This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/A8W0lfeT-n7_nKiInKci_T2isfU.roa File: A8W0lfeT-n7_nKiInKci_T2isfU.roa (raw, json) Hash identifier: ncvOXcl4nYgRfgveijzwCOgpOFMW1zWtuU8Bxy76RMY= Subject key identifier: 03:C5:B4:95:F7:93:FA:7E:FF:9C:A8:88:9C:A7:22:FD:3D:A2:B1:F5 Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Certificate serial: 019B7D5B05E0126DFB8A5318531B34D6F518 Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/A8W0lfeT-n7_nKiInKci_T2isfU.roa Signing time: Fri 02 Jan 2026 06:17:55 +0000 ROA not before: Fri 02 Jan 2026 06:17:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25374 IP address blocks: 79.124.10.0/23 maxlen: 24 79.124.12.0/24 maxlen: 24 79.124.18.0/23 maxlen: 24 79.124.46.0/24 maxlen: 24 80.72.84.0/22 maxlen: 24 130.185.230.0/23 maxlen: 24 130.185.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:05:e0:12:6d:fb:8a:53:18:53:1b:34:d6:f5:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa Validity Not Before: Jan 2 06:17:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03c5b495f793fa7eff9ca8889ca722fd3da2b1f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:28:53:3b:58:3d:5c:db:29:63:77:ce:c3:47: 84:fc:e0:1f:2a:d4:7d:bf:6e:78:29:29:a8:82:b3: 3c:ce:6f:35:36:2b:dd:b5:3a:87:47:8b:8d:0c:66: 5a:97:30:2c:47:a3:15:7d:84:31:e3:37:8c:13:5a: e4:88:85:58:cf:5b:48:fb:0b:6a:97:e7:01:b4:33: 4e:fc:48:68:66:65:ae:05:ee:c7:7e:47:8d:bb:5c: 21:de:c6:b4:a3:93:90:25:22:a8:d4:cb:16:b6:56: be:25:3a:13:20:28:93:35:88:f4:ae:d8:85:e6:61: 2d:eb:ce:4a:9c:53:57:b1:73:21:64:80:c4:8d:a9: 84:70:0f:13:16:bd:8c:bf:a0:47:6e:19:40:e8:25: 36:a5:ad:4b:5d:d4:d1:18:19:49:81:32:db:8f:91: 73:00:74:5f:1c:82:9b:65:6a:11:61:6f:79:1b:9e: 2c:1e:23:06:a2:90:9e:e5:f9:42:41:32:54:76:b1: 0f:4a:e3:6a:77:ad:58:fd:8e:0e:18:30:b9:90:2a: 04:e3:8b:2e:c5:97:cb:2c:a1:b1:91:83:97:df:be: b1:2c:d6:2d:00:5b:b6:2d:2d:5b:5e:12:2a:41:42: 3a:cf:da:54:f5:df:08:14:cc:c3:ba:c1:30:9c:1d: 95:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C5:B4:95:F7:93:FA:7E:FF:9C:A8:88:9C:A7:22:FD:3D:A2:B1:F5 X509v3 Authority Key Identifier: keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/A8W0lfeT-n7_nKiInKci_T2isfU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 79.124.10.0-79.124.12.255 79.124.18.0/23 79.124.46.0/24 80.72.84.0/22 130.185.230.0/23 130.185.233.0/24 Signature Algorithm: sha256WithRSAEncryption c0:22:51:ae:61:0b:45:e2:52:f8:75:2e:a2:cd:74:3c:b6:f8: 9b:69:5b:34:25:d6:c9:5b:cc:bb:a5:91:92:f2:d5:56:5c:7d: 41:e2:d2:df:a1:f0:c4:ad:cf:e9:b3:f1:9a:c1:7b:c6:94:85: 85:53:46:31:57:0b:9e:40:69:ec:2d:14:fe:b9:42:04:6f:b6: 0e:55:94:b1:8d:2d:b1:2e:bb:8b:d0:c7:08:db:4b:a8:b3:5a: 6b:35:c7:9c:22:0f:28:bc:70:6a:31:b1:ae:5e:7c:c7:32:01: 60:3a:ae:4b:cd:48:a4:4d:21:d8:91:57:f2:df:28:86:14:df: 34:97:30:44:85:1b:f7:7f:ee:49:d7:12:82:5f:ac:e5:10:b7: 5c:48:6c:de:c5:65:f2:e2:22:62:63:82:71:2b:92:d6:f4:b3: 34:e6:0c:d3:64:15:bb:45:81:1b:7c:82:5c:fe:c3:0a:41:16: c7:ab:73:8d:d9:1a:2b:a4:d5:68:04:2e:91:bf:c5:85:8e:d7: 86:61:ec:2a:6c:8a:63:6c:a7:e1:91:ff:d3:c6:3f:3a:71:12: 96:65:c8:8d:52:97:b2:de:9b:47:f4:9c:7d:b4:42:f8:9f:69: b5:e3:9d:06:e2:64:d2:b2:6c:14:ed:fc:49:f0:44:97:55:a1: 43:01:16:d7 -----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgISAZt9WwXgEm37ilMYUxs01vUYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1 Y2IyYWEwHhcNMjYwMTAyMDYxNzU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwM2M1YjQ5NWY3OTNmYTdlZmY5Y2E4ODg5Y2E3MjJmZDNkYTJiMWY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyhTO1g9XNspY3fOw0eE/OAfKtR9 v254KSmogrM8zm81NivdtTqHR4uNDGZalzAsR6MVfYQx4zeME1rkiIVYz1tI+wtq l+cBtDNO/EhoZmWuBe7HfkeNu1wh3sa0o5OQJSKo1MsWtla+JToTICiTNYj0rtiF 5mEt685KnFNXsXMhZIDEjamEcA8TFr2Mv6BHbhlA6CU2pa1LXdTRGBlJgTLbj5Fz AHRfHIKbZWoRYW95G54sHiMGopCe5flCQTJUdrEPSuNqd61Y/Y4OGDC5kCoE44su xZfLLKGxkYOX376xLNYtAFu2LS1bXhIqQUI6z9pU9d8IFMzDusEwnB2VywIDAQAB o4ICLzCCAiswHQYDVR0OBBYEFAPFtJX3k/p+/5yoiJynIv09orH1MB8GA1UdIwQY MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt ZGFjYjVmMzU2ZWEzLzEvQThXMGxmZVQtbjdfbktpSW5LY2lfVDJpc2ZVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsMAwDBAFPfAoD BABPfAwDBAFPfBIDBABPfC4DBAJQSFQDBAGCueYDBACCuekwDQYJKoZIhvcNAQEL BQADggEBAMAiUa5hC0XiUvh1LqLNdDy2+JtpWzQl1slbzLulkZLy1VZcfUHi0t+h 8MStz+mz8ZrBe8aUhYVTRjFXC55AaewtFP65QgRvtg5VlLGNLbEuu4vQxwjbS6iz Wms1x5wiDyi8cGoxsa5efMcyAWA6rkvNSKRNIdiRV/LfKIYU3zSXMESFG/d/7knX EoJfrOUQt1xIbN7FZfLiImJjgnErktb0szTmDNNkFbtFgRt8glz+wwpBFserc43Z Giuk1WgELpG/xYWO14Zh7CpsimNsp+GR/9PGPzpxEpZlyI1Sl7Lem0f0nH20Qvif abXjnQbiZNKybBTt/EnwRJdVoUMBFtc= -----END CERTIFICATE-----Generated at Fri Jan 23 18:48:24 2026 by rpki-client