This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/W3l5JRhPuthx-ykoXQXBD_xsWjQ.roa File: W3l5JRhPuthx-ykoXQXBD_xsWjQ.roa (raw, json) Hash identifier: ZdAWG0LeOjORysxwVmV4ixsOS0/0z5BY+UNn11FxoO0= Subject key identifier: 5B:79:79:25:18:4F:BA:D8:71:FB:29:28:5D:05:C1:0F:FC:6C:5A:34 Certificate issuer: /CN=de8b8549e8cf71e91faa63b40791e6bfbbfdac04 Certificate serial: 019B7A5ABE232548B6D452E679B1A1CBE802 Authority key identifier: DE:8B:85:49:E8:CF:71:E9:1F:AA:63:B4:07:91:E6:BF:BB:FD:AC:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/W3l5JRhPuthx-ykoXQXBD_xsWjQ.roa Signing time: Thu 01 Jan 2026 16:18:45 +0000 ROA not before: Thu 01 Jan 2026 16:18:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204429 IP address blocks: 185.217.84.0/24 maxlen: 24 185.217.85.0/24 maxlen: 24 185.217.86.0/24 maxlen: 24 185.217.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:be:23:25:48:b6:d4:52:e6:79:b1:a1:cb:e8:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8b8549e8cf71e91faa63b40791e6bfbbfdac04 Validity Not Before: Jan 1 16:18:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b797925184fbad871fb29285d05c10ffc6c5a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b6:39:a6:1a:02:98:e4:3d:07:e4:67:cd:5e: bd:91:ed:ab:93:12:7b:14:ff:91:6a:37:dd:29:33: ab:10:ed:84:62:bf:db:90:2a:7e:56:ec:08:10:df: 34:04:72:04:c8:b2:50:d3:27:02:9c:c4:bb:64:97: 2f:f0:05:3f:e5:77:6d:92:cf:bb:1e:60:4e:e1:8f: ea:06:b2:c6:a2:d7:0a:a0:d1:a8:a3:ae:ae:6e:2b: 55:9b:43:9a:b6:19:d6:3a:8c:fe:ff:90:8f:2b:c7: f3:3f:43:35:0d:86:fd:86:f4:e8:71:94:66:a6:f3: 93:57:63:ff:27:11:14:6c:a7:e7:d8:88:73:92:1b: 4c:cf:c7:3f:a7:25:59:da:2e:37:cb:a4:2e:dd:9e: c6:f1:56:9c:f2:9f:87:41:2f:9f:cb:0c:27:1a:db: 62:2d:87:c1:4f:66:be:45:16:84:a0:f3:ba:2c:c9: 2e:d8:31:cf:9f:2a:c9:4a:d0:8e:df:4d:b8:1a:66: 7a:12:6c:0f:3d:e6:76:98:24:83:7e:c8:2d:03:41: 7b:ad:f2:80:a8:cd:b0:c7:44:70:18:71:84:f4:ad: 6a:9e:0d:fd:89:83:a1:24:38:a9:30:27:8c:d7:85: fa:71:30:bf:73:ff:da:42:c9:de:26:c0:53:46:fa: f4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:79:79:25:18:4F:BA:D8:71:FB:29:28:5D:05:C1:0F:FC:6C:5A:34 X509v3 Authority Key Identifier: keyid:DE:8B:85:49:E8:CF:71:E9:1F:AA:63:B4:07:91:E6:BF:BB:FD:AC:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/W3l5JRhPuthx-ykoXQXBD_xsWjQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.217.84.0/22 Signature Algorithm: sha256WithRSAEncryption ac:59:67:af:de:ee:49:9c:6c:9a:d9:93:a5:84:78:06:eb:3f: 