This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/w3-U6QTjwjx2LthhwV-CiXVr5Rc.roa File: w3-U6QTjwjx2LthhwV-CiXVr5Rc.roa (raw, json) Hash identifier: PWMEv0CcKJ0vtIX9njxBJUPNvzvEBW+53XF7Q2go1SY= Subject key identifier: C3:7F:94:E9:04:E3:C2:3C:76:2E:D8:61:C1:5F:82:89:75:6B:E5:17 Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Certificate serial: 019B7F15933DF50EE74040A44795F103A2A3 Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/w3-U6QTjwjx2LthhwV-CiXVr5Rc.roa Signing time: Fri 02 Jan 2026 14:21:18 +0000 ROA not before: Fri 02 Jan 2026 14:21:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6762 IP address blocks: 2.16.19.0/24 maxlen: 24 2.16.70.0/23 maxlen: 23 2.16.146.0/23 maxlen: 23 2.16.220.0/22 maxlen: 22 2.18.0.0/22 maxlen: 22 2.19.16.0/20 maxlen: 20 2.20.4.0/22 maxlen: 22 2.20.109.0/24 maxlen: 24 2.20.110.0/24 maxlen: 24 2.20.112.0/22 maxlen: 22 2.20.242.0/24 maxlen: 24 2.20.252.0/24 maxlen: 24 2.21.2.0/24 maxlen: 24 2.21.14.0/24 maxlen: 24 2.21.100.0/22 maxlen: 22 2.22.216.0/22 maxlen: 22 2.22.234.0/24 maxlen: 24 88.221.28.0/22 maxlen: 22 88.221.100.0/22 maxlen: 22 92.122.68.0/22 maxlen: 22 92.122.225.0/24 maxlen: 24 92.122.248.0/22 maxlen: 22 92.123.48.0/24 maxlen: 24 92.123.106.0/24 maxlen: 24 92.123.208.0/22 maxlen: 22 95.100.136.0/22 maxlen: 22 95.101.35.0/24 maxlen: 24 95.101.68.0/22 maxlen: 22 95.101.78.0/24 maxlen: 24 95.101.114.0/24 maxlen: 24 95.101.156.0/22 maxlen: 22 2a02:26f0:b00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:93:3d:f5:0e:e7:40:40:a4:47:95:f1:03:a2:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa Validity Not Before: Jan 2 14:21:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c37f94e904e3c23c762ed861c15f8289756be517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:28:37:13:fb:e6:cc:d4:2e:c2:ca:df:e0:8c: d6:56:d8:c4:55:1d:02:b3:5a:1c:c3:b9:51:e5:0d: 34:58:21:96:55:a4:de:22:bd:c4:27:73:31:cb:f2: f6:68:b9:ad:5c:5f:07:42:3c:54:8f:7e:7e:d2:ee: 00:67:3b:37:04:a5:e3:29:56:72:32:b2:10:be:c0: e3:a8:1b:b3:42:16:db:5f:af:c1:57:a3:84:a4:e6: 58:40:98:17:b3:53:a5:ed:d2:10:99:ec:90:e7:ca: 97:4a:92:f9:3f:ab:0b:85:9b:8d:a0:7d:4d:29:34: a6:5f:f0:85:0a:47:0d:50:41:33:b3:69:1e:06:32: 2f:be:3d:75:4b:70:e4:6c:22:f9:d5:a6:52:a8:c1: ca:af:56:02:a9:a6:30:f4:fa:4b:48:ab:1d:5b:09: 93:64:16:8f:51:df:52:0d:27:4b:89:7f:50:fb:d9: fb:77:dc:f0:f4:6b:fa:1f:06:07:2f:6a:d6:36:d3: fa:c3:7a:58:c5:f5:67:cf:6e:97:3e:99:ce:5b:ca: 48:99:bf:ef:fa:63:cf:44:f9:db:01:c2:9b:1d:de: 79:2a:16:ae:9b:cd:b0:9e:0e:78:30:ef:7a:73:d7: c1:f2:0d:96:be:fa:45:03:e0:12:c5:12:9c:0a:58: 9f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:7F:94:E9:04:E3:C2:3C:76:2E:D8:61:C1:5F:82:89:75:6B:E5:17 X509v3 Authority Key Identifier: keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/w3-U6QTjwjx2LthhwV-CiXVr5Rc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.16.19.0/24 2.16.70.0/23 2.16.146.0/23 2.16.220.0/22 2.18.0.0/22 