This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/1-wan3b-ajvxmgxKzG2_bCriESyE.roa File: 1-wan3b-ajvxmgxKzG2_bCriESyE.roa (raw, json) Hash identifier: OT/P/yJmBbJTLWUNPmI1kEQL5s4kHqN1N19Q4ZEyjuw= Subject key identifier: FB:06:A7:DD:BF:9A:8E:FC:66:83:12:B3:1B:6F:DB:0A:B8:84:4B:21 Certificate issuer: /CN=6fdbbe7e978029c6ceaa557b4a76da68074311b1 Certificate serial: 019B7910EA9EC3F298BFE0402638FA9BF12D Authority key identifier: 6F:DB:BE:7E:97:80:29:C6:CE:AA:55:7B:4A:76:DA:68:07:43:11:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9u-fpeAKcbOqlV7SnbaaAdDEbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/1-wan3b-ajvxmgxKzG2_bCriESyE.roa Signing time: Thu 01 Jan 2026 10:18:30 +0000 ROA not before: Thu 01 Jan 2026 10:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197588 IP address blocks: 185.191.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.mft rsync://rpki.ripe.net/repository/DEFAULT/b9u-fpeAKcbOqlV7SnbaaAdDEbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:ea:9e:c3:f2:98:bf:e0:40:26:38:fa:9b:f1:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fdbbe7e978029c6ceaa557b4a76da68074311b1 Validity Not Before: Jan 1 10:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb06a7ddbf9a8efc668312b31b6fdb0ab8844b21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:01:13:80:bf:fa:7d:3a:07:73:7b:74:6d:05: c2:65:7e:33:bf:13:52:32:6c:69:7d:bc:18:de:82: bb:f3:6a:c5:ea:db:f4:26:7d:20:1f:a9:94:47:f2: 70:f2:34:9b:3e:a7:7c:2f:60:e9:d0:6e:bb:23:51: d5:89:1d:1c:74:4c:42:fd:7f:27:20:9e:bb:3f:c3: 32:c4:ae:5b:19:b1:21:38:d8:69:b2:09:17:04:79: 3f:4e:a2:80:87:d7:36:75:83:3c:a7:ba:19:5c:0c: 02:fa:24:80:dc:67:15:b3:4c:f8:b9:ba:33:be:4d: 50:eb:c2:f3:b2:e3:2e:88:3d:16:92:b6:5a:21:a2: e3:27:e4:3c:f6:2d:38:83:d1:40:b8:1a:3a:fa:eb: bb:d6:5a:e5:5b:80:22:ad:45:7b:26:89:92:9f:d5: 0d:96:9c:08:e1:64:dc:9e:e0:c2:91:10:ca:32:56: 69:0f:cb:ca:05:35:ec:fc:14:27:6e:34:fa:bb:1d: 73:ac:ed:5a:f5:c5:2f:89:63:64:61:22:81:e2:03: d8:77:e3:d6:37:f1:3a:e5:9a:2f:14:cf:77:bb:cd: 9e:4d:0b:58:e3:05:5e:da:a5:a7:9c:1a:41:6d:9d: 4e:89:84:02:54:18:70:33:4b:1d:4e:4f:2f:9d:9e: 55:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:06:A7:DD:BF:9A:8E:FC:66:83:12:B3:1B:6F:DB:0A:B8:84:4B:21 X509v3 Authority Key Identifier: keyid:6F:DB:BE:7E:97:80:29:C6:CE:AA:55:7B:4A:76:DA:68:07:43:11:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9u-fpeAKcbOqlV7SnbaaAdDEbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/1-wan3b-ajvxmgxKzG2_bCriESyE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/72a4e3-f793-4f9a-ba4e-0590394a2efa/1/b9u-fpeAKcbOqlV7SnbaaAdDEbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.191.244.0/23 