This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/cWWM9ZpSxCOLjBSdEIJNLYZmfIc.roa File: cWWM9ZpSxCOLjBSdEIJNLYZmfIc.roa (raw, json) Hash identifier: /VirzHss1ndnL0VauqeSmTCntzhbwvddkhihXgztiNo= Subject key identifier: 71:65:8C:F5:9A:52:C4:23:8B:8C:14:9D:10:82:4D:2D:86:66:7C:87 Certificate issuer: /CN=30aee11b2943572d11becc425c684b48bbb2cbd4 Certificate serial: 019B79ED19E71F38368F47E7B8421E2F97D3 Authority key identifier: 30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/cWWM9ZpSxCOLjBSdEIJNLYZmfIc.roa Signing time: Thu 01 Jan 2026 14:19:00 +0000 ROA not before: Thu 01 Jan 2026 14:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41000 IP address blocks: 185.219.236.0/22 maxlen: 22 2a0b:eb40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 23:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:19:e7:1f:38:36:8f:47:e7:b8:42:1e:2f:97:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30aee11b2943572d11becc425c684b48bbb2cbd4 Validity Not Before: Jan 1 14:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=71658cf59a52c4238b8c149d10824d2d86667c87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6e:e0:89:77:06:d0:f2:66:90:1a:0a:e4:7c: ba:2a:f5:bc:59:4b:99:40:d1:37:78:74:3f:5f:f6: c9:9f:cd:6f:6f:bd:31:76:ea:7b:93:ad:c5:56:13: 22:ef:b6:7f:b4:8c:a7:50:88:f9:e7:68:f4:a3:28: 1e:e0:c6:e6:06:5c:c4:a7:44:ff:43:8a:95:78:e1: 42:4c:af:5f:a3:ce:b2:a2:08:fb:2a:a6:70:38:b2: 4f:aa:12:9c:72:88:6c:8e:13:39:18:e0:28:c9:5a: 62:7e:3e:e1:be:ce:b3:b2:6e:38:29:7d:32:cc:ae: 90:47:8d:18:7f:c4:9b:53:cf:4f:4f:87:a9:15:09: f1:60:05:54:a9:3f:20:c9:15:7a:92:e9:5d:bd:af: 6c:87:e7:c4:0b:de:c6:67:b8:01:72:a8:54:4a:c1: 67:54:46:0a:d9:83:a3:d0:52:db:4f:06:84:39:1f: ac:b9:eb:b6:bd:9a:54:96:02:36:ba:f4:8f:66:c4: 29:06:a8:47:f5:bc:f0:c0:b8:b0:25:2b:63:02:b2: a8:c6:e9:8a:d8:9f:bf:b7:9e:c8:6a:66:10:d8:42: ff:1a:7d:e9:28:f4:b2:cb:24:4d:50:d5:98:73:30: 2e:a2:55:22:c9:ce:1e:cc:49:40:8d:f0:a9:43:bb: 9a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:65:8C:F5:9A:52:C4:23:8B:8C:14:9D:10:82:4D:2D:86:66:7C:87 X509v3 Authority Key Identifier: keyid:30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/cWWM9ZpSxCOLjBSdEIJNLYZmfIc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.219.236.0/22 IPv6: 2a0b:eb40::/29 Signature Algorithm: sha256WithRSAEncryption bb:91:5e:29:1b:61:55:65:b9:1b:2d:26:b9:2b:10:c6:e4:85: ec:71:92:ac:57:45:93:5a:f5:30:89:8d:ce:d0:c6:3c:a5:77: 