This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/ww1PQxdbKvTQH6rQL3Nf89Au6Os.roa File: ww1PQxdbKvTQH6rQL3Nf89Au6Os.roa (raw, json) Hash identifier: qw3dBH90auYZSvCUgIiKsoKHtmICDEf0vkVYNxSJ9/o= Subject key identifier: C3:0D:4F:43:17:5B:2A:F4:D0:1F:AA:D0:2F:73:5F:F3:D0:2E:E8:EB Certificate issuer: /CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1 Certificate serial: 019B7A5AB189C2FDD9B63888FECFA723FC2A Authority key identifier: 2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/ww1PQxdbKvTQH6rQL3Nf89Au6Os.roa Signing time: Thu 01 Jan 2026 16:18:42 +0000 ROA not before: Thu 01 Jan 2026 16:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 194.116.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:b1:89:c2:fd:d9:b6:38:88:fe:cf:a7:23:fc:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1 Validity Not Before: Jan 1 16:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c30d4f43175b2af4d01faad02f735ff3d02ee8eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:10:d8:d0:ec:80:a9:52:5c:97:c4:d7:da:c5: d7:52:2b:99:41:76:93:76:64:b8:7f:c8:88:79:32: ac:4b:bd:a2:4e:12:b5:99:05:29:ff:b7:11:32:49: ab:25:7f:71:5b:4b:e8:e1:41:3a:b4:ba:58:ea:2a: dc:25:9a:15:b9:d8:82:eb:64:ce:cb:f6:83:62:f8: 40:7b:48:e9:fa:03:b7:12:70:cc:ee:b7:9c:b4:54: 60:ec:83:1e:17:27:e6:1b:38:55:1b:71:0b:ba:b6: 94:ff:fd:d0:67:53:17:ea:1a:02:13:d1:89:75:df: ee:8a:dc:04:8e:41:cb:a1:02:6f:b6:a6:3f:9d:d9: 5a:9f:bc:cc:65:de:a4:14:8a:44:25:55:2e:37:b5: 9f:1b:37:de:c1:0f:26:01:32:e6:d7:26:76:d1:c8: 6c:bb:5c:63:39:c3:04:68:62:35:2c:8f:44:cb:2f: d7:32:c0:41:ba:ca:d8:4c:4b:4b:d6:a9:de:38:2c: 15:db:bf:4c:6c:ae:ea:f7:7a:7b:36:ff:96:4e:32: 86:4c:d5:34:31:e3:c4:7e:a5:ba:df:ac:8c:a5:0a: 51:bf:19:35:9f:54:41:5b:18:42:ca:ea:8c:90:45: e5:9d:38:6e:59:30:43:9a:27:dc:dc:72:db:59:86: 69:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:0D:4F:43:17:5B:2A:F4:D0:1F:AA:D0:2F:73:5F:F3:D0:2E:E8:EB X509v3 Authority Key Identifier: keyid:2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/ww1PQxdbKvTQH6rQL3Nf89Au6Os.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.116.96.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:9d:ee:63:4a:73:6d:d7:bc:e7:b0:bc:b5:1e:31:f2:21:f4: 99:07:2f:eb:ac:ba:8f:87:6d:a0:0f:e5:92:93:b9:27:cd:4b: 3a:f6:21:28:17:12:60:97:dd:88:6c:f3:7c:d7:63:9b:34:ee: 3b:73:eb:04:39:83:48:0a:9e:62:4d:cd:fb:04:3b:76:8c:a6: 95:49:98:63:0b:8d:80:f1:19:25:e0:1f:df:d9:a7:91:a0:b6: b1:68:c7:b0:91:42:f7:8c:e2:fb:4f:62:45:da:67:5f:e1:3f: c7:21:0a:05:49:57:4e:ce:b6:8f:0a:cc:bf:b1:3b:ee:cc:1d: c3:28:b5:2c:cc:29:65:f6:3d:6b:b7:06:0d:17:fc:a0:08:64: 3a:8a:62:03:a4:3b:27:e3:7c:c5:48:90:7e:7b:07:a3:53:23: 23:cc:19:c3:58:92:e0:7f:94:d9:94:3d:2c:ee:e0:35:d9:1d: e4:db:4d:01:07:e0:de:66:12:a1:9b:e9:99:ab:24:21:1c:23: b0:95:3d:5a:2a:8b:7e:21:b8:6a:07:af:43:9b:58:db:69:a6: d7:2a:66:52:32:56:5e:a6:1d:00:8e:2d:50:a0:0a:a6:3a:74: b5:42:b5:fa:43:33:37:75:d7:30:66:9e:53:f2:0e:07:4e:ca: 7e:58:fa:0f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WrGJwv3ZtjiI/s+nI/wqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjODg3MzAyZDFlNzQwZjVmOTg0ODFmYjRiN2E0NjE2OTZi ZmU1YzEwHhcNMjYwMTAxMTYxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzBkNGY0MzE3NWIyYWY0ZDAxZmFhZDAyZjczNWZmM2QwMmVlOGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hDY0OyAqVJcl8TX2sXXUiuZQXaT dmS4f8iIeTKsS72iThK1mQUp/7cRMkmrJX9xW0vo4UE6tLpY6ircJZoVudiC62TO y/aDYvhAe0jp+gO3EnDM7rectFRg7IMeFyfmGzhVG3ELuraU//3QZ1MX6hoCE9GJ dd/uitwEjkHLoQJvtqY/ndlan7zMZd6kFIpEJVUuN7WfGzfewQ8mATLm1yZ20chs u1xjOcMEaGI1LI9Eyy/XMsBBusrYTEtL1qneOCwV279MbK7q93p7Nv+WTjKGTNU0 MePEfqW636yMpQpRvxk1n1RBWxhCyuqMkEXlnThuWTBDmifc3HLbWYZp2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMMNT0MXWyr00B+q0C9zX/PQLujrMB8GA1UdIwQY MBaAFCyIcwLR50D1+YSB+0t6RhaWv+XBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEloekF0SG5RUFg1aElIN1MzcEdGcGFfNWNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82NDViNzQtZDhmYi00NDg4LWJiZmQt YzAyOGQ5MWViYzljLzEvd3cxUFF4ZGJLdlRRSDZyUUwzTmY4OUF1Nk9zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS82NDViNzQtZDhmYi00NDg4LWJiZmQtYzAyOGQ5MWViYzlj LzEvTEloekF0SG5RUFg1aElIN1MzcEdGcGFfNWNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwnRgMA0G CSqGSIb3DQEBCwUAA4IBAQB/ne5jSnNt17znsLy1HjHyIfSZBy/rrLqPh22gD+WS k7knzUs69iEoFxJgl92IbPN812ObNO47c+sEOYNICp5iTc37BDt2jKaVSZhjC42A 8Rkl4B/f2aeRoLaxaMewkUL3jOL7T2JF2mdf4T/HIQoFSVdOzraPCsy/sTvuzB3D KLUszCll9j1rtwYNF/ygCGQ6imIDpDsn43zFSJB+ewejUyMjzBnDWJLgf5TZlD0s 7uA12R3k200BB+DeZhKhm+mZqyQhHCOwlT1aKot+IbhqB69Dm1jbaabXKmZSMlZe ph0Aji1QoAqmOnS1QrX6QzM3ddcwZp5T8g4HTsp+WPoP -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:35 2026 by rpki-client