This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/we-SEQd2_l9Zpg-2tN7F8p4zsWk.roa File: we-SEQd2_l9Zpg-2tN7F8p4zsWk.roa (raw, json) Hash identifier: Fpbi2Su7cJXvhkx547lh3MjiKMeyoIaouwFW2rjVmE8= Subject key identifier: C1:EF:92:11:07:76:FE:5F:59:A6:0F:B6:B4:DE:C5:F2:9E:33:B1:69 Certificate issuer: /CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd Certificate serial: 019B7AC8A4BB0A5AFE1F871B99B9A2FFCC45 Authority key identifier: 3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/we-SEQd2_l9Zpg-2tN7F8p4zsWk.roa Signing time: Thu 01 Jan 2026 18:18:48 +0000 ROA not before: Thu 01 Jan 2026 18:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 40676 IP address blocks: 185.161.148.0/24 maxlen: 24 185.180.192.0/24 maxlen: 24 185.180.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.mft rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 23 Jan 2026 16:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:a4:bb:0a:5a:fe:1f:87:1b:99:b9:a2:ff:cc:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a5ec28e841f29f380a7ce2cb5cd5673700821fd Validity Not Before: Jan 1 18:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1ef92110776fe5f59a60fb6b4dec5f29e33b169 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:42:19:5b:e8:a0:a7:7e:7e:e5:55:b9:69:d6: 72:04:4d:5b:4e:a3:41:e8:8e:56:69:a3:94:2f:0a: b5:a3:55:80:78:15:98:dd:73:5c:4d:41:59:26:b6: fd:ec:61:4f:1c:89:9a:e2:9b:36:07:26:57:42:94: 28:0e:b1:fd:b8:fc:55:b4:2c:49:4f:60:a6:be:33: be:79:0b:a1:a4:d4:a8:40:bf:05:1e:a4:d4:97:03: 3b:32:5b:2d:74:99:c7:0a:96:30:6a:78:a4:c2:e3: f1:b2:11:81:0b:e3:44:e2:14:89:60:f3:b5:b4:11: 92:6b:c2:e5:c5:36:e1:98:29:ed:f8:4a:20:8d:08: bc:ec:7d:ec:54:48:f5:9f:5e:cb:89:96:76:8d:04: 73:d9:28:3f:ff:2f:21:19:55:5f:8d:b0:ce:a5:cd: c5:cf:a5:b9:5c:8f:a2:9b:87:dc:c3:05:97:7e:55: d3:0d:39:5b:34:53:c4:19:db:f3:3f:f1:d7:cd:c8: 9a:29:a1:60:7c:b3:fb:c3:cf:71:f1:a7:46:cd:dd: 0c:e1:4e:52:d8:03:11:84:bd:62:99:e2:c3:5c:10: e9:78:2e:ad:d2:08:d1:6b:4a:1a:8b:90:26:c1:06: b7:ba:54:9d:39:34:fb:aa:67:48:22:be:28:f9:5d: 25:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:EF:92:11:07:76:FE:5F:59:A6:0F:B6:B4:DE:C5:F2:9E:33:B1:69 X509v3 Authority Key Identifier: keyid:3A:5E:C2:8E:84:1F:29:F3:80:A7:CE:2C:B5:CD:56:73:70:08:21:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ol7CjoQfKfOAp84stc1Wc3AIIf0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/we-SEQd2_l9Zpg-2tN7F8p4zsWk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c12020-a1a1-400e-91f3-835599260ff6/1/Ol7CjoQfKfOAp84stc1Wc3AIIf0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.161.148.0/24 