This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/0Wah9lDQL0CoLEgawmzR8dhxyAc.roa File: 0Wah9lDQL0CoLEgawmzR8dhxyAc.roa (raw, json) Hash identifier: ee0vXYwpzwNhjYiRTv9x+OGC9lOC07tlDhvLzTb9boo= Subject key identifier: D1:66:A1:F6:50:D0:2F:40:A8:2C:48:1A:C2:6C:D1:F1:D8:71:C8:07 Certificate issuer: /CN=7e566fff407f31c6ae856c3743ef3e5f22f8d35b Certificate serial: 019B7EA58BC1997858AA7E9A6A726615A212 Authority key identifier: 7E:56:6F:FF:40:7F:31:C6:AE:85:6C:37:43:EF:3E:5F:22:F8:D3:5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/flZv_0B_McauhWw3Q-8-XyL401s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/0Wah9lDQL0CoLEgawmzR8dhxyAc.roa Signing time: Fri 02 Jan 2026 12:18:56 +0000 ROA not before: Fri 02 Jan 2026 12:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61351 IP address blocks: 185.206.140.0/22 maxlen: 24 2a04:a240::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.crl rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.mft rsync://rpki.ripe.net/repository/DEFAULT/flZv_0B_McauhWw3Q-8-XyL401s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:8b:c1:99:78:58:aa:7e:9a:6a:72:66:15:a2:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e566fff407f31c6ae856c3743ef3e5f22f8d35b Validity Not Before: Jan 2 12:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d166a1f650d02f40a82c481ac26cd1f1d871c807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:cc:a1:d7:b8:64:b5:94:d9:b4:07:c8:61:0b: 6a:b8:33:75:3a:e7:d4:61:45:15:57:8d:18:7b:e1: 19:f5:41:4f:d5:d5:77:13:a4:74:60:cc:7f:ba:62: 2b:1b:8c:a3:da:a2:a9:49:9d:2c:72:9e:5c:f6:33: 7f:a5:7d:cd:8f:8d:97:a8:95:ed:aa:4e:b2:06:e2: 41:fb:00:6c:06:7a:1d:f0:c0:91:d9:ce:ff:3f:6b: 91:ce:a3:dc:c0:99:15:65:5f:69:0b:e1:12:37:5a: 97:6a:b0:dd:a4:a6:56:92:76:05:bf:c7:5a:9d:bc: 5c:52:41:93:88:1c:85:0b:53:20:6a:ad:5d:cd:e3: f2:55:f3:35:d0:03:78:5b:dd:a6:81:b9:66:84:0e: 7c:66:01:44:aa:e8:03:b1:a0:93:4a:47:22:b1:e7: 9a:94:12:05:ed:89:99:dd:06:79:f9:16:c5:10:7a: 9b:e6:cd:49:83:ef:88:03:8e:03:ce:ca:68:95:ac: 89:71:49:32:29:ee:b8:21:8d:71:4c:c8:dd:e2:81: 83:1f:09:aa:bb:ba:09:26:5a:e1:a6:a1:00:e3:bf: 43:b3:0c:e4:82:63:5d:1a:b7:0f:45:6f:37:dc:b0: 37:8c:8e:4d:05:91:5b:3f:f9:67:49:4c:09:3e:ff: d7:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:66:A1:F6:50:D0:2F:40:A8:2C:48:1A:C2:6C:D1:F1:D8:71:C8:07 X509v3 Authority Key Identifier: keyid:7E:56:6F:FF:40:7F:31:C6:AE:85:6C:37:43:EF:3E:5F:22:F8:D3:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/flZv_0B_McauhWw3Q-8-XyL401s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/0Wah9lDQL0CoLEgawmzR8dhxyAc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/040564-5952-4223-bcca-f876c055a315/1/flZv_0B_McauhWw3Q-8-XyL401s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.206.140.0/22 