This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/83Ea-WoSBHhdwtsmErqa2yaAXqM.roa File: 83Ea-WoSBHhdwtsmErqa2yaAXqM.roa (raw, json) Hash identifier: MRH5oDVR7p7BkzwFCE3/OIEXbQk6JZwhyMoWxL/4XZ4= Subject key identifier: F3:71:1A:F9:6A:12:04:78:5D:C2:DB:26:12:BA:9A:DB:26:80:5E:A3 Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Certificate serial: 019B7F85562AD1F47E07F7A757A5B6B645AF Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/83Ea-WoSBHhdwtsmErqa2yaAXqM.roa Signing time: Fri 02 Jan 2026 16:23:23 +0000 ROA not before: Fri 02 Jan 2026 16:23:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58061 IP address blocks: 192.124.191.0/24 maxlen: 24 193.124.5.0/24 maxlen: 24 194.87.12.0/24 maxlen: 24 194.87.22.0/24 maxlen: 24 194.87.40.0/24 maxlen: 24 194.87.124.0/24 maxlen: 24 194.87.142.0/24 maxlen: 24 194.87.150.0/24 maxlen: 24 194.87.169.0/24 maxlen: 24 194.87.185.0/24 maxlen: 24 195.133.6.0/24 maxlen: 24 195.133.42.0/24 maxlen: 24 195.133.43.0/24 maxlen: 24 195.133.72.0/24 maxlen: 24 195.133.85.0/24 maxlen: 24 212.193.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:85:56:2a:d1:f4:7e:07:f7:a7:57:a5:b6:b6:45:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7 Validity Not Before: Jan 2 16:23:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f3711af96a1204785dc2db2612ba9adb26805ea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4b:3d:f1:ce:b2:76:03:fd:b4:d7:d2:ed:d4: 6e:bc:ad:34:ab:9c:1a:a9:0f:66:4e:e6:84:81:a3: a3:05:55:34:74:16:c5:9d:e5:99:4e:4e:53:84:df: cc:77:bc:32:6b:a9:a5:1a:df:f2:ba:ec:65:56:05: ed:7d:3a:87:94:6a:95:ef:6c:3c:e1:f8:9e:d3:87: 02:36:f8:aa:eb:22:33:c1:9d:ed:7b:16:59:c8:a5: 16:9a:9a:eb:70:27:ae:2b:92:25:f6:bd:cf:c6:62: 62:2b:e7:f8:88:af:eb:54:b1:86:33:b3:d9:69:4e: e6:c2:c2:42:13:ef:43:f0:06:28:01:d0:4e:4a:b9: 48:3c:d5:10:a7:ef:89:62:68:68:8a:e5:7f:a2:a6: 61:69:0c:5f:5f:aa:80:64:80:07:d7:34:3f:e6:0a: f3:9d:be:7c:63:ff:a9:98:ff:30:a5:5f:34:69:ed: db:8e:f2:23:b5:a3:5c:18:61:b1:f7:d8:de:ff:25: 15:95:f8:12:35:bd:f4:9f:9a:1f:26:37:6f:0f:34: 32:d9:61:8b:27:50:21:a2:3b:83:b1:f4:e4:b1:8b: 40:96:d2:d4:fd:f8:65:df:72:61:48:6a:5b:48:90: 51:a8:35:6e:c0:af:3f:81:6d:47:81:f8:3c:02:b6: af:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:71:1A:F9:6A:12:04:78:5D:C2:DB:26:12:BA:9A:DB:26:80:5E:A3 X509v3 Authority Key Identifier: keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/83Ea-WoSBHhdwtsmErqa2yaAXqM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.124.191.0/24 193.124.5.0/24 194.87.12.0/24 