This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/w8agfRL1GVHiUSL4QR-4AfJIyKQ.roa File: w8agfRL1GVHiUSL4QR-4AfJIyKQ.roa (raw, json) Hash identifier: hBE3KCvCu5YG/sDO5HAFViDYI0rH255FlChKrGnbX6E= Subject key identifier: C3:C6:A0:7D:12:F5:19:51:E2:51:22:F8:41:1F:B8:01:F2:48:C8:A4 Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d Certificate serial: 019B77C7403B967A13C39E45FE3AAD27C581 Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/w8agfRL1GVHiUSL4QR-4AfJIyKQ.roa Signing time: Thu 01 Jan 2026 04:18:25 +0000 ROA not before: Thu 01 Jan 2026 04:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16125 IP address blocks: 185.191.22.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:40:3b:96:7a:13:c3:9e:45:fe:3a:ad:27:c5:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ad734cf90c773428806b968209515b914831a9d Validity Not Before: Jan 1 04:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3c6a07d12f51951e25122f8411fb801f248c8a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e9:10:3b:a3:b4:a9:c6:85:92:cb:71:24:d1: 12:0c:29:ce:21:c1:34:a7:02:41:51:f5:8a:ac:cc: a3:cb:5f:bc:6f:5c:04:86:f3:03:af:9b:2e:dd:49: 5f:94:da:e9:79:db:f2:80:ab:2a:46:df:94:55:e0: 5d:5c:57:31:3f:83:b9:39:f8:10:f9:6e:06:81:90: da:9d:fe:9b:59:37:5e:f0:75:f4:7c:d9:56:ea:91: 4c:ec:3c:5e:f7:34:14:6b:04:d6:45:be:91:33:ab: 69:8a:02:f1:a4:26:c6:f9:de:1d:a8:25:a6:e3:8a: c4:ae:2d:2f:63:3e:1a:37:9e:a6:ab:8e:12:58:43: 83:16:36:bf:25:3c:c0:70:10:b9:b0:54:38:2e:8a: ca:d5:98:00:90:dd:e4:0c:3b:40:55:59:b9:45:34: 8a:cd:00:2d:03:e3:94:94:1b:8e:c6:5c:6b:0d:53: 8a:6f:fb:5f:4c:c1:66:3f:cc:d5:bb:92:0e:62:68: 7f:13:5b:0a:c9:bf:b9:1a:8e:c5:ea:80:c3:a9:1e: d5:1b:13:32:35:d3:85:00:60:d4:2c:e4:df:5d:80: fa:9a:9b:85:20:bd:dc:a3:40:21:d1:96:65:64:2b: a3:b6:79:98:d3:ef:18:32:3d:36:81:01:7c:68:df: 91:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C6:A0:7D:12:F5:19:51:E2:51:22:F8:41:1F:B8:01:F2:48:C8:A4 X509v3 Authority Key Identifier: keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/w8agfRL1GVHiUSL4QR-4AfJIyKQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.191.22.0/23 Signature Algorithm: sha256WithRSAEncryption 21:01:b2:e2:99:c7:b4:a7:87:39:f4:e9:15:39:b5:14:49:6b: 62:f3:31:ad:04:56:39:95:6c:37:ea:7c:63:7a:f6:dd:7b:84: 26:0e:9c:b3:43:c5:47:f2:03:9a:7a:52:20:b4:8b:08:22:0f: 95:50:3a:49:8e:31:0f:6a:82:03:43:d3:ea:91:85:26:fa:6d: ed:e3:fa:22:a2:38:9b:92:3f:38:81:00:bb:98:30:40:9f:67: 02:68:10:da:f2:00:fa:08:51:a7:20:0c:54:3c:cb:73:5c:1b: 2f:52:a3:7b:e9:f3:1e:a0:c7:9e:5e:82:c4:f0:e4:06:8a:62: ad:58:cc:28:b0:33:ed:72:72:99:a0:c3:fc:f0:73:32:ea:66: d1:ad:6c:3d:bc:cc:1f:97:ac:07:93:38:3c:71:d8:bb:30:35: 50:1d:2b:79:f9:1f:4f:2b:c9:f4:12:0d:e2:8e:db:7d:23:39: 41:0d:40:2e:31:3e:ab:f2:37:05:df:5f:2a:f3:29:8f:d1:e9: e4:04:6d:cd:c2:8d:6f:5c:dc:b7:ff:be:97:e4:a8:69:f9:4d: eb:8e:1c:9b:a6:f0:23:34:b3:be:27:7b:cf:47:33:fa:a4:23: 2c:df:d6:6c:7e:17:10:b1:39:8c:5f:82:af:bd:e7:89:2e:12: 68:d0:dc:3d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x0A7lnoTw55F/jqtJ8WBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhZDczNGNmOTBjNzczNDI4ODA2Yjk2ODIwOTUxNWI5MTQ4 MzFhOWQwHhcNMjYwMTAxMDQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjM2M2YTA3ZDEyZjUxOTUxZTI1MTIyZjg0MTFmYjgwMWYyNDhjOGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArekQO6O0qcaFkstxJNESDCnOIcE0 pwJBUfWKrMyjy1+8b1wEhvMDr5su3UlflNrpedvygKsqRt+UVeBdXFcxP4O5OfgQ +W4GgZDanf6bWTde8HX0fNlW6pFM7Dxe9zQUawTWRb6RM6tpigLxpCbG+d4dqCWm 44rEri0vYz4aN56mq44SWEODFja/JTzAcBC5sFQ4LorK1ZgAkN3kDDtAVVm5RTSK zQAtA+OUlBuOxlxrDVOKb/tfTMFmP8zVu5IOYmh/E1sKyb+5Go7F6oDDqR7VGxMy NdOFAGDULOTfXYD6mpuFIL3co0Ah0ZZlZCujtnmY0+8YMj02gQF8aN+RowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMPGoH0S9RlR4lEi+EEfuAHySMikMB8GA1UdIwQY MBaAFDrXNM+Qx3NCiAa5aCCVFbkUgxqdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMt NzZhMWQ0ZDgzMTk3LzEvdzhhZ2ZSTDFHVkhpVVNMNFFSLTRBZkpJeUtRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS9lYmYzODEtMDBjOC00ODBkLWE2NmMtNzZhMWQ0ZDgzMTk3 LzEvT3RjMHo1REhjMEtJQnJsb0lKVVZ1UlNER3AwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBub8WMA0G CSqGSIb3DQEBCwUAA4IBAQAhAbLimce0p4c59OkVObUUSWti8zGtBFY5lWw36nxj evbde4QmDpyzQ8VH8gOaelIgtIsIIg+VUDpJjjEPaoIDQ9PqkYUm+m3t4/oiojib kj84gQC7mDBAn2cCaBDa8gD6CFGnIAxUPMtzXBsvUqN76fMeoMeeXoLE8OQGimKt WMwosDPtcnKZoMP88HMy6mbRrWw9vMwfl6wHkzg8cdi7MDVQHSt5+R9PK8n0Eg3i jtt9IzlBDUAuMT6r8jcF318q8ymP0enkBG3Nwo1vXNy3/76X5Khp+U3rjhybpvAj NLO+J3vPRzP6pCMs39ZsfhcQsTmMX4KvveeJLhJo0Nw9 -----END CERTIFICATE-----Generated at Wed Jan 21 03:04:02 2026 by rpki-client