This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/W8dKjXBUt-fUvq_EeYi3tYn44qg.roa File: W8dKjXBUt-fUvq_EeYi3tYn44qg.roa (raw, json) Hash identifier: WuUbLEYtlTk2nWLaWd31Mi6WPwho3xJbhqbEmnd2kdo= Subject key identifier: 5B:C7:4A:8D:70:54:B7:E7:D4:BE:AF:C4:79:88:B7:B5:89:F8:E2:A8 Certificate issuer: /CN=c3fadf44e101e165c87bb4d0efccf94bd67e2a35 Certificate serial: 019B78343CED663B54EC777DACFFCCEFE57C Authority key identifier: C3:FA:DF:44:E1:01:E1:65:C8:7B:B4:D0:EF:CC:F9:4B:D6:7E:2A:35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_rfROEB4WXIe7TQ78z5S9Z-KjU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/W8dKjXBUt-fUvq_EeYi3tYn44qg.roa Signing time: Thu 01 Jan 2026 06:17:27 +0000 ROA not before: Thu 01 Jan 2026 06:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43237 IP address blocks: 194.8.72.0/23 maxlen: 23 195.114.20.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/w_rfROEB4WXIe7TQ78z5S9Z-KjU.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/w_rfROEB4WXIe7TQ78z5S9Z-KjU.mft rsync://rpki.ripe.net/repository/DEFAULT/w_rfROEB4WXIe7TQ78z5S9Z-KjU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:3c:ed:66:3b:54:ec:77:7d:ac:ff:cc:ef:e5:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3fadf44e101e165c87bb4d0efccf94bd67e2a35 Validity Not Before: Jan 1 06:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5bc74a8d7054b7e7d4beafc47988b7b589f8e2a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4f:de:13:00:ac:fb:4d:1e:14:00:9e:7e:28: 75:88:bc:5d:4f:63:93:71:9f:43:69:98:5c:b5:48: 99:71:d4:08:36:7e:8c:a1:4e:b0:8b:72:4e:02:10: c0:5a:f3:39:9a:d8:47:fc:35:27:98:01:73:59:89: 5b:31:53:0e:23:1c:10:6c:f2:16:76:ae:b5:f1:b5: 22:f7:3b:bb:cb:c7:63:39:91:18:0f:90:4c:59:1d: 48:b8:df:45:95:96:e9:62:ed:8c:45:40:d7:15:04: 37:c4:37:6e:20:ae:ae:1a:4c:40:41:ae:e0:9a:51: 03:02:32:97:5a:88:b6:f8:33:01:08:cb:4e:e2:73: 67:a7:b1:c8:eb:a5:02:29:45:f8:46:6e:ca:e3:c6: 15:5b:dd:17:54:6b:19:c5:c3:51:d2:93:8c:e1:31: 06:cc:cb:6e:ef:c8:be:14:df:db:4d:73:2e:b2:36: 82:34:97:cb:8f:0b:38:44:d3:ad:3c:bb:aa:75:b9: 7d:95:6f:e5:a4:32:a8:92:50:b4:8d:3e:ab:03:af: 31:d2:fd:96:dd:61:22:66:33:c5:1c:9c:8a:91:1f: 6e:6b:99:80:d0:ba:cb:c5:b8:a6:64:f3:c5:c3:ad: 30:60:43:3a:34:45:57:bb:80:e4:16:c3:ee:73:7a: 37:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:C7:4A:8D:70:54:B7:E7:D4:BE:AF:C4:79:88:B7:B5:89:F8:E2:A8 X509v3 Authority Key Identifier: keyid:C3:FA:DF:44:E1:01:E1:65:C8:7B:B4:D0:EF:CC:F9:4B:D6:7E:2A:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_rfROEB4WXIe7TQ78z5S9Z-KjU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/W8dKjXBUt-fUvq_EeYi3tYn44qg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c74dc5-f3bc-4bfb-89f7-d97bd330328c/1/w_rfROEB4WXIe7TQ78z5S9Z-KjU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.8.72.0/23 