This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/w7xEBHIfXi0BUtgUPP66rgihpG8.roa File: w7xEBHIfXi0BUtgUPP66rgihpG8.roa (raw, json) Hash identifier: gDrcyd6ElWA3Fy0I7vbIWUDFdvKSba9LbEFcEbtavQA= Subject key identifier: C3:BC:44:04:72:1F:5E:2D:01:52:D8:14:3C:FE:BA:AE:08:A1:A4:6F Certificate issuer: /CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed Certificate serial: 019B7BA5019975875E8F1419FBE945ED01FA Authority key identifier: 33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/w7xEBHIfXi0BUtgUPP66rgihpG8.roa Signing time: Thu 01 Jan 2026 22:19:29 +0000 ROA not before: Thu 01 Jan 2026 22:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60368 IP address blocks: 94.136.112.0/23 maxlen: 23 94.136.114.0/23 maxlen: 23 94.136.116.0/24 maxlen: 24 185.16.76.0/24 maxlen: 24 185.16.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.mft rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:01:99:75:87:5e:8f:14:19:fb:e9:45:ed:01:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33320e2f3c5adadf153a0758bc600b6ea14f4eed Validity Not Before: Jan 1 22:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3bc4404721f5e2d0152d8143cfebaae08a1a46f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f1:aa:d0:28:33:04:d4:c4:50:3f:8d:12:9e: 98:4e:46:b2:74:5d:26:e1:bb:9e:19:d5:12:9f:b4: 7a:d1:c9:1b:c9:76:4a:86:6d:7e:dd:36:b7:ed:5d: f7:91:21:e9:27:bb:24:30:38:5d:8f:1a:64:6b:83: d9:3f:23:17:c0:17:7f:41:3c:f0:06:52:d6:6f:ea: e6:e5:d6:97:b1:71:3d:67:a7:89:fd:ed:98:ca:55: 2a:8d:3f:0c:96:bf:c2:c5:dd:35:d6:4d:fe:3b:d5: cf:4e:80:36:00:86:27:82:53:14:4d:25:d8:10:81: 0b:da:53:1a:28:c0:eb:74:48:f3:27:7c:fa:98:cf: 3c:4c:7e:e8:ad:84:ec:15:3d:6b:2c:51:d6:c0:44: 98:75:ea:02:67:6b:82:b6:50:26:94:26:ee:a7:08: 58:10:a6:b1:a7:72:c1:b0:cb:25:bf:68:ae:e6:d1: 9f:bb:ac:b0:15:f0:a4:9f:2e:24:4e:30:71:36:d2: 69:7c:36:89:f9:a7:8a:95:2c:4b:1a:f2:3d:3c:be: a3:07:03:d7:c0:14:b7:a7:45:e3:a0:fa:1d:f3:c8: 2a:9c:9f:25:14:cf:2a:9b:cb:bc:0d:52:1d:56:b7: 21:9d:d8:20:85:c2:eb:ca:dd:20:34:4f:b5:a8:35: 26:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:BC:44:04:72:1F:5E:2D:01:52:D8:14:3C:FE:BA:AE:08:A1:A4:6F X509v3 Authority Key Identifier: keyid:33:32:0E:2F:3C:5A:DA:DF:15:3A:07:58:BC:60:0B:6E:A1:4F:4E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzIOLzxa2t8VOgdYvGALbqFPTu0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/w7xEBHIfXi0BUtgUPP66rgihpG8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/244901-ae2d-4418-9d93-e1544c57e38b/1/MzIOLzxa2t8VOgdYvGALbqFPTu0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.136.112.0-94.136.116.255 185.16.76.