This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/8WgF1FeeAMIWLEqNHsEmrCFfWUU.roa File: 8WgF1FeeAMIWLEqNHsEmrCFfWUU.roa (raw, json) Hash identifier: l9CCrON/4HDYrH0Vj7tQlkfUKI21p0hKJL3nNR+WrZ4= Subject key identifier: F1:68:05:D4:57:9E:00:C2:16:2C:4A:8D:1E:C1:26:AC:21:5F:59:45 Certificate issuer: /CN=e2c6816e0a3a2f616c3aa77a36b4caf7a9224034 Certificate serial: 019B7C803A3D278FC7AAA47108683124DA18 Authority key identifier: E2:C6:81:6E:0A:3A:2F:61:6C:3A:A7:7A:36:B4:CA:F7:A9:22:40:34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/8WgF1FeeAMIWLEqNHsEmrCFfWUU.roa Signing time: Fri 02 Jan 2026 02:18:56 +0000 ROA not before: Fri 02 Jan 2026 02:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 680 IP address blocks: 134.102.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Jan 2026 05:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:3a:3d:27:8f:c7:aa:a4:71:08:68:31:24:da:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2c6816e0a3a2f616c3aa77a36b4caf7a9224034 Validity Not Before: Jan 2 02:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f16805d4579e00c2162c4a8d1ec126ac215f5945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:af:be:30:68:a4:a3:c0:72:55:8a:d2:88:59: b1:10:60:12:05:04:8d:4b:16:7c:b3:78:88:1b:f7: 6c:76:eb:b3:d4:c3:ed:5d:29:a1:b1:1c:5f:b4:90: 43:64:88:5b:03:7c:16:8d:47:01:c4:ba:fb:ae:7a: ff:25:bd:23:00:79:75:b1:16:25:7a:a8:42:a4:01: cb:e2:89:fa:cc:de:db:0c:bf:8b:96:4c:44:45:95: ca:d3:d2:ac:67:3a:88:4c:f1:e7:57:30:e9:95:27: ba:80:6e:45:16:d2:31:66:4a:9a:ab:a7:55:2c:fa: c3:90:09:1d:88:a2:d8:41:3e:97:de:53:06:7b:aa: 7a:dd:23:f3:06:4e:59:24:c4:f5:76:8e:66:e2:fe: 57:ed:a5:e8:13:88:7f:58:7b:13:42:0f:83:9f:8a: c8:94:1d:9e:02:88:9e:59:7d:69:84:a7:c0:c1:8f: 49:58:56:53:da:bd:8c:f8:35:7e:8f:8f:f0:ef:c9: 62:cb:cd:88:ce:b5:a4:d5:e6:1d:f9:51:61:c6:12: 4f:8d:fe:eb:69:8a:71:f1:b3:8c:48:d1:3a:03:60: b3:ce:f7:14:70:40:8c:91:cf:35:52:ea:d3:44:d6: b8:d5:ad:46:78:fb:7d:74:0c:25:a3:a5:42:77:f5: 49:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:68:05:D4:57:9E:00:C2:16:2C:4A:8D:1E:C1:26:AC:21:5F:59:45 X509v3 Authority Key Identifier: keyid:E2:C6:81:6E:0A:3A:2F:61:6C:3A:A7:7A:36:B4:CA:F7:A9:22:40:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/8WgF1FeeAMIWLEqNHsEmrCFfWUU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.102.0.0/16 Signature Algorithm: sha256WithRSAEncryption 59:95:f9:00:da:82:91:a6:5c:0c:69:84:a3:a0:73:40:3c:87: