This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/wsFDs0k_i43xFHAOdnBr2BMkzX0.roa File: wsFDs0k_i43xFHAOdnBr2BMkzX0.roa (raw, json) Hash identifier: TtkJrd9Ep6l68yC5CkOYpRhWIjpFiNmgnjq9PKBAW0Q= Subject key identifier: C2:C1:43:B3:49:3F:8B:8D:F1:14:70:0E:76:70:6B:D8:13:24:CD:7D Certificate issuer: /CN=d06989a9cd6bd2f2c3c0dec608a28be3d3ba4e81 Certificate serial: 019B7FF20733DA4FF4387EB4EEBF85EDAF9E Authority key identifier: D0:69:89:A9:CD:6B:D2:F2:C3:C0:DE:C6:08:A2:8B:E3:D3:BA:4E:81 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0GmJqc1r0vLDwN7GCKKL49O6ToE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/wsFDs0k_i43xFHAOdnBr2BMkzX0.roa Signing time: Fri 02 Jan 2026 18:22:06 +0000 ROA not before: Fri 02 Jan 2026 18:22:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48661 IP address blocks: 94.230.144.0/20 maxlen: 21 185.224.112.0/22 maxlen: 23 2a00:c500::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.crl rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.mft rsync://rpki.ripe.net/repository/DEFAULT/0GmJqc1r0vLDwN7GCKKL49O6ToE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:07:33:da:4f:f4:38:7e:b4:ee:bf:85:ed:af:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d06989a9cd6bd2f2c3c0dec608a28be3d3ba4e81 Validity Not Before: Jan 2 18:22:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2c143b3493f8b8df114700e76706bd81324cd7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:41:31:c1:1d:64:97:ab:e5:43:31:0c:9e:50: fa:3e:9f:6f:be:bc:88:81:08:23:42:e4:f6:c5:c6: b3:c1:c6:dc:85:e7:23:cc:2a:90:c2:e4:9f:6b:44: b2:44:c0:9c:2f:d8:53:a9:4a:38:da:f0:d0:4c:0e: e4:d6:13:4c:9f:3f:ee:9c:fe:74:c2:2b:e5:3b:76: c8:7c:6a:ae:b5:1c:8d:e8:04:55:80:0d:78:71:eb: 81:46:3a:fb:7e:a3:fc:10:b7:67:81:9b:06:2b:c3: 99:0b:7b:06:3f:90:69:0c:f4:01:d5:18:72:dd:a3: f9:4e:6d:a7:7e:c9:22:f3:53:f4:bd:e2:72:d5:ec: c3:8b:d7:b8:e1:7f:3e:eb:b8:40:64:07:75:d9:b2: 50:7a:fa:5e:e4:9a:1b:ac:d2:2e:ca:bf:10:89:c4: 86:31:20:c9:9f:84:4a:51:c6:a0:e5:42:29:45:83: 37:b0:37:fe:3d:7f:0b:36:3b:83:f1:80:ec:21:0e: 37:31:14:b5:e9:00:2a:cc:4a:34:f8:b8:db:65:66: c2:8c:58:73:1e:5a:f2:66:36:bb:ad:d0:d0:c2:21: e7:fd:9b:ea:20:2e:37:b1:e6:f4:00:09:96:d2:8e: 2c:69:2c:31:06:32:6b:21:94:bc:af:5a:c8:1e:2a: 72:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:C1:43:B3:49:3F:8B:8D:F1:14:70:0E:76:70:6B:D8:13:24:CD:7D X509v3 Authority Key Identifier: keyid:D0:69:89:A9:CD:6B:D2:F2:C3:C0:DE:C6:08:A2:8B:E3:D3:BA:4E:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0GmJqc1r0vLDwN7GCKKL49O6ToE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/wsFDs0k_i43xFHAOdnBr2BMkzX0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.230.144.0/20 