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:90:b6:80:ed:c4:40:ae:23:08:56:90:3a:86:66:cc:8e:63: 93:8e:a2:35:e8:f3:03:a7:31:99:21:3b:21:fb:e8:19:64:56: 6e:58:3f:97:0e:d2:30:5d:c9:2a:f8:37:38:89:e5:53:8a:16: 2d:13:01:3c:da:c2:21:06:f0:00:fc:10:eb:0e:d6:2c:7a:f1: 52:57:48:ad:99:3d:99:b6:ca:25:24:d7:e9:62:62:92:5c:b5: b1:cd:91:05:81:35:89:99:97:e8:1d:ff:23:90:2b:bb:85:37: 3a:69:a0:b5:25:6f:fe:6d:a2:c0:8b:4c:9b:a8:64:ea:04:ff: 8e:a2:c7:69:9f:53:8c:1a:c7:5a:25:17:d9:95:cf:87:bf:6d: e3:9d:6d:8b:93:6a:bd:4d:ea:0f:96:ab:6d:28:8c:3b:96:05: 45:4c:cd:03:e9:40:a1:92:9b:3c:54:c9:07:79:3e:22:e6:d3: b5:fa:27:71:83:f8:5b:0d:f3:f1:3c:88:02:6d:b2:ac:39:04: b3:fc:10:41:2e:84:ac:fb:e4:64:47:cf:60:9e:15:28:7b:12: 1a:d4:b3:51:1c:8a:77:48:e5:9d:49:27:b2:60:c5:c4:e3:55: ee:45:0d:98:41:eb:9e:9d:0a:fb:9e:a1:d9:d0:38:3d:39:0a: b3:6e:6b:10 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt7pQGZdYdejxQZ++lF7QH6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMzIwZTJmM2M1YWRhZGYxNTNhMDc1OGJjNjAwYjZlYTE0 ZjRlZWQwHhcNMjYwMTAxMjIxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjM2JjNDQwNDcyMWY1ZTJkMDE1MmQ4MTQzY2ZlYmFhZTA4YTFhNDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPGq0CgzBNTEUD+NEp6YTkaydF0m 4bueGdUSn7R60ckbyXZKhm1+3Ta37V33kSHpJ7skMDhdjxpka4PZPyMXwBd/QTzw BlLWb+rm5daXsXE9Z6eJ/e2YylUqjT8Mlr/Cxd011k3+O9XPToA2AIYnglMUTSXY EIEL2lMaKMDrdEjzJ3z6mM88TH7orYTsFT1rLFHWwESYdeoCZ2uCtlAmlCbupwhY EKaxp3LBsMslv2iu5tGfu6ywFfCkny4kTjBxNtJpfDaJ+aeKlSxLGvI9PL6jBwPX wBS3p0XjoPod88gqnJ8lFM8qm8u8DVIdVrchndgghcLryt0gNE+1qDUmaQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFMO8RARyH14tAVLYFDz+uq4IoaRvMB8GA1UdIwQY MBaAFDMyDi88WtrfFToHWLxgC26hT07tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXpJT0x6eGEydDhWT2dkWXZHQUxicUZQVHUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8yNDQ5MDEtYWUyZC00NDE4LTlkOTMt ZTE1NDRjNTdlMzhiLzEvdzd4RUJISWZYaTBCVXRnVVBQNjZyZ2locEc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8yNDQ5MDEtYWUyZC00NDE4LTlkOTMtZTE1NDRjNTdlMzhi LzEvTXpJT0x6eGEydDhWT2dkWXZHQUxicUZQVHUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAReiHAD BABeiHQDBAG5EEwwDQYJKoZIhvcNAQELBQADggEBAHqQtoDtxECuIwhWkDqGZsyO Y5OOojXo8wOnMZkhOyH76BlkVm5YP5cO0jBdySr4NziJ5VOKFi0TATzawiEG8AD8 EOsO1ix68VJXSK2ZPZm2yiUk1+liYpJctbHNkQWBNYmZl+gd/yOQK7uFNzppoLUl b/5tosCLTJuoZOoE/46ix2mfU4wax1olF9mVz4e/beOdbYuTar1N6g+Wq20ojDuW BUVMzQPpQKGSmzxUyQd5PiLm07X6J3GD+FsN8/E8iAJtsqw5BLP8EEEuhKz75GRH z2CeFSh7EhrUs1EcindI5Z1JJ7JgxcTjVe5FDZhB656dCvueodnQOD05CrNuaxA= -----END CERTIFICATE-----Generated at Mon Jan 26 06:17:57 2026 by rpki-client