This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/PWOIsM1RgkYVqSbqLsT7k73pFWQ.roa File: PWOIsM1RgkYVqSbqLsT7k73pFWQ.roa (raw, json) Hash identifier: 9bdrQrsfFHUHU7k9g9RNN8b9Hzrdzx2GE2UfmdhgdoI= Subject key identifier: 3D:63:88:B0:CD:51:82:46:15:A9:26:EA:2E:C4:FB:93:BD:E9:15:64 Certificate issuer: /CN=ac4f3157599b66f28cbc5a2eed36fba23f03d2ce Certificate serial: 019B7A5B6D8BE62EE7D40AC03FA5EFF753D7 Authority key identifier: AC:4F:31:57:59:9B:66:F2:8C:BC:5A:2E:ED:36:FB:A2:3F:03:D2:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rE8xV1mbZvKMvFou7Tb7oj8D0s4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/PWOIsM1RgkYVqSbqLsT7k73pFWQ.roa Signing time: Thu 01 Jan 2026 16:19:30 +0000 ROA not before: Thu 01 Jan 2026 16:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41848 IP address blocks: 83.137.8.0/21 maxlen: 21 2a02:ea8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.mft rsync://rpki.ripe.net/repository/DEFAULT/rE8xV1mbZvKMvFou7Tb7oj8D0s4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:6d:8b:e6:2e:e7:d4:0a:c0:3f:a5:ef:f7:53:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac4f3157599b66f28cbc5a2eed36fba23f03d2ce Validity Not Before: Jan 1 16:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3d6388b0cd51824615a926ea2ec4fb93bde91564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:b8:c0:38:6f:ca:b6:cd:65:08:5c:dd:54:dd: a4:cf:bc:f1:c1:97:3c:e3:27:18:45:9b:ec:63:3d: 4f:eb:5d:c9:fa:da:e3:5a:42:e5:c9:9a:6b:7f:80: 0f:72:0e:e8:8e:84:6d:af:e6:8d:71:9b:6c:b9:4b: 88:8a:45:7a:8c:82:ed:5c:8c:4c:d4:11:0c:ad:05: 96:96:08:4b:6a:7f:1b:f1:e5:81:78:a4:8e:c4:34: dd:f9:0d:a7:1e:3b:bb:46:2e:ed:ff:d7:f8:2a:6e: 5d:69:5b:61:3a:2d:57:28:30:78:1e:45:04:2f:1f: fc:09:49:91:7c:11:9e:a1:2f:a7:53:6b:ac:75:53: 71:15:14:54:24:ac:52:bc:42:99:86:23:00:6d:1b: 56:4a:a4:88:69:5e:5a:ef:fc:e1:77:11:24:46:a1: 17:03:38:cb:b1:ed:5a:b2:b7:a7:24:27:00:3f:9e: 8f:12:9f:4a:53:93:7a:33:f6:d2:77:0b:43:d5:01: 2e:c4:18:e7:0f:00:d5:c7:99:8e:4f:5f:fd:17:d5: 5a:36:1c:68:f5:c1:db:c8:fb:fa:d8:c3:21:18:b4: 85:42:13:fa:5c:60:2a:8e:c5:5f:f0:05:ec:21:7e: 9b:a5:a0:f7:e4:a4:3e:2c:2e:df:70:06:cb:09:ff: 53:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:63:88:B0:CD:51:82:46:15:A9:26:EA:2E:C4:FB:93:BD:E9:15:64 X509v3 Authority Key Identifier: keyid:AC:4F:31:57:59:9B:66:F2:8C:BC:5A:2E:ED:36:FB:A2:3F:03:D2:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rE8xV1mbZvKMvFou7Tb7oj8D0s4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/PWOIsM1RgkYVqSbqLsT7k73pFWQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/11488d-c66a-4006-8f62-250980e75bdf/1/rE8xV1mbZvKMvFou7Tb7oj8D0s4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 