This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/W_PAmrwUdBQv2HWxrdSy6SHG4Mk.roa File: W_PAmrwUdBQv2HWxrdSy6SHG4Mk.roa (raw, json) Hash identifier: U5b72Zmh/JVyUJzYUod1+mwOGitj2M1nMBA9xsjmnOE= Subject key identifier: 5B:F3:C0:9A:BC:14:74:14:2F:D8:75:B1:AD:D4:B2:E9:21:C6:E0:C9 Certificate issuer: /CN=dd2496feff991276bd1b85336b7697a9800f84c1 Certificate serial: 019B7F8303B7CC600082D39588E9D5CE5B26 Authority key identifier: DD:24:96:FE:FF:99:12:76:BD:1B:85:33:6B:76:97:A9:80:0F:84:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/W_PAmrwUdBQv2HWxrdSy6SHG4Mk.roa Signing time: Fri 02 Jan 2026 16:20:51 +0000 ROA not before: Fri 02 Jan 2026 16:20:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207839 IP address blocks: 84.234.104.0/22 maxlen: 22 84.234.104.0/23 maxlen: 23 84.234.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.crl rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.mft rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:03:b7:cc:60:00:82:d3:95:88:e9:d5:ce:5b:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd2496feff991276bd1b85336b7697a9800f84c1 Validity Not Before: Jan 2 16:20:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5bf3c09abc1474142fd875b1add4b2e921c6e0c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b1:72:44:00:ce:9c:4c:e2:ad:01:f1:16:48: 3e:4a:31:9e:b9:6f:cd:6e:d6:f6:1e:32:fd:cd:2e: 63:ef:3d:49:0c:91:d0:fd:56:51:6c:21:92:3b:ab: a1:da:e2:1d:0a:7f:f8:bb:6e:7e:b3:00:b1:ff:34: fc:46:af:7a:6d:9d:12:ee:19:73:17:1d:9b:7b:75: 6d:ce:d5:bf:42:4d:7c:25:ad:23:8a:9c:cd:42:35: b0:db:53:89:a9:a5:36:0c:77:38:da:1a:5a:30:de: 95:10:60:5e:1c:70:bd:91:00:a4:72:aa:14:5d:cc: f7:26:64:a9:8c:e2:72:a0:c0:1a:b5:f7:77:8a:8a: b4:5d:fd:a4:4a:87:e4:17:c2:6b:f4:bc:7e:17:ea: 69:24:56:9c:dc:e6:24:c7:80:d1:f5:8b:ff:2b:62: 62:e9:63:15:1e:0c:73:78:bd:ec:2f:ab:b5:a5:51: a0:47:14:6d:fb:43:8e:a1:3f:70:3c:45:8c:8b:13: 4b:c1:ed:bc:36:4f:57:bc:43:19:17:28:c7:50:ce: b7:cb:c9:ea:78:dd:8b:b1:fc:8d:ce:5d:70:9c:43: 10:0f:16:51:81:72:78:c3:d0:86:f6:cb:af:ac:e1: b6:3e:25:b4:d4:53:ee:cd:0f:1d:e5:92:18:81:2f: a8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F3:C0:9A:BC:14:74:14:2F:D8:75:B1:AD:D4:B2:E9:21:C6:E0:C9 X509v3 Authority Key Identifier: keyid:DD:24:96:FE:FF:99:12:76:BD:1B:85:33:6B:76:97:A9:80:0F:84:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3SSW_v-ZEna9G4Uza3aXqYAPhME.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/W_PAmrwUdBQv2HWxrdSy6SHG4Mk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/46477a-8708-4b37-875b-670030dcac30/1/3SSW_v-ZEna9G4Uza3aXqYAPhME.