19:1b:bd:c5:65:2c:26:24:e7:57:e7:df:da:b8:0c:87:35:4b: 11:50:8a:68:ee:ad:17:af:32:74:88:51:43:08:a3:89:76:35: 67:fb:fa:36:21:2a:06:8b:fb:46:44:16:a3:dc:59:ae:62:cc: ee:31:a6:90:d3:70:54:aa:cd:59:6c:0e:d2:37:72:d6:cd:94: 17:5a:14:48:3a:9e:3a:62:98:b7:d7:cc:ce:65:18:ed:f6:cd: 40:26:b2:da:39:34:37:40:4f:1a:6b:a9:a2:67:3c:1c:06:94: b9:de:6d:c4:2b:9b:e7:93:bd:05:99:40:66:d7:a4:13:d7:be: 56:8e:aa:3e:0f:73:e3:5d:e5:05:f8:d2:10:b7:b8:cc:db:18: 49:c2:05:1c:05:2f:9b:33:11:81:a3:14:5b:7e:bc:ae:65:f1: 41:3c:d0:52:d6:28:e9:c7:c5:d3:9b:92:8c:01:bd:63:64:77: d9:89:49:90:61:86:16:f7:62:ce:23:b2:61:43:5e:83:3f:c2: ba:af:19:22:f0:1a:0c:6a:61:90:1f:ba:51:f0:86:23:6a:f5: 66:52:b2:08 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt57RnnHzg2j0fnuEIeL5fTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYWVlMTFiMjk0MzU3MmQxMWJlY2M0MjVjNjg0YjQ4YmJi MmNiZDQwHhcNMjYwMTAxMTQxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTY1OGNmNTlhNTJjNDIzOGI4YzE0OWQxMDgyNGQyZDg2NjY3Yzg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtm7giXcG0PJmkBoK5Hy6KvW8WUuZ QNE3eHQ/X/bJn81vb70xdup7k63FVhMi77Z/tIynUIj552j0oyge4MbmBlzEp0T/ Q4qVeOFCTK9fo86yogj7KqZwOLJPqhKccohsjhM5GOAoyVpifj7hvs6zsm44KX0y zK6QR40Yf8SbU89PT4epFQnxYAVUqT8gyRV6kuldva9sh+fEC97GZ7gBcqhUSsFn VEYK2YOj0FLbTwaEOR+sueu2vZpUlgI2uvSPZsQpBqhH9bzwwLiwJStjArKoxumK 2J+/t57IamYQ2EL/Gn3pKPSyyyRNUNWYczAuolUiyc4ezElAjfCpQ7uaZQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFHFljPWaUsQji4wUnRCCTS2GZnyHMB8GA1UdIwQY MBaAFDCu4RspQ1ctEb7MQlxoS0i7ssvUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUs3aEd5bERWeTBSdnN4Q1hHaExTTHV5eTlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS82ZmFlMDItMGMzNy00ZjA1LTgxYmEt MWI0NmQyZWI1NDEyLzEvY1dXTTlacFN4Q09MakJTZEVJSk5MWVptZkljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS82ZmFlMDItMGMzNy00ZjA1LTgxYmEtMWI0NmQyZWI1NDEy LzEvTUs3aEd5bERWeTBSdnN4Q1hHaExTTHV5eTlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCudvsMA0E AgACMAcDBQMqC+tAMA0GCSqGSIb3DQEBCwUAA4IBAQC7kV4pG2FVZbkbLSa5KxDG 5IXscZKsV0WTWvUwiY3O0MY8pXcZG73FZSwmJOdX59/auAyHNUsRUIpo7q0XrzJ0 iFFDCKOJdjVn+/o2ISoGi/tGRBaj3FmuYszuMaaQ03BUqs1ZbA7SN3LWzZQXWhRI Op46Ypi318zOZRjt9s1AJrLaOTQ3QE8aa6miZzwcBpS53m3EK5vnk70FmUBm16QT 175Wjqo+D3PjXeUF+NIQt7jM2xhJwgUcBS+bMxGBoxRbfryuZfFBPNBS1ijpx8XT m5KMAb1jZHfZiUmQYYYW92LOI7JhQ16DP8K6rxki8BoMamGQH7pR8IYjavVmUrII -----END CERTIFICATE-----Generated at Wed Feb 4 06:57:48 2026 by rpki-client