This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/cWwrq1JRG9N9LA5cpeXVH7PxJYQ.roa File: cWwrq1JRG9N9LA5cpeXVH7PxJYQ.roa (raw, json) Hash identifier: BD5O1CMhrpoa4q2pzqFcNgYXgKPADPP3AYbxu2KOUsc= Subject key identifier: 71:6C:2B:AB:52:51:1B:D3:7D:2C:0E:5C:A5:E5:D5:1F:B3:F1:25:84 Certificate issuer: /CN=03c80157b56426ce3a5f43c89feb1d437c77cbce Certificate serial: 019B76EAE0E043DB656F8E2A1F07BE84E98E Authority key identifier: 03:C8:01:57:B5:64:26:CE:3A:5F:43:C8:9F:EB:1D:43:7C:77:CB:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8gBV7VkJs46X0PIn-sdQ3x3y84.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/cWwrq1JRG9N9LA5cpeXVH7PxJYQ.roa Signing time: Thu 01 Jan 2026 00:17:43 +0000 ROA not before: Thu 01 Jan 2026 00:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203135 IP address blocks: 185.45.148.0/24 maxlen: 24 193.189.89.0/24 maxlen: 24 2a13:bdc0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.crl rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.mft rsync://rpki.ripe.net/repository/DEFAULT/A8gBV7VkJs46X0PIn-sdQ3x3y84.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:e0:e0:43:db:65:6f:8e:2a:1f:07:be:84:e9:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03c80157b56426ce3a5f43c89feb1d437c77cbce Validity Not Before: Jan 1 00:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=716c2bab52511bd37d2c0e5ca5e5d51fb3f12584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:88:c0:63:a4:c7:bc:d7:e8:16:e0:4b:2f:3f: 1e:30:1f:12:26:1f:f8:ec:60:61:c8:1a:4d:53:14: 49:7e:c7:99:ea:ff:ba:03:2b:09:7e:ea:b7:04:46: 1e:f8:45:89:15:2c:fb:ed:87:97:06:04:af:ae:81: 58:53:26:50:97:28:d9:e0:98:7d:fb:c5:14:2d:ab: 2a:7e:48:6c:70:c3:c0:10:8b:f1:e6:f7:b8:cf:b1: 42:9b:b8:57:83:40:f3:1f:70:59:98:85:a7:bc:a5: 5f:2d:e0:88:4a:22:05:c0:c7:3d:19:aa:98:bc:65: dc:9b:8f:2c:ad:4d:20:ff:04:a5:08:3b:73:f3:91: a5:7b:80:ac:a8:89:86:89:be:14:a2:be:21:51:35: 51:67:33:26:ed:a4:1c:29:0f:dc:58:a5:fd:43:0d: f8:19:ef:ce:53:65:c3:5a:0f:5c:90:57:3c:f2:74: a5:77:b4:7b:82:47:bd:b7:89:08:b4:72:ce:5d:eb: 8a:c5:6a:c9:b8:35:0d:ff:18:40:f7:ad:ec:be:77: 53:6d:f0:0d:f4:97:39:6d:88:64:b7:86:cb:94:46: 83:34:46:91:03:25:03:b9:27:2d:80:7d:5b:c7:d2: df:f2:29:e5:ad:ed:68:72:bd:ec:17:e6:9e:be:ad: a9:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:6C:2B:AB:52:51:1B:D3:7D:2C:0E:5C:A5:E5:D5:1F:B3:F1:25:84 X509v3 Authority Key Identifier: keyid:03:C8:01:57:B5:64:26:CE:3A:5F:43:C8:9F:EB:1D:43:7C:77:CB:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8gBV7VkJs46X0PIn-sdQ3x3y84.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/cWwrq1JRG9N9LA5cpeXVH7PxJYQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d716aa-da80-493b-adf1-f014f817796a/1/A8gBV7VkJs46X0PIn-sdQ3x3y84.