This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/wei2lMo8q9Oih3ZxtpWj8_0QTO4.roa File: wei2lMo8q9Oih3ZxtpWj8_0QTO4.roa (raw, json) Hash identifier: UpSL27y5rGYgv1H6ulzZIZaQxNtw+XRx7ROQg2LBkb0= Subject key identifier: C1:E8:B6:94:CA:3C:AB:D3:A2:87:76:71:B6:95:A3:F3:FD:10:4C:EE Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019B797EBEA9CC7230F1B88933561797027A Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/wei2lMo8q9Oih3ZxtpWj8_0QTO4.roa Signing time: Thu 01 Jan 2026 12:18:28 +0000 ROA not before: Thu 01 Jan 2026 12:18:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14445 IP address blocks: 188.255.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:be:a9:cc:72:30:f1:b8:89:33:56:17:97:02:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 1 12:18:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1e8b694ca3cabd3a2877671b695a3f3fd104cee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fd:24:0a:4b:da:d4:63:5c:cb:41:51:be:bd: 7a:7b:ee:61:c8:1c:ac:36:89:b0:a3:db:13:4e:5a: 82:78:ad:8e:cc:6c:fd:bf:a3:17:0e:65:87:51:f0: 93:a4:8c:84:7e:f7:42:88:47:6d:4b:24:58:cf:9b: 7a:9d:e4:6c:36:58:72:7c:9d:93:08:bf:12:9d:f6: 50:01:a9:b0:ea:a0:42:f2:cd:01:7e:86:d5:5e:10: 25:e6:a5:31:5b:22:b4:3d:1e:78:6d:44:7a:fe:e4: 5d:7d:c1:9a:aa:27:ca:8e:90:1a:7f:9b:f4:f4:1b: 3a:d9:78:7d:79:a1:58:f5:0d:36:21:0a:15:a3:96: 98:97:7a:4a:91:a1:04:33:6a:5a:ec:02:fa:9d:76: 34:8b:c6:4a:59:3b:07:6d:27:7a:80:25:1c:8c:79: 00:9d:e4:8d:38:dd:4b:9a:b5:31:5d:27:6b:79:3d: bf:81:72:fd:f5:04:18:d8:7d:9f:d0:f3:40:8c:ea: 58:ef:8e:6d:d8:57:3e:12:72:6a:c9:cd:73:3b:61: 6b:a9:de:f0:d7:ed:cf:53:94:cd:b6:ee:de:c2:21: 5c:d9:b5:a7:66:e1:27:ce:98:d3:0b:6d:c4:64:63: b2:fa:cd:bf:74:d7:a1:09:c0:9c:4d:4c:bf:d2:6c: c0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E8:B6:94:CA:3C:AB:D3:A2:87:76:71:B6:95:A3:F3:FD:10:4C:EE X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/wei2lMo8q9Oih3ZxtpWj8_0QTO4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.255.230.0/24 Signature Algorithm: sha256WithRSAEncryption 25:f5:a8:2f:19:bf:7b:45:99:3b:71:06:ca:cb:0d:6f:de:44: 19:fc:c7:e6:4d:50:ae:9e:d8:ed:cc:9a:ec:c0:91:fd:a3:bb: cb:18:d1:bc:56:6f:6a:6d:4a:fd:d5:0a:b6:7c:3c:d5:46:72: 95:3f:f3:ee:ac:d4:cb:9c:5d:6a:d0:8b:e8:b2:fc:a2:d1:3b: 42:12:93:43:16:a2:26:a7:72:ef:80:df:58:00:01:c5:0a:af: 1b:c1:65:35:b9:d6:40:d7:38:76:dc:59:13:4e:39:d4:9d:d0: 2b:a3:82:fd:11:ad:e0:19:75:b4:25:79:f1:05:c8:fe:f3:52: 6e:87:5d:c3:b4:d4:78:59:56:59:e5:b3:a0:93:b6:0d:1d:ef: 85:68:7a:ce:99:5a:04:10:cc:15:5f:cd:f0:6e:ec:c4:af:99: 05:f9:37:9d:10:73:a6:7c:4e:ab:70:73:3a:d2:75:49:8d:cf: 20:fb:b8:28:84:d4:ab:10:25:18:5a:ed:e2:57:99:db:9d:83: 4f:5c:06:e3:d7:c8:64:24:d2:34:e1:4b:ab:cf:ed:98:65:63: 6a:b1:c7:aa:23:8c:f1:74:28:18:b7:2e:31:11:5d:84:4c:bb: c3:0f:50:e5:8e:7c:11:c9:28:0b:b4:ad:d8:43:29:1c:ea:dd: 08:88:66:6f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fr6pzHIw8biJM1YXlwJ6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTAxMTIxODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWU4YjY5NGNhM2NhYmQzYTI4Nzc2NzFiNjk1YTNmM2ZkMTA0Y2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/0kCkva1GNcy0FRvr16e+5hyBys Nomwo9sTTlqCeK2OzGz9v6MXDmWHUfCTpIyEfvdCiEdtSyRYz5t6neRsNlhyfJ2T CL8SnfZQAamw6qBC8s0BfobVXhAl5qUxWyK0PR54bUR6/uRdfcGaqifKjpAaf5v0 9Bs62Xh9eaFY9Q02IQoVo5aYl3pKkaEEM2pa7AL6nXY0i8ZKWTsHbSd6gCUcjHkA neSNON1LmrUxXSdreT2/gXL99QQY2H2f0PNAjOpY745t2Fc+EnJqyc1zO2Frqd7w 1+3PU5TNtu7ewiFc2bWnZuEnzpjTC23EZGOy+s2/dNehCcCcTUy/0mzAjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMHotpTKPKvTood2cbaVo/P9EEzuMB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvd2VpMmxNbzhxOU9paDNaeHRwV2o4XzBRVE80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvP/mMA0G CSqGSIb3DQEBCwUAA4IBAQAl9agvGb97RZk7cQbKyw1v3kQZ/MfmTVCuntjtzJrs wJH9o7vLGNG8Vm9qbUr91Qq2fDzVRnKVP/PurNTLnF1q0Ivosvyi0TtCEpNDFqIm p3LvgN9YAAHFCq8bwWU1udZA1zh23FkTTjnUndAro4L9Ea3gGXW0JXnxBcj+81Ju h13DtNR4WVZZ5bOgk7YNHe+FaHrOmVoEEMwVX83wbuzEr5kF+TedEHOmfE6rcHM6 0nVJjc8g+7gohNSrECUYWu3iV5nbnYNPXAbj18hkJNI04Uurz+2YZWNqsceqI4zx dCgYty4xEV2ETLvDD1DljnwRySgLtK3YQykc6t0IiGZv -----END CERTIFICATE-----Generated at Mon Jan 19 13:53:34 2026 by rpki-client