This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/W3MdpZwq4nd-n5ES7yDiCOVHqpo.roa File: W3MdpZwq4nd-n5ES7yDiCOVHqpo.roa (raw, json) Hash identifier: 8BK9ZS1JvVx0ZUCH1KW40WgG0466nVGYcl484oqJH48= Subject key identifier: 5B:73:1D:A5:9C:2A:E2:77:7E:9F:91:12:EF:20:E2:08:E5:47:AA:9A Certificate issuer: /CN=ac328756dece8f29f97f41b81a087db524e159b7 Certificate serial: 019B7A5AD4DAB01A1922D55BD357158E8D55 Authority key identifier: AC:32:87:56:DE:CE:8F:29:F9:7F:41:B8:1A:08:7D:B5:24:E1:59:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/W3MdpZwq4nd-n5ES7yDiCOVHqpo.roa Signing time: Thu 01 Jan 2026 16:18:51 +0000 ROA not before: Thu 01 Jan 2026 16:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212130 IP address blocks: 193.163.149.0/24 maxlen: 24 2a10:af80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.crl rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.mft rsync://rpki.ripe.net/repository/DEFAULT/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:d4:da:b0:1a:19:22:d5:5b:d3:57:15:8e:8d:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac328756dece8f29f97f41b81a087db524e159b7 Validity Not Before: Jan 1 16:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b731da59c2ae2777e9f9112ef20e208e547aa9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:60:22:f1:7a:0e:6c:cb:a7:dd:02:5b:0e:18: 1b:55:b3:fc:cc:db:ba:0f:53:a5:74:59:c3:f2:86: cc:27:a2:e0:57:83:3d:7f:b5:29:95:74:ef:f7:4f: 1b:b4:63:27:00:61:fb:f1:14:92:1e:45:83:40:a3: 44:18:50:44:5a:33:d7:c8:b0:52:6b:a8:83:24:e6: eb:47:4a:6a:c0:21:91:25:44:4c:11:65:bb:ae:0c: b4:06:75:2b:bd:16:24:91:d7:c7:c2:42:42:35:00: 97:63:8c:df:38:22:a1:a5:1e:ff:e6:1d:fb:09:62: e5:75:45:4b:cb:6e:f0:cf:d7:37:11:68:e8:76:6b: 68:13:35:6a:b9:d4:bc:0f:90:f8:1e:91:46:1e:57: b0:dd:28:31:d2:c0:e4:1b:73:49:e5:19:e6:91:36: 61:bd:9c:7b:2e:6c:d9:ba:be:fd:b1:5a:5f:2c:5f: 12:27:ba:bd:6a:ad:03:97:8b:f6:f0:bc:8e:73:65: 68:b5:50:5b:b4:d9:58:23:01:dd:b5:92:53:67:19: 25:12:ae:0f:b3:74:09:26:c6:cb:2a:4a:e2:6f:02: 88:31:ca:bd:09:40:d4:f8:66:cc:70:bc:f2:13:f4: 3a:5d:1f:9e:13:de:26:83:35:ff:60:d0:bf:f2:e0: 81:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:73:1D:A5:9C:2A:E2:77:7E:9F:91:12:EF:20:E2:08:E5:47:AA:9A X509v3 Authority Key Identifier: keyid:AC:32:87:56:DE:CE:8F:29:F9:7F:41:B8:1A:08:7D:B5:24:E1:59:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/W3MdpZwq4nd-n5ES7yDiCOVHqpo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/fb78ad-918e-44c2-9501-024ad4fb3708/1/rDKHVt7Ojyn5f0G4Ggh9tSThWbc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.163.149.0/24 IPv6: 