This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/w_Wa0wD__W-7hV6kmJB918f1cJo.roa File: w_Wa0wD__W-7hV6kmJB918f1cJo.roa (raw, json) Hash identifier: C4Uw91d9LL/AG2jXrMrWXAg0TWd/WGopSgMDOACQucM= Subject key identifier: C3:F5:9A:D3:00:FF:FD:6F:BB:85:5E:A4:98:90:7D:D7:C7:F5:70:9A Certificate issuer: /CN=c13e341c1e14d35a7496ce7828e3055f863935cf Certificate serial: 019B7E38D03115508E116CCAE1304D8EE1D0 Authority key identifier: C1:3E:34:1C:1E:14:D3:5A:74:96:CE:78:28:E3:05:5F:86:39:35:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wT40HB4U01p0ls54KOMFX4Y5Nc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/w_Wa0wD__W-7hV6kmJB918f1cJo.roa Signing time: Fri 02 Jan 2026 10:20:11 +0000 ROA not before: Fri 02 Jan 2026 10:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206561 IP address blocks: 185.173.188.0/24 maxlen: 24 185.173.189.0/24 maxlen: 24 185.173.190.0/24 maxlen: 24 185.173.191.0/24 maxlen: 24 2a0f:46c0::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/wT40HB4U01p0ls54KOMFX4Y5Nc8.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/wT40HB4U01p0ls54KOMFX4Y5Nc8.mft rsync://rpki.ripe.net/repository/DEFAULT/wT40HB4U01p0ls54KOMFX4Y5Nc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:d0:31:15:50:8e:11:6c:ca:e1:30:4d:8e:e1:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c13e341c1e14d35a7496ce7828e3055f863935cf Validity Not Before: Jan 2 10:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c3f59ad300fffd6fbb855ea498907dd7c7f5709a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9b:1f:66:59:ae:23:50:16:d0:fd:0c:84:cb: 10:73:39:6e:5f:d2:98:7c:2b:6a:c4:9f:ea:97:52: 8f:ee:77:a4:7f:2f:1a:15:db:b2:13:6d:1e:cd:be: d8:ff:7f:70:12:68:38:ec:73:40:a7:41:6b:b9:32: e0:16:e7:37:57:a4:85:ca:d3:56:4a:1e:fe:d0:a3: 93:df:79:35:62:29:b6:0b:dd:60:48:6e:d1:9b:9c: 57:3a:96:e7:41:1f:3d:d6:87:58:01:71:7f:7c:5b: b8:f9:b6:bc:11:b2:15:e0:60:ec:6e:fe:95:f6:18: eb:82:e4:74:e0:cb:44:82:39:82:4f:21:a8:4b:14: 85:64:15:df:50:53:7e:b9:6f:49:68:3a:a9:7e:7e: 1a:ba:1c:58:61:0c:32:88:6c:d2:b9:f6:0f:38:87: 95:9b:ac:b4:35:ce:3f:ce:37:be:5c:56:ba:36:21: 5c:ba:15:cc:46:54:5a:87:ea:bc:0f:13:d1:fa:c2: 14:0e:20:61:91:9a:c7:6b:c9:80:72:76:d9:96:35: e0:25:53:ff:1a:73:0f:ce:cf:66:34:fe:89:20:e1: db:9b:4d:1e:05:a6:7e:cf:bc:cc:b6:45:f1:31:8d: bf:a8:68:b5:aa:dd:f8:2e:d2:ec:18:d5:32:8e:73: 4a:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F5:9A:D3:00:FF:FD:6F:BB:85:5E:A4:98:90:7D:D7:C7:F5:70:9A X509v3 Authority Key Identifier: keyid:C1:3E:34:1C:1E:14:D3:5A:74:96:CE:78:28:E3:05:5F:86:39:35:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wT40HB4U01p0ls54KOMFX4Y5Nc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/w_Wa0wD__W-7hV6kmJB918f1cJo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a4abf3-4af3-4180-8340-b13a1f20d15f/1/wT40HB4U01p0ls54KOMFX4Y5Nc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.173.188.0/22 