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.45.148.0/24 193.189.89.0/24 IPv6: 2a13:bdc0::/29 Signature Algorithm: sha256WithRSAEncryption a9:21:c7:8a:f0:b7:6d:ca:37:50:e1:24:48:25:67:8f:51:29: c7:49:74:cd:72:22:8d:a8:56:4e:11:d8:ba:3e:be:a8:94:de: f0:6d:3f:be:07:32:0e:a1:80:2e:10:1a:9c:e2:83:e9:e8:ca: 15:d8:00:23:21:6b:f6:b2:fc:6e:82:49:78:77:f5:db:77:28: 9d:22:7b:1f:5a:ff:12:87:46:cc:2f:5a:72:6d:c0:34:79:b6: 47:5a:cb:8b:4e:89:3a:69:18:7d:d7:65:dc:a1:54:0e:99:ca: 10:0f:1d:ec:3e:42:65:24:11:ec:55:2c:b0:c0:33:64:d9:3e: 90:b9:be:b2:a9:85:77:17:4e:4e:60:b9:1f:56:3c:33:ec:92: 2e:75:e6:d4:88:be:3c:ee:09:73:5f:9a:55:25:ca:73:0b:2d: 81:c8:c9:54:58:c2:cd:a9:4b:8a:d0:6d:24:81:2c:08:e3:7e: 20:5c:06:04:73:40:38:ed:35:5e:67:d1:a7:1f:07:ce:43:ef: 6f:b9:58:82:e5:41:62:be:cd:55:cf:38:66:b0:58:82:81:d3: 32:21:78:9b:ab:b4:dc:de:0f:d2:05:7d:5b:1d:91:c2:0c:2b: 9c:b3:2a:6a:43:88:5f:39:35:b2:56:29:0d:1f:86:ca:7f:69: 52:91:c7:6f -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt26uDgQ9tlb44qHwe+hOmOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzYzgwMTU3YjU2NDI2Y2UzYTVmNDNjODlmZWIxZDQzN2M3 N2NiY2UwHhcNMjYwMTAxMDAxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MTZjMmJhYjUyNTExYmQzN2QyYzBlNWNhNWU1ZDUxZmIzZjEyNTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5IjAY6THvNfoFuBLLz8eMB8SJh/4 7GBhyBpNUxRJfseZ6v+6AysJfuq3BEYe+EWJFSz77YeXBgSvroFYUyZQlyjZ4Jh9 +8UULasqfkhscMPAEIvx5ve4z7FCm7hXg0DzH3BZmIWnvKVfLeCISiIFwMc9GaqY vGXcm48srU0g/wSlCDtz85Gle4CsqImGib4Uor4hUTVRZzMm7aQcKQ/cWKX9Qw34 Ge/OU2XDWg9ckFc88nSld7R7gke9t4kItHLOXeuKxWrJuDUN/xhA963svndTbfAN 9Jc5bYhkt4bLlEaDNEaRAyUDuSctgH1bx9Lf8inlre1ocr3sF+aevq2pLwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFHFsK6tSURvTfSwOXKXl1R+z8SWEMB8GA1UdIwQY MBaAFAPIAVe1ZCbOOl9DyJ/rHUN8d8vOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQThnQlY3VmtKczQ2WDBQSW4tc2RRM3gzeTg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9kNzE2YWEtZGE4MC00OTNiLWFkZjEt ZjAxNGY4MTc3OTZhLzEvY1d3cnExSlJHOU45TEE1Y3BlWFZIN1B4SllRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9kNzE2YWEtZGE4MC00OTNiLWFkZjEtZjAxNGY4MTc3OTZh LzEvQThnQlY3VmtKczQ2WDBQSW4tc2RRM3gzeTg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAuS2UAwQA wb1ZMA0EAgACMAcDBQMqE73AMA0GCSqGSIb3DQEBCwUAA4IBAQCpIceK8LdtyjdQ 4SRIJWePUSnHSXTNciKNqFZOEdi6Pr6olN7wbT++BzIOoYAuEBqc4oPp6MoV2AAj IWv2svxugkl4d/XbdyidInsfWv8Sh0bML1pybcA0ebZHWsuLTok6aRh912XcoVQO mcoQDx3sPkJlJBHsVSywwDNk2T6Qub6yqYV3F05OYLkfVjwz7JIudebUiL487glz X5pVJcpzCy2ByMlUWMLNqUuK0G0kgSwI434gXAYEc0A47TVeZ9GnHwfOQ+9vuViC 5UFivs1VzzhmsFiCgdMyIXibq7Tc3g/SBX1bHZHCDCucsypqQ4hfOTWyVikNH4bK f2lSkcdv -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:39 2026 by rpki-client