This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/23n3GD7-18kUBRmqMFSss5sO8WU.roa File: 23n3GD7-18kUBRmqMFSss5sO8WU.roa (raw, json) Hash identifier: q0BeEg3LVHGPx8X+vAOt4h7S1H5ho2VM4UMd50qBBcw= Subject key identifier: DB:79:F7:18:3E:FE:D7:C9:14:05:19:AA:30:54:AC:B3:9B:0E:F1:65 Certificate issuer: /CN=c28973affaa9936d39146aa136fbcb051b9af99f Certificate serial: 019B7C1355C902764C683E883C5865E63B04 Authority key identifier: C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/23n3GD7-18kUBRmqMFSss5sO8WU.roa Signing time: Fri 02 Jan 2026 00:20:00 +0000 ROA not before: Fri 02 Jan 2026 00:20:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51765 IP address blocks: 217.22.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.mft rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:55:c9:02:76:4c:68:3e:88:3c:58:65:e6:3b:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c28973affaa9936d39146aa136fbcb051b9af99f Validity Not Before: Jan 2 00:20:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=db79f7183efed7c9140519aa3054acb39b0ef165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3a:a2:ec:50:1d:97:e9:81:fe:19:e4:8b:3f: 8f:04:00:04:1b:fa:7c:f3:dd:b4:69:b1:e1:ff:2e: 19:26:c7:48:f0:30:31:0b:ea:a0:dd:a6:02:6c:70: da:9a:2a:11:a6:1e:e3:54:03:bf:4e:66:12:ad:5f: 59:82:0b:bc:2d:63:26:e0:01:c0:f3:e7:7c:eb:4e: 7f:3f:33:12:5c:b8:9f:8f:c5:ab:f0:b2:7c:3e:55: be:11:aa:e7:aa:5b:7c:05:97:0e:9a:ac:cc:ea:0e: 7b:ec:67:90:e1:19:81:cb:65:d7:1c:9f:f6:82:10: 31:73:3b:69:62:51:eb:e6:ec:96:ef:17:c8:5b:06: 83:43:51:99:84:95:61:4b:ec:36:ed:5c:ca:17:64: 6d:6b:63:88:3b:f2:ad:f1:dc:c2:8c:21:4d:c1:1f: 48:a4:d2:f4:9e:ff:d2:3f:15:a4:4d:94:99:a7:f5: a0:e6:da:98:ec:e0:b2:8f:09:51:9f:5a:27:66:b4: bb:94:d8:58:53:fd:61:98:00:a3:4a:6c:16:6f:7c: ef:33:8a:6a:9f:9c:13:ca:74:76:03:68:76:00:5e: f6:ee:59:f0:b1:e5:30:0f:eb:23:8c:2f:f9:1a:83: 4c:b5:18:35:b9:6e:4c:9f:c5:91:4e:80:8e:7a:41: 6a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:79:F7:18:3E:FE:D7:C9:14:05:19:AA:30:54:AC:B3:9B:0E:F1:65 X509v3 Authority Key Identifier: keyid:C2:89:73:AF:FA:A9:93:6D:39:14:6A:A1:36:FB:CB:05:1B:9A:F9:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wolzr_qpk205FGqhNvvLBRua-Z8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/23n3GD7-18kUBRmqMFSss5sO8WU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/a954bd-157f-4dbb-bba4-3463b56e372c/1/wolzr_qpk205FGqhNvvLBRua-Z8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.22.227.0/24 Signature Algorithm: sha256WithRSAEncryption 