195.114.20.0/23 Signature Algorithm: sha256WithRSAEncryption 06:b2:b7:11:50:6c:7b:f7:bb:e7:93:a7:b5:d3:bb:1c:51:b8: 6a:2c:e9:34:3c:fc:89:7a:05:9d:d5:7f:a2:f1:2a:a7:60:60: 63:90:4b:01:d1:9b:15:40:03:92:7e:d0:46:7c:c1:68:5c:fe: 12:7b:5c:fe:32:87:3a:51:42:93:37:7f:8e:d5:c2:03:f5:54: 93:83:73:e5:aa:8f:57:99:4a:b7:dd:cd:64:b8:ca:5f:ee:a0: 75:30:ed:07:35:8a:93:d3:d6:4a:55:23:e7:87:a7:c9:b1:ba: 73:7b:8e:4a:b8:23:df:4d:4c:0d:e8:1e:20:a5:b2:9d:a1:9d: 32:65:41:62:ff:ec:c9:47:5e:ce:a6:e0:24:d4:e0:db:2b:36: c7:ee:28:6d:fa:d2:bf:a5:ce:13:f3:75:12:1f:f0:c7:a6:32: 4d:73:68:7b:fc:de:3d:3b:14:fe:8e:ad:be:54:71:97:bc:69: b2:d8:73:ae:89:31:1b:fc:43:50:4a:6f:21:b5:81:1b:c4:63: e9:b5:c5:65:69:00:33:e8:70:18:fa:0a:0e:02:9b:60:28:6c: 20:32:43:df:14:80:e8:2b:8a:a0:7a:c3:b8:a2:71:fd:85:7a: 33:62:86:6d:07:a4:96:75:b1:6e:07:54:07:84:31:db:f3:d8: 05:a6:fe:e9 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NDztZjtU7Hd9rP/M7+V8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzZmFkZjQ0ZTEwMWUxNjVjODdiYjRkMGVmY2NmOTRiZDY3 ZTJhMzUwHhcNMjYwMTAxMDYxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmM3NGE4ZDcwNTRiN2U3ZDRiZWFmYzQ3OTg4YjdiNTg5ZjhlMmE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2k/eEwCs+00eFACefih1iLxdT2OT cZ9DaZhctUiZcdQINn6MoU6wi3JOAhDAWvM5mthH/DUnmAFzWYlbMVMOIxwQbPIW dq618bUi9zu7y8djOZEYD5BMWR1IuN9FlZbpYu2MRUDXFQQ3xDduIK6uGkxAQa7g mlEDAjKXWoi2+DMBCMtO4nNnp7HI66UCKUX4Rm7K48YVW90XVGsZxcNR0pOM4TEG zMtu78i+FN/bTXMusjaCNJfLjws4RNOtPLuqdbl9lW/lpDKoklC0jT6rA68x0v2W 3WEiZjPFHJyKkR9ua5mA0LrLxbimZPPFw60wYEM6NEVXu4DkFsPuc3o3kQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFvHSo1wVLfn1L6vxHmIt7WJ+OKoMB8GA1UdIwQY MBaAFMP630ThAeFlyHu00O/M+UvWfio1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd19yZlJPRUI0V1hJZTdUUTc4ejVTOVotS2pVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jNzRkYzUtZjNiYy00YmZiLTg5Zjct ZDk3YmQzMzAzMjhjLzEvVzhkS2pYQlV0LWZVdnFfRWVZaTN0WW40NHFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9jNzRkYzUtZjNiYy00YmZiLTg5ZjctZDk3YmQzMzAzMjhj LzEvd19yZlJPRUI0V1hJZTdUUTc4ejVTOVotS2pVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwghIAwQB w3IUMA0GCSqGSIb3DQEBCwUAA4IBAQAGsrcRUGx797vnk6e107scUbhqLOk0PPyJ egWd1X+i8SqnYGBjkEsB0ZsVQAOSftBGfMFoXP4Se1z+Moc6UUKTN3+O1cID9VST g3Plqo9XmUq33c1kuMpf7qB1MO0HNYqT09ZKVSPnh6fJsbpze45KuCPfTUwN6B4g pbKdoZ0yZUFi/+zJR17OpuAk1ODbKzbH7iht+tK/pc4T83USH/DHpjJNc2h7/N49 OxT+jq2+VHGXvGmy2HOuiTEb/ENQSm8htYEbxGPptcVlaQAz6HAY+goOAptgKGwg MkPfFIDoK4qgesO4onH9hXozYoZtB6SWdbFuB1QHhDHb89gFpv7p -----END CERTIFICATE-----Generated at Tue Feb 10 00:10:05 2026 by rpki-client