This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/8WV_PwWdGHGoltPCGvUZ5Zdt0u0.roa File: 8WV_PwWdGHGoltPCGvUZ5Zdt0u0.roa (raw, json) Hash identifier: bgI/tjUhh3faNiwUz0lFyl3PrQvPxHShPGJ4WWbVK9U= Subject key identifier: F1:65:7F:3F:05:9D:18:71:A8:96:D3:C2:1A:F5:19:E5:97:6D:D2:ED Certificate issuer: /CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5 Certificate serial: 019B7E385769F4EA019A6B03303437590077 Authority key identifier: D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/8WV_PwWdGHGoltPCGvUZ5Zdt0u0.roa Signing time: Fri 02 Jan 2026 10:19:40 +0000 ROA not before: Fri 02 Jan 2026 10:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208346 IP address blocks: 94.154.132.0/23 maxlen: 24 94.154.132.0/24 maxlen: 24 94.154.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.mft rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:57:69:f4:ea:01:9a:6b:03:30:34:37:59:00:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3600cbafd26fee5064fc89f301dfc8e3c1d3ca5 Validity Not Before: Jan 2 10:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f1657f3f059d1871a896d3c21af519e5976dd2ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:09:c3:fc:6b:1f:e7:79:1c:8b:32:98:78:73: 57:23:36:d1:37:ec:3a:eb:e3:e6:9c:01:7d:41:c0: 97:1a:60:2a:30:6a:68:ab:43:3d:64:8c:8f:6f:28: 32:03:2f:3c:a3:e3:af:20:48:5a:83:40:b9:3c:ed: 44:77:a3:4a:ba:ca:67:05:18:23:6d:ee:24:f3:1d: 4f:38:5e:1f:02:d7:26:96:f9:c6:02:33:a1:5e:81: 8a:c1:4b:c1:bc:de:c8:c1:da:df:37:6d:ba:27:f7: ad:d9:e1:95:1d:b2:2a:5c:d6:5f:56:ab:7d:75:0a: f9:69:f2:58:42:56:de:6d:42:74:af:ea:f8:cc:a6: 06:1c:01:60:fa:fa:2d:14:ae:a1:e2:83:8e:42:52: 06:dc:75:e4:b0:55:4d:4b:72:29:46:3e:68:28:18: 4a:cf:a6:4b:9a:14:cb:36:e3:2e:fa:0c:ce:32:5f: 9d:1b:23:55:e9:f4:5d:5b:7d:14:31:b4:3a:32:9c: c7:64:73:3d:a0:30:6b:4a:94:ca:07:86:a4:a0:a4: de:82:fa:96:2d:2b:3c:27:f9:bd:52:73:89:44:12: 59:7a:78:fd:ac:9d:4c:18:b9:01:ad:1a:a7:c0:ce: 12:13:c7:7e:09:34:d9:e4:0e:8e:21:5d:9a:d0:f4: 2d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:65:7F:3F:05:9D:18:71:A8:96:D3:C2:1A:F5:19:E5:97:6D:D2:ED X509v3 Authority Key Identifier: keyid:D3:60:0C:BA:FD:26:FE:E5:06:4F:C8:9F:30:1D:FC:8E:3C:1D:3C:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02AMuv0m_uUGT8ifMB38jjwdPKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/8WV_PwWdGHGoltPCGvUZ5Zdt0u0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/b70658-e1dc-4944-a06b-1c680adf7a26/1/02AMuv0m_uUGT8ifMB38jjwdPKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.154.132.0/23 Signature