194.87.22.0/24 194.87.40.0/24 194.87.124.0/24 194.87.142.0/24 194.87.150.0/24 194.87.169.0/24 194.87.185.0/24 195.133.6.0/24 195.133.42.0/23 195.133.72.0/24 195.133.85.0/24 212.193.14.0/24 Signature Algorithm: sha256WithRSAEncryption 57:25:23:c5:4d:0e:df:6f:1b:4e:5b:5d:ee:f5:56:f2:10:13: a0:f8:dd:f3:59:ec:32:5a:96:9f:c4:cd:e5:e7:ed:d7:74:87: 3b:3c:48:74:33:9c:de:c9:ec:89:05:ac:8c:1b:56:77:d2:a2: f7:92:5c:f5:88:dd:bd:44:80:db:b9:f1:e1:13:a4:c8:c4:1e: 8b:ae:18:4b:48:98:e3:01:0c:3e:ba:0d:7e:d4:d0:4f:2b:58: c7:94:cd:dc:28:59:1c:c3:67:bb:76:0c:a6:39:4c:1e:5a:03: 02:64:5b:c1:db:60:93:92:33:bf:cf:6f:e3:48:e7:e8:56:4d: dc:45:9f:15:b2:04:6e:9d:76:48:51:16:74:2f:71:6b:fa:96: 88:0d:84:cc:8e:e1:77:c0:8a:33:01:4f:ed:5b:0f:08:7c:ad: 9b:1c:43:6c:d5:0c:33:4a:d4:90:f7:75:70:78:a5:6c:6a:7c: 00:6a:72:59:2a:56:0f:f7:e5:6b:9d:0c:b2:1d:87:21:b6:c6: e4:4b:a2:12:2f:9b:95:29:78:18:16:1d:53:75:1d:22:65:1f: c3:3d:ba:6a:08:b1:db:c3:db:fd:79:f9:bc:0d:b3:0d:da:ed: 0d:77:e8:ad:c7:14:7a:16:10:46:b3:af:8b:15:b3:72:93:3a: d5:c0:eb:12 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgISAZt/hVYq0fR+B/enV6W2tkWvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw ZTFhYzcwHhcNMjYwMTAyMTYyMzIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMzcxMWFmOTZhMTIwNDc4NWRjMmRiMjYxMmJhOWFkYjI2ODA1ZWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ks98c6ydgP9tNfS7dRuvK00q5wa qQ9mTuaEgaOjBVU0dBbFneWZTk5ThN/Md7wya6mlGt/yuuxlVgXtfTqHlGqV72w8 4fie04cCNviq6yIzwZ3texZZyKUWmprrcCeuK5Il9r3PxmJiK+f4iK/rVLGGM7PZ aU7mwsJCE+9D8AYoAdBOSrlIPNUQp++JYmhoiuV/oqZhaQxfX6qAZIAH1zQ/5grz nb58Y/+pmP8wpV80ae3bjvIjtaNcGGGx99je/yUVlfgSNb30n5ofJjdvDzQy2WGL J1AhojuDsfTksYtAltLU/fhl33JhSGpbSJBRqDVuwK8/gW1Hgfg8AravKQIDAQAB o4ICXTCCAlkwHQYDVR0OBBYEFPNxGvlqEgR4XcLbJhK6mtsmgF6jMB8GA1UdIwQY MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt NWE0MjQyOGYxMTQzLzEvODNFYS1Xb1NCSGhkd3RzbUVycWEyeWFBWHFNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQAwHy/AwQA wXwFAwQAwlcMAwQAwlcWAwQAwlcoAwQAwld8AwQAwleOAwQAwleWAwQAwlepAwQA wle5AwQAw4UGAwQBw4UqAwQAw4VIAwQAw4VVAwQA1MEOMA0GCSqGSIb3DQEBCwUA A4IBAQBXJSPFTQ7fbxtOW13u9VbyEBOg+N3zWewyWpafxM3l5+3XdIc7PEh0M5ze yeyJBayMG1Z30qL3klz1iN29RIDbufHhE6TIxB6LrhhLSJjjAQw+ug1+1NBPK1jH lM3cKFkcw2e7dgymOUweWgMCZFvB22CTkjO/z2/jSOfoVk3cRZ8VsgRunXZIURZ0 L3Fr+paIDYTMjuF3wIozAU/tWw8IfK2bHENs1QwzStSQ93VweKVsanwAanJZKlYP 9+VrnQyyHYchtsbkS6ISL5uVKXgYFh1TdR0iZR/DPbpqCLHbw9v9efm8DbMN2u0N d+itxxR6FhBGs6+LFbNykzrVwOsS -----END CERTIFICATE-----Generated at Mon Jan 19 19:58:13 2026 by rpki-client