This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/3widJOutrAHh97YKSptO-b1dBlc.roa File: 3widJOutrAHh97YKSptO-b1dBlc.roa (raw, json) Hash identifier: WjqlvhNeLoXjkFAEnq8uZuntv6RT+a3RPjop0QMbaM8= Subject key identifier: DF:08:9D:24:EB:AD:AC:01:E1:F7:B6:0A:4A:9B:4E:F9:BD:5D:06:57 Certificate issuer: /CN=842e178a85d6c30b572b20261c44f8e7a4bfc272 Certificate serial: 019B7B353BD4D140F0101E5DCFCACE0B661A Authority key identifier: 84:2E:17:8A:85:D6:C3:0B:57:2B:20:26:1C:44:F8:E7:A4:BF:C2:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hC4XioXWwwtXKyAmHET456S_wnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/3widJOutrAHh97YKSptO-b1dBlc.roa Signing time: Thu 01 Jan 2026 20:17:24 +0000 ROA not before: Thu 01 Jan 2026 20:17:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204706 IP address blocks: 185.143.128.0/24 maxlen: 24 185.143.129.0/24 maxlen: 24 185.143.130.0/24 maxlen: 24 185.143.131.0/24 maxlen: 24 2a0c:f080::/30 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.crl rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.mft rsync://rpki.ripe.net/repository/DEFAULT/hC4XioXWwwtXKyAmHET456S_wnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:3b:d4:d1:40:f0:10:1e:5d:cf:ca:ce:0b:66:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=842e178a85d6c30b572b20261c44f8e7a4bfc272 Validity Not Before: Jan 1 20:17:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=df089d24ebadac01e1f7b60a4a9b4ef9bd5d0657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:33:cf:33:86:52:f5:14:97:d5:ef:ba:e1:f4: e9:3b:89:c3:04:46:1c:af:53:24:67:96:1a:ae:93: 47:c4:6b:95:6f:29:29:8f:fa:bf:01:ac:e1:5b:dd: 84:65:48:bb:13:ce:67:e8:48:6f:30:ed:51:08:fb: 61:56:30:e2:a3:04:c5:e6:5a:a4:c1:ac:74:c7:f8: 1a:9e:fc:8f:97:80:53:20:78:f5:15:b3:97:85:0c: 40:58:52:69:30:ff:9b:19:8a:00:92:15:91:aa:eb: 91:e3:f3:dc:c1:50:c7:32:c8:51:5b:09:fa:aa:9a: 7f:a2:00:57:bc:3a:1b:0f:83:94:d7:c4:d0:59:b8: b4:57:e1:20:3f:59:2d:ff:c8:c2:f7:6f:79:1c:93: 96:17:ce:ec:9f:c6:bb:fa:cb:28:86:2d:59:6c:22: 4e:31:04:fe:a2:7c:59:46:58:fc:c8:86:00:cb:6f: f6:7f:ea:b7:16:0a:9a:65:0e:1e:49:6e:e9:ed:6e: 8f:5c:86:69:b2:d1:23:e5:ca:1b:97:4a:00:df:14: f7:92:d9:fd:93:5c:2a:c7:18:50:91:30:b9:22:56: a5:8b:7a:22:55:6e:52:76:64:50:f4:56:52:66:06: 8f:3a:4e:12:67:54:9e:14:88:99:7c:e3:c2:53:3c: 4e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:08:9D:24:EB:AD:AC:01:E1:F7:B6:0A:4A:9B:4E:F9:BD:5D:06:57 X509v3 Authority Key Identifier: keyid:84:2E:17:8A:85:D6:C3:0B:57:2B:20:26:1C:44:F8:E7:A4:BF:C2:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hC4XioXWwwtXKyAmHET456S_wnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/3widJOutrAHh97YKSptO-b1dBlc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0730d1-fee3-4654-9dea-e187be9b6c23/1/hC4XioXWwwtXKyAmHET456S_wnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.143.128.0/22 