This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/wNqsuLHhhTYKZ23gcgc0p6rHlM8.roa File: wNqsuLHhhTYKZ23gcgc0p6rHlM8.roa (raw, json) Hash identifier: ZHhrFP+PBglJ5Cb6Iy7houth/vPZfswwd76qnw0CEBs= Subject key identifier: C0:DA:AC:B8:B1:E1:85:36:0A:67:6D:E0:72:07:34:A7:AA:C7:94:CF Certificate issuer: /CN=4608d71b772a031740e1d412def6857cc4b1d45a Certificate serial: 019B7E9F74BEC1268A664F6A841FB573CF02 Authority key identifier: 46:08:D7:1B:77:2A:03:17:40:E1:D4:12:DE:F6:85:7C:C4:B1:D4:5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/wNqsuLHhhTYKZ23gcgc0p6rHlM8.roa Signing time: Fri 02 Jan 2026 12:12:17 +0000 ROA not before: Fri 02 Jan 2026 12:12:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 185.94.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.crl rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.mft rsync://rpki.ripe.net/repository/DEFAULT/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:9f:74:be:c1:26:8a:66:4f:6a:84:1f:b5:73:cf:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4608d71b772a031740e1d412def6857cc4b1d45a Validity Not Before: Jan 2 12:12:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0daacb8b1e185360a676de0720734a7aac794cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:20:e7:12:9c:89:e2:0f:4d:4e:94:4a:35:5e: e3:95:2d:bd:c0:51:40:a0:e8:b0:3c:84:f5:60:81: b7:65:64:b5:76:1a:fa:dc:53:3d:ab:d0:27:aa:94: fd:b5:42:60:63:c3:4a:b5:f7:8d:6b:9b:30:8d:9e: 97:1d:d2:61:f9:37:e9:06:d2:1b:09:51:a2:d3:81: 83:d0:4c:d5:97:89:41:1b:ef:d7:f4:d3:ab:ac:68: 4b:b4:dc:6a:f7:8e:fa:fa:b9:d0:2e:d5:1f:71:45: 7f:24:08:c4:08:25:1e:45:46:8d:c7:f5:6d:58:e2: a1:29:eb:1f:05:7b:b5:53:85:7f:8a:fe:ba:24:32: 4d:97:38:b0:23:f4:dc:eb:72:34:d2:a2:b6:be:8e: b0:52:80:88:53:e2:ec:d0:74:cd:cb:77:55:3b:7d: 53:75:2f:34:3d:24:ed:4e:26:e7:ed:9f:d6:ff:0a: 66:d9:12:12:8c:d3:77:9a:a5:21:55:dc:fe:cd:c4: d6:df:cf:bb:f4:f6:35:f1:6e:e0:f4:d7:4a:ba:fe: e1:fe:3f:e0:4a:63:6a:17:c9:14:29:a8:d2:dc:73: 6f:25:90:5e:6e:44:0a:6f:8e:8c:d0:a8:6c:82:b7: e1:0a:0e:2e:9e:cb:e3:02:aa:86:c2:bf:f1:b4:d4: 21:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:DA:AC:B8:B1:E1:85:36:0A:67:6D:E0:72:07:34:A7:AA:C7:94:CF X509v3 Authority Key Identifier: keyid:46:08:D7:1B:77:2A:03:17:40:E1:D4:12:DE:F6:85:7C:C4:B1:D4:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/wNqsuLHhhTYKZ23gcgc0p6rHlM8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/49768a-8d0b-490f-98be-74e1168a1164/1/RgjXG3cqAxdA4dQS3vaFfMSx1Fo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.94.18.