This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/w1wNaZIvMRJnoozdT1TDE7kCVow.roa File: w1wNaZIvMRJnoozdT1TDE7kCVow.roa (raw, json) Hash identifier: E0/VohT7nhtAjUkv2fngpxTDGPJCtOqq6N6469B3dSU= Subject key identifier: C3:5C:0D:69:92:2F:31:12:67:A2:8C:DD:4F:54:C3:13:B9:02:56:8C Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Certificate serial: 019B7F846FA3A0CC627B430C84DBB622EA7B Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/w1wNaZIvMRJnoozdT1TDE7kCVow.roa Signing time: Fri 02 Jan 2026 16:22:24 +0000 ROA not before: Fri 02 Jan 2026 16:22:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203445 IP address blocks: 213.14.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:6f:a3:a0:cc:62:7b:43:0c:84:db:b6:22:ea:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9 Validity Not Before: Jan 2 16:22:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c35c0d69922f311267a28cdd4f54c313b902568c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:1e:bc:84:a2:5d:e3:51:c3:32:67:b4:50:74: 36:e9:50:1f:c4:9c:0c:55:86:ba:81:02:c3:17:73: 2b:90:5b:ed:eb:64:21:f2:5d:a6:5d:1e:74:af:ba: f8:48:34:6f:bb:e0:57:ef:f2:92:2e:de:72:46:38: 78:d8:0f:b5:e1:aa:76:89:53:54:12:02:4a:19:17: 07:e1:5d:8e:56:18:c2:ad:73:48:2d:0e:4c:8b:ef: 6f:39:09:07:fa:e5:fa:6e:03:51:63:70:14:58:d7: 67:6a:92:9e:88:c3:15:dd:db:60:32:ab:d7:c8:ad: b2:d7:10:2b:97:d7:c7:99:c7:99:4a:ed:71:3c:a9: a7:d7:8f:b2:bc:84:0a:09:95:d9:97:31:9c:6d:f7: b8:01:99:c6:12:b7:c8:98:df:a0:4a:dd:be:d9:89: 80:df:70:0b:ec:8b:74:00:e4:00:4d:c1:5b:36:70: 54:ec:de:13:f3:f7:50:4c:f6:79:cd:9a:ec:78:23: 59:68:31:c1:6f:66:0f:5d:b7:21:e7:71:99:c4:b9: 2f:a2:47:6d:f8:8a:bc:e6:68:26:d7:58:76:12:57: 91:9a:ac:bc:04:03:fd:e4:11:ca:87:9b:ad:f4:69: 58:71:98:95:37:99:8d:2d:be:24:68:20:2d:0f:6a: a7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:5C:0D:69:92:2F:31:12:67:A2:8C:DD:4F:54:C3:13:B9:02:56:8C X509v3 Authority Key Identifier: keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/w1wNaZIvMRJnoozdT1TDE7kCVow.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.14.248.0/24 Signature Algorithm: sha256WithRSAEncryption 53:64:bb:07:d3:b5:b1:56:90:3d:30:ac:60:84:cc:db:a2:02: b3:ec:ba:41:b1:cb:19:4e:16:33:2d:91:fc:b6:81:a5:45:ea: 51:db:51:bd:89:c0:fc:09:dc:37:34:33:30:c3:9b:a6:18:36: be:2a:b1:1b:41:bc:3e:4b:d6:d6:18:d6:e4:1f:6c:d9:d6:69: 8a:13:b0:64:79:8d:a5:81:54:ee:1a:b0:0a:fb:b5:56:72:6a: d4:9c:cc:5c:a1:b9:fb:9d:b1:ce:29:b9:71:25:f5:96:6c:3e: de:9e:04:9d:bf:aa:16:6c:37:22:7e:d3:36:7e:ff:e1:25:f8: 89:49:f8:40:42:7e:44:22:f6:e2:60:c6:67:1b:26:d2:c6:3b: 4a:f0:97:7d:8a:09:6f:e9:d9:6d:75:0d:c0:90:eb:cd:8b:4b: ec:c7:3c:02:57:6d:23:99:1b:a2:99:f2:28:4c:4b:ff:9a:58: c3:19:d3:70:7f:b9:2a:33:6f:4f:29:32:79:85:83:8c:27:24: 30:25:ed:4a:63:c8:56:d5:62:6b:39:7a:c7:67:40:8f:e6:32: 05:e0:72:5b:0c:08:8a:77:64:01:06:b6:8a:b7:f9:68:88:4d: 4f:3a:36:a6:fb:77:1d:ee:4a:5e:36:26:63:78:4c:c1:bf:5c: aa:9e:05:36 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/hG+joMxie0MMhNu2Iup7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm YmQzZTkwHhcNMjYwMTAyMTYyMjI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzVjMGQ2OTkyMmYzMTEyNjdhMjhjZGQ0ZjU0YzMxM2I5MDI1NjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjh68hKJd41HDMme0UHQ26VAfxJwM VYa6gQLDF3MrkFvt62Qh8l2mXR50r7r4SDRvu+BX7/KSLt5yRjh42A+14ap2iVNU EgJKGRcH4V2OVhjCrXNILQ5Mi+9vOQkH+uX6bgNRY3AUWNdnapKeiMMV3dtgMqvX yK2y1xArl9fHmceZSu1xPKmn14+yvIQKCZXZlzGcbfe4AZnGErfImN+gSt2+2YmA 33AL7It0AOQATcFbNnBU7N4T8/dQTPZ5zZrseCNZaDHBb2YPXbch53GZxLkvokdt +Iq85mgm11h2EleRmqy8BAP95BHKh5ut9GlYcZiVN5mNLb4kaCAtD2qnUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMNcDWmSLzESZ6KM3U9UwxO5AlaMMB8GA1UdIwQY MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt ZjJiZTlmNmM2NjRjLzEvdzF3TmFaSXZNUkpub296ZFQxVERFN2tDVm93LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUtZjJiZTlmNmM2NjRj LzEvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1Q74MA0G CSqGSIb3DQEBCwUAA4IBAQBTZLsH07WxVpA9MKxghMzbogKz7LpBscsZThYzLZH8 toGlRepR21G9icD8Cdw3NDMww5umGDa+KrEbQbw+S9bWGNbkH2zZ1mmKE7BkeY2l gVTuGrAK+7VWcmrUnMxcobn7nbHOKblxJfWWbD7engSdv6oWbDciftM2fv/hJfiJ SfhAQn5EIvbiYMZnGybSxjtK8Jd9iglv6dltdQ3AkOvNi0vsxzwCV20jmRuimfIo TEv/mljDGdNwf7kqM29PKTJ5hYOMJyQwJe1KY8hW1WJrOXrHZ0CP5jIF4HJbDAiK d2QBBraKt/loiE1POjam+3cd7kpeNiZjeEzBv1yqngU2 -----END CERTIFICATE-----Generated at Mon Jan 26 11:34:32 2026 by rpki-client