This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/wTpGtpvYbgK_vun8v_p94uvYUWw.roa File: wTpGtpvYbgK_vun8v_p94uvYUWw.roa (raw, json) Hash identifier: MlwFMoA+ixOAYhXtfytpmcxvQgdxjqKkv8yoqTSG6+s= Subject key identifier: C1:3A:46:B6:9B:D8:6E:02:BF:BE:E9:FC:BF:FA:7D:E2:EB:D8:51:6C Certificate issuer: /CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346 Certificate serial: 019B7F152EEF58FCA9767612CBC05129053C Authority key identifier: 34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/wTpGtpvYbgK_vun8v_p94uvYUWw.roa Signing time: Fri 02 Jan 2026 14:20:53 +0000 ROA not before: Fri 02 Jan 2026 14:20:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 185.156.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:2e:ef:58:fc:a9:76:76:12:cb:c0:51:29:05:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34fe6b9d0cc1e7f6e16b2a46b42ca5e01c700346 Validity Not Before: Jan 2 14:20:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c13a46b69bd86e02bfbee9fcbffa7de2ebd8516c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0f:5a:fd:a2:5b:3b:01:a8:22:b0:49:31:23: ad:bd:66:04:1d:e2:29:9b:a1:28:df:c0:2a:94:20: f3:e3:35:03:4d:88:24:1e:cd:f6:f8:b5:35:6a:22: d0:5a:74:4f:49:2e:b6:9c:bd:a1:88:72:da:59:78: 41:7f:0f:2a:b4:20:fc:07:76:54:43:04:29:df:15: 53:51:02:b3:d4:e3:0c:4b:d8:fb:02:80:fc:e1:ff: 49:51:ae:c5:6a:a2:82:55:40:49:b4:04:78:57:19: f8:15:29:df:74:f8:4b:85:f8:51:76:30:fe:5b:dd: db:39:06:4f:6c:b4:3d:9e:ad:d6:0c:00:38:fe:57: 16:cc:bd:7e:bd:50:0e:2e:4e:c7:5b:4e:a6:3d:c2: 0f:b9:f1:38:fc:c3:03:0a:1b:47:e7:c0:88:28:3c: 2a:60:b1:21:b8:51:f5:11:fd:41:40:71:a5:e9:d9: c5:ba:62:3a:9f:ae:53:ac:1e:ea:55:ca:df:0c:63: a2:ce:22:ba:2d:d7:11:15:91:89:43:30:95:56:3d: 5b:80:32:d5:e0:0f:ab:5e:28:f8:dd:8f:25:70:28: 59:c0:07:98:0d:99:c8:5d:4d:6e:38:a6:4d:3c:f2: c3:24:0e:38:dc:55:12:64:53:b8:6a:c0:36:c9:38: 33:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:3A:46:B6:9B:D8:6E:02:BF:BE:E9:FC:BF:FA:7D:E2:EB:D8:51:6C X509v3 Authority Key Identifier: keyid:34:FE:6B:9D:0C:C1:E7:F6:E1:6B:2A:46:B4:2C:A5:E0:1C:70:03:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NP5rnQzB5_bhaypGtCyl4BxwA0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/wTpGtpvYbgK_vun8v_p94uvYUWw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/62df36-fd36-4baf-9d2e-118afed7a5ae/1/NP5rnQzB5_bhaypGtCyl4BxwA0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.156.16.