This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/wUaSEcujq46XjAGKMjmbe-PCA2c.roa File: wUaSEcujq46XjAGKMjmbe-PCA2c.roa (raw, json) Hash identifier: iDnvgXNOGCFHMgs34cLFhiiuAQok9TTuwz4AWmow75Q= Subject key identifier: C1:46:92:11:CB:A3:AB:8E:97:8C:01:8A:32:39:9B:7B:E3:C2:03:67 Certificate issuer: /CN=16ac160da99b3494a56b547c68a8e2c0918691b5 Certificate serial: 019B7835352329340B84D47783ADA7FD06F7 Authority key identifier: 16:AC:16:0D:A9:9B:34:94:A5:6B:54:7C:68:A8:E2:C0:91:86:91:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/wUaSEcujq46XjAGKMjmbe-PCA2c.roa Signing time: Thu 01 Jan 2026 06:18:31 +0000 ROA not before: Thu 01 Jan 2026 06:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62223 IP address blocks: 185.42.192.0/22 maxlen: 22 185.42.192.0/24 maxlen: 24 185.42.193.0/24 maxlen: 24 185.42.194.0/24 maxlen: 24 185.42.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:35:23:29:34:0b:84:d4:77:83:ad:a7:fd:06:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16ac160da99b3494a56b547c68a8e2c0918691b5 Validity Not Before: Jan 1 06:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1469211cba3ab8e978c018a32399b7be3c20367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c5:9d:0d:a0:09:1a:30:b2:53:30:f3:95:c6: 1f:b0:15:78:16:de:c5:e0:e1:19:5e:19:ac:c0:3e: 56:b4:2f:a5:e7:c0:7b:f3:72:5f:08:5b:5b:e0:83: 7d:2f:78:6e:e4:5c:88:a6:20:f2:eb:cf:2a:2e:7c: a8:dd:9d:52:c1:a9:66:0a:a5:4e:e5:99:e8:31:10: 12:43:74:38:ec:ea:12:07:c9:06:b2:c4:d0:17:01: 05:3c:81:75:8f:dd:50:8b:f1:bf:d6:8a:52:80:19: 34:78:41:63:1d:63:29:f4:c1:d1:88:c8:89:3b:d5: 78:7b:f4:fa:f2:f7:d3:f8:6c:24:82:17:41:87:e0: 3f:28:43:f0:4b:b8:55:2d:d9:f4:88:5a:62:4a:9f: f4:f9:92:39:87:f7:d9:17:60:46:f1:0f:ba:6e:76: 06:cd:dd:20:dd:2c:33:b7:5a:a6:54:d4:d3:01:a9: 0f:65:8d:04:fc:5f:c6:d3:7b:ee:17:ef:1f:31:c8: 96:ca:ab:b6:d6:53:58:1b:7c:e6:9e:0c:ae:3b:6c: 88:46:7f:ca:9c:67:c1:bc:ed:d4:a2:ab:c4:ed:94: b3:08:42:d3:10:a2:81:4b:99:6a:56:fd:f4:6b:03: 19:19:b7:c9:b8:6b:22:9d:a8:00:3f:e0:78:89:32: 69:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:46:92:11:CB:A3:AB:8E:97:8C:01:8A:32:39:9B:7B:E3:C2:03:67 X509v3 Authority Key Identifier: keyid:16:AC:16:0D:A9:9B:34:94:A5:6B:54:7C:68:A8:E2:C0:91:86:91:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/wUaSEcujq46XjAGKMjmbe-PCA2c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.42.192.0/22 Signature Algorithm: sha256WithRSAEncryption 1c:a9:ea:f4:7d:3e:48:7b:fe:31:86:2b:5b:c7:99:b0:ed:3f: