This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/w1GmMdKPJXRckI2XDcfTgpeWlZk.roa File: w1GmMdKPJXRckI2XDcfTgpeWlZk.roa (raw, json) Hash identifier: n7IdbghGilSoDXqa+GnVGRK9IHstq1l+CGSUDO7+77A= Subject key identifier: C3:51:A6:31:D2:8F:25:74:5C:90:8D:97:0D:C7:D3:82:97:96:95:99 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D603D605CBDE3436EB327465D9E63 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/w1GmMdKPJXRckI2XDcfTgpeWlZk.roa Signing time: Fri 02 Jan 2026 06:20:30 +0000 ROA not before: Fri 02 Jan 2026 06:20:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213282 IP address blocks: 93.88.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:60:3d:60:5c:bd:e3:43:6e:b3:27:46:5d:9e:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c351a631d28f25745c908d970dc7d38297969599 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:80:80:4b:de:e6:49:7e:4d:f9:a3:ef:35:a7: ae:0f:2e:40:1d:96:f1:a4:ca:2d:e8:20:fd:05:ce: 80:08:66:63:ea:fa:c6:48:3b:06:d7:dd:59:48:7a: 94:ba:1f:d1:d7:0c:cb:68:9e:60:aa:a5:c3:1f:0c: 77:79:23:29:68:38:97:bc:65:dc:05:4e:41:2e:e5: bc:3c:fe:00:66:e3:85:8e:5a:4b:c0:0f:e8:6e:24: b2:e4:a8:f7:e8:6b:5c:3d:25:7a:d6:20:bd:a9:ad: 39:33:56:5a:9d:4f:9e:06:23:6f:20:40:79:84:9f: 3e:f3:f2:a8:f4:dc:bb:60:96:63:3e:1b:95:72:28: 4a:4a:92:7e:31:0a:c0:2d:5f:ed:e2:dd:6c:96:50: 8b:9b:11:29:c0:6d:12:84:e0:02:db:fd:9b:74:69: e4:b8:f6:10:7b:4b:e7:1e:13:89:d1:d0:23:1f:1c: 5f:c6:d9:0c:b9:11:aa:fc:af:46:23:bf:25:d0:ca: 0c:39:3c:47:58:57:b9:90:78:c8:7a:84:8b:bc:09: 3a:da:8b:03:82:83:5b:4e:67:0b:25:b5:73:3b:63: fc:d3:63:db:f5:f9:55:27:3e:b9:6d:7e:b6:d8:16: 8e:fe:82:5f:37:41:c7:00:51:4d:3d:4d:c7:f8:34: c6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:51:A6:31:D2:8F:25:74:5C:90:8D:97:0D:C7:D3:82:97:96:95:99 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/w1GmMdKPJXRckI2XDcfTgpeWlZk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 93.88.201.0/24 Signature Algorithm: sha256WithRSAEncryption b9:90:b1:db:c8:da:51:88:60:1b:82:c9:8e:c7:e6:fa:3c:82: be:4f:c8:45:09:8b:63:0c:b8:07:f1:83:45:8d:50:2e:5a:af: 24:5e:20:90:f9:83:dc:f5:ff:5e:96:ce:a1:f1:5a:f0:dd:3a: 6c:92:68:fe:db:fe:67:6b:8d:01:04:5a:ee:ee:4b:98:7a:93: 40:e9:fa:7b:f3:2a:db:4d:43:1b:41:45:93:a3:3c:53:10:34: 39:e5:3e:6c:05:59:ef:48:b0:03:9d:aa:4e:28:73:c6:53:7c: fa:d1:7b:40:45:8c:11:f3:36:0b:74:41:ca:2d:b5:40:af:69: 3e:ad:2e:6d:f8:0f:04:c6:ab:86:08:2d:74:04:5f:11:53:1f: df:75:ac:96:04:a5:3e:c0:f1:e8:ca:f9:ba:bf:3d:06:fd:19: 71:6c:9e:4b:fe:d5:7c:a2:74:ba:24:44:9f:59:52:83:ae:6d: a3:14:f3:c9:9e:07:6f:17:b7:58:7d:6d:a4:03:5e:96:e3:c3: ae:7c:83:b2:62:4f:31:41:8f:79:4e:e3:36:24:c1:97:0e:59: dc:3f:04:23:be:38:4c:4e:1d:2a:9f:53:12:85:ce:3f:6b:75: 29:5e:80:d3:bb:1a:1b:69:bd:07:af:4a:22:b3:96:a0:a5:12: 38:c5:cc:36 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XWA9YFy940NusydGXZ5jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzUxYTYzMWQyOGYyNTc0NWM5MDhkOTcwZGM3ZDM4Mjk3OTY5NTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4CAS97mSX5N+aPvNaeuDy5AHZbx pMot6CD9Bc6ACGZj6vrGSDsG191ZSHqUuh/R1wzLaJ5gqqXDHwx3eSMpaDiXvGXc BU5BLuW8PP4AZuOFjlpLwA/obiSy5Kj36GtcPSV61iC9qa05M1ZanU+eBiNvIEB5 hJ8+8/Ko9Ny7YJZjPhuVcihKSpJ+MQrALV/t4t1sllCLmxEpwG0ShOAC2/2bdGnk uPYQe0vnHhOJ0dAjHxxfxtkMuRGq/K9GI78l0MoMOTxHWFe5kHjIeoSLvAk62osD goNbTmcLJbVzO2P802Pb9flVJz65bX622BaO/oJfN0HHAFFNPU3H+DTGQwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMNRpjHSjyV0XJCNlw3H04KXlpWZMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvdzFHbU1kS1BKWFJja0kyWERjZlRncGVXbFprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXVjJMA0G CSqGSIb3DQEBCwUAA4IBAQC5kLHbyNpRiGAbgsmOx+b6PIK+T8hFCYtjDLgH8YNF jVAuWq8kXiCQ+YPc9f9els6h8Vrw3Tpskmj+2/5na40BBFru7kuYepNA6fp78yrb TUMbQUWTozxTEDQ55T5sBVnvSLADnapOKHPGU3z60XtARYwR8zYLdEHKLbVAr2k+ rS5t+A8ExquGCC10BF8RUx/fdayWBKU+wPHoyvm6vz0G/RlxbJ5L/tV8onS6JESf WVKDrm2jFPPJngdvF7dYfW2kA16W48OufIOyYk8xQY95TuM2JMGXDlncPwQjvjhM Th0qn1MShc4/a3UpXoDTuxobab0Hr0ois5agpRI4xcw2 -----END CERTIFICATE-----Generated at Fri Jan 9 13:12:05 2026 by rpki-client