This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/widqsiuwPxfEW8bWQB1tkfB48s4.roa File: widqsiuwPxfEW8bWQB1tkfB48s4.roa (raw, json) Hash identifier: 0gWr/NZK7bJ0qmV7EdmyhABMtqf0GTQXbYmyzeQSrko= Subject key identifier: C2:27:6A:B2:2B:B0:3F:17:C4:5B:C6:D6:40:1D:6D:91:F0:78:F2:CE Certificate issuer: /CN=e0405884dac59da1e5d585193e065681f9d6615e Certificate serial: 019B7F83CC27BC5E899986F8310C4E0D9FBB Authority key identifier: E0:40:58:84:DA:C5:9D:A1:E5:D5:85:19:3E:06:56:81:F9:D6:61:5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4EBYhNrFnaHl1YUZPgZWgfnWYV4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/widqsiuwPxfEW8bWQB1tkfB48s4.roa Signing time: Fri 02 Jan 2026 16:21:42 +0000 ROA not before: Fri 02 Jan 2026 16:21:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49737 IP address blocks: 185.117.188.0/24 maxlen: 24 185.117.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.mft rsync://rpki.ripe.net/repository/DEFAULT/4EBYhNrFnaHl1YUZPgZWgfnWYV4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:cc:27:bc:5e:89:99:86:f8:31:0c:4e:0d:9f:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0405884dac59da1e5d585193e065681f9d6615e Validity Not Before: Jan 2 16:21:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2276ab22bb03f17c45bc6d6401d6d91f078f2ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:04:b9:6d:84:6e:77:42:4b:37:89:fa:f1:0c: 8e:ba:6f:b8:f7:f2:be:9d:27:cc:89:9b:6f:41:da: 46:fb:1d:bc:92:46:85:63:d9:17:59:fc:64:33:04: 24:fb:8b:4d:99:1e:8e:7a:da:25:46:76:1a:82:29: 7b:5b:12:d0:cb:75:7e:88:15:57:bf:fe:75:7f:b8: 6c:29:c9:5d:5e:38:88:71:d3:9b:77:61:19:07:6c: d7:28:61:0d:8e:7f:b9:61:b6:79:e0:50:9f:eb:11: 50:1d:63:39:4c:9a:07:4f:b8:cb:ce:97:d2:7a:54: e3:18:d5:d6:8e:da:78:42:16:5c:f8:e6:4b:77:b7: a2:18:b2:be:f2:e9:00:51:98:b0:af:68:c8:cd:44: d7:f5:ce:41:d7:ef:83:87:8a:c3:18:da:77:ed:65: e1:94:02:04:55:2e:6f:f8:c7:16:33:6e:a9:36:e5: 14:52:73:98:6d:0e:bd:34:92:7b:a9:d3:a6:82:81: 9e:ad:2d:46:3b:fe:85:4e:c0:98:19:05:0e:79:e4: 74:4c:4b:ff:a9:bc:e5:9e:90:37:93:6a:1b:fc:1f: 84:8b:9a:50:1f:0b:65:f3:57:37:c8:c2:93:6b:92: a9:d9:51:bd:f0:88:4f:46:76:28:1f:80:eb:34:41: 58:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:27:6A:B2:2B:B0:3F:17:C4:5B:C6:D6:40:1D:6D:91:F0:78:F2:CE X509v3 Authority Key Identifier: keyid:E0:40:58:84:DA:C5:9D:A1:E5:D5:85:19:3E:06:56:81:F9:D6:61:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EBYhNrFnaHl1YUZPgZWgfnWYV4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/widqsiuwPxfEW8bWQB1tkfB48s4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/6393bb-7d51-4f1c-88d3-1cf71df828d8/1/4EBYhNrFnaHl1YUZPgZWgfnWYV4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.117.188.0/23 