2a10:af80::/32 Signature Algorithm: sha256WithRSAEncryption 7a:dc:db:7d:89:1b:81:77:d1:46:23:5c:ce:48:22:02:04:26: 43:99:d3:35:be:80:37:3c:fd:75:ad:43:a2:64:d8:27:fb:08: 42:24:aa:84:52:fb:88:74:16:95:3d:26:c9:d7:54:5c:3d:10: 8c:2f:6d:30:81:c2:a9:45:92:ce:fe:9e:69:a0:36:f8:67:7e: a0:fb:b5:2c:e1:01:94:00:b6:83:71:d3:1c:9b:23:d3:48:e1: 13:38:b8:ee:54:82:3c:30:72:77:7a:99:6e:73:02:1c:15:d2: fe:64:13:8b:c4:5b:59:08:3d:01:ac:c6:1e:a7:66:6a:20:02: 42:9c:e3:07:25:16:62:0d:76:6a:46:f5:ce:64:73:c3:0b:41: 77:40:df:ec:e7:6c:10:60:8e:0d:f2:06:1f:14:4c:3b:bc:f8: 65:70:57:3d:5d:7c:cd:b0:23:f7:cc:49:39:83:9c:e2:e1:0c: b6:76:7e:bb:53:d1:71:2a:dc:78:ed:66:2d:70:60:ec:03:77: 70:d1:48:e8:30:11:29:2b:c8:6e:e5:15:c6:23:a5:30:41:0d: dc:5c:4e:a1:bb:0b:f5:01:18:3c:66:c4:b4:90:5e:16:76:d5: 53:29:0d:47:aa:56:e1:3c:3e:1d:3b:4d:27:06:4b:2e:ed:03: af:f6:9c:1e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6WtTasBoZItVb01cVjo1VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjMzI4NzU2ZGVjZThmMjlmOTdmNDFiODFhMDg3ZGI1MjRl MTU5YjcwHhcNMjYwMTAxMTYxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjczMWRhNTljMmFlMjc3N2U5ZjkxMTJlZjIwZTIwOGU1NDdhYTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGAi8XoObMun3QJbDhgbVbP8zNu6 D1OldFnD8obMJ6LgV4M9f7UplXTv908btGMnAGH78RSSHkWDQKNEGFBEWjPXyLBS a6iDJObrR0pqwCGRJURMEWW7rgy0BnUrvRYkkdfHwkJCNQCXY4zfOCKhpR7/5h37 CWLldUVLy27wz9c3EWjodmtoEzVqudS8D5D4HpFGHlew3Sgx0sDkG3NJ5RnmkTZh vZx7LmzZur79sVpfLF8SJ7q9aq0Dl4v28LyOc2VotVBbtNlYIwHdtZJTZxklEq4P s3QJJsbLKkribwKIMcq9CUDU+GbMcLzyE/Q6XR+eE94mgzX/YNC/8uCBbQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFtzHaWcKuJ3fp+REu8g4gjlR6qaMB8GA1UdIwQY MBaAFKwyh1bezo8p+X9BuBoIfbUk4Vm3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckRLSFZ0N09qeW41ZjBHNEdnaDl0U1RoV2JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mYjc4YWQtOTE4ZS00NGMyLTk1MDEt MDI0YWQ0ZmIzNzA4LzEvVzNNZHBad3E0bmQtbjVFUzd5RGlDT1ZIcXBvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9mYjc4YWQtOTE4ZS00NGMyLTk1MDEtMDI0YWQ0ZmIzNzA4 LzEvckRLSFZ0N09qeW41ZjBHNEdnaDl0U1RoV2JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwaOVMA0E AgACMAcDBQAqEK+AMA0GCSqGSIb3DQEBCwUAA4IBAQB63Nt9iRuBd9FGI1zOSCIC BCZDmdM1voA3PP11rUOiZNgn+whCJKqEUvuIdBaVPSbJ11RcPRCML20wgcKpRZLO /p5poDb4Z36g+7Us4QGUALaDcdMcmyPTSOETOLjuVII8MHJ3eplucwIcFdL+ZBOL xFtZCD0BrMYep2ZqIAJCnOMHJRZiDXZqRvXOZHPDC0F3QN/s52wQYI4N8gYfFEw7 vPhlcFc9XXzNsCP3zEk5g5zi4Qy2dn67U9FxKtx47WYtcGDsA3dw0UjoMBEpK8hu 5RXGI6UwQQ3cXE6huwv1ARg8ZsS0kF4WdtVTKQ1HqlbhPD4dO00nBksu7QOv9pwe -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:26 2026 by rpki-client