This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/wzQ_1HuFlBCWtBgTiIg-4_ON4Ec.roa File: wzQ_1HuFlBCWtBgTiIg-4_ON4Ec.roa (raw, json) Hash identifier: Po5isFSJ0zw1oEwxSbVlxEIJ6Q1+V1FNWqf4intCsK4= Subject key identifier: C3:34:3F:D4:7B:85:94:10:96:B4:18:13:88:88:3E:E3:F3:8D:E0:47 Certificate issuer: /CN=921c4fda367c5383b15c2a7143ad4b10c955cea0 Certificate serial: 019B7AC8F7EBF54896CF9E8E2DC9B1A8F92C Authority key identifier: 92:1C:4F:DA:36:7C:53:83:B1:5C:2A:71:43:AD:4B:10:C9:55:CE:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khxP2jZ8U4OxXCpxQ61LEMlVzqA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/wzQ_1HuFlBCWtBgTiIg-4_ON4Ec.roa Signing time: Thu 01 Jan 2026 18:19:09 +0000 ROA not before: Thu 01 Jan 2026 18:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202680 IP address blocks: 185.152.104.0/22 maxlen: 22 2a07:8180::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.mft rsync://rpki.ripe.net/repository/DEFAULT/khxP2jZ8U4OxXCpxQ61LEMlVzqA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:f7:eb:f5:48:96:cf:9e:8e:2d:c9:b1:a8:f9:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=921c4fda367c5383b15c2a7143ad4b10c955cea0 Validity Not Before: Jan 1 18:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3343fd47b85941096b4181388883ee3f38de047 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d6:2f:f9:37:9e:ea:8e:d8:e3:ce:e9:db:42: 35:04:a4:66:df:3a:60:96:9d:2e:34:bd:62:eb:ef: 85:3d:94:cd:3b:3f:8e:ec:40:77:d5:e6:37:3d:ba: ee:b8:8e:0b:ba:ce:32:97:a2:a2:0a:fc:d6:54:99: b6:4b:e3:5d:d7:3d:64:6a:c8:64:67:6f:23:1c:65: ca:ae:1a:2c:22:aa:7a:a8:11:37:a5:bc:05:62:fa: 88:47:7d:fc:ed:a7:a8:78:5a:78:98:21:e4:07:88: 4a:a8:9e:6e:95:7d:a2:8e:4e:0b:67:f0:cb:a4:2c: 6e:35:13:93:2d:1e:59:22:15:10:bc:a9:31:38:e9: 98:5e:29:2f:2f:1a:8d:ac:72:63:2f:9b:3b:03:7b: 57:32:f2:ac:85:45:bd:87:6a:c7:02:ba:4f:62:eb: 5e:27:f3:be:1f:86:58:f5:59:ae:c8:12:9f:85:28: db:04:88:15:75:61:03:ff:92:4b:3a:15:08:bb:b8: 56:cf:c0:b2:e8:61:fb:a4:6a:55:44:18:94:9f:0c: 81:4f:24:75:66:f6:0c:b7:b4:d9:a4:83:45:15:95: 91:e2:41:9d:59:0d:62:19:38:4a:3f:9a:b7:b8:b6: a9:bc:5d:85:7f:b4:7c:d8:db:b8:8b:aa:cc:16:ec: 44:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:34:3F:D4:7B:85:94:10:96:B4:18:13:88:88:3E:E3:F3:8D:E0:47 X509v3 Authority Key Identifier: keyid:92:1C:4F:DA:36:7C:53:83:B1:5C:2A:71:43:AD:4B:10:C9:55:CE:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khxP2jZ8U4OxXCpxQ61LEMlVzqA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/wzQ_1HuFlBCWtBgTiIg-4_ON4Ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/3d6b1a-6d61-44b8-8cbb-23608f6ae2ea/1/khxP2jZ8U4OxXCpxQ61LEMlVzqA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.152.104.0/22 