This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/wP20WFZup3bISfc_Az9m_KnK__k.roa File: wP20WFZup3bISfc_Az9m_KnK__k.roa (raw, json) Hash identifier: 8g/UdUihVktN9azZ2xN449i/gKlFKKRPLjoY2fK8Miw= Subject key identifier: C0:FD:B4:58:56:6E:A7:76:C8:49:F7:3F:03:3F:66:FC:A9:CA:FF:F9 Certificate issuer: /CN=23aee94d0fff6c6c752a6942ffa962ae37c7e6b6 Certificate serial: 019B7D5AEA3411EAD897C30C6FCACAE3411F Authority key identifier: 23:AE:E9:4D:0F:FF:6C:6C:75:2A:69:42:FF:A9:62:AE:37:C7:E6:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/wP20WFZup3bISfc_Az9m_KnK__k.roa Signing time: Fri 02 Jan 2026 06:17:48 +0000 ROA not before: Fri 02 Jan 2026 06:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56337 IP address blocks: 185.101.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 09:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:ea:34:11:ea:d8:97:c3:0c:6f:ca:ca:e3:41:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23aee94d0fff6c6c752a6942ffa962ae37c7e6b6 Validity Not Before: Jan 2 06:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0fdb458566ea776c849f73f033f66fca9cafff9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:67:70:0d:bb:db:fc:cc:b0:bc:9f:a5:be:74: 8c:47:ff:f9:0c:f5:a2:f4:e2:08:68:10:4c:dd:c9: 26:99:e5:b6:c1:c1:a2:a8:9b:be:1f:c5:b3:18:8e: df:94:e6:3b:c7:c0:bf:c9:a3:df:db:fc:a0:b8:88: c9:89:5d:d4:7f:ac:24:68:e4:7f:ec:88:34:1c:f2: 11:2e:23:4c:3e:79:c5:14:b0:89:99:a2:0d:e6:ee: 9b:bd:4b:39:cb:da:7e:13:e9:ad:f1:07:ab:45:14: 1f:28:3f:72:a2:b6:fe:69:35:cb:c9:24:bf:78:33: 4b:f4:7a:f1:fb:c8:13:e9:63:ea:0b:ba:e5:38:a4: e1:08:1a:82:85:55:b6:0f:dc:ba:58:5a:b0:16:4c: e5:70:d7:c3:bc:ac:11:51:09:72:93:b1:77:a0:e4: e4:88:25:24:eb:8c:45:b3:da:56:e4:13:b6:b8:51: 29:67:2d:18:7e:92:ef:5a:ba:de:9e:ad:61:a0:91: 6b:43:d5:41:78:d2:eb:0b:c4:74:82:e2:8a:d9:6e: a2:c4:7f:78:3f:4d:bf:63:24:18:c7:72:83:3a:a9: cb:56:ba:fa:9a:e8:82:3a:f0:eb:37:74:6f:d8:e5: d6:4a:00:55:de:be:1e:c8:ec:0c:67:49:58:16:22: e1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:FD:B4:58:56:6E:A7:76:C8:49:F7:3F:03:3F:66:FC:A9:CA:FF:F9 X509v3 Authority Key Identifier: keyid:23:AE:E9:4D:0F:FF:6C:6C:75:2A:69:42:FF:A9:62:AE:37:C7:E6:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/wP20WFZup3bISfc_Az9m_KnK__k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.101.18.