This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/W-sALm5q0yq3QnzfCn9zqwJqvaA.roa File: W-sALm5q0yq3QnzfCn9zqwJqvaA.roa (raw, json) Hash identifier: xnIdiawY8eAQvPvkfIlMj6UoPw+J3dJ14IvwIdndhxo= Subject key identifier: 5B:EB:00:2E:6E:6A:D3:2A:B7:42:7C:DF:0A:7F:73:AB:02:6A:BD:A0 Certificate issuer: /CN=9e55320077696944b1613c2e8c9c606a1e06eb79 Certificate serial: 019B7A5B40713981D180654F448439A32054 Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/W-sALm5q0yq3QnzfCn9zqwJqvaA.roa Signing time: Thu 01 Jan 2026 16:19:19 +0000 ROA not before: Thu 01 Jan 2026 16:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208972 IP address blocks: 185.233.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:40:71:39:81:d1:80:65:4f:44:84:39:a3:20:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79 Validity Not Before: Jan 1 16:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5beb002e6e6ad32ab7427cdf0a7f73ab026abda0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:9f:36:70:03:b8:cc:4e:e8:86:4c:2d:8a:43: 1b:d9:9b:14:d9:6c:62:db:d6:23:06:ef:ea:19:c3: 3c:8e:7a:98:03:09:fb:b6:22:13:ee:1a:de:04:ab: 49:e7:4b:00:a9:2e:23:8c:83:e7:6c:5a:47:13:fd: 57:4a:99:e2:92:74:42:e2:f6:f0:48:d6:21:fd:b5: 8e:6e:b1:a9:b6:e8:9d:65:c0:10:e9:43:ab:66:4f: bd:4b:72:52:e5:02:5e:72:44:cf:6b:16:cf:58:e8: 9d:f2:49:73:aa:9c:4a:f7:d6:53:9b:f5:97:42:6a: 27:6a:88:ea:0f:47:0d:93:75:e3:bc:b4:ab:27:36: 8b:f8:e3:ee:a2:4b:0d:f7:d7:38:28:43:d2:71:9d: 31:ff:7e:da:f3:26:07:6b:21:3d:f2:e0:8a:7b:e5: d2:9d:12:99:68:76:a8:f7:b1:2c:09:91:e8:aa:43: 05:9d:7f:9e:3e:61:ee:5e:4e:64:2e:28:3a:4d:01: c5:d7:d7:76:bd:8d:c6:13:56:00:7a:3f:a2:ce:4e: 38:bd:b4:a3:99:d3:a3:03:1b:f2:03:21:4b:14:a4: fc:d5:bb:fc:b4:26:1b:a5:d2:dc:67:72:af:4a:e8: 59:13:7a:72:11:55:d5:72:14:a5:7e:56:f5:0e:2e: 7f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:EB:00:2E:6E:6A:D3:2A:B7:42:7C:DF:0A:7F:73:AB:02:6A:BD:A0 X509v3 Authority Key Identifier: keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/W-sALm5q0yq3QnzfCn9zqwJqvaA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.233.244.0/24 Signature Algorithm: sha256WithRSAEncryption 53:af:98:2e:7d:32:a9:5e:a2:5b:57:d2:91:f3:bf:44:5b:8a: c6:ab:7a:e6:36:d3:b5:7b:ea:09:14:1e:07:62:3d:3a:3b:0a: f0:72:3b:6f:2a:c3:e7:8e:69:21:8b:98:b3:fb:cb:30:54:9d: 1b:19:cb:32:15:2f:59:13:00:e9:f9:e1:3e:85:45:63:c9:9d: c7:18:00:0e:e0:8a:57:22:22:00:8b:1c:36:5b:f9:4d:0a:0f: 3e:ff:88:63:eb:70:6e:a5:7a:5b:9d:6d:09:90:e9:a3:90:8e: 02:0c:4c:3e:fa:17:6b:c8:d6:ff:80:e7:41:40:9f:fe:94:23: 2d:ea:67:9f:f1:d1:1a:77:fa:c6:b9:fc:3c:26:5f:db:8d:52: ae:3a:a7:b4:69:51:9f:e2:70:84:86:dd:ce:d3:c9:53:eb:9d: 2a:26:00:2c:66:8b:90:34:f4:3e:b2:27:23:33:d7:e1:c9:65: 40:b2:bf:0e:d2:75:f6:d3:91:5e:0b:19:1c:83:be:4f:50:61: f4:b9:9e:64:76:01:3c:25:6a:f1:b3:2b:57:db:e5:0f:2e:54: a5:20:25:fb:9d:89:bd:f7:62:b7:ac:99:c8:54:63:ce:37:93: a3:e9:17:1e:d3:e0:c7:0a:2a:f4:f6:ac:89:e3:23:a9:da:7b: 02:9c:99:e0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W0BxOYHRgGVPRIQ5oyBUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNTUzMjAwNzc2OTY5NDRiMTYxM2MyZThjOWM2MDZhMWUw NmViNzkwHhcNMjYwMTAxMTYxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmViMDAyZTZlNmFkMzJhYjc0MjdjZGYwYTdmNzNhYjAyNmFiZGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZ82cAO4zE7ohkwtikMb2ZsU2Wxi 29YjBu/qGcM8jnqYAwn7tiIT7hreBKtJ50sAqS4jjIPnbFpHE/1XSpniknRC4vbw SNYh/bWObrGptuidZcAQ6UOrZk+9S3JS5QJeckTPaxbPWOid8klzqpxK99ZTm/WX QmonaojqD0cNk3XjvLSrJzaL+OPuoksN99c4KEPScZ0x/37a8yYHayE98uCKe+XS nRKZaHao97EsCZHoqkMFnX+ePmHuXk5kLig6TQHF19d2vY3GE1YAej+izk44vbSj mdOjAxvyAyFLFKT81bv8tCYbpdLcZ3KvSuhZE3pyEVXVchSlflb1Di5/YwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFvrAC5uatMqt0J83wp/c6sCar2gMB8GA1UdIwQY MBaAFJ5VMgB3aWlEsWE8LoycYGoeBut5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYt MWUwZThiOTA5ZTM0LzEvVy1zQUxtNXEweXEzUW56ZkNuOXpxd0pxdmFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC8yNjBiNjEtYTM0OC00ZDQ3LTkyZjYtMWUwZThiOTA5ZTM0 LzEvbmxVeUFIZHBhVVN4WVR3dWpKeGdhaDRHNjNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuen0MA0G CSqGSIb3DQEBCwUAA4IBAQBTr5gufTKpXqJbV9KR879EW4rGq3rmNtO1e+oJFB4H Yj06OwrwcjtvKsPnjmkhi5iz+8swVJ0bGcsyFS9ZEwDp+eE+hUVjyZ3HGAAO4IpX IiIAixw2W/lNCg8+/4hj63BupXpbnW0JkOmjkI4CDEw++hdryNb/gOdBQJ/+lCMt 6mef8dEad/rGufw8Jl/bjVKuOqe0aVGf4nCEht3O08lT650qJgAsZouQNPQ+sicj M9fhyWVAsr8O0nX205FeCxkcg75PUGH0uZ5kdgE8JWrxsytX2+UPLlSlICX7nYm9 92K3rJnIVGPON5Oj6Rce0+DHCir09qyJ4yOp2nsCnJng -----END CERTIFICATE-----Generated at Mon Jan 26 16:23:40 2026 by rpki-client