This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/AWc9W3f7WW6fRyUj-qew2yWym0Q.roa File: AWc9W3f7WW6fRyUj-qew2yWym0Q.roa (raw, json) Hash identifier: CKhXDKmYEvv2kevwS8ScaNP/c7Fe+e5j3kS5/wFaq50= Subject key identifier: 01:67:3D:5B:77:FB:59:6E:9F:47:25:23:FA:A7:B0:DB:25:B2:9B:44 Certificate issuer: /CN=c0eb668b735a1839374e48f79cb2436dbf417caa Certificate serial: 019B7A5AB55B7AC7636A2831FFBBCC800F0F Authority key identifier: C0:EB:66:8B:73:5A:18:39:37:4E:48:F7:9C:B2:43:6D:BF:41:7C:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/AWc9W3f7WW6fRyUj-qew2yWym0Q.roa Signing time: Thu 01 Jan 2026 16:18:43 +0000 ROA not before: Thu 01 Jan 2026 16:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200402 IP address blocks: 185.84.56.0/22 maxlen: 24 2a03:6ee0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.mft rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:b5:5b:7a:c7:63:6a:28:31:ff:bb:cc:80:0f:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0eb668b735a1839374e48f79cb2436dbf417caa Validity Not Before: Jan 1 16:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=01673d5b77fb596e9f472523faa7b0db25b29b44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:9c:9f:d3:73:be:39:ca:61:64:b7:b0:0f:d4: f7:2e:9b:4b:6a:3f:96:1a:1c:3d:5f:b0:c5:f3:97: df:15:e7:5e:00:44:69:95:26:45:09:1a:f0:04:eb: 3f:1d:d7:64:44:9a:8e:3d:7a:dd:44:7c:41:f6:f9: 08:57:bc:88:e7:da:58:7c:0a:43:84:a9:b5:c8:c7: 35:dc:3f:d1:b9:4a:31:22:c8:b0:90:75:ba:44:72: d9:0d:83:75:80:82:4d:39:93:8f:ca:0c:58:48:13: 58:93:b4:3c:b2:da:8d:cb:5a:b1:31:e6:53:23:84: 6f:70:49:f3:48:81:64:9f:ff:7b:98:5e:1a:38:ba: 68:9f:40:3f:b0:a9:cb:2d:d1:d6:70:d3:46:05:40: c5:c9:2c:4a:fb:e0:71:52:c5:09:8f:a8:d9:e7:ed: 97:73:01:c5:62:eb:10:2c:54:f2:d9:4a:01:fc:61: a8:3c:0e:cc:c8:b0:53:7a:13:73:f1:b4:95:ca:78: 1c:b2:af:6f:70:2b:a8:b2:53:52:a2:d2:1b:80:49: 61:46:8d:f8:40:57:8a:4e:3c:d0:ba:3d:69:81:61: c1:d2:7d:53:76:39:a1:a0:c4:9a:21:0b:26:ea:c3: 8c:f9:a0:2e:40:ef:35:ad:b3:e9:5c:86:78:7e:7d: f0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:67:3D:5B:77:FB:59:6E:9F:47:25:23:FA:A7:B0:DB:25:B2:9B:44 X509v3 Authority Key Identifier: keyid:C0:EB:66:8B:73:5A:18:39:37:4E:48:F7:9C:B2:43:6D:BF:41:7C:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/AWc9W3f7WW6fRyUj-qew2yWym0Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/68b521-c790-4957-9e52-2d26f1b56e20/1/wOtmi3NaGDk3Tkj3nLJDbb9BfKo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.84.56.0/22 IPv6: 2a03:6ee0::/32 Signature Algorithm: sha256WithRSAEncryption 