2.19.16.0/20 2.20.4.0/22 2.20.109.0-2.20.110.255 2.20.112.0/22 2.20.242.0/24 2.20.252.0/24 2.21.2.0/24 2.21.14.0/24 2.21.100.0/22 2.22.216.0/22 2.22.234.0/24 88.221.28.0/22 88.221.100.0/22 92.122.68.0/22 92.122.225.0/24 92.122.248.0/22 92.123.48.0/24 92.123.106.0/24 92.123.208.0/22 95.100.136.0/22 95.101.35.0/24 95.101.68.0/22 95.101.78.0/24 95.101.114.0/24 95.101.156.0/22 IPv6: 2a02:26f0:b00::/48 Signature Algorithm: sha256WithRSAEncryption 2d:99:dc:69:56:4b:78:a2:80:43:a7:90:95:b3:fa:49:d4:16: d1:aa:c4:21:ef:44:d9:10:65:e6:83:f5:ad:3b:8a:85:99:2f: 82:8d:ef:14:95:79:84:e1:22:04:18:6c:19:0b:9d:8d:9e:b9: b9:3e:4e:a0:bc:ff:2a:34:11:ce:7c:ef:1d:8c:75:85:b8:3d: 67:2a:55:86:fa:b6:d7:cb:88:72:0c:d9:0e:45:1c:41:43:5e: 6f:51:7f:70:07:10:fc:61:05:65:aa:f8:dd:60:9a:ac:5a:41: 0a:04:3b:79:89:5d:4e:75:87:a3:66:a2:ae:33:33:f3:77:40: 80:51:ef:b7:5a:bf:06:ad:7d:25:d3:97:13:d5:17:3b:83:af: 75:f5:fe:06:94:00:97:84:71:69:bc:53:c5:80:ea:14:e2:71: 7b:7d:5d:57:b9:d5:89:82:b0:00:b3:14:01:92:c2:4e:e8:09: f9:fe:0b:fa:9a:96:2e:d2:49:62:d7:ce:37:29:16:ef:44:cc: c8:08:6a:b0:4c:b1:66:c8:28:41:2e:98:8e:0a:db:c4:e8:92: bb:78:b1:c1:80:51:57:5e:a7:99:a5:6c:c8:5c:85:5f:c1:c6: 12:02:50:55:60:d1:55:7c:4c:a5:5b:36:8b:ea:48:c5:a6:83: ab:97:aa:37 -----BEGIN CERTIFICATE----- MIIFyTCCBLGgAwIBAgISAZt/FZM99Q7nQECkR5XxA6KjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5 YmQ2YWEwHhcNMjYwMTAyMTQyMTE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzdmOTRlOTA0ZTNjMjNjNzYyZWQ4NjFjMTVmODI4OTc1NmJlNTE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryg3E/vmzNQuwsrf4IzWVtjEVR0C s1ocw7lR5Q00WCGWVaTeIr3EJ3Mxy/L2aLmtXF8HQjxUj35+0u4AZzs3BKXjKVZy MrIQvsDjqBuzQhbbX6/BV6OEpOZYQJgXs1Ol7dIQmeyQ58qXSpL5P6sLhZuNoH1N KTSmX/CFCkcNUEEzs2keBjIvvj11S3DkbCL51aZSqMHKr1YCqaYw9PpLSKsdWwmT ZBaPUd9SDSdLiX9Q+9n7d9zw9Gv6HwYHL2rWNtP6w3pYxfVnz26XPpnOW8pImb/v +mPPRPnbAcKbHd55Khaum82wng54MO96c9fB8g2WvvpFA+ASxRKcClif1wIDAQAB o4IC1TCCAtEwHQYDVR0OBBYEFMN/lOkE48I8di7YYcFfgol1a+UXMB8GA1UdIwQY MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt ODhkMWNhYzllNGYxLzEvdzMtVTZRVGp3angyTHRoaHdWLUNpWFZyNVJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIHqBggrBgEFBQcBBwEB/wSB2jCB1zCBwwQCAAEwgbwDBAAC EBMDBAECEEYDBAECEJIDBAICENwDBAICEgADBAQCExADBAICFAQwDAMEAAIUbQME AAIUbgMEAgIUcAMEAAIU8gMEAAIU/AMEAAIVAgMEAAIVDgMEAgIVZAMEAgIW2AME AAIW6gMEAljdHAMEAljdZAMEAlx6RAMEAFx64QMEAlx6+AMEAFx7MAMEAFx7agME Alx70AMEAl9kiAMEAF9lIwMEAl9lRAMEAF9lTgMEAF9lcgMEAl9lnDAPBAIAAjAJ AwcAKgIm8AsAMA0GCSqGSIb3DQEBCwUAA4IBAQAtmdxpVkt4ooBDp5CVs/pJ1BbR qsQh70TZEGXmg/WtO4qFmS+Cje8UlXmE4SIEGGwZC52Nnrm5Pk6gvP8qNBHOfO8d jHWFuD1nKlWG+rbXy4hyDNkORRxBQ15vUX9wBxD8YQVlqvjdYJqsWkEKBDt5iV1O dYejZqKuMzPzd0CAUe+3Wr8GrX0l05cT1Rc7g6919f4GlACXhHFpvFPFgOoU4nF7 fV1XudWJgrAAsxQBksJO6An5/gv6mpYu0kli1843KRbvRMzICGqwTLFmyChBLpiO CtvE6JK7eLHBgFFXXqeZpWzIXIVfwcYSAlBVYNFVfEylWzaL6kjFpoOrl6o3 -----END CERTIFICATE-----Generated at Tue Jan 20 21:16:53 2026 by rpki-client