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:5a:0b:3c:55:b4:8c:1e:ae:ca:e2:b4:b4:25:61:17:35:0d: 8c:39:40:2d:fa:fc:b0:a8:6d:18:0b:99:c6:f4:c1:ea:0e:e7: 44:81:08:2e:16:d0:64:5a:5e:67:94:8d:b4:42:06:f8:2a:2a: 19:22:df:c8:f0:32:6b:d0:af:c3:94:4b:7c:c2:bf:65:f8:cc: 2d:74:cb:af:0d:32:b0:16:e3:ae:11:82:15:c9:f9:ea:d7:9b: ce:25:82:df:50:40:f3:4f:c7:99:d4:82:0c:b8:cb:1c:18:87: c8:fa:56:3e:a7:5e:1b:0a:3a:df:59:30:0e:57:cd:0b:87:55: e0:34:67:c6:4b:30:00:ec:6a:0d:b3:9f:c3:b6:df:0a:b7:c9: fd:a9:f0:ca:88:8d:48:75:d5:0b:7e:82:22:b8:02:b7:68:4b: 2e:2f:e4:91:50:89:1d:24:e2:ed:50:80:92:13:fa:87:4a:80: cf:6c:a0:ec:19:fa:58:07:99:14:0e:9f:a5:41:ec:80:ff:39: bc:9c:6d:4b:a3:b8:98:6d:67:0b:ce:03:25:de:a8:82:10:d1: 61:91:ca:2a:a5:97:66:5a:56:0e:a1:4b:90:dd:99:6e:98:6a: 77:02:81:ba:44:81:00:e3:c4:e4:ed:b0:5a:37:be:d4:2a:0d: c4:da:a7:25 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FS7vWPypdnYSy8BRKQU8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0ZmU2YjlkMGNjMWU3ZjZlMTZiMmE0NmI0MmNhNWUwMWM3 MDAzNDYwHhcNMjYwMTAyMTQyMDUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTNhNDZiNjliZDg2ZTAyYmZiZWU5ZmNiZmZhN2RlMmViZDg1MTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzg9a/aJbOwGoIrBJMSOtvWYEHeIp m6Eo38AqlCDz4zUDTYgkHs32+LU1aiLQWnRPSS62nL2hiHLaWXhBfw8qtCD8B3ZU QwQp3xVTUQKz1OMMS9j7AoD84f9JUa7FaqKCVUBJtAR4Vxn4FSnfdPhLhfhRdjD+ W93bOQZPbLQ9nq3WDAA4/lcWzL1+vVAOLk7HW06mPcIPufE4/MMDChtH58CIKDwq YLEhuFH1Ef1BQHGl6dnFumI6n65TrB7qVcrfDGOiziK6LdcRFZGJQzCVVj1bgDLV 4A+rXij43Y8lcChZwAeYDZnIXU1uOKZNPPLDJA443FUSZFO4asA2yTgzCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFME6Rrab2G4Cv77p/L/6feLr2FFsMB8GA1UdIwQY MBaAFDT+a50Mwef24WsqRrQspeAccANGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlA1cm5RekI1X2JoYXlwR3RDeWw0Qnh3QTBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC82MmRmMzYtZmQzNi00YmFmLTlkMmUt MTE4YWZlZDdhNWFlLzEvd1RwR3RwdlliZ0tfdnVuOHZfcDk0dXZZVVd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC82MmRmMzYtZmQzNi00YmFmLTlkMmUtMTE4YWZlZDdhNWFl LzEvTlA1cm5RekI1X2JoYXlwR3RDeWw0Qnh3QTBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuZwQMA0G CSqGSIb3DQEBCwUAA4IBAQCMWgs8VbSMHq7K4rS0JWEXNQ2MOUAt+vywqG0YC5nG 9MHqDudEgQguFtBkWl5nlI20Qgb4KioZIt/I8DJr0K/DlEt8wr9l+MwtdMuvDTKw FuOuEYIVyfnq15vOJYLfUEDzT8eZ1IIMuMscGIfI+lY+p14bCjrfWTAOV80Lh1Xg NGfGSzAA7GoNs5/Dtt8Kt8n9qfDKiI1IddULfoIiuAK3aEsuL+SRUIkdJOLtUICS E/qHSoDPbKDsGfpYB5kUDp+lQeyA/zm8nG1Lo7iYbWcLzgMl3qiCENFhkcoqpZdm WlYOoUuQ3ZlumGp3AoG6RIEA48Tk7bBaN77UKg3E2qcl -----END CERTIFICATE-----Generated at Fri Jan 9 17:05:28 2026 by rpki-client