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:3d:a4:57:7a:69:26:c4:2a:93:e3:b7:7b:50:8e:aa:40:cc: bd:5e:8d:c0:da:56:08:59:a4:b4:ac:0a:dc:a4:c4:59:1f:bc: ab:c1:50:65:ed:23:3b:64:e3:86:6e:e3:f9:7b:55:cd:38:7b: 6d:f6:5c:08:55:a6:13:12:1d:ec:49:68:85:4f:ec:33:d4:e1: 4a:cd:cb:3c:03:45:57:0f:b0:36:b8:ce:50:e4:13:f5:53:ca: 51:40:db:9d:df:95:00:d7:fb:fa:fa:04:e1:44:90:3e:31:61: 5f:1e:35:16:2e:b1:45:ee:88:cf:fe:4f:1b:94:eb:5e:2f:dd: 7b:53:b8:5c:f3:53:48:aa:16:11:2a:51:c6:4a:7a:58:08:36: 41:fb:fd:5a:74:33:86:b9:3e:53:4b:3a:bc:6f:80:57:52:e8: f3:11:a1:cf:90:de:1e:23:dd:a8:b4:76:50:6e:8f:74:19:5d: e4:c7:26:4e:92:e1:ef:21:07:2e:97:5f:d8:2d:7a:b0:4b:4e: 27:56:d0:1f:91:98:58:36:29:63:07:d2:c2:2f:0b:f3:36:57: f1:c9:a7:f3:2e:68:d1:98:c7:1e:e5:3e:d9:f8:10:4b:98:fc: 9a:2a:a1:5a:18:4a:4f:20:7b:4e:a4:8c:b6:fd:62:96:7a:48: e4:9c:84:b9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+n3S+wSaKZk9qhB+1c88CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MDhkNzFiNzcyYTAzMTc0MGUxZDQxMmRlZjY4NTdjYzRi MWQ0NWEwHhcNMjYwMTAyMTIxMjE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMGRhYWNiOGIxZTE4NTM2MGE2NzZkZTA3MjA3MzRhN2FhYzc5NGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyDnEpyJ4g9NTpRKNV7jlS29wFFA oOiwPIT1YIG3ZWS1dhr63FM9q9AnqpT9tUJgY8NKtfeNa5swjZ6XHdJh+TfpBtIb CVGi04GD0EzVl4lBG+/X9NOrrGhLtNxq9476+rnQLtUfcUV/JAjECCUeRUaNx/Vt WOKhKesfBXu1U4V/iv66JDJNlziwI/Tc63I00qK2vo6wUoCIU+Ls0HTNy3dVO31T dS80PSTtTibn7Z/W/wpm2RISjNN3mqUhVdz+zcTW38+79PY18W7g9NdKuv7h/j/g SmNqF8kUKajS3HNvJZBebkQKb46M0KhsgrfhCg4unsvjAqqGwr/xtNQhdQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMDarLix4YU2Cmdt4HIHNKeqx5TPMB8GA1UdIwQY MBaAFEYI1xt3KgMXQOHUEt72hXzEsdRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmdqWEczY3FBeGRBNGRRUzN2YUZmTVN4MUZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80OTc2OGEtOGQwYi00OTBmLTk4YmUt NzRlMTE2OGExMTY0LzEvd05xc3VMSGhoVFlLWjIzZ2NnYzBwNnJIbE04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS80OTc2OGEtOGQwYi00OTBmLTk4YmUtNzRlMTE2OGExMTY0 LzEvUmdqWEczY3FBeGRBNGRRUzN2YUZmTVN4MUZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuV4SMA0G CSqGSIb3DQEBCwUAA4IBAQBtPaRXemkmxCqT47d7UI6qQMy9Xo3A2lYIWaS0rArc pMRZH7yrwVBl7SM7ZOOGbuP5e1XNOHtt9lwIVaYTEh3sSWiFT+wz1OFKzcs8A0VX D7A2uM5Q5BP1U8pRQNud35UA1/v6+gThRJA+MWFfHjUWLrFF7ojP/k8blOteL917 U7hc81NIqhYRKlHGSnpYCDZB+/1adDOGuT5TSzq8b4BXUujzEaHPkN4eI92otHZQ bo90GV3kxyZOkuHvIQcul1/YLXqwS04nVtAfkZhYNiljB9LCLwvzNlfxyafzLmjR mMce5T7Z+BBLmPyaKqFaGEpPIHtOpIy2/WKWekjknIS5 -----END CERTIFICATE-----Generated at Fri Jan 9 06:22:14 2026 by rpki-client