24:77:d2:b8:b4:d9:1d:52:11:5b:43:85:1a:dd:aa:3c:c0:26: a8:48:9f:02:4e:4a:72:72:85:ef:c0:b8:6a:05:f7:b1:9c:17: 4c:ca:59:39:80:c0:24:33:b7:d4:0c:7d:38:39:92:56:ab:15: bf:9b:78:c4:08:88:18:92:87:84:eb:93:8d:40:43:25:af:b6: 43:f9:ce:3e:ba:17:d6:4f:22:1f:8d:63:95:92:82:aa:8d:1f: 1c:26:a7:00:64:04:3e:14:99:d2:8f:e1:60:8e:e7:42:a3:7b: db:df:4a:4c:62:59:9a:88:b8:62:9b:80:39:12:a8:c0:b2:b8: b2:5f:b8:b1:b1:34:cc:82:39:65:f4:96:87:10:3d:5d:d6:72: 8a:da:dd:75:ff:ab:9a:9a:2a:e2:08:f7:fb:0d:b9:eb:6c:e2: 91:e4:d6:23:f9:27:27:f6:36:57:8f:06:95:c6:51:00:45:05: a1:15:f9:81:f7:0a:2a:b5:03:8f:80:08:e4:d6:a1:96:80:35: 88:ee:84:c0:50:51:68:23:8b:a8:86:56:f1:06:5f:e6:b7:f4: bb:d3:0c:d8:82:35:fb:76:ca:46:26:54:ef:36:24:5d:e4:b1: 3e:97:56:51:a4:d9:15:ab:4e:0c:39:26:4d:90:86:e4:25:56: 1c:8c:6f:cb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E1XJAnZMaD6IPFhl5jsEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyODk3M2FmZmFhOTkzNmQzOTE0NmFhMTM2ZmJjYjA1MWI5 YWY5OWYwHhcNMjYwMTAyMDAyMDAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYjc5ZjcxODNlZmVkN2M5MTQwNTE5YWEzMDU0YWNiMzliMGVmMTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDqi7FAdl+mB/hnkiz+PBAAEG/p8 8920abHh/y4ZJsdI8DAxC+qg3aYCbHDamioRph7jVAO/TmYSrV9Zggu8LWMm4AHA 8+d8605/PzMSXLifj8Wr8LJ8PlW+Earnqlt8BZcOmqzM6g577GeQ4RmBy2XXHJ/2 ghAxcztpYlHr5uyW7xfIWwaDQ1GZhJVhS+w27VzKF2Rta2OIO/Kt8dzCjCFNwR9I pNL0nv/SPxWkTZSZp/Wg5tqY7OCyjwlRn1onZrS7lNhYU/1hmACjSmwWb3zvM4pq n5wTynR2A2h2AF727lnwseUwD+sjjC/5GoNMtRg1uW5Mn8WRToCOekFqXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNt59xg+/tfJFAUZqjBUrLObDvFlMB8GA1UdIwQY MBaAFMKJc6/6qZNtORRqoTb7ywUbmvmfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd29senJfcXBrMjA1RkdxaE52dkxCUnVhLVo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9hOTU0YmQtMTU3Zi00ZGJiLWJiYTQt MzQ2M2I1NmUzNzJjLzEvMjNuM0dENy0xOGtVQlJtcU1GU3NzNXNPOFdVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS9hOTU0YmQtMTU3Zi00ZGJiLWJiYTQtMzQ2M2I1NmUzNzJj LzEvd29senJfcXBrMjA1RkdxaE52dkxCUnVhLVo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2RbjMA0G CSqGSIb3DQEBCwUAA4IBAQAkd9K4tNkdUhFbQ4Ua3ao8wCaoSJ8CTkpycoXvwLhq BfexnBdMylk5gMAkM7fUDH04OZJWqxW/m3jECIgYkoeE65ONQEMlr7ZD+c4+uhfW TyIfjWOVkoKqjR8cJqcAZAQ+FJnSj+FgjudCo3vb30pMYlmaiLhim4A5EqjAsriy X7ixsTTMgjll9JaHED1d1nKK2t11/6uamiriCPf7DbnrbOKR5NYj+Scn9jZXjwaV xlEARQWhFfmB9woqtQOPgAjk1qGWgDWI7oTAUFFoI4uohlbxBl/mt/S70wzYgjX7 dspGJlTvNiRd5LE+l1ZRpNkVq04MOSZNkIbkJVYcjG/L -----END CERTIFICATE-----Generated at Mon Jan 19 23:21:54 2026 by rpki-client