This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/wW3ZYEDbinPYHk66ZkOwzFx6fGU.roa File: wW3ZYEDbinPYHk66ZkOwzFx6fGU.roa (raw, json) Hash identifier: UTV9GkxKyIAZmik9JxS337j4Nl0XcYaJdhg8IjKhvU4= Subject key identifier: C1:6D:D9:60:40:DB:8A:73:D8:1E:4E:BA:66:43:B0:CC:5C:7A:7C:65 Certificate issuer: /CN=712f9cb3c298b150beb79080376f74bdeac438ac Certificate serial: 019B77C74EAAFCFAC3AA19E37B03E7722E80 Authority key identifier: 71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/wW3ZYEDbinPYHk66ZkOwzFx6fGU.roa Signing time: Thu 01 Jan 2026 04:18:29 +0000 ROA not before: Thu 01 Jan 2026 04:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60983 IP address blocks: 185.22.128.0/22 maxlen: 24 193.169.46.0/23 maxlen: 24 2a00:6060::/32 maxlen: 32 2a00:6060:ca00::/48 maxlen: 48 2a00:6060:ee37::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.mft rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:4e:aa:fc:fa:c3:aa:19:e3:7b:03:e7:72:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=712f9cb3c298b150beb79080376f74bdeac438ac Validity Not Before: Jan 1 04:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c16dd96040db8a73d81e4eba6643b0cc5c7a7c65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:90:29:90:3a:7b:08:aa:6d:6c:e8:7f:ba:93: fd:07:7c:2b:11:fe:ef:a1:c6:6b:b4:38:d6:e5:6a: 81:90:70:b3:43:e6:a6:12:71:41:c4:73:02:ff:d3: 08:d7:2d:bb:2b:cb:83:af:97:c4:43:e4:18:d9:55: ba:4f:10:a5:fb:49:be:d6:96:68:01:3a:f0:18:32: d7:d8:ad:5d:4f:fc:1a:29:de:5c:d4:24:fd:26:e0: b3:e1:ae:fd:b3:e6:8e:1c:eb:9d:16:55:1d:72:7c: 48:d5:37:53:09:59:30:49:21:c1:24:7e:33:aa:0d: 2f:32:cd:be:f5:15:02:e2:cf:36:e1:1c:2c:9d:74: 2e:8e:06:7a:99:ad:fb:52:43:83:5f:b6:ca:08:69: 02:35:3e:4f:4b:a8:8a:d2:8d:5c:a9:13:ba:f5:b3: 5a:82:6e:7d:c7:ee:a8:70:db:b6:7e:58:f0:7a:2d: 04:ae:b3:fc:38:5c:99:bc:d6:e2:80:80:d2:80:7f: 85:45:77:26:5a:16:d0:e4:12:8f:24:d7:fc:36:27: 82:a9:40:eb:5a:b4:2e:f7:21:4e:05:b9:96:fc:79: 81:bd:76:f8:d2:52:95:fc:78:ad:4a:a1:de:43:f1: ce:3c:d3:f3:bd:5d:e1:ba:be:ff:fc:25:2b:f8:51: d5:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:6D:D9:60:40:DB:8A:73:D8:1E:4E:BA:66:43:B0:CC:5C:7A:7C:65 X509v3 Authority Key Identifier: keyid:71:2F:9C:B3:C2:98:B1:50:BE:B7:90:80:37:6F:74:BD:EA:C4:38:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS-cs8KYsVC-t5CAN290verEOKw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/wW3ZYEDbinPYHk66ZkOwzFx6fGU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/e2e119-fd78-4b1a-b16a-987da4392056/1/cS-cs8KYsVC-t5CAN290verEOKw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.22.128.0/22 193.169.46.0/23 