Signature Algorithm: sha256WithRSAEncryption 68:d7:fa:3e:eb:e0:bb:66:de:8b:27:f3:95:25:f1:02:52:8c: ea:10:e0:d0:b0:21:e4:72:96:1f:14:c6:1d:46:0c:3b:03:62: 95:66:c5:32:f9:c1:ab:4e:2f:85:00:1f:f4:0a:ee:de:0a:de: 27:1f:5c:32:ed:c5:77:dc:80:62:ef:33:f3:4c:cc:ba:9d:23: 1b:34:01:22:68:c5:86:3e:ec:82:1b:2a:26:a7:ee:d9:20:fe: 8e:0a:27:53:ff:59:f6:6c:f8:be:65:9d:bb:2b:05:9b:e5:65: b9:72:07:03:e6:43:07:61:4b:32:93:1b:49:e8:83:27:32:ec: 23:43:2e:55:2f:91:2b:d3:e5:10:f2:2f:98:47:b3:e3:3a:e9: b7:1c:e7:27:06:21:c5:8c:bb:6d:c9:d3:94:d1:86:11:f0:22: ad:74:85:b0:bf:03:a9:88:af:e6:74:74:64:61:71:0a:12:47: 86:4d:25:b3:71:b4:3d:d6:cb:00:e8:30:7b:1c:ed:6b:d8:5a: f3:a1:8f:0a:c1:52:f8:1e:28:b2:73:0c:3f:42:36:d7:5f:5d: b7:b6:54:ef:b2:c4:ee:bd:c8:6a:d8:9c:3c:5a:2d:d4:e1:d8: 56:3e:ef:95:1f:5e:4d:7d:5e:0e:51:75:31:94:93:56:4b:29: 6f:5c:52:4a -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5EOqew/KYv+BAJjj6m/EtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmZGJiZTdlOTc4MDI5YzZjZWFhNTU3YjRhNzZkYTY4MDc0 MzExYjEwHhcNMjYwMTAxMTAxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjA2YTdkZGJmOWE4ZWZjNjY4MzEyYjMxYjZmZGIwYWI4ODQ0YjIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgETgL/6fToHc3t0bQXCZX4zvxNS MmxpfbwY3oK782rF6tv0Jn0gH6mUR/Jw8jSbPqd8L2Dp0G67I1HViR0cdExC/X8n IJ67P8MyxK5bGbEhONhpsgkXBHk/TqKAh9c2dYM8p7oZXAwC+iSA3GcVs0z4uboz vk1Q68LzsuMuiD0WkrZaIaLjJ+Q89i04g9FAuBo6+uu71lrlW4AirUV7JomSn9UN lpwI4WTcnuDCkRDKMlZpD8vKBTXs/BQnbjT6ux1zrO1a9cUviWNkYSKB4gPYd+PW N/E65ZovFM93u82eTQtY4wVe2qWnnBpBbZ1OiYQCVBhwM0sdTk8vnZ5VwQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPsGp92/mo78ZoMSsxtv2wq4hEshMB8GA1UdIwQY MBaAFG/bvn6XgCnGzqpVe0p22mgHQxGxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjl1LWZwZUFLY2JPcWxWN1NuYmFhQWRERWJFLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83MmE0ZTMtZjc5My00ZjlhLWJhNGUt MDU5MDM5NGEyZWZhLzEvMS13YW4zYi1hanZ4bWd4S3pHMl9iQ3JpRVN5RS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMGUvNzJhNGUzLWY3OTMtNGY5YS1iYTRlLTA1OTAzOTRhMmVm YS8xL2I5dS1mcGVBS2NiT3FsVjdTbmJhYUFkREViRS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAbm/9DAN BgkqhkiG9w0BAQsFAAOCAQEAaNf6Puvgu2beiyfzlSXxAlKM6hDg0LAh5HKWHxTG HUYMOwNilWbFMvnBq04vhQAf9Aru3greJx9cMu3Fd9yAYu8z80zMup0jGzQBImjF hj7sghsqJqfu2SD+jgonU/9Z9mz4vmWduysFm+VluXIHA+ZDB2FLMpMbSeiDJzLs I0MuVS+RK9PlEPIvmEez4zrptxznJwYhxYy7bcnTlNGGEfAirXSFsL8DqYiv5nR0 ZGFxChJHhk0ls3G0PdbLAOgwexzta9ha86GPCsFS+B4osnMMP0I2119dt7ZU77LE 7r3IaticPFot1OHYVj7vlR9eTX1eDlF1MZSTVkspb1xSSg== -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:34 2026 by rpki-client