This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/cwpueJkAgwR--N1HcP66vBFBfHs.roa File: cwpueJkAgwR--N1HcP66vBFBfHs.roa (raw, json) Hash identifier: e4Ux6XpWYsR7DA/nLXViGlPPyLLw1PTyAUYLhKKvKpY= Subject key identifier: 73:0A:6E:78:99:00:83:04:7E:F8:DD:47:70:FE:BA:BC:11:41:7C:7B Certificate issuer: /CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd Certificate serial: 019B7BA4F64E2F564A5127B2A9EB4AC2BFE4 Authority key identifier: 9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/cwpueJkAgwR--N1HcP66vBFBfHs.roa Signing time: Thu 01 Jan 2026 22:19:27 +0000 ROA not before: Thu 01 Jan 2026 22:19:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198651 IP address blocks: 185.207.33.0/24 maxlen: 24 185.207.34.0/24 maxlen: 24 185.207.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:f6:4e:2f:56:4a:51:27:b2:a9:eb:4a:c2:bf:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd Validity Not Before: Jan 1 22:19:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=730a6e78990083047ef8dd4770febabc11417c7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c0:0f:29:a8:c1:fa:1e:56:09:94:cd:9c:8d: 57:29:89:bd:c9:a8:e6:87:55:01:5a:9a:ae:f3:39: f0:a6:01:fe:18:23:23:3c:d9:3c:fc:f3:4d:47:4b: b9:b1:2f:4f:b1:0d:2e:cb:ab:9f:80:ba:7d:e2:1c: 44:1a:87:be:da:66:c3:db:7c:af:42:a3:90:4f:27: 6b:df:87:40:79:1c:70:70:60:89:f8:56:e7:0d:66: 65:ce:61:bc:52:ab:fd:bd:4d:97:81:e6:ee:b5:16: a3:8f:62:82:3e:e2:8a:51:5c:3d:f1:9d:38:6f:6e: 69:ad:da:fd:48:3b:af:92:3f:b4:99:cf:a5:ed:48: ce:f0:b9:71:19:3d:59:04:b7:2e:0a:f2:de:00:62: c4:f6:42:03:fa:2f:c8:c8:bd:e8:ef:aa:4e:cd:cf: 5c:5b:44:a5:42:a2:1a:ac:ed:62:b5:47:37:e5:30: fe:d3:c1:05:30:30:0a:cf:e3:9a:09:3b:c6:65:05: f4:a0:b1:d3:89:c6:ba:f0:24:7c:d3:55:bb:af:f5: a4:51:2b:d3:7b:12:32:aa:13:48:72:1e:84:29:3c: 52:94:83:59:e4:a9:00:5f:25:da:47:70:8a:14:13: cb:21:b2:28:c3:4e:4a:3f:81:b8:fa:62:a4:67:d0: 61:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:0A:6E:78:99:00:83:04:7E:F8:DD:47:70:FE:BA:BC:11:41:7C:7B X509v3 Authority Key Identifier: keyid:9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/cwpueJkAgwR--N1HcP66vBFBfHs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.207.33.0-185.207.35.255 Signature Algorithm: sha256WithRSAEncryption 68:c1:72:8e:a7:3b:90:fb:51:17:8c:56:14:b0:48:8c:af:b3: f6:ed:b2:a3:79:39:70:d6:09:cc:07:31:b5:30:e9:91:c3:1c: d2:df:15:a4:f0:a1:71:f9:3c:aa:c0:ed:b8:6e:af:a8:00:f0: cb:07:8d:38:2b:64:25:f6:75:58:89:6e:d3:5f:6b:5b:c3:07: c0:58:b1:7b:5d:eb:39:64:d7:3e:7e:e5:1f:01:96:94:4f:0b: 04:a1:a4:b8:08:c9:f0:d0:43:d5:6e:ad:9a:62:5a:9d:cc:0f: 61:d6:0e:a2:ca:10:d2:2f:3c:6e:2d:0a:7d:63:b9:e5:e7:3c: e1:05:9c:94:ab:1e:45:b1:b1:f7:ed:28:2d:93:6d:7a:17:c9: 67:a3:38:4c:c0:e1:ac:f7:35:89:ea:bc:cc:20:e4:ae:39:c8: 40:4c:d9:7c:d8:36:cf:04:9f:71:5d:96:e7:c4:0a:54:21:77: 8d:d1:8c:9c:fd:29:b6:89:87:4f:52:ff:3f:7a:f4:19:19:2c: 0b:25:c4:54:a0:e0:23:b3:2c:9a:89:85:49:04:54:36:31:9c: db:db:af:62:c0:88:79:c8:2e:72:aa:08:0d:b3:f2:b9:85:dd: 4d:85:21:c0:e6:34:8a:de:e6:d9:fa:67:20:5f:9c:e1:84:ef: d6:fa:60:2d -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt7pPZOL1ZKUSeyqetKwr/kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkOWEwYzg0YjMwNzIwZjRkNGNlNGJkYmEwMWRkMDU0NGQw MjhlY2QwHhcNMjYwMTAxMjIxOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MzBhNmU3ODk5MDA4MzA0N2VmOGRkNDc3MGZlYmFiYzExNDE3YzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMAPKajB+h5WCZTNnI1XKYm9yajm h1UBWpqu8znwpgH+GCMjPNk8/PNNR0u5sS9PsQ0uy6ufgLp94hxEGoe+2mbD23yv QqOQTydr34dAeRxwcGCJ+FbnDWZlzmG8Uqv9vU2XgebutRajj2KCPuKKUVw98Z04 b25prdr9SDuvkj+0mc+l7UjO8LlxGT1ZBLcuCvLeAGLE9kID+i/IyL3o76pOzc9c W0SlQqIarO1itUc35TD+08EFMDAKz+OaCTvGZQX0oLHTica68CR801W7r/WkUSvT exIyqhNIch6EKTxSlINZ5KkAXyXaR3CKFBPLIbIow05KP4G4+mKkZ9BhqwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFHMKbniZAIMEfvjdR3D+urwRQXx7MB8GA1UdIwQY MBaAFJ2aDISzByD01M5L26Ad0FRNAo7NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblpvTWhMTUhJUFRVemt2Ym9CM1FWRTBDanMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8xZThkNGQtNTNiZi00YWNiLWJjMGMt NTJjYWQ2Njc1ZmM2LzEvY3dwdWVKa0Fnd1ItLU4xSGNQNjZ2QkZCZkhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8xZThkNGQtNTNiZi00YWNiLWJjMGMtNTJjYWQ2Njc1ZmM2 LzEvblpvTWhMTUhJUFRVemt2Ym9CM1FWRTBDanMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5zyED BAK5zyAwDQYJKoZIhvcNAQELBQADggEBAGjBco6nO5D7UReMVhSwSIyvs/btsqN5 OXDWCcwHMbUw6ZHDHNLfFaTwoXH5PKrA7bhur6gA8MsHjTgrZCX2dViJbtNfa1vD B8BYsXtd6zlk1z5+5R8BlpRPCwShpLgIyfDQQ9VurZpiWp3MD2HWDqLKENIvPG4t Cn1jueXnPOEFnJSrHkWxsfftKC2TbXoXyWejOEzA4az3NYnqvMwg5K45yEBM2XzY Ns8En3FdlufEClQhd43RjJz9KbaJh09S/z969BkZLAslxFSg4COzLJqJhUkEVDYx nNvbr2LAiHnILnKqCA2z8rmF3U2FIcDmNIre5tn6ZyBfnOGE79b6YC0= -----END CERTIFICATE-----Generated at Tue Jan 20 22:47:38 2026 by rpki-client