This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/w4SYF93bZ7mEac54Bcw2Oj2Zjm0.roa File: w4SYF93bZ7mEac54Bcw2Oj2Zjm0.roa (raw, json) Hash identifier: AiCzf27YzXL7TiAwTl4rqi9Bv4ePafNZNaFvG1buGG0= Subject key identifier: C3:84:98:17:DD:DB:67:B9:84:69:CE:78:05:CC:36:3A:3D:99:8E:6D Certificate issuer: /CN=d4336d5e74f1f8b7db1329f00bb857241ae74d19 Certificate serial: 019BE5FB4E3EB7E69D30602C0E4AA36839C9 Authority key identifier: D4:33:6D:5E:74:F1:F8:B7:DB:13:29:F0:0B:B8:57:24:1A:E7:4D:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/w4SYF93bZ7mEac54Bcw2Oj2Zjm0.roa Signing time: Thu 22 Jan 2026 13:53:30 +0000 ROA not before: Thu 22 Jan 2026 13:53:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214319 IP address blocks: 185.125.143.0/24 maxlen: 24 2a01:e680::/29 maxlen: 120 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e5:fb:4e:3e:b7:e6:9d:30:60:2c:0e:4a:a3:68:39:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4336d5e74f1f8b7db1329f00bb857241ae74d19 Validity Not Before: Jan 22 13:53:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3849817dddb67b98469ce7805cc363a3d998e6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a3:8a:cd:a6:a9:2f:0c:c4:e9:e3:83:62:7b: 20:38:66:9f:a9:0c:54:43:c1:20:ad:f6:b8:98:51: 4a:12:41:56:e0:a9:62:41:6a:5b:5e:d4:b9:fe:47: 9c:88:91:94:29:67:87:81:e8:b6:ac:db:2c:16:c2: 93:fb:24:86:c8:5d:9b:fb:cb:c3:a1:50:d4:6a:fb: 21:a0:9b:6f:40:bf:c5:81:ad:22:40:a7:fc:97:e4: 13:c3:2e:22:bc:ab:65:f7:79:ac:69:7c:ee:3a:21: 0c:a4:92:ec:4d:12:ad:43:f5:e2:d4:fb:4e:36:d9: e5:a8:71:dc:d9:25:25:80:45:d2:c0:6e:a8:8b:7e: c3:d7:9f:f6:8e:ce:95:76:19:f9:2c:54:36:22:87: b8:1f:00:a7:14:23:da:5c:4d:a2:59:42:eb:9c:24: d0:f4:93:c9:7e:4d:ad:b5:da:0d:a7:99:9a:89:c8: 83:58:ec:0f:a0:71:12:99:a4:d5:5e:bf:52:df:e3: e3:f3:f7:4f:e0:bf:3c:1a:17:4d:d7:53:a4:88:9b: bb:3a:ce:8e:d7:08:78:e4:db:e5:90:60:6b:fb:a9: 58:d9:06:21:30:32:a2:26:25:6d:15:fb:b1:3d:ed: 12:21:bf:d4:49:6f:5a:26:7e:85:0e:a9:f5:60:9a: 66:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:84:98:17:DD:DB:67:B9:84:69:CE:78:05:CC:36:3A:3D:99:8E:6D X509v3 Authority Key Identifier: keyid:D4:33:6D:5E:74:F1:F8:B7:DB:13:29:F0:0B:B8:57:24:1A:E7:4D:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/w4SYF93bZ7mEac54Bcw2Oj2Zjm0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.125.143.0/24 IPv6: 2a01:e680::/29 Signature Algorithm: sha256WithRSAEncryption 22:1e:c2:e5:88:73:50:f6:c1:b2:dd:a2:e6:15:ee:41:86:04: