:d3:0f:8c:35:0d:57:1f:33:08:43:ce: 13:35:4a:96:1c:a3:4f:c6:0b:0a:28:c3:10:65:96: dc:dd:06:ba:7a:59:cb:dc:5f:a6:40:19:17:6b:9f: b7:28:a3:a4:53:c0:0a:42:0c:f6:aa:04:24:5c:80: cf:d1:17:9c:fd:87:dc:47:7d:01:e0:14:ca:c2:a9: fb:87:97:72:0b:97:38:da:a6:be:59:1a:58:5f:cc: ce:09:3a:ff:a1:bd:dd:c9:a5:32:0d:b5:64:a8:e4: 28:5e:11:40:d2:0b:d4:8b:45:f5:a2:66:7f:a2:14: 4f:1a:77:23:6a:36:c1:07:74:5e:c3:17:a2:cb:52: f2:e0:1e:5e:b5:0e:ae:31:22:47:ae:7b:14:9f:ee: f9:5a:b4:e3:f0:a4:4d:61:ff:70:80:b7:45:62:dd: de:5b:37:fd:88:81:4c:76:77:2f:00:60:e8:83:c9: 54:21:28:f2:db:6e:38:2d:89:4d:02:c4:7d:43:df: ef:c8:7c:e3:84:f5:58:e0:6a:11:39:da:18:1a:f0: 52:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:0A:C6:34:67:A5:AF:5A:FB:35:2F:38:89:48:9C:90:71:6A:62:79 X509v3 Authority Key Identifier: keyid:C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/WArGNGelr1r7NS84iUickHFqYnk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 202.181.204.0/24 IPv6: 2a13:d8c4:30::/44 2a13:d8c4:70::/44 Signature Algorithm: sha256WithRSAEncryption 6f:66:1c:23:52:61:73:25:30:b7:06:99:77:0a:16:4e:f5:f6: 01:68:c1:8e:76:2e:0e:35:06:fa:b0:7a:51:fc:64:ee:46:00: 20:40:d8:8e:8a:c2:41:e9:c9:c9:1e:fb:c9:1f:67:70:8b:be: 6c:23:d3:99:4d:30:95:e2:29:0e:98:dc:3c:0b:45:ff:b9:54: 66:14:c4:1b:aa:0e:e3:ed:b9:50:72:48:3d:6e:68:53:5a:17: 1a:48:d1:73:b0:f4:3d:3c:67:ae:0a:d0:6d:b0:e9:85:d9:d5: 78:f1:ce:9b:52:49:a6:17:39:5d:7a:6e:a0:61:2c:9f:53:9d: 46:52:87:ad:86:c7:b2:c7:23:61:5d:5b:0d:e0:61:25:49:c5: 0b:94:f9:98:2d:3a:79:d4:89:85:17:88:11:8a:aa:b7:02:ff: e5:f3:60:8c:dd:a7:30:a3:69:d0:15:89:90:94:0c:ac:94:58: 35:83:6a:8e:c8:28:c7:d7:0e:cc:de:19:d5:b9:5c:43:ab:4a: 72:79:48:3c:9f:20:77:0f:6e:c3:32:96:6d:a5:e9:28:1e:34: 9b:fe:cd:78:15:d1:ef:0d:b1:eb:51:46:43:2c:a6:fb:cc:2d: 8c:97:8f:07:63:97:73:05:6f:77:51:2d:2b:51:33:42:4c:66: 2f:63:88:75 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt3WKPSoqnFs5LJ9aLaq8AdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2ZjUzYzAzZDJmNGU3ZjA3YTgxZWE5MDNlY2VmMDFkNjhj NjgxMzcwHhcNMjYwMTAxMDIxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODBhYzYzNDY3YTVhZjVhZmIzNTJmMzg4OTQ4OWM5MDcxNmE2Mjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRUYXC4xC6MhCyso1XMDEZ3KftcN jLKkOtKoFuzqH1g6g//z4oETLlAjTSNAf3rw0w+MNQ1XHzMIQ84TNUqWHKNPxgsK KMMQZZbc3Qa6elnL3F+mQBkXa5+3KKOkU8AKQgz2qgQkXIDP0Rec/YfcR30B4BTK wqn7h5dyC5c42qa+WRpYX8zOCTr/ob3dyaUyDbVkqOQoXhFA0gvUi0X1omZ/ohRP GncjajbBB3Rewxeiy1Ly4B5etQ6uMSJHrnsUn+75WrTj8KRNYf9wgLdFYt3eWzf9 iIFMdncvAGDog8lUISjy2244LYlNAsR9Q9/vyHzjhPVY4GoROdoYGvBSowIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFFgKxjRnpa9a+zUvOIlInJBxamJ5MB8GA1UdIwQY MBaAFMb1PAPS9OfweoHqkD7O8B1oxoE3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHZVOEE5TDA1X0I2Z2VxUVBzN3dIV2pHZ1RjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8zYzIyN2MtNDcwNi00Nzg3LTlhMDct OTBlYTM3MjljNTc0LzEvV0FyR05HZWxyMXI3TlM4NGlVaWNrSEZxWW5rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8zYzIyN2MtNDcwNi00Nzg3LTlhMDctOTBlYTM3MjljNTc0 LzEveHZVOEE5TDA1X0I2Z2VxUVBzN3dIV2pHZ1RjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAyrXMMBgE AgACMBIDBwQqE9jEADADBwQqE9jEAHAwDQYJKoZIhvcNAQELBQADggEBAG9mHCNS YXMlMLcGmXcKFk719gFowY52Lg41BvqwelH8ZO5GACBA2I6KwkHpycke+8kfZ3CL vmwj05lNMJXiKQ6Y3DwLRf+5VGYUxBuqDuPtuVBySD1uaFNaFxpI0XOw9D08Z64K 0G2w6YXZ1XjxzptSSaYXOV16bqBhLJ9TnUZSh62Gx7LHI2FdWw3gYSVJxQuU+Zgt OnnUiYUXiBGKqrcC/+XzYIzdpzCjadAViZCUDKyUWDWDao7IKMfXDszeGdW5XEOr SnJ5SDyfIHcPbsMylm2l6SgeNJv+zXgV0e8NsetRRkMspvvMLYyXjwdjl3MFb3dR LStRM0JMZi9jiHU= -----END CERTIFICATE-----Generated at Sun Jan 25 14:21:11 2026 by rpki-client