This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/wWIoMzB39ahvaptJv9NhKUQr9Cw.roa File: wWIoMzB39ahvaptJv9NhKUQr9Cw.roa (raw, json) Hash identifier: 7GV/ae9yumSfYZH3dmuAGtWW+nlGHJx1A9VViiivwD8= Subject key identifier: C1:62:28:33:30:77:F5:A8:6F:6A:9B:49:BF:D3:61:29:44:2B:F4:2C Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c Certificate serial: 019B78A33B5B452CDE3E6E8DC2E32D83E9CD Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/wWIoMzB39ahvaptJv9NhKUQr9Cw.roa Signing time: Thu 01 Jan 2026 08:18:42 +0000 ROA not before: Thu 01 Jan 2026 08:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 395954 IP address blocks: 171.22.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:3b:5b:45:2c:de:3e:6e:8d:c2:e3:2d:83:e9:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c Validity Not Before: Jan 1 08:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c16228333077f5a86f6a9b49bfd36129442bf42c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1a:10:4c:51:45:75:f9:8d:ec:95:5b:ec:fd: 34:60:0e:73:29:d4:ca:41:04:f8:f1:3e:bf:42:c2: 2a:85:d4:80:2d:a8:4b:bc:af:58:49:28:f0:45:17: 50:6a:ec:aa:61:12:b6:51:a1:da:15:3d:9a:f3:12: 43:f1:33:e7:50:ad:a0:5c:bc:c8:e7:e0:38:eb:c9: 6b:cc:3f:df:51:d4:4e:0d:8d:7f:be:99:d6:97:b4: 50:df:e3:6c:85:fa:6f:c4:e0:50:ec:1a:28:56:81: b2:9b:9d:4a:d0:33:35:e4:8a:71:91:e9:44:dd:84: 9e:50:a0:9d:9c:dc:33:2f:61:10:cc:c3:67:6c:8f: 14:96:b3:db:bd:de:9e:80:40:27:7c:42:2c:f3:04: 83:6f:79:d5:d0:d3:f9:7e:6b:4e:ac:97:9b:1f:b4: 9b:bd:4f:d2:6f:80:84:2d:d2:6a:7f:01:8b:ce:b5: fc:db:b0:2d:3e:94:c6:35:cc:1e:8e:61:55:d5:3c: 3b:94:a9:0c:23:49:67:8b:7b:17:82:b0:00:d5:fc: d4:a9:0a:25:e4:dc:cc:9f:3e:0d:35:bc:07:46:a0: d0:95:d6:95:7f:38:de:9b:1e:81:21:44:cc:99:2d: f1:80:ef:27:0f:95:7d:e5:a5:54:ca:d1:36:13:53: 8a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:62:28:33:30:77:F5:A8:6F:6A:9B:49:BF:D3:61:29:44:2B:F4:2C X509v3 Authority Key Identifier: keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/wWIoMzB39ahvaptJv9NhKUQr9Cw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 171.22.191.0/24 Signature Algorithm: sha256WithRSAEncryption a3:31:1f:85:76:e0:d9:90:ec:b8:db:ea:78:73:eb:60:7f:c4: 2f:48:3b:61:ad:85:91:67:6a:1c:81:0f:06:39:9e:90:ea:45: a8:9b:a8:5b:6e:20:bf:2c:f2:2a:18:f4:b8:9f:59:5e:7f:a1: 93:03:01:49:ab:c0:b7:7e:cd:e1:c9:48:ca:6f:5e:f6:1a:65: 71:6d:c9:86:56:f7:36:b1:dd:ae:83:83:1d:a9:a7:7a:4e:68: 32:ab:28:ed:37:4f:a6:cc:3d:1f:bc:66:9a:02:75:f7:cd:36: 42:49:22:b7:f7:74:61:86:ce:de:09:91:3a:db:e5:13:e0:43: 1c:50:e0:83:64:9c:f4:cd:57:76:bb:b6:4c:4a:fd:9c:79:04: 06:c4:2f:da:28:87:5f:ca:5b:8a:7f:66:69:1b:a2:c1:fa:cf: 22:79:46:d7:c9:49:ad:1c:ed:7e:60:fc:7e:e7:b2:80:fc:d7: d9:7f:ff:49:35:08:75:f8:b4:1b:19:19:2c:f2:19:08:56:4e: b4:df:0c:8f:1b:d5:0c:af:a4:02:cc:63:05:c2:19:e3:1d:f5: 88:4b:2d:a2:b9:3f:e0:97:a5:81:a7:c3:f7:22:c8:3b:a6:6b: 73:4b:62:0a:18:2b:fe:6e:8b:01:40:93:a0:e0:68:c5:5d:d5: 6e:45:1f:60 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4oztbRSzePm6NwuMtg+nNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNDQ2ZGE3YTcwYmNlNzczZWMyYmMxNjU1YWFlMzBjM2Mx ODQxMmMwHhcNMjYwMTAxMDgxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTYyMjgzMzMwNzdmNWE4NmY2YTliNDliZmQzNjEyOTQ0MmJmNDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBoQTFFFdfmN7JVb7P00YA5zKdTK QQT48T6/QsIqhdSALahLvK9YSSjwRRdQauyqYRK2UaHaFT2a8xJD8TPnUK2gXLzI 5+A468lrzD/fUdRODY1/vpnWl7RQ3+NshfpvxOBQ7BooVoGym51K0DM15IpxkelE 3YSeUKCdnNwzL2EQzMNnbI8UlrPbvd6egEAnfEIs8wSDb3nV0NP5fmtOrJebH7Sb vU/Sb4CELdJqfwGLzrX827AtPpTGNcwejmFV1Tw7lKkMI0lni3sXgrAA1fzUqQol 5NzMnz4NNbwHRqDQldaVfzjemx6BIUTMmS3xgO8nD5V95aVUytE2E1OKYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMFiKDMwd/Wob2qbSb/TYSlEK/QsMB8GA1UdIwQY MBaAFCNEbaenC853PsK8FlWq4ww8GEEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQt MjVjYzlkNmNmYmI5LzEvd1dJb016QjM5YWh2YXB0SnY5TmhLVVFyOUN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQtMjVjYzlkNmNmYmI5 LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqxa/MA0G CSqGSIb3DQEBCwUAA4IBAQCjMR+FduDZkOy42+p4c+tgf8QvSDthrYWRZ2ocgQ8G OZ6Q6kWom6hbbiC/LPIqGPS4n1lef6GTAwFJq8C3fs3hyUjKb172GmVxbcmGVvc2 sd2ug4Mdqad6TmgyqyjtN0+mzD0fvGaaAnX3zTZCSSK393Rhhs7eCZE62+UT4EMc UOCDZJz0zVd2u7ZMSv2ceQQGxC/aKIdfyluKf2ZpG6LB+s8ieUbXyUmtHO1+YPx+ 57KA/NfZf/9JNQh1+LQbGRks8hkIVk603wyPG9UMr6QCzGMFwhnjHfWISy2iuT/g l6WBp8P3Isg7pmtzS2IKGCv+bosBQJOg4GjFXdVuRR9g -----END CERTIFICATE-----Generated at Wed Jan 21 10:29:18 2026 by rpki-client