Algorithm: sha256WithRSAEncryption 18:e1:89:d8:2d:b3:9e:8b:dc:d9:f4:26:1b:ff:f9:1b:fa:46: 53:31:26:22:c1:d5:54:ae:93:04:83:20:32:45:30:1f:d8:1f: 07:bf:80:eb:8a:0c:67:73:bb:13:54:aa:0d:9f:fa:4e:dd:73: 86:8b:17:5d:dc:2d:58:17:01:66:1e:1b:1c:0d:82:67:5f:19: f0:d3:ad:a6:ec:3b:d8:ab:23:91:8d:a4:c6:21:49:f2:60:6d: ec:2d:c0:ed:b8:f1:da:73:0f:05:82:92:68:87:83:bf:fb:62: af:19:97:33:75:b7:ed:b8:4e:12:24:21:83:19:88:a7:ea:d1: 9b:55:e3:e1:b3:e0:26:ce:1e:a5:98:c7:51:e3:6e:80:2b:2a: a0:0a:4c:66:bc:1c:ed:89:bb:40:f8:6e:5f:d7:3a:ae:ff:50: 3c:4b:2b:07:5e:d3:84:06:e0:5e:6f:de:ec:d6:f4:f9:0b:10: 3d:35:af:0b:c2:83:71:23:c7:6a:f1:83:b9:64:23:b5:3a:66: 1c:a8:b8:d1:9d:7e:b3:13:f9:8a:03:b7:ee:26:4b:05:61:03: e6:2d:92:11:ac:37:a1:a0:6a:73:0a:4b:cf:87:e0:fe:d2:c2: f2:ae:76:94:6b:25:28:c2:60:93:aa:7c:b2:06:d7:e1:18:85: 7d:fa:b9:9b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OFdp9OoBmmsDMDQ3WQB3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzNjAwY2JhZmQyNmZlZTUwNjRmYzg5ZjMwMWRmYzhlM2Mx ZDNjYTUwHhcNMjYwMTAyMTAxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTY1N2YzZjA1OWQxODcxYTg5NmQzYzIxYWY1MTllNTk3NmRkMmVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQnD/Gsf53kcizKYeHNXIzbRN+w6 6+PmnAF9QcCXGmAqMGpoq0M9ZIyPbygyAy88o+OvIEhag0C5PO1Ed6NKuspnBRgj be4k8x1POF4fAtcmlvnGAjOhXoGKwUvBvN7IwdrfN226J/et2eGVHbIqXNZfVqt9 dQr5afJYQlbebUJ0r+r4zKYGHAFg+votFK6h4oOOQlIG3HXksFVNS3IpRj5oKBhK z6ZLmhTLNuMu+gzOMl+dGyNV6fRdW30UMbQ6MpzHZHM9oDBrSpTKB4akoKTegvqW LSs8J/m9UnOJRBJZenj9rJ1MGLkBrRqnwM4SE8d+CTTZ5A6OIV2a0PQt3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPFlfz8FnRhxqJbTwhr1GeWXbdLtMB8GA1UdIwQY MBaAFNNgDLr9Jv7lBk/InzAd/I48HTylMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDJBTXV2MG1fdVVHVDhpZk1CMzhqandkUEtVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9iNzA2NTgtZTFkYy00OTQ0LWEwNmIt MWM2ODBhZGY3YTI2LzEvOFdWX1B3V2RHSEdvbHRQQ0d2VVo1WmR0MHUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9iNzA2NTgtZTFkYy00OTQ0LWEwNmItMWM2ODBhZGY3YTI2 LzEvMDJBTXV2MG1fdVVHVDhpZk1CMzhqandkUEtVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXpqEMA0G CSqGSIb3DQEBCwUAA4IBAQAY4YnYLbOei9zZ9CYb//kb+kZTMSYiwdVUrpMEgyAy RTAf2B8Hv4Drigxnc7sTVKoNn/pO3XOGixdd3C1YFwFmHhscDYJnXxnw062m7DvY qyORjaTGIUnyYG3sLcDtuPHacw8FgpJoh4O/+2KvGZczdbftuE4SJCGDGYin6tGb VePhs+Amzh6lmMdR426AKyqgCkxmvBztibtA+G5f1zqu/1A8SysHXtOEBuBeb97s 1vT5CxA9Na8LwoNxI8dq8YO5ZCO1OmYcqLjRnX6zE/mKA7fuJksFYQPmLZIRrDeh oGpzCkvPh+D+0sLyrnaUayUowmCTqnyyBtfhGIV9+rmb -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:05 2026 by rpki-client