IPv6: 2a0f:46c0::/29 Signature Algorithm: sha256WithRSAEncryption 9d:da:e9:55:8b:9a:4c:4f:a3:70:1a:5f:72:f3:ff:16:2c:7c: fc:f2:82:f3:08:aa:ff:1a:6b:2d:8d:a7:3d:3a:33:95:a7:d5: 92:fb:e1:14:d5:36:06:21:fc:77:27:e6:71:05:6d:32:60:b0: df:1c:87:90:7e:23:ee:7c:a8:15:5e:fb:f7:7f:ee:c4:fa:31: f1:8e:24:73:83:c7:46:9b:26:98:e8:10:d9:b4:da:fe:66:e1: 59:cc:2a:6d:fc:d4:bf:6d:79:ce:8b:25:6c:db:b4:d2:49:54: 58:31:55:6b:bf:68:6c:26:fd:63:27:ff:7d:f2:8f:39:bf:18: 6d:f8:f3:99:db:9c:96:64:01:8a:09:9e:a2:b1:83:d4:91:d1: 12:74:d4:63:c1:14:1d:fe:1d:43:b9:e4:9a:29:c1:1e:ad:50: 66:eb:25:56:de:1d:09:c9:80:1a:83:8b:a7:06:31:07:72:64: a3:d9:00:1d:31:fe:21:16:31:a0:e2:47:9c:ef:6b:9a:26:e7: ff:d9:4b:a2:59:16:b5:17:c2:d6:aa:37:4e:af:f1:ff:cd:b8: a8:fa:1c:85:62:b6:8e:b1:03:bd:bd:50:c5:2b:73:89:fb:cc: 77:bd:b7:ce:a1:3d:a8:38:3b:82:82:1c:08:f3:02:5c:07:f7: d3:4c:e8:f3 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+ONAxFVCOEWzK4TBNjuHQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxM2UzNDFjMWUxNGQzNWE3NDk2Y2U3ODI4ZTMwNTVmODYz OTM1Y2YwHhcNMjYwMTAyMTAyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjM2Y1OWFkMzAwZmZmZDZmYmI4NTVlYTQ5ODkwN2RkN2M3ZjU3MDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypsfZlmuI1AW0P0MhMsQczluX9KY fCtqxJ/ql1KP7nekfy8aFduyE20ezb7Y/39wEmg47HNAp0FruTLgFuc3V6SFytNW Sh7+0KOT33k1Yim2C91gSG7Rm5xXOpbnQR891odYAXF/fFu4+ba8EbIV4GDsbv6V 9hjrguR04MtEgjmCTyGoSxSFZBXfUFN+uW9JaDqpfn4auhxYYQwyiGzSufYPOIeV m6y0Nc4/zje+XFa6NiFcuhXMRlRah+q8DxPR+sIUDiBhkZrHa8mAcnbZljXgJVP/ GnMPzs9mNP6JIOHbm00eBaZ+z7zMtkXxMY2/qGi1qt34LtLsGNUyjnNK7QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMP1mtMA//1vu4VepJiQfdfH9XCaMB8GA1UdIwQY MBaAFME+NBweFNNadJbOeCjjBV+GOTXPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1Q0MEhCNFUwMXAwbHM1NEtPTUZYNFk1TmM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9hNGFiZjMtNGFmMy00MTgwLTgzNDAt YjEzYTFmMjBkMTVmLzEvd19XYTB3RF9fVy03aFY2a21KQjkxOGYxY0pvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9hNGFiZjMtNGFmMy00MTgwLTgzNDAtYjEzYTFmMjBkMTVm LzEvd1Q0MEhCNFUwMXAwbHM1NEtPTUZYNFk1TmM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCua28MA0E AgACMAcDBQMqD0bAMA0GCSqGSIb3DQEBCwUAA4IBAQCd2ulVi5pMT6NwGl9y8/8W LHz88oLzCKr/Gmstjac9OjOVp9WS++EU1TYGIfx3J+ZxBW0yYLDfHIeQfiPufKgV Xvv3f+7E+jHxjiRzg8dGmyaY6BDZtNr+ZuFZzCpt/NS/bXnOiyVs27TSSVRYMVVr v2hsJv1jJ/998o85vxht+POZ25yWZAGKCZ6isYPUkdESdNRjwRQd/h1DueSaKcEe rVBm6yVW3h0JyYAag4unBjEHcmSj2QAdMf4hFjGg4kec72uaJuf/2UuiWRa1F8LW qjdOr/H/zbio+hyFYraOsQO9vVDFK3OJ+8x3vbfOoT2oODuCghwI8wJcB/fTTOjz -----END CERTIFICATE-----Generated at Mon Feb 9 21:00:12 2026 by rpki-client