185.224.112.0/22 IPv6: 2a00:c500::/32 Signature Algorithm: sha256WithRSAEncryption 03:7b:c1:f4:a7:b6:24:65:f1:8c:0a:6c:1b:92:7d:55:db:b5: b8:5e:55:83:40:89:7a:90:45:a9:a1:04:2f:28:b7:53:e2:12: 37:7d:91:2f:96:b5:0a:e4:c5:d9:66:ff:95:18:50:8b:69:d7: f9:a9:ea:1b:a6:f5:08:8b:2c:1b:f1:89:5c:3f:ee:b4:ba:10: 11:f5:fb:67:7c:3e:5c:2f:08:1a:00:c6:9a:32:78:59:18:f3: 08:49:84:51:04:ca:97:6c:0b:64:b4:cc:14:45:fc:32:01:40: 21:98:77:92:a4:1b:e8:8b:bb:79:0d:18:37:0b:c0:6b:8e:1f: 1f:cf:1a:b2:11:23:ff:f7:9d:48:2e:d0:9d:66:ce:38:b4:b2: f4:80:95:c6:3c:94:79:4a:7a:87:8a:92:5c:5a:c3:44:d4:d8: 04:f1:65:43:80:5b:e3:c1:09:3c:cf:21:12:19:14:04:2f:ba: ab:72:ec:d6:af:53:b9:25:d7:d7:fe:c3:bd:4f:16:77:89:87: 10:51:c2:13:02:09:87:f3:77:2c:21:7f:3f:38:d9:0d:eb:8a: 80:03:03:76:8b:eb:8e:92:88:16:19:07:36:92:c0:ba:81:1b: 72:fc:ba:c8:81:85:ae:6b:14:8d:04:39:75:4f:3f:22:3d:82: 6d:a0:0a:af -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/8gcz2k/0OH607r+F7a+eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwNjk4OWE5Y2Q2YmQyZjJjM2MwZGVjNjA4YTI4YmUzZDNi YTRlODEwHhcNMjYwMTAyMTgyMjA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMmMxNDNiMzQ5M2Y4YjhkZjExNDcwMGU3NjcwNmJkODEzMjRjZDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkExwR1kl6vlQzEMnlD6Pp9vvryI gQgjQuT2xcazwcbchecjzCqQwuSfa0SyRMCcL9hTqUo42vDQTA7k1hNMnz/unP50 wivlO3bIfGqutRyN6ARVgA14ceuBRjr7fqP8ELdngZsGK8OZC3sGP5BpDPQB1Rhy 3aP5Tm2nfski81P0veJy1ezDi9e44X8+67hAZAd12bJQevpe5JobrNIuyr8QicSG MSDJn4RKUcag5UIpRYM3sDf+PX8LNjuD8YDsIQ43MRS16QAqzEo0+LjbZWbCjFhz HlryZja7rdDQwiHn/ZvqIC43seb0AAmW0o4saSwxBjJrIZS8r1rIHipywQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFMLBQ7NJP4uN8RRwDnZwa9gTJM19MB8GA1UdIwQY MBaAFNBpianNa9Lyw8Dexgiii+PTuk6BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEdtSnFjMXIwdkxEd043R0NLS0w0OU82VG9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC81ZTZmZDMtNjdlZi00NWFiLWE0MjAt NDg3N2ZjNTlkMzE5LzEvd3NGRHMwa19pNDN4RkhBT2RuQnIyQk1relgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC81ZTZmZDMtNjdlZi00NWFiLWE0MjAtNDg3N2ZjNTlkMzE5 LzEvMEdtSnFjMXIwdkxEd043R0NLS0w0OU82VG9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEXuaQAwQC ueBwMA0EAgACMAcDBQAqAMUAMA0GCSqGSIb3DQEBCwUAA4IBAQADe8H0p7YkZfGM Cmwbkn1V27W4XlWDQIl6kEWpoQQvKLdT4hI3fZEvlrUK5MXZZv+VGFCLadf5qeob pvUIiywb8YlcP+60uhAR9ftnfD5cLwgaAMaaMnhZGPMISYRRBMqXbAtktMwURfwy AUAhmHeSpBvoi7t5DRg3C8Brjh8fzxqyESP/951ILtCdZs44tLL0gJXGPJR5SnqH ipJcWsNE1NgE8WVDgFvjwQk8zyESGRQEL7qrcuzWr1O5JdfX/sO9TxZ3iYcQUcIT AgmH83csIX8/ONkN64qAAwN2i+uOkogWGQc2ksC6gRty/LrIgYWuaxSNBDl1Tz8i PYJtoAqv -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:18 2026 by rpki-client