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.234.104.0/22 Signature Algorithm: sha256WithRSAEncryption 81:10:10:ca:9a:68:1c:ab:22:3c:74:cd:e6:14:88:3d:be:eb: b8:61:34:60:8c:c6:49:91:3f:ed:4b:de:6e:67:d4:37:c6:bb: 4a:b0:b4:70:bb:00:92:91:61:69:33:28:29:b6:23:9c:8b:33: 4b:1a:ea:5c:f7:e5:2f:d4:ce:96:a4:19:03:7e:20:66:6b:ea: e9:60:21:2c:63:71:00:45:63:67:99:ae:2d:2f:88:a7:4f:de: 6f:d3:bf:17:4e:f9:6b:c1:e6:82:7b:27:72:dd:15:47:c8:e8: a8:cb:84:43:7e:6e:c5:85:0b:d6:47:f2:8a:88:d1:d5:2c:31: f4:7e:7d:10:de:0e:64:56:e3:3a:50:2f:22:fd:c7:91:30:ec: d5:f4:ce:06:89:8f:30:9b:1b:bc:12:13:ce:45:33:55:19:d4: a0:72:c9:79:bd:d6:49:14:44:86:b2:60:d8:da:7a:cc:49:79: 64:06:5a:cc:a6:7f:06:3e:32:46:5e:5c:53:85:30:49:39:03: 97:8f:2b:80:f4:b1:9b:03:9c:c3:4f:f8:07:69:8b:f3:7e:c7: df:f4:b9:73:ff:c7:08:aa:a5:7b:4a:00:8d:a0:d9:cc:e0:3b: 5b:72:03:32:bf:e1:36:6a:00:65:15:70:f6:68:91:c2:dd:fe: 23:42:0f:b2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gwO3zGAAgtOViOnVzlsmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkMjQ5NmZlZmY5OTEyNzZiZDFiODUzMzZiNzY5N2E5ODAw Zjg0YzEwHhcNMjYwMTAyMTYyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmYzYzA5YWJjMTQ3NDE0MmZkODc1YjFhZGQ0YjJlOTIxYzZlMGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsbFyRADOnEzirQHxFkg+SjGeuW/N btb2HjL9zS5j7z1JDJHQ/VZRbCGSO6uh2uIdCn/4u25+swCx/zT8Rq96bZ0S7hlz Fx2be3VtztW/Qk18Ja0jipzNQjWw21OJqaU2DHc42hpaMN6VEGBeHHC9kQCkcqoU Xcz3JmSpjOJyoMAatfd3ioq0Xf2kSofkF8Jr9Lx+F+ppJFac3OYkx4DR9Yv/K2Ji 6WMVHgxzeL3sL6u1pVGgRxRt+0OOoT9wPEWMixNLwe28Nk9XvEMZFyjHUM63y8nq eN2LsfyNzl1wnEMQDxZRgXJ4w9CG9suvrOG2PiW01FPuzQ8d5ZIYgS+oPwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFvzwJq8FHQUL9h1sa3UsukhxuDJMB8GA1UdIwQY MBaAFN0klv7/mRJ2vRuFM2t2l6mAD4TBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1NTV192LVpFbmE5RzRVemEzYVhxWUFQaE1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS80NjQ3N2EtODcwOC00YjM3LTg3NWIt NjcwMDMwZGNhYzMwLzEvV19QQW1yd1VkQlF2MkhXeHJkU3k2U0hHNE1rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS80NjQ3N2EtODcwOC00YjM3LTg3NWItNjcwMDMwZGNhYzMw LzEvM1NTV192LVpFbmE5RzRVemEzYVhxWUFQaE1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVOpoMA0G CSqGSIb3DQEBCwUAA4IBAQCBEBDKmmgcqyI8dM3mFIg9vuu4YTRgjMZJkT/tS95u Z9Q3xrtKsLRwuwCSkWFpMygptiOcizNLGupc9+Uv1M6WpBkDfiBma+rpYCEsY3EA RWNnma4tL4inT95v078XTvlrweaCeydy3RVHyOioy4RDfm7FhQvWR/KKiNHVLDH0 fn0Q3g5kVuM6UC8i/ceRMOzV9M4GiY8wmxu8EhPORTNVGdSgcsl5vdZJFESGsmDY 2nrMSXlkBlrMpn8GPjJGXlxThTBJOQOXjyuA9LGbA5zDT/gHaYvzfsff9Llz/8cI qqV7SgCNoNnM4DtbcgMyv+E2agBlFXD2aJHC3f4jQg+y -----END CERTIFICATE-----Generated at Mon Feb 9 22:17:17 2026 by rpki-client