This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/w06p4tVpLn4DwN6XGtMqgCddlOM.roa File: w06p4tVpLn4DwN6XGtMqgCddlOM.roa (raw, json) Hash identifier: IiQyVkCQy+BLpiot2sDu8JSztFN48kfYVh6pjQPJG4g= Subject key identifier: C3:4E:A9:E2:D5:69:2E:7E:03:C0:DE:97:1A:D3:2A:80:27:5D:94:E3 Certificate issuer: /CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a Certificate serial: 019B7AC947571DB07A16ECFDBCE51DE6B5AE Authority key identifier: 3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/w06p4tVpLn4DwN6XGtMqgCddlOM.roa Signing time: Thu 01 Jan 2026 18:19:29 +0000 ROA not before: Thu 01 Jan 2026 18:19:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 94.142.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.mft rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:47:57:1d:b0:7a:16:ec:fd:bc:e5:1d:e6:b5:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b9a251e5d1d3babe4c579c91eb3e0ac37f7bf2a Validity Not Before: Jan 1 18:19:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c34ea9e2d5692e7e03c0de971ad32a80275d94e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5a:75:5c:e7:a6:6c:c5:01:f9:1b:e0:85:64: 72:6e:12:3e:5d:2e:1d:70:ba:dc:cd:0d:05:cc:3d: 94:e4:73:13:25:37:bf:0c:0f:99:b5:57:bc:8b:59: 3c:1e:78:fe:5f:8e:5c:c1:de:bd:d8:08:a1:5c:06: b2:34:21:18:b8:a3:92:d0:0e:e5:55:f4:53:91:28: 0a:29:76:5b:01:77:17:46:39:83:8d:64:80:76:3e: 12:a7:eb:7c:06:c4:b5:3b:7d:2f:8f:8f:a6:0e:7e: db:31:b0:e3:ee:d9:bd:ce:35:0f:27:92:1a:87:47: 89:b0:32:d4:ae:1e:21:ed:36:35:a0:77:ea:1f:63: 70:34:da:24:50:80:75:f9:90:de:01:dc:e7:73:4d: 1e:8e:84:21:1a:64:20:8b:a3:f7:0f:3a:1e:6d:de: 7d:74:54:0a:22:df:b4:af:dd:34:2b:17:71:1b:ce: d2:f3:1a:c9:fb:a3:7d:d2:92:c7:77:37:b4:bd:ac: 22:b7:1c:c6:0e:4b:32:21:4e:93:11:5a:49:31:a4: 16:a7:72:b4:e6:33:78:89:48:a0:12:66:d0:33:28: 32:35:68:18:7c:b2:87:bd:92:a9:39:a9:58:4e:ac: d5:88:eb:5b:37:9b:3f:66:7b:0d:8f:da:61:21:90: 3f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:4E:A9:E2:D5:69:2E:7E:03:C0:DE:97:1A:D3:2A:80:27:5D:94:E3 X509v3 Authority Key Identifier: keyid:3B:9A:25:1E:5D:1D:3B:AB:E4:C5:79:C9:1E:B3:E0:AC:37:F7:BF:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O5olHl0dO6vkxXnJHrPgrDf3vyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/w06p4tVpLn4DwN6XGtMqgCddlOM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/0ddff3-9e70-4d63-b5a0-c6632cc014b0/1/O5olHl0dO6vkxXnJHrPgrDf3vyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.142.252.0/24 Signature Algorithm: sha256WithRSAEncryption 