185.180.192.0/24 185.180.194.0/24 Signature Algorithm: sha256WithRSAEncryption 53:1c:d2:ba:34:7e:d0:f4:78:16:ae:3f:9e:42:c6:27:24:57: 4f:e5:22:f4:c5:71:69:4a:d5:ef:33:b4:4c:f2:6b:04:5f:34: 0e:b8:78:4e:6b:8c:1a:f2:f9:96:4e:e4:7c:16:34:04:d8:20: be:55:dd:62:e7:f5:bd:65:89:4e:ab:4d:74:dd:31:b7:a8:0c: dd:44:26:28:3a:4b:01:62:70:65:c6:31:59:5d:58:e2:11:53: 40:ca:b8:6a:19:eb:1c:40:e7:5f:c8:6c:4c:e6:d7:a6:63:ac: fc:73:be:eb:6c:78:e5:76:3e:16:56:b2:9a:e6:65:22:2d:45: f3:3e:32:ab:4c:8a:9b:14:47:66:94:af:e6:02:2e:1a:a0:e6: 5b:a5:b7:ac:a2:1f:26:24:f4:23:a7:e5:6e:19:23:63:7c:ef: a6:5c:3d:83:64:1f:b5:6b:14:53:86:ad:22:32:90:61:0c:36: 5c:46:2e:b0:f8:8f:ca:ae:91:9b:12:87:7a:43:bf:57:9f:ca: 7f:6a:97:ae:ca:33:f9:2e:70:2a:cf:f0:b7:ca:9d:c7:6f:38: 83:a7:1b:83:d4:42:e6:25:24:70:34:47:92:68:2e:2a:12:33: a8:27:71:ad:f8:f1:c2:4c:6e:24:e4:c9:c6:b1:44:90:cd:ee: 4a:b7:ea:72 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6yKS7Clr+H4cbmbmi/8xFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhNWVjMjhlODQxZjI5ZjM4MGE3Y2UyY2I1Y2Q1NjczNzAw ODIxZmQwHhcNMjYwMTAxMTgxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWVmOTIxMTA3NzZmZTVmNTlhNjBmYjZiNGRlYzVmMjllMzNiMTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkIZW+igp35+5VW5adZyBE1bTqNB 6I5WaaOULwq1o1WAeBWY3XNcTUFZJrb97GFPHIma4ps2ByZXQpQoDrH9uPxVtCxJ T2CmvjO+eQuhpNSoQL8FHqTUlwM7MlstdJnHCpYwanikwuPxshGBC+NE4hSJYPO1 tBGSa8LlxTbhmCnt+EogjQi87H3sVEj1n17LiZZ2jQRz2Sg//y8hGVVfjbDOpc3F z6W5XI+im4fcwwWXflXTDTlbNFPEGdvzP/HXzciaKaFgfLP7w89x8adGzd0M4U5S 2AMRhL1imeLDXBDpeC6t0gjRa0oai5AmwQa3ulSdOTT7qmdIIr4o+V0lEQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMHvkhEHdv5fWaYPtrTexfKeM7FpMB8GA1UdIwQY MBaAFDpewo6EHynzgKfOLLXNVnNwCCH9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT2w3Q2pvUWZLZk9BcDg0c3RjMVdjM0FJSWYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9jMTIwMjAtYTFhMS00MDBlLTkxZjMt ODM1NTk5MjYwZmY2LzEvd2UtU0VRZDJfbDlacGctMnRON0Y4cDR6c1drLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9jMTIwMjAtYTFhMS00MDBlLTkxZjMtODM1NTk5MjYwZmY2 LzEvT2w3Q2pvUWZLZk9BcDg0c3RjMVdjM0FJSWYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAuaGUAwQA ubTAAwQAubTCMA0GCSqGSIb3DQEBCwUAA4IBAQBTHNK6NH7Q9HgWrj+eQsYnJFdP 5SL0xXFpStXvM7RM8msEXzQOuHhOa4wa8vmWTuR8FjQE2CC+Vd1i5/W9ZYlOq010 3TG3qAzdRCYoOksBYnBlxjFZXVjiEVNAyrhqGescQOdfyGxM5temY6z8c77rbHjl dj4WVrKa5mUiLUXzPjKrTIqbFEdmlK/mAi4aoOZbpbesoh8mJPQjp+VuGSNjfO+m XD2DZB+1axRThq0iMpBhDDZcRi6w+I/KrpGbEod6Q79Xn8p/apeuyjP5LnAqz/C3 yp3HbziDpxuD1ELmJSRwNEeSaC4qEjOoJ3Gt+PHCTG4k5MnGsUSQze5Kt+py -----END CERTIFICATE-----Generated at Fri Jan 23 02:01:20 2026 by rpki-client