b4:af:a2:5d:14:3e:27:24:4e:07:37:9f:eb:6c:54:f5:7b:c1: 55:f0:53:84:84:f9:ab:6a:63:35:5e:ab:2f:1a:6b:da:18:e8: 81:bc:cf:30:e1:be:e5:b0:79:21:35:60:68:11:9b:d3:91:af: f8:0e:85:79:20:a3:2d:19:d8:fd:25:48:d7:ed:76:95:96:5c: 21:64:e5:b6:ec:6a:9f:e1:ed:d7:ab:31:d6:9d:29:da:c4:a1: 96:eb:2e:fd:9d:06:76:85:0d:53:8f:03:bc:a1:3e:01:63:3a: c3:61:f0:6e:47:7e:44:dc:5b:ad:74:ea:ba:ff:08:64:1f:9d: 2b:70:bb:c1:a4:d8:be:1f:1e:be:a4:61:56:fd:a9:b7:61:6b: 97:ae:e0:6e:8e:d0:56:d6:40:9b:87:eb:82:91:f8:58:ff:c7: 56:0f:38:0d:7d:0a:f3:33:17:f1:d1:4a:73:95:df:c7:b9:0c: 6a:1a:a0:66:5e:da:33:f6:fe:66:00:12:19:d1:8c:36:bd:2c: d7:c4:f2:21:95:63:47:ce:e7:b9:69:e1:78:ab:09:29:c8:14: 5b:d4:0d:5e:68:c7:f6:2f:48:15:1a:55:0a:5b:f3:85:d8:1f: 0d:48:fe:c0 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZvl+04+t+adMGAsDkqjaDnJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0MzM2ZDVlNzRmMWY4YjdkYjEzMjlmMDBiYjg1NzI0MWFl NzRkMTkwHhcNMjYwMTIyMTM1MzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzg0OTgxN2RkZGI2N2I5ODQ2OWNlNzgwNWNjMzYzYTNkOTk4ZTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaOKzaapLwzE6eODYnsgOGafqQxU Q8Egrfa4mFFKEkFW4KliQWpbXtS5/keciJGUKWeHgei2rNssFsKT+ySGyF2b+8vD oVDUavshoJtvQL/Fga0iQKf8l+QTwy4ivKtl93msaXzuOiEMpJLsTRKtQ/Xi1PtO NtnlqHHc2SUlgEXSwG6oi37D15/2js6Vdhn5LFQ2Ioe4HwCnFCPaXE2iWULrnCTQ 9JPJfk2ttdoNp5maiciDWOwPoHESmaTVXr9S3+Pj8/dP4L88GhdN11OkiJu7Os6O 1wh45NvlkGBr+6lY2QYhMDKiJiVtFfuxPe0SIb/USW9aJn6FDqn1YJpmwQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMOEmBfd22e5hGnOeAXMNjo9mY5tMB8GA1UdIwQY MBaAFNQzbV508fi32xMp8Au4VyQa500ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUROdFhuVHgtTGZiRXlud0M3aFhKQnJuVFJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zYTZiZGQtMGQzYy00YTBkLThkYjYt MmRkMjUxODRiMGQwLzEvdzRTWUY5M2JaN21FYWM1NEJjdzJPajJaam0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8zYTZiZGQtMGQzYy00YTBkLThkYjYtMmRkMjUxODRiMGQw LzEvMUROdFhuVHgtTGZiRXlud0M3aFhKQnJuVFJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuX2PMA0E AgACMAcDBQMqAeaAMA0GCSqGSIb3DQEBCwUAA4IBAQAiHsLliHNQ9sGy3aLmFe5B hgS0r6JdFD4nJE4HN5/rbFT1e8FV8FOEhPmramM1XqsvGmvaGOiBvM8w4b7lsHkh NWBoEZvTka/4DoV5IKMtGdj9JUjX7XaVllwhZOW27Gqf4e3XqzHWnSnaxKGW6y79 nQZ2hQ1TjwO8oT4BYzrDYfBuR35E3FutdOq6/whkH50rcLvBpNi+Hx6+pGFW/am3 YWuXruBujtBW1kCbh+uCkfhY/8dWDzgNfQrzMxfx0Upzld/HuQxqGqBmXtoz9v5m ABIZ0Yw2vSzXxPIhlWNHzue5aeF4qwkpyBRb1A1eaMf2L0gVGlUKW/OF2B8NSP7A -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:22 2026 by rpki-client