IPv6: 2a04:a240::/29 Signature Algorithm: sha256WithRSAEncryption b9:e3:1d:88:1e:ab:6a:d9:22:e9:f0:e1:99:42:51:40:63:40: 53:17:91:66:a8:c3:10:3b:e8:82:a2:fc:97:65:6d:cb:64:0b: 18:f0:21:be:e3:71:e2:29:05:c5:3a:34:ed:bd:df:be:e2:ca: b9:3a:fd:a4:37:e4:9b:3b:fe:98:ae:2d:d9:0f:2a:8f:f6:16: f4:27:66:c7:4e:4f:90:7d:98:5e:a4:2e:05:c5:e1:9b:7d:27: f8:7b:2e:73:b6:f6:5c:ad:d2:f1:ca:e5:b1:eb:15:55:42:ef: c8:a2:c2:b2:b9:ea:9e:a7:46:93:a1:4a:6f:17:92:74:5c:3c: 0b:8c:78:c6:45:af:7e:17:ed:3b:d4:39:0f:54:54:24:82:bf: 7d:1c:81:5b:e8:59:8b:92:ae:1c:8e:69:6a:94:0b:6b:45:97: dd:98:08:b1:ed:7f:13:44:54:f1:73:01:b0:96:82:44:82:c2: 4e:2e:d2:c8:ad:0d:e9:f4:49:a4:e6:5c:ed:1c:52:ef:8c:77: 77:1d:62:90:ff:39:cf:4d:26:d9:76:04:a3:ca:26:e1:59:87: b7:79:cc:8c:0c:55:1a:47:40:ae:2e:2b:de:3b:bc:af:0e:79: 5b:10:94:cb:62:7c:07:e5:05:b3:bf:26:06:bb:09:20:86:aa: 0e:20:79:92 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pYvBmXhYqn6aanJmFaISMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlNTY2ZmZmNDA3ZjMxYzZhZTg1NmMzNzQzZWYzZTVmMjJm OGQzNWIwHhcNMjYwMTAyMTIxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTY2YTFmNjUwZDAyZjQwYTgyYzQ4MWFjMjZjZDFmMWQ4NzFjODA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1syh17hktZTZtAfIYQtquDN1OufU YUUVV40Ye+EZ9UFP1dV3E6R0YMx/umIrG4yj2qKpSZ0scp5c9jN/pX3Nj42XqJXt qk6yBuJB+wBsBnod8MCR2c7/P2uRzqPcwJkVZV9pC+ESN1qXarDdpKZWknYFv8da nbxcUkGTiByFC1Mgaq1dzePyVfM10AN4W92mgblmhA58ZgFEqugDsaCTSkciseea lBIF7YmZ3QZ5+RbFEHqb5s1Jg++IA44DzspolayJcUkyKe64IY1xTMjd4oGDHwmq u7oJJlrhpqEA479DswzkgmNdGrcPRW833LA3jI5NBZFbP/lnSUwJPv/XHQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNFmofZQ0C9AqCxIGsJs0fHYccgHMB8GA1UdIwQY MBaAFH5Wb/9AfzHGroVsN0PvPl8i+NNbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmxadl8wQl9NY2F1aFd3M1EtOC1YeUw0MDFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8wNDA1NjQtNTk1Mi00MjIzLWJjY2Et Zjg3NmMwNTVhMzE1LzEvMFdhaDlsRFFMMENvTEVnYXdtelI4ZGh4eUFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi8wNDA1NjQtNTk1Mi00MjIzLWJjY2EtZjg3NmMwNTVhMzE1 LzEvZmxadl8wQl9NY2F1aFd3M1EtOC1YeUw0MDFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuc6MMA0E AgACMAcDBQMqBKJAMA0GCSqGSIb3DQEBCwUAA4IBAQC54x2IHqtq2SLp8OGZQlFA Y0BTF5FmqMMQO+iCovyXZW3LZAsY8CG+43HiKQXFOjTtvd++4sq5Ov2kN+SbO/6Y ri3ZDyqP9hb0J2bHTk+QfZhepC4FxeGbfSf4ey5ztvZcrdLxyuWx6xVVQu/IosKy ueqep0aToUpvF5J0XDwLjHjGRa9+F+071DkPVFQkgr99HIFb6FmLkq4cjmlqlAtr RZfdmAix7X8TRFTxcwGwloJEgsJOLtLIrQ3p9Emk5lztHFLvjHd3HWKQ/znPTSbZ dgSjyibhWYe3ecyMDFUaR0CuLiveO7yvDnlbEJTLYnwH5QWzvyYGuwkghqoOIHmS -----END CERTIFICATE-----Generated at Mon Feb 9 20:03:21 2026 by rpki-client