35:a9:5f:03:78:ef:14:df:a4:40:45:41:c6:b3:66:fd:13:ff: 88:b7:a0:10:be:a8:ff:6f:d1:80:4c:fe:cf:42:31:dd:99:86: ec:53:ef:df:32:0d:42:99:88:c0:e6:2d:78:35:4c:ae:49:65: 16:9e:60:c0:7a:b6:1f:73:6b:eb:7e:79:0b:12:e6:84:5c:5f: 92:12:9d:83:a7:c3:86:d5:7b:a2:21:d5:90:7a:65:61:18:f1: 6c:64:e1:f1:28:7e:98:00:fb:10:b9:a8:1c:6a:f9:ae:f4:0d: 87:18:c4:2d:41:c9:a4:bf:72:14:14:13:7a:e6:18:9a:98:4e: 1c:86:3c:01:15:6f:84:8e:c5:3c:b7:44:8d:50:41:d5:71:30: 82:b6:6c:5f:23:d7:95:1e:f9:39:8d:30:11:bf:c4:d3:53:e7: 4b:37:8c:41:7c:6e:64:b3:8a:7f:a3:ab:35:1d:a5:d0:ca:85: b3:39:2c:29:b7:42:4a:bc:f8:b6:db:ca:ff:d9:7f:77:bd:7d: a5:f4:93:87:07:4d:18:b2:d2:b9:bb:a5:de:79:87:25:ff:d1: c0:92:e3:bf:39:4c:fb:0c:6b:c9:3a:c4:0f:b2:6c:54:ee:6c: 62:97:30:7e:1b:6a:5e:76:d5:0c:79:a7:62:06:85:80:a7:30: 8e:08:7c:b4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yUdXHbB6Fuz9vOUd5rWuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiOWEyNTFlNWQxZDNiYWJlNGM1NzljOTFlYjNlMGFjMzdm N2JmMmEwHhcNMjYwMTAxMTgxOTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzRlYTllMmQ1NjkyZTdlMDNjMGRlOTcxYWQzMmE4MDI3NWQ5NGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVp1XOembMUB+RvghWRybhI+XS4d cLrczQ0FzD2U5HMTJTe/DA+ZtVe8i1k8Hnj+X45cwd692AihXAayNCEYuKOS0A7l VfRTkSgKKXZbAXcXRjmDjWSAdj4Sp+t8BsS1O30vj4+mDn7bMbDj7tm9zjUPJ5Ia h0eJsDLUrh4h7TY1oHfqH2NwNNokUIB1+ZDeAdznc00ejoQhGmQgi6P3Dzoebd59 dFQKIt+0r900KxdxG87S8xrJ+6N90pLHdze0vawitxzGDksyIU6TEVpJMaQWp3K0 5jN4iUigEmbQMygyNWgYfLKHvZKpOalYTqzViOtbN5s/ZnsNj9phIZA/JQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMNOqeLVaS5+A8DelxrTKoAnXZTjMB8GA1UdIwQY MBaAFDuaJR5dHTur5MV5yR6z4Kw3978qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTzVvbEhsMGRPNnZreFhuSkhyUGdyRGYzdnlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS8wZGRmZjMtOWU3MC00ZDYzLWI1YTAt YzY2MzJjYzAxNGIwLzEvdzA2cDR0VnBMbjREd042WEd0TXFnQ2RkbE9NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS8wZGRmZjMtOWU3MC00ZDYzLWI1YTAtYzY2MzJjYzAxNGIw LzEvTzVvbEhsMGRPNnZreFhuSkhyUGdyRGYzdnlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXo78MA0G CSqGSIb3DQEBCwUAA4IBAQA1qV8DeO8U36RARUHGs2b9E/+It6AQvqj/b9GATP7P QjHdmYbsU+/fMg1CmYjA5i14NUyuSWUWnmDAerYfc2vrfnkLEuaEXF+SEp2Dp8OG 1XuiIdWQemVhGPFsZOHxKH6YAPsQuagcavmu9A2HGMQtQcmkv3IUFBN65hiamE4c hjwBFW+EjsU8t0SNUEHVcTCCtmxfI9eVHvk5jTARv8TTU+dLN4xBfG5ks4p/o6s1 HaXQyoWzOSwpt0JKvPi228r/2X93vX2l9JOHB00YstK5u6XeeYcl/9HAkuO/OUz7 DGvJOsQPsmxU7mxilzB+G2pedtUMeadiBoWApzCOCHy0 -----END CERTIFICATE-----Generated at Fri Jan 2 14:45:38 2026 by rpki-client