94:eb:53:8a:4c:ce:59:ae:80:09:dc:24:6c:ff:5b:02:70:9c: fb:b1:9c:3c:a1:bb:fc:2c:7d:89:29:e3:18:3c:b0:2c:45:9a: 48:8a:31:44:c7:09:e3:64:44:d2:88:19:92:c0:4a:24:68:7a: c4:e1:2b:03:a5:b5:b3:7f:d8:a9:ce:de:d5:5d:62:23:dc:39: 0b:00:02:16:11:ae:32:ee:da:e7:75:75:48:f8:f0:b7:9f:1c: 1e:e4:5c:5a:27:60:f1:1b:8a:67:f8:c5:2d:ed:ec:ea:05:59: 14:4c:56:2d:42:11:7e:65:7e:0b:84:46:5e:e9:f0:e0:6d:b3: 5c:f2:b8:e7:bd:18:f8:b5:39:47:8e:ae:36:c0:a3:8b:04:26: ce:a6:b6:8c:7b:77:5a:25:08:2b:42:71:3f:65:de:99:97:10: d6:f9:2b:1e:cb:b7:43:d4:b4:5b:86:dc:ae:12:8c:1e:b1:b6: 9a:92:3c:fa:80:e8:ad:5a:c1:ef:d4:81:23:79:fd:2c:d5:22: 4f:29:f4:a0:f7:c2:57:45:a5:f0:4b:ae:ca:c8:60:8a:d6:9d: da:2f:72:d4:91:2f:b4:72:dd:7d:74:27:d4:aa:19:12:00:7e: e0:a3:bf:07 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6Wr4jJUi21FLmebGhy+gCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRlOGI4NTQ5ZThjZjcxZTkxZmFhNjNiNDA3OTFlNmJmYmJm ZGFjMDQwHhcNMjYwMTAxMTYxODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1Yjc5NzkyNTE4NGZiYWQ4NzFmYjI5Mjg1ZDA1YzEwZmZjNmM1YTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7Y5phoCmOQ9B+RnzV69ke2rkxJ7 FP+RajfdKTOrEO2EYr/bkCp+VuwIEN80BHIEyLJQ0ycCnMS7ZJcv8AU/5Xdtks+7 HmBO4Y/qBrLGotcKoNGoo66ubitVm0OathnWOoz+/5CPK8fzP0M1DYb9hvTocZRm pvOTV2P/JxEUbKfn2IhzkhtMz8c/pyVZ2i43y6Qu3Z7G8Vac8p+HQS+fywwnGtti LYfBT2a+RRaEoPO6LMku2DHPnyrJStCO3024GmZ6EmwPPeZ2mCSDfsgtA0F7rfKA qM2wx0RwGHGE9K1qng39iYOhJDipMCeM14X6cTC/c//aQsneJsBTRvr04QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFt5eSUYT7rYcfspKF0FwQ/8bFo0MB8GA1UdIwQY MBaAFN6LhUnoz3HpH6pjtAeR5r+7/awEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM291RlNlalBjZWtmcW1PMEI1SG12N3Y5ckFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8zNjI1M2YtY2Q4ZS00ZmQwLWFlMzct ZTkzNzA5OTczM2MzLzEvVzNsNUpSaFB1dGh4LXlrb1hRWEJEX3hzV2pRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni8zNjI1M2YtY2Q4ZS00ZmQwLWFlMzctZTkzNzA5OTczM2Mz LzEvM291RlNlalBjZWtmcW1PMEI1SG12N3Y5ckFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCudlUMA0G CSqGSIb3DQEBCwUAA4IBAQCsWWev3u5JnGya2ZOlhHgG6z+U61OKTM5ZroAJ3CRs /1sCcJz7sZw8obv8LH2JKeMYPLAsRZpIijFExwnjZETSiBmSwEokaHrE4SsDpbWz f9ipzt7VXWIj3DkLAAIWEa4y7trndXVI+PC3nxwe5FxaJ2DxG4pn+MUt7ezqBVkU TFYtQhF+ZX4LhEZe6fDgbbNc8rjnvRj4tTlHjq42wKOLBCbOpraMe3daJQgrQnE/ Zd6ZlxDW+Ssey7dD1LRbhtyuEowesbaakjz6gOitWsHv1IEjef0s1SJPKfSg98JX RaXwS67KyGCK1p3aL3LUkS+0ct19dCfUqhkSAH7go78H -----END CERTIFICATE-----Generated at Tue Feb 10 06:28:40 2026 by rpki-client