cd:86:24:70:27:9c:f9:16:88:42:fb:af:1d:5d:82:f9:ac:2e: f7:a8:c5:9f:49:70:2f:3c:13:e3:c2:f3:df:19:98:b1:e0:9f: 08:22:83:b6:e0:6f:38:79:64:70:13:16:f5:b4:a1:bd:8e:65: c1:67:69:8a:d5:e5:dc:3a:16:01:2b:bf:aa:20:af:2f:7c:70: 96:ff:5c:af:73:ff:4b:55:3a:98:5d:6a:6f:5a:e1:81:9f:ee: 89:34:ff:00:ea:12:85:9b:77:ac:05:8e:e9:8e:36:da:78:29: f6:f0:b8:cb:78:d6:89:ea:81:9f:d8:a6:5f:6e:15:1d:c8:63: 14:b8:04:f4:ad:1d:e2:c6:ad:45:d2:81:e3:c5:39:67:ed:36: 4e:be:cc:97:2c:25:bb:c4:ee:66:bb:70:3b:7d:69:c4:fa:0a: 0b:af:e9:89:61:97:fd:dd:2a:72:b3:76:10:07:c6:67:fa:24: 77:d3:00:4d:60:99:3c:1f:1d:e0:0f:54:70:99:79:5c:fa:ae: 2f:86:73:22:a7:51:15:e3:c9:9d:7a:84:da:28:93:e9:a9:8a: c9:02:7b:58:59:e0:70:4e:17:93:21:c6:e3:ca:25:ef:5b:35: 80:97:f6:39 -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt8gDo9J4/HqqRxCGgxJNoYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYzY4MTZlMGEzYTJmNjE2YzNhYTc3YTM2YjRjYWY3YTky MjQwMzQwHhcNMjYwMTAyMDIxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMTY4MDVkNDU3OWUwMGMyMTYyYzRhOGQxZWMxMjZhYzIxNWY1OTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16++MGiko8ByVYrSiFmxEGASBQSN SxZ8s3iIG/dsduuz1MPtXSmhsRxftJBDZIhbA3wWjUcBxLr7rnr/Jb0jAHl1sRYl eqhCpAHL4on6zN7bDL+LlkxERZXK09KsZzqITPHnVzDplSe6gG5FFtIxZkqaq6dV LPrDkAkdiKLYQT6X3lMGe6p63SPzBk5ZJMT1do5m4v5X7aXoE4h/WHsTQg+Dn4rI lB2eAoieWX1phKfAwY9JWFZT2r2M+DV+j4/w78liy82IzrWk1eYd+VFhxhJPjf7r aYpx8bOMSNE6A2CzzvcUcECMkc81UurTRNa41a1GePt9dAwlo6VCd/VJtwIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFPFoBdRXngDCFixKjR7BJqwhX1lFMB8GA1UdIwQY MBaAFOLGgW4KOi9hbDqneja0yvepIkA0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHNhQmJnbzZMMkZzT3FkNk5yVEs5NmtpUURRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zYmE3Y2QtZTgxNS00NWNlLTkyZTEt MjAyYzUxNzIwYWI3LzEvOFdnRjFGZWVBTUlXTEVxTkhzRW1yQ0ZmV1VVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS8zYmE3Y2QtZTgxNS00NWNlLTkyZTEtMjAyYzUxNzIwYWI3 LzEvNHNhQmJnbzZMMkZzT3FkNk5yVEs5NmtpUURRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhmYwDQYJ KoZIhvcNAQELBQADggEBAFmV+QDagpGmXAxphKOgc0A8h82GJHAnnPkWiEL7rx1d gvmsLveoxZ9JcC88E+PC898ZmLHgnwgig7bgbzh5ZHATFvW0ob2OZcFnaYrV5dw6 FgErv6ogry98cJb/XK9z/0tVOphdam9a4YGf7ok0/wDqEoWbd6wFjumONtp4Kfbw uMt41onqgZ/Ypl9uFR3IYxS4BPStHeLGrUXSgePFOWftNk6+zJcsJbvE7ma7cDt9 acT6Cguv6Ylhl/3dKnKzdhAHxmf6JHfTAE1gmTwfHeAPVHCZeVz6ri+GcyKnURXj yZ16hNook+mpiskCe1hZ4HBOF5MhxuPKJe9bNYCX9jk= -----END CERTIFICATE-----Generated at Tue Jan 27 11:25:14 2026 by rpki-client