IPv6: 2a00:6060::/32 Signature Algorithm: sha256WithRSAEncryption 44:47:5d:e2:e3:35:9c:51:e5:39:3a:f7:6e:ee:31:f3:07:30: f0:18:82:13:5c:bb:df:fa:90:aa:87:19:fc:4c:5e:23:2a:69: 6e:b3:f5:02:cd:f1:de:a7:73:66:57:53:ef:04:b4:0d:8b:35: 3b:84:4a:5c:73:86:f3:00:28:86:36:bf:91:83:f6:dc:ce:42: a5:66:e2:10:0a:4c:66:68:70:d4:f9:8d:53:30:7d:bd:cc:66: 9b:9d:99:17:2b:bd:6a:50:35:fa:c0:3a:07:61:2b:f0:35:6d: a9:40:88:93:a5:97:b3:d8:da:44:ca:06:90:c6:d7:42:6a:43: 7e:84:34:d5:a2:cc:53:43:0a:1a:ef:5b:81:51:95:e1:25:da: 55:f1:36:f8:f6:94:55:ad:94:90:3a:b3:c4:90:42:cd:23:92: 8f:32:58:55:86:f7:66:8f:7c:7c:27:47:5b:0e:d1:0e:2f:4c: e5:3f:0c:5a:2e:05:25:f7:f2:e8:be:6e:14:6b:78:f1:e0:fd: 27:be:21:af:94:7b:5c:bd:7d:af:44:70:67:94:ea:e6:ea:58: b7:32:57:69:a6:b5:ba:dc:ff:48:02:b5:7e:d8:1e:09:a4:2b: f8:0f:82:a7:3f:21:ae:19:f4:02:53:2a:e4:e9:9e:4a:dc:91: c2:d5:51:3d -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt3x06q/PrDqhnjewPnci6AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMmY5Y2IzYzI5OGIxNTBiZWI3OTA4MDM3NmY3NGJkZWFj NDM4YWMwHhcNMjYwMTAxMDQxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTZkZDk2MDQwZGI4YTczZDgxZTRlYmE2NjQzYjBjYzVjN2E3YzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJApkDp7CKptbOh/upP9B3wrEf7v ocZrtDjW5WqBkHCzQ+amEnFBxHMC/9MI1y27K8uDr5fEQ+QY2VW6TxCl+0m+1pZo ATrwGDLX2K1dT/waKd5c1CT9JuCz4a79s+aOHOudFlUdcnxI1TdTCVkwSSHBJH4z qg0vMs2+9RUC4s824RwsnXQujgZ6ma37UkODX7bKCGkCNT5PS6iK0o1cqRO69bNa gm59x+6ocNu2fljwei0ErrP8OFyZvNbigIDSgH+FRXcmWhbQ5BKPJNf8NieCqUDr WrQu9yFOBbmW/HmBvXb40lKV/HitSqHeQ/HOPNPzvV3hur7//CUr+FHVKQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFMFt2WBA24pz2B5OumZDsMxcenxlMB8GA1UdIwQY MBaAFHEvnLPCmLFQvreQgDdvdL3qxDisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1MtY3M4S1lzVkMtdDVDQU4yOTB2ZXJFT0t3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9lMmUxMTktZmQ3OC00YjFhLWIxNmEt OTg3ZGE0MzkyMDU2LzEvd1czWllFRGJpblBZSGs2NlprT3d6Rng2ZkdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS9lMmUxMTktZmQ3OC00YjFhLWIxNmEtOTg3ZGE0MzkyMDU2 LzEvY1MtY3M4S1lzVkMtdDVDQU4yOTB2ZXJFT0t3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuRaAAwQB wakuMA0EAgACMAcDBQAqAGBgMA0GCSqGSIb3DQEBCwUAA4IBAQBER13i4zWcUeU5 Ovdu7jHzBzDwGIITXLvf+pCqhxn8TF4jKmlus/UCzfHep3NmV1PvBLQNizU7hEpc c4bzACiGNr+Rg/bczkKlZuIQCkxmaHDU+Y1TMH29zGabnZkXK71qUDX6wDoHYSvw NW2pQIiTpZez2NpEygaQxtdCakN+hDTVosxTQwoa71uBUZXhJdpV8Tb49pRVrZSQ OrPEkELNI5KPMlhVhvdmj3x8J0dbDtEOL0zlPwxaLgUl9/Lovm4Ua3jx4P0nviGv lHtcvX2vRHBnlOrm6li3MldpprW63P9IArV+2B4JpCv4D4KnPyGuGfQCUyrk6Z5K 3JHC1VE9 -----END CERTIFICATE-----Generated at Mon Jan 26 10:52:58 2026 by rpki-client