21:4f:0b:3e:32:c9:6f:11:1f:b1:c1:09:9d:70:57:33:ed:57: ba:ae:4f:95:ad:76:f4:b7:d6:03:37:16:09:65:af:cb:f2:e3: b5:10:28:c3:76:f7:06:dd:6d:c8:5c:10:a4:ac:4e:4a:3f:63: 26:90:2a:7f:b5:75:09:c3:65:1e:af:08:fc:a4:73:80:c9:86: 56:60:34:84:a2:d3:7b:78:14:2c:42:b2:21:74:d3:e5:c0:a6: b3:96:60:60:e5:6e:01:c4:f9:1d:9c:1d:c3:88:a0:d2:16:08: 56:d0:c5:18:29:29:82:1e:c8:dc:7e:01:10:91:0c:91:8c:61: c9:57:60:24:03:98:49:74:73:a0:b8:9c:9f:fc:76:34:dc:1b: c4:53:a7:04:59:80:20:19:63:7d:89:29:0d:da:9e:64:26:98: a9:54:74:77:47:20:60:c0:c5:96:55:52:59:e1:9a:79:20:63: e8:66:66:0c:2b:09:5b:1b:82:63:85:79:9a:68:5a:ef:bb:65: 58:8f:9d:b9:86:59:48:6a:6f:50:43:46:f7:06:83:21:51:8d: 9a:2d:ba:0a:69:d3:9a:e6:8a:e4:5e:6e:93:05:c6:8a:91:5b: bb:af:13:71:36:94:4e:bc:a3:8c:e3:1d:d0:56:fa:2f:c9:82: f6:43:3b:a5 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6WrVbesdjaigx/7vMgA8PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMwZWI2NjhiNzM1YTE4MzkzNzRlNDhmNzljYjI0MzZkYmY0 MTdjYWEwHhcNMjYwMTAxMTYxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTY3M2Q1Yjc3ZmI1OTZlOWY0NzI1MjNmYWE3YjBkYjI1YjI5YjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5yf03O+OcphZLewD9T3LptLaj+W Ghw9X7DF85ffFedeAERplSZFCRrwBOs/HddkRJqOPXrdRHxB9vkIV7yI59pYfApD hKm1yMc13D/RuUoxIsiwkHW6RHLZDYN1gIJNOZOPygxYSBNYk7Q8stqNy1qxMeZT I4RvcEnzSIFkn/97mF4aOLpon0A/sKnLLdHWcNNGBUDFySxK++BxUsUJj6jZ5+2X cwHFYusQLFTy2UoB/GGoPA7MyLBTehNz8bSVyngcsq9vcCuoslNSotIbgElhRo34 QFeKTjzQuj1pgWHB0n1TdjmhoMSaIQsm6sOM+aAuQO81rbPpXIZ4fn3wGwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAFnPVt3+1lun0clI/qnsNslsptEMB8GA1UdIwQY MBaAFMDrZotzWhg5N05I95yyQ22/QXyqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd090bWkzTmFHRGszVGtqM25MSkRiYjlCZktvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC82OGI1MjEtYzc5MC00OTU3LTllNTIt MmQyNmYxYjU2ZTIwLzEvQVdjOVczZjdXVzZmUnlVai1xZXcyeVd5bTBRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC82OGI1MjEtYzc5MC00OTU3LTllNTItMmQyNmYxYjU2ZTIw LzEvd090bWkzTmFHRGszVGtqM25MSkRiYjlCZktvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVQ4MA0E AgACMAcDBQAqA27gMA0GCSqGSIb3DQEBCwUAA4IBAQAhTws+MslvER+xwQmdcFcz 7Ve6rk+VrXb0t9YDNxYJZa/L8uO1ECjDdvcG3W3IXBCkrE5KP2MmkCp/tXUJw2Ue rwj8pHOAyYZWYDSEotN7eBQsQrIhdNPlwKazlmBg5W4BxPkdnB3DiKDSFghW0MUY KSmCHsjcfgEQkQyRjGHJV2AkA5hJdHOguJyf/HY03BvEU6cEWYAgGWN9iSkN2p5k JpipVHR3RyBgwMWWVVJZ4Zp5IGPoZmYMKwlbG4JjhXmaaFrvu2VYj525hllIam9Q Q0b3BoMhUY2aLboKadOa5orkXm6TBcaKkVu7rxNxNpROvKOM4x3QVvovyYL2Qzul -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:23 2026 by rpki-client