IPv6: 2a07:8180::/29 Signature Algorithm: sha256WithRSAEncryption ba:18:25:f7:fe:99:71:db:f4:2f:1c:bc:5e:4f:d1:c8:5c:90: e9:ce:3a:bb:1b:fd:0c:92:32:36:72:b6:6a:7c:e8:6a:77:c1: 76:b1:2a:58:86:13:9b:05:5e:b0:db:44:be:32:06:49:9b:9c: 8d:84:62:96:ed:8a:5d:d8:32:cc:04:a0:2e:2c:c6:c1:ba:7c: 3b:72:6f:0f:84:09:19:64:b9:a4:7f:11:05:be:57:77:3e:00: 8f:61:33:d9:9c:04:06:f1:7c:8b:69:05:6a:95:c8:14:65:a0: 56:cc:13:e2:03:1a:26:ea:0b:eb:72:32:91:0f:fe:31:0a:eb: a8:8c:a4:d5:9c:39:6c:01:61:7f:8e:f0:dd:94:2d:37:77:c3: fb:2d:5e:c1:c6:3b:04:18:52:2e:ae:e9:68:be:76:2f:d3:68: d9:46:1b:e6:be:5d:9a:61:e3:d6:5a:61:ce:52:d3:a8:31:dc: 6f:88:02:a7:ed:b1:a5:5e:8e:36:ef:66:94:2a:a9:15:83:c6: b8:4c:5e:c6:8f:82:d0:e5:4e:76:fe:e6:16:f4:97:54:f3:c7: 85:6c:3e:54:e1:3b:df:7b:a5:f8:c8:a7:02:c9:a7:d3:66:da: 93:19:81:b8:71:a1:ad:58:7a:cd:a6:80:df:46:ed:00:48:89: c5:77:b7:09 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6yPfr9UiWz56OLcmxqPksMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMWM0ZmRhMzY3YzUzODNiMTVjMmE3MTQzYWQ0YjEwYzk1 NWNlYTAwHhcNMjYwMTAxMTgxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzM0M2ZkNDdiODU5NDEwOTZiNDE4MTM4ODg4M2VlM2YzOGRlMDQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydYv+Tee6o7Y487p20I1BKRm3zpg lp0uNL1i6++FPZTNOz+O7EB31eY3PbruuI4Lus4yl6KiCvzWVJm2S+Nd1z1kashk Z28jHGXKrhosIqp6qBE3pbwFYvqIR3387aeoeFp4mCHkB4hKqJ5ulX2ijk4LZ/DL pCxuNROTLR5ZIhUQvKkxOOmYXikvLxqNrHJjL5s7A3tXMvKshUW9h2rHArpPYute J/O+H4ZY9VmuyBKfhSjbBIgVdWED/5JLOhUIu7hWz8Cy6GH7pGpVRBiUnwyBTyR1 ZvYMt7TZpINFFZWR4kGdWQ1iGThKP5q3uLapvF2Ff7R82Nu4i6rMFuxEPwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMM0P9R7hZQQlrQYE4iIPuPzjeBHMB8GA1UdIwQY MBaAFJIcT9o2fFODsVwqcUOtSxDJVc6gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2h4UDJqWjhVNE94WENweFE2MUxFTWxWenFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8zZDZiMWEtNmQ2MS00NGI4LThjYmIt MjM2MDhmNmFlMmVhLzEvd3pRXzFIdUZsQkNXdEJnVGlJZy00X09ONEVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8zZDZiMWEtNmQ2MS00NGI4LThjYmItMjM2MDhmNmFlMmVh LzEva2h4UDJqWjhVNE94WENweFE2MUxFTWxWenFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuZhoMA0E AgACMAcDBQMqB4GAMA0GCSqGSIb3DQEBCwUAA4IBAQC6GCX3/plx2/QvHLxeT9HI XJDpzjq7G/0MkjI2crZqfOhqd8F2sSpYhhObBV6w20S+MgZJm5yNhGKW7Ypd2DLM BKAuLMbBunw7cm8PhAkZZLmkfxEFvld3PgCPYTPZnAQG8XyLaQVqlcgUZaBWzBPi Axom6gvrcjKRD/4xCuuojKTVnDlsAWF/jvDdlC03d8P7LV7BxjsEGFIurulovnYv 02jZRhvmvl2aYePWWmHOUtOoMdxviAKn7bGlXo4272aUKqkVg8a4TF7Gj4LQ5U52 /uYW9JdU88eFbD5U4Tvfe6X4yKcCyafTZtqTGYG4caGtWHrNpoDfRu0ASInFd7cJ -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:44 2026 by rpki-client