IPv6: 2a0c:f080::/30 Signature Algorithm: sha256WithRSAEncryption 46:8d:f3:38:8c:a7:e5:65:09:60:9a:cc:98:74:dd:26:22:80: f1:b4:79:a5:3d:0b:75:90:2c:53:06:6e:8f:fb:ba:64:80:d7: 0b:be:1c:f9:c5:1a:b3:ae:53:2c:ec:5e:53:d9:7d:56:db:a7: 30:b3:da:a8:d3:03:66:5a:bc:9b:3b:20:0f:8b:84:c2:a0:6e: 63:b9:22:b0:b9:78:99:0b:f7:1c:a3:38:c1:6b:6a:c1:3a:6f: 85:06:fe:fd:08:4a:44:97:e5:94:00:19:ec:84:ed:0c:91:d6: 04:cc:ac:d9:fd:ed:28:6d:07:3a:2a:4c:e7:13:29:02:22:c0: ec:48:8e:18:b7:ae:cc:2d:6b:db:c9:85:ff:56:b9:fc:83:ea: 58:aa:cf:b1:ec:da:a3:59:3b:c9:00:f8:31:77:9a:18:1f:a5: 8a:b4:2f:cb:b8:b6:b1:a5:a3:60:ed:89:50:6d:ee:76:a8:79: d1:2e:4a:e7:f6:5b:51:03:3a:fb:ab:9e:15:5b:51:c8:fe:bd: d5:15:e3:b5:da:ca:20:bc:03:82:3a:c9:84:d9:6a:86:b0:77: 81:85:92:b0:e3:f7:24:c5:69:af:93:a8:ed:7f:f6:42:3c:5a: 97:5d:ea:a7:06:37:76:27:47:dd:d5:eb:a5:b1:8c:f8:c2:4f: cc:70:89:86 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7NTvU0UDwEB5dz8rOC2YaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0MmUxNzhhODVkNmMzMGI1NzJiMjAyNjFjNDRmOGU3YTRi ZmMyNzIwHhcNMjYwMTAxMjAxNzI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZjA4OWQyNGViYWRhYzAxZTFmN2I2MGE0YTliNGVmOWJkNWQwNjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjPPM4ZS9RSX1e+64fTpO4nDBEYc r1MkZ5YarpNHxGuVbykpj/q/AazhW92EZUi7E85n6EhvMO1RCPthVjDiowTF5lqk wax0x/ganvyPl4BTIHj1FbOXhQxAWFJpMP+bGYoAkhWRquuR4/PcwVDHMshRWwn6 qpp/ogBXvDobD4OU18TQWbi0V+EgP1kt/8jC9295HJOWF87sn8a7+ssohi1ZbCJO MQT+onxZRlj8yIYAy2/2f+q3FgqaZQ4eSW7p7W6PXIZpstEj5cobl0oA3xT3ktn9 k1wqxxhQkTC5Ilali3oiVW5SdmRQ9FZSZgaPOk4SZ1SeFIiZfOPCUzxOmwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFN8InSTrrawB4fe2CkqbTvm9XQZXMB8GA1UdIwQY MBaAFIQuF4qF1sMLVysgJhxE+Oekv8JyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEM0WGlvWFd3d3RYS3lBbUhFVDQ1NlNfd25JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8wNzMwZDEtZmVlMy00NjU0LTlkZWEt ZTE4N2JlOWI2YzIzLzEvM3dpZEpPdXRyQUhoOTdZS1NwdE8tYjFkQmxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS8wNzMwZDEtZmVlMy00NjU0LTlkZWEtZTE4N2JlOWI2YzIz LzEvaEM0WGlvWFd3d3RYS3lBbUhFVDQ1NlNfd25JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuY+AMA0E AgACMAcDBQIqDPCAMA0GCSqGSIb3DQEBCwUAA4IBAQBGjfM4jKflZQlgmsyYdN0m IoDxtHmlPQt1kCxTBm6P+7pkgNcLvhz5xRqzrlMs7F5T2X1W26cws9qo0wNmWryb OyAPi4TCoG5juSKwuXiZC/ccozjBa2rBOm+FBv79CEpEl+WUABnshO0MkdYEzKzZ /e0obQc6KkznEykCIsDsSI4Yt67MLWvbyYX/Vrn8g+pYqs+x7NqjWTvJAPgxd5oY H6WKtC/LuLaxpaNg7YlQbe52qHnRLkrn9ltRAzr7q54VW1HI/r3VFeO12sogvAOC OsmE2WqGsHeBhZKw4/ckxWmvk6jtf/ZCPFqXXeqnBjd2J0fd1eulsYz4wk/McImG -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:43 2026 by rpki-client