This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/w1lnaXc0stYti4D5HKapAQ20wiM.roa File: w1lnaXc0stYti4D5HKapAQ20wiM.roa (raw, json) Hash identifier: dNDg8xo8m9AS8HO+Ntxotl19K7LOzsHs1ntt7tMGKHU= Subject key identifier: C3:59:67:69:77:34:B2:D6:2D:8B:80:F9:1C:A6:A9:01:0D:B4:C2:23 Certificate issuer: /CN=7b886e33971014f0e35fae6ee355a95ee53f1397 Certificate serial: 019B7A5AC40F4EF9F6DCA8B45A2682E240EF Authority key identifier: 7B:88:6E:33:97:10:14:F0:E3:5F:AE:6E:E3:55:A9:5E:E5:3F:13:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/w1lnaXc0stYti4D5HKapAQ20wiM.roa Signing time: Thu 01 Jan 2026 16:18:47 +0000 ROA not before: Thu 01 Jan 2026 16:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205814 IP address blocks: 185.249.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.mft rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:c4:0f:4e:f9:f6:dc:a8:b4:5a:26:82:e2:40:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b886e33971014f0e35fae6ee355a95ee53f1397 Validity Not Before: Jan 1 16:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c35967697734b2d62d8b80f91ca6a9010db4c223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ed:13:65:20:01:cf:2e:08:e3:7a:d6:91:d3: aa:59:5b:83:64:ae:16:f1:16:5b:5b:77:a9:04:14: a6:8d:e7:31:87:4e:09:63:2e:aa:85:cc:57:9c:08: 37:5f:07:4d:d7:2b:9b:6f:73:4d:3a:09:1c:14:89: 98:3f:a8:ba:ad:55:f1:07:f7:7f:ba:62:fb:33:4a: dd:0c:42:07:94:93:79:66:33:7e:32:e4:fc:c7:ba: f4:c2:c3:8e:12:29:0b:c7:a3:7b:f2:d4:23:2c:81: dd:bd:8f:fb:c5:8b:57:53:d1:a2:f1:d8:ec:24:81: 98:e4:10:f1:dd:b0:3d:41:89:da:01:a4:a2:0c:b0: c7:01:bc:b7:a7:07:5f:e3:19:b4:5b:ae:80:29:ae: 80:ab:8b:31:79:de:ad:91:9e:44:5a:81:63:3e:b8: f4:e9:8c:6f:82:53:48:3f:ed:d1:14:96:23:69:4b: bf:f5:d6:ac:b5:86:58:c0:d4:77:b5:3d:e6:98:8b: 00:66:f2:e0:5f:d4:be:f4:87:ac:cc:11:58:df:03: 0a:51:a6:c2:b2:c5:b9:0c:c3:e5:e6:69:18:d6:37: d3:4d:73:4e:a2:8d:02:2e:b4:f4:f4:3a:84:96:d8: d4:33:37:74:66:e1:b8:62:bb:1b:a1:1c:70:c3:40: b9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:59:67:69:77:34:B2:D6:2D:8B:80:F9:1C:A6:A9:01:0D:B4:C2:23 X509v3 Authority Key Identifier: keyid:7B:88:6E:33:97:10:14:F0:E3:5F:AE:6E:E3:55:A9:5E:E5:3F:13:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4huM5cQFPDjX65u41WpXuU_E5c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/w1lnaXc0stYti4D5HKapAQ20wiM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2b487e-0a7c-4c46-a241-3d0db8eb4e13/1/e4huM5cQFPDjX65u41WpXuU_E5c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.249.159.0/24 Signature Algorithm: sha256WithRSAEncryption 66:31:38:dd:f8:b8:62:fe:d7:b4:3e:0e:d8:d1:1e:fc:b0:35: 25:8a:7d:2b:d7:65:7c:3b:a2:a6:5a:8d:43:f0:a6:c6:01:86: 5f:2f:6d:16:10:99:62:b9:3f:ed:7c:51:38:da:b1:d0:1b:63: 2c:0c:8e:d6:43:f9:d8:05:7e:94:03:12:27:9e:08:13:09:c3: db:83:20:1d:3f:14:61:5b:f5:e3:86:ae:3f:e8:62:38:26:1e: 35:c1:58:31:72:ce:40:ed:4b:06:fa:71:8a:61:9f:4c:f4:8c: 93:0f:87:95:7b:cd:d3:5b:6f:12:61:a5:67:4e:39:65:a1:41: f4:19:51:4c:90:7d:b2:57:3f:42:76:a5:0b:80:2e:9e:b6:ff: ae:6e:3a:8a:80:72:dc:2a:5f:c3:83:28:f4:7c:9d:aa:99:d0: ad:49:a9:97:87:c9:bc:35:a6:87:67:f8:42:e3:14:9e:7d:02: 7a:8d:4f:16:67:39:e7:0f:7e:1c:93:c0:19:1b:c8:30:d6:f2: 21:eb:7d:ca:14:0f:5d:8d:11:c3:cc:95:1b:3b:6d:ea:a5:62: 99:e3:94:7c:f3:97:7e:6d:18:11:21:87:33:d1:f9:79:d7:bd: 4d:ec:c5:b2:85:f6:af:94:0c:be:dc:09:9e:db:ac:ce:42:43: b5:5c:f0:db -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WsQPTvn23Ki0WiaC4kDvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiODg2ZTMzOTcxMDE0ZjBlMzVmYWU2ZWUzNTVhOTVlZTUz ZjEzOTcwHhcNMjYwMTAxMTYxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzU5Njc2OTc3MzRiMmQ2MmQ4YjgwZjkxY2E2YTkwMTBkYjRjMjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0O0TZSABzy4I43rWkdOqWVuDZK4W 8RZbW3epBBSmjecxh04JYy6qhcxXnAg3XwdN1yubb3NNOgkcFImYP6i6rVXxB/d/ umL7M0rdDEIHlJN5ZjN+MuT8x7r0wsOOEikLx6N78tQjLIHdvY/7xYtXU9Gi8djs JIGY5BDx3bA9QYnaAaSiDLDHAby3pwdf4xm0W66AKa6Aq4sxed6tkZ5EWoFjPrj0 6YxvglNIP+3RFJYjaUu/9dastYZYwNR3tT3mmIsAZvLgX9S+9IeszBFY3wMKUabC ssW5DMPl5mkY1jfTTXNOoo0CLrT09DqEltjUMzd0ZuG4YrsboRxww0C5VwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMNZZ2l3NLLWLYuA+RymqQENtMIjMB8GA1UdIwQY MBaAFHuIbjOXEBTw41+ubuNVqV7lPxOXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTRodU01Y1FGUERqWDY1dTQxV3BYdVVfRTVