This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/w-vsZluT0kZh5IKRYyErUh6E-YI.roa File: w-vsZluT0kZh5IKRYyErUh6E-YI.roa (raw, json) Hash identifier: vQYBg15m1Mue8LpyOtOXWxkLMHHfT9+KR8TqZPcjtHU= Subject key identifier: C3:EB:EC:66:5B:93:D2:46:61:E4:82:91:63:21:2B:52:1E:84:F9:82 Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Certificate serial: 019B7A5B3003BE17B15CF73BBCB1CD0F083D Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/w-vsZluT0kZh5IKRYyErUh6E-YI.roa Signing time: Thu 01 Jan 2026 16:19:15 +0000 ROA not before: Thu 01 Jan 2026 16:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48806 IP address blocks: 31.222.252.0/24 maxlen: 24 37.72.134.0/24 maxlen: 24 62.3.22.0/24 maxlen: 24 62.204.39.0/24 maxlen: 24 91.242.251.0/24 maxlen: 24 91.246.35.0/24 maxlen: 24 109.107.151.0/24 maxlen: 24 146.19.46.0/24 maxlen: 24 146.19.66.0/24 maxlen: 24 146.19.153.0/24 maxlen: 24 146.19.158.0/24 maxlen: 24 176.126.125.0/24 maxlen: 24 185.76.148.0/24 maxlen: 24 193.3.163.0/24 maxlen: 24 193.3.186.0/24 maxlen: 24 193.35.229.0/24 maxlen: 24 194.104.133.0/24 maxlen: 24 212.18.123.0/24 maxlen: 24 212.23.194.0/24 maxlen: 24 217.114.33.0/24 maxlen: 24 217.114.36.0/24 maxlen: 24 217.119.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:30:03:be:17:b1:5c:f7:3b:bc:b1:cd:0f:08:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664 Validity Not Before: Jan 1 16:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3ebec665b93d24661e4829163212b521e84f982 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ed:4d:6b:e8:4a:7e:f0:7a:38:37:30:fb:5e: 9a:ba:c0:14:85:1e:57:31:23:b2:e9:fc:8a:59:6d: 26:64:b4:b2:f5:66:b1:c6:8f:d9:b1:91:0d:5c:3b: b8:f7:fa:87:ec:5b:48:a5:50:1c:ac:a4:6d:d4:88: cf:89:f6:cb:a1:5f:67:db:a5:a1:e9:af:7f:7c:57: 06:f9:60:90:6c:f6:fd:05:b8:81:6e:00:2d:12:30: 2b:1a:69:c4:a9:f6:d5:88:b5:85:25:79:b5:7b:e9: e2:9d:de:e2:6c:10:3b:ae:09:ed:39:dc:af:fd:77: b2:7f:ca:07:15:48:c0:fa:87:0c:31:dc:49:87:63: 22:88:82:86:67:1e:ee:ec:1f:9c:a7:f8:86:61:7e: 37:f6:c9:bc:f2:b9:ff:d4:6b:f2:e4:24:cd:58:9c: 05:b4:56:84:22:58:4a:c8:f7:70:e5:60:1b:e3:39: ca:34:f2:29:f0:d2:d5:2f:0e:31:ec:57:af:3e:72: 97:30:a7:f1:ea:3c:0a:2d:e3:08:05:bd:3f:38:f8: 60:aa:aa:15:d3:8f:62:25:a4:cd:1d:01:69:88:7b: 53:ca:17:8d:16:89:42:1c:a3:d8:8e:5f:85:8d:48: f7:39:f3:a4:b1:8d:88:ed:6c:f2:71:07:ce:2c:be: 0c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:EB:EC:66:5B:93:D2:46:61:E4:82:91:63:21:2B:52:1E:84:F9:82 X509v3 Authority Key Identifier: keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/w-vsZluT0kZh5IKRYyErUh6E-YI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.222.252.0/24 37.72.134.0/24 62.3.22.0/24 62.204.39.0/24 91.242.251.0/24 91.246.35.0/24 109.107.151.0/24 146.19.46.0/24 146.19.66.0/24 146.19.153.0/24 146.19.158.0/24 176.126.125.0/24 185.76.148.0/24 193.3.163.0/24 193.3.186.0/24 193.35.229.0/24 194.104.133.0/24 212.18.123.0/24 212.23.194.0/24 217.114.33.0/24 217.114.36.0/24 217.119.133.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:b8:f7:bf:61:42:d4:7e:8f:bb:c2:51:3c:ba:78:0a:74:6f: 5a:23:94:57:3a:04:05:24:dd:00:eb:10:48:cc:eb:25:68:e8: b0:2c:f5:08:87:0a:59:72:ac:c5:0c:76:9f:0b:28:6d:20:97: 32:b5:4b:b6:a9:44:82:0f:d0:9f:5c:38:7f:49:a2:3d:cc:44: 03:03:05:82:ce:e6:42:7f:ec:be:cc:70:76:a1:81:32:2d:5b: 26:e6:97:ec:e4:0e:ec:30:40:84:0e:f5:d0:dd:5f:5d:5f:a2: d0:d0:c1:a5:75:1e:78:a0:74:34:de:ca:37:38:dc:08:c1:39: 7f:1f:5a:22:c0:bf:dc:14:02:22:d9:fc:3c:15:52:27:fe:c5: 83:6d:c4:52:b5:fc:a7:89:98:49:96:e8:73:61:39:bc:18:1d: a2:80:22:57:5a:0e:91:f9:dd:6d:8c:66:69:f8:90:52:70:87: 14:ee:ca:28:d9:3e:ea:ac:94:6a:db:6e:40:33:3f:5b:b5:53: 61:30:69:79:db:bb:12:e4:bc:cf:1d:32:a5:4e:da:4e:ff:c4: 6a:26:2d:ca:11:51:62:59:32:9b:5c:28:aa:b3:cf:b2:ad:38: 22:51:ba:b7:26:77:52:2c:1c:28:f5:e8:7c:05:8b:22:9c:a7: 01:3d:b9:d7 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgISAZt6WzADvhexXPc7vLHNDwg9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl NzM2NjQwHhcNMjYwMTAxMTYxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjM2ViZWM2NjViOTNkMjQ2NjFlNDgyOTE2MzIxMmI1MjFlODRmOTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiO1Na+hKfvB6ODcw+16ausAUhR5X MSOy6fyKWW0mZLSy9Waxxo/ZsZENXDu49/qH7FtIpVAcrKRt1IjPifbLoV9n26Wh 6a9/fFcG+WCQbPb9BbiBbgAtEjArGmnEqfbViLWFJXm1e+nind7ibBA7rgntOdyv /Xeyf8oHFUjA+ocMMdxJh2MiiIKGZx7u7B+cp/iGYX439sm88rn/1Gvy5CTNWJwF tFaEIlhKyPdw5WAb4znKNPIp8NLVLw4x7FevPnKXMKfx6jwKLeMIBb0/OPhgqqoV 049iJaTNHQFpiHtTyheNFolCHKPYjl+FjUj3OfOksY2I7WzycQfOLL4MHwIDAQAB o4ICjDCCAogwHQYDVR0OBBYEFMPr7GZbk9JGYeSCkWMhK1IehPmCMB8GA1UdIwQY MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt OGMxNTM5NjViYWM5LzEvdy12c1psdVQwa1poNUlLUll5RXJVaDZFLVlJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5 LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGhBggrBgEFBQcBBwEB/wSBkTCBjjCBiwQCAAEwgYQDBAAf 3vwDBAAlSIYDBAA+AxYDBAA+zCcDBABb8vsDBABb9iMDBABta5cDBACSEy4DBACS E0IDBACSE5kDBACSE54DBACwfn0DBAC5TJQDBADBA6MDBADBA7oDBADBI+UDBADC aIUDBADUEnsDBADUF8IDBADZciEDBADZciQDBADZd4UwDQYJKoZIhvcNAQELBQAD ggEBAGu4979hQtR+j7vCUTy6eAp0b1ojlFc6BAUk3QDrEEjM6yVo6LAs9QiHClly rMUMdp8LKG0glzK1S7apRIIP0J9cOH9Joj3MRAMDBYLO5kJ/7L7McHahgTItWybm l+zkDuwwQIQO9dDdX11fotDQwaV1HnigdDTeyjc43AjBOX8fWiLAv9wUAiLZ/DwV Uif+xYNtxFK1/KeJmEmW6HNhObwYHaKAIldaDpH53W2MZmn4kFJwhxTuyijZPuqs lGrbbkAzP1u1U2EwaXnbuxLkvM8dMqVO2k7/xGomLcoRUWJZMptcKKqzz7KtOCJR urcmd1IsHCj16HwFiyKcpwE9udc= -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:41 2026 by rpki-client