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:13:d0:41:5d:86:70:e9:81:7f:16:89:e2:b6:c0:9a:73:ef: 71:eb:b6:5e:73:d0:b7:97:97:fa:00:eb:20:82:ed:e4:ba:b5: 57:9e:b4:72:45:80:18:6b:e6:7a:4c:0d:a2:a6:58:b7:c5:a2: c4:3a:cd:14:59:1b:9f:f0:f4:40:df:f6:64:11:bf:23:eb:7d: e7:a9:f1:b8:44:22:35:46:55:8f:36:f2:34:ba:4f:d7:aa:96: a6:da:8a:11:42:c5:57:dc:2e:b0:9b:cc:35:af:5c:64:aa:60: 50:a5:74:8c:80:ae:e1:eb:83:54:4a:23:71:bb:c8:63:d4:e8: a4:33:0a:24:2c:c3:d2:23:f7:d9:bb:04:31:c7:62:10:2a:0b: c1:ad:c1:31:85:bd:4e:85:1b:5e:ba:6f:d2:c4:c8:e7:24:41: ac:58:92:0c:fa:dc:77:56:ca:fb:af:88:76:eb:8f:2e:de:5a: 84:41:aa:92:7c:2f:08:64:cb:21:44:a4:70:33:64:d3:08:9b: 80:1a:2c:60:5f:4c:4c:03:07:72:23:0c:6e:3b:d1:7d:e4:04: ce:a0:b7:f6:f0:00:77:ec:51:2b:a3:54:c0:0f:4b:a9:63:0a: f2:d5:c9:4f:05:43:53:a9:79:22:1e:05:80:05:74:62:9c:fe: 3d:e0:64:af -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9Wuo0EerYl8MMb8rK40EfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzYWVlOTRkMGZmZjZjNmM3NTJhNjk0MmZmYTk2MmFlMzdj N2U2YjYwHhcNMjYwMTAyMDYxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMGZkYjQ1ODU2NmVhNzc2Yzg0OWY3M2YwMzNmNjZmY2E5Y2FmZmY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WdwDbvb/MywvJ+lvnSMR//5DPWi 9OIIaBBM3ckmmeW2wcGiqJu+H8WzGI7flOY7x8C/yaPf2/yguIjJiV3Uf6wkaOR/ 7Ig0HPIRLiNMPnnFFLCJmaIN5u6bvUs5y9p+E+mt8QerRRQfKD9yorb+aTXLySS/ eDNL9Hrx+8gT6WPqC7rlOKThCBqChVW2D9y6WFqwFkzlcNfDvKwRUQlyk7F3oOTk iCUk64xFs9pW5BO2uFEpZy0YfpLvWrrenq1hoJFrQ9VBeNLrC8R0guKK2W6ixH94 P02/YyQYx3KDOqnLVrr6muiCOvDrN3Rv2OXWSgBV3r4eyOwMZ0lYFiLhSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMD9tFhWbqd2yEn3PwM/Zvypyv/5MB8GA1UdIwQY MBaAFCOu6U0P/2xsdSppQv+pYq43x+a2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTY3cFRRX19iR3gxS21sQ182bGlyamZINXJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kNzAyNjItZjg3Yy00MTI2LWFmODUt YTMxODUzZTY5OTdhLzEvd1AyMFdGWnVwM2JJU2ZjX0F6OW1fS25LX19rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9kNzAyNjItZjg3Yy00MTI2LWFmODUtYTMxODUzZTY5OTdh LzEvSTY3cFRRX19iR3gxS21sQ182bGlyamZINXJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWUSMA0G CSqGSIb3DQEBCwUAA4IBAQA/E9BBXYZw6YF/FonitsCac+9x67Zec9C3l5f6AOsg gu3kurVXnrRyRYAYa+Z6TA2ipli3xaLEOs0UWRuf8PRA3/ZkEb8j633nqfG4RCI1 RlWPNvI0uk/Xqpam2ooRQsVX3C6wm8w1r1xkqmBQpXSMgK7h64NUSiNxu8hj1Oik MwokLMPSI/fZuwQxx2IQKgvBrcExhb1OhRteum/SxMjnJEGsWJIM+tx3Vsr7r4h2 648u3lqEQaqSfC8IZMshRKRwM2TTCJuAGixgX0xMAwdyIwxuO9F95ATOoLf28AB3 7FEro1TAD0upYwry1clPBUNTqXkiHgWABXRinP494GSv -----END CERTIFICATE-----Generated at Mon Feb 2 17:17:20 2026 by rpki-client