83.137.8.0/21 IPv6: 2a02:ea8::/32 Signature Algorithm: sha256WithRSAEncryption 1c:3e:ad:33:bc:f4:b5:28:44:24:cf:39:d1:e9:f0:37:c0:1a: f9:00:77:48:00:c6:e7:72:5e:c8:05:0c:04:9f:2e:c4:f4:10: 82:f0:86:68:b1:9d:ba:3a:f0:49:f1:15:34:a5:a4:a1:57:2b: 45:08:84:2a:78:23:11:94:0c:f8:de:d1:30:88:1a:77:01:e9: 95:00:06:f0:c6:5d:de:b2:fd:0f:34:ed:8d:a1:3f:d9:be:5b: ed:55:38:b1:c5:8a:c3:15:af:a7:15:6b:e4:1b:bc:e0:48:12: 43:8b:7c:86:4c:44:d0:9e:74:93:bb:85:02:b1:b7:a1:3a:72: 0a:e2:d3:92:71:ef:1e:3d:b3:1c:48:e6:eb:d7:2e:51:85:9a: b8:15:eb:62:81:60:48:7c:e0:86:20:c2:a8:28:2b:9a:e7:dc: 6d:d8:9c:2c:64:81:b9:1e:12:27:5a:4f:5b:df:7b:89:dc:bc: 5d:8e:3f:97:e6:78:c8:a6:c9:7f:6a:25:4c:30:01:7c:af:01: c3:20:45:e5:75:5b:74:42:bf:91:bb:f9:30:10:5b:d2:ba:da: c4:04:f9:d2:b5:bb:c0:d3:d1:be:92:74:b8:55:cb:7b:e6:9e: b5:f4:e5:c3:3b:af:15:2f:1b:03:77:30:0c:6d:3e:dc:a3:8e: 40:d1:66:95 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6W22L5i7n1ArAP6Xv91PXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjNGYzMTU3NTk5YjY2ZjI4Y2JjNWEyZWVkMzZmYmEyM2Yw M2QyY2UwHhcNMjYwMTAxMTYxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZDYzODhiMGNkNTE4MjQ2MTVhOTI2ZWEyZWM0ZmI5M2JkZTkxNTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bjAOG/Kts1lCFzdVN2kz7zxwZc8 4ycYRZvsYz1P613J+trjWkLlyZprf4APcg7ojoRtr+aNcZtsuUuIikV6jILtXIxM 1BEMrQWWlghLan8b8eWBeKSOxDTd+Q2nHju7Ri7t/9f4Km5daVthOi1XKDB4HkUE Lx/8CUmRfBGeoS+nU2usdVNxFRRUJKxSvEKZhiMAbRtWSqSIaV5a7/zhdxEkRqEX AzjLse1asrenJCcAP56PEp9KU5N6M/bSdwtD1QEuxBjnDwDVx5mOT1/9F9VaNhxo 9cHbyPv62MMhGLSFQhP6XGAqjsVf8AXsIX6bpaD35KQ+LC7fcAbLCf9TNQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFD1jiLDNUYJGFakm6i7E+5O96RVkMB8GA1UdIwQY MBaAFKxPMVdZm2byjLxaLu02+6I/A9LOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckU4eFYxbWJadktNdkZvdTdUYjdvajhEMHM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8xMTQ4OGQtYzY2YS00MDA2LThmNjIt MjUwOTgwZTc1YmRmLzEvUFdPSXNNMVJna1lWcVNicUxzVDdrNzNwRldRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8xMTQ4OGQtYzY2YS00MDA2LThmNjItMjUwOTgwZTc1YmRm LzEvckU4eFYxbWJadktNdkZvdTdUYjdvajhEMHM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDU4kIMA0E AgACMAcDBQAqAg6oMA0GCSqGSIb3DQEBCwUAA4IBAQAcPq0zvPS1KEQkzznR6fA3 wBr5AHdIAMbncl7IBQwEny7E9BCC8IZosZ26OvBJ8RU0paShVytFCIQqeCMRlAz4 3tEwiBp3AemVAAbwxl3esv0PNO2NoT/ZvlvtVTixxYrDFa+nFWvkG7zgSBJDi3yG TETQnnSTu4UCsbehOnIK4tOSce8ePbMcSObr1y5RhZq4FetigWBIfOCGIMKoKCua 59xt2JwsZIG5HhInWk9b33uJ3Lxdjj+X5njIpsl/aiVMMAF8rwHDIEXldVt0Qr+R u/kwEFvSutrEBPnStbvA09G+knS4Vct75p619OXDO68VLxsDdzAMbT7co45A0WaV -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:32 2026 by rpki-client