cd:5a:83:26:b3:bb:23:2d:33:3f:35:dc:81:89:e6:97:0e:49: f5:21:31:55:63:31:33:76:a9:03:7d:52:43:89:0b:b8:70:d4: 83:e0:db:ff:e5:ba:8b:14:6f:32:2e:72:1a:d2:02:3c:0e:fb: d6:b4:78:f3:84:b1:ee:b2:49:d6:dc:7d:56:3c:dc:64:db:a1: b3:4a:dd:75:16:ab:35:77:3b:02:03:46:c7:f9:e3:03:cd:0d: 2d:a4:72:cd:ed:1f:db:3b:66:bb:f4:a9:45:6e:e8:3f:e8:f9: f6:2e:4a:de:a3:c7:4b:28:1c:ac:5f:09:71:9c:d7:11:7b:fc: 8f:ef:a5:60:62:dc:e8:22:3e:8b:28:41:8d:1c:76:f8:7a:5f: d5:da:df:cf:00:79:9c:95:9f:3d:64:cd:e2:a6:a6:94:ce:82: b5:bb:56:9a:c4:d2:22:77:5b:40:27:a8:79:ee:af:73:39:e1: 98:60:ca:eb:00:49:3f:93:09:99:a9:66:80:f3:2f:aa:ca:cc: ce:c4:d2:11:f4:ee:7d:b7:39:3d:d3:1b:f6:7f:53:eb:b2:c0: 30:5e:b7:e1:1d:6c:aa:f4:3e:b0:c6:b0:d6:16:72:50:fe:ee: ca:b7:35:13 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NTUjKTQLhNR3g62n/Qb3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2YWMxNjBkYTk5YjM0OTRhNTZiNTQ3YzY4YThlMmMwOTE4 NjkxYjUwHhcNMjYwMTAxMDYxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTQ2OTIxMWNiYTNhYjhlOTc4YzAxOGEzMjM5OWI3YmUzYzIwMzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMWdDaAJGjCyUzDzlcYfsBV4Ft7F 4OEZXhmswD5WtC+l58B783JfCFtb4IN9L3hu5FyIpiDy688qLnyo3Z1SwalmCqVO 5ZnoMRASQ3Q47OoSB8kGssTQFwEFPIF1j91Qi/G/1opSgBk0eEFjHWMp9MHRiMiJ O9V4e/T68vfT+GwkghdBh+A/KEPwS7hVLdn0iFpiSp/0+ZI5h/fZF2BG8Q+6bnYG zd0g3Swzt1qmVNTTAakPZY0E/F/G03vuF+8fMciWyqu21lNYG3zmngyuO2yIRn/K nGfBvO3UoqvE7ZSzCELTEKKBS5lqVv30awMZGbfJuGsinagAP+B4iTJptQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMFGkhHLo6uOl4wBijI5m3vjwgNnMB8GA1UdIwQY MBaAFBasFg2pmzSUpWtUfGio4sCRhpG1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnF3V0RhbWJOSlNsYTFSOGFLaml3SkdHa2JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8wZjQ5NzMtNjBiZi00Mzg2LTk3YTYt MWU2OTEyNjg5ZGQ4LzEvd1VhU0VjdWpxNDZYakFHS01qbWJlLVBDQTJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8wZjQ5NzMtNjBiZi00Mzg2LTk3YTYtMWU2OTEyNjg5ZGQ4 LzEvRnF3V0RhbWJOSlNsYTFSOGFLaml3SkdHa2JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuSrAMA0G CSqGSIb3DQEBCwUAA4IBAQAcqer0fT5Ie/4xhitbx5mw7T/NWoMms7sjLTM/NdyB ieaXDkn1ITFVYzEzdqkDfVJDiQu4cNSD4Nv/5bqLFG8yLnIa0gI8DvvWtHjzhLHu sknW3H1WPNxk26GzSt11Fqs1dzsCA0bH+eMDzQ0tpHLN7R/bO2a79KlFbug/6Pn2 Lkreo8dLKBysXwlxnNcRe/yP76VgYtzoIj6LKEGNHHb4el/V2t/PAHmclZ89ZM3i pqaUzoK1u1aaxNIid1tAJ6h57q9zOeGYYMrrAEk/kwmZqWaA8y+qyszOxNIR9O59 tzk90xv2f1PrssAwXrfhHWyq9D6wxrDWFnJQ/u7KtzUT -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:17 2026 by rpki-client