Signature Algorithm: sha256WithRSAEncryption 01:d8:c1:4e:c0:a6:81:8b:72:e8:93:12:5a:39:88:a9:d1:ee: 97:d5:96:51:ed:33:18:04:d4:04:81:0f:eb:69:da:bd:ff:e3: 2c:dd:03:f0:34:ba:9c:6c:5c:46:dc:02:2a:9c:db:78:91:fc: 52:85:9c:7d:eb:b2:48:31:7e:31:9f:ed:05:16:ed:0f:b3:67: 37:c7:c9:25:73:e2:8b:ea:83:e2:de:e3:5f:20:65:23:50:48: 19:1d:03:11:96:3b:85:71:9d:e7:60:40:46:d1:b2:f3:6b:01: cf:f5:4b:3c:27:89:d6:3f:48:c4:e6:4a:27:5f:3b:3e:04:eb: 27:49:11:87:c4:ca:9d:55:cf:e3:49:32:47:07:4a:a7:47:07: 7a:94:5e:cd:e7:5a:d6:b0:d5:81:f6:b0:72:42:3c:a4:7b:fe: 66:7a:5c:0b:f5:33:39:23:d2:15:55:8c:c0:3c:85:dd:15:15: 4b:f1:07:c7:a1:14:c4:50:d0:36:05:af:0b:5f:33:b2:01:93: 4a:2f:69:82:16:89:e2:66:fd:d0:59:5b:de:9e:cb:9c:2f:89: 1f:82:0b:03:bc:87:97:64:b6:a7:e2:b2:06:28:e7:43:df:51: 9d:a1:74:a6:03:10:d0:26:7e:97:3e:43:03:91:49:8c:15:cf: 54:62:91:77 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g8wnvF6JmYb4MQxODZ+7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwNDA1ODg0ZGFjNTlkYTFlNWQ1ODUxOTNlMDY1NjgxZjlk NjYxNWUwHhcNMjYwMTAyMTYyMTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjI3NmFiMjJiYjAzZjE3YzQ1YmM2ZDY0MDFkNmQ5MWYwNzhmMmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwS5bYRud0JLN4n68QyOum+49/K+ nSfMiZtvQdpG+x28kkaFY9kXWfxkMwQk+4tNmR6OetolRnYagil7WxLQy3V+iBVX v/51f7hsKcldXjiIcdObd2EZB2zXKGENjn+5YbZ54FCf6xFQHWM5TJoHT7jLzpfS elTjGNXWjtp4QhZc+OZLd7eiGLK+8ukAUZiwr2jIzUTX9c5B1++Dh4rDGNp37WXh lAIEVS5v+McWM26pNuUUUnOYbQ69NJJ7qdOmgoGerS1GO/6FTsCYGQUOeeR0TEv/ qbzlnpA3k2ob/B+Ei5pQHwtl81c3yMKTa5Kp2VG98IhPRnYoH4DrNEFYZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMInarIrsD8XxFvG1kAdbZHwePLOMB8GA1UdIwQY MBaAFOBAWITaxZ2h5dWFGT4GVoH51mFeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEVCWWhOckZuYUhsMVlVWlBnWldnZm5XWVY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS82MzkzYmItN2Q1MS00ZjFjLTg4ZDMt MWNmNzFkZjgyOGQ4LzEvd2lkcXNpdXdQeGZFVzhiV1FCMXRrZkI0OHM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS82MzkzYmItN2Q1MS00ZjFjLTg4ZDMtMWNmNzFkZjgyOGQ4 LzEvNEVCWWhOckZuYUhsMVlVWlBnWldnZm5XWVY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuXW8MA0G CSqGSIb3DQEBCwUAA4IBAQAB2MFOwKaBi3LokxJaOYip0e6X1ZZR7TMYBNQEgQ/r adq9/+Ms3QPwNLqcbFxG3AIqnNt4kfxShZx967JIMX4xn+0FFu0Ps2c3x8klc+KL 6oPi3uNfIGUjUEgZHQMRljuFcZ3nYEBG0bLzawHP9Us8J4nWP0jE5konXzs+BOsn SRGHxMqdVc/jSTJHB0qnRwd6lF7N51rWsNWB9rByQjyke/5melwL9TM5I9IVVYzA PIXdFRVL8QfHoRTEUNA2Ba8LXzOyAZNKL2mCFoniZv3QWVvensucL4kfggsDvIeX ZLan4rIGKOdD31GdoXSmAxDQJn6XPkMDkUmMFc9UYpF3 -----END CERTIFICATE-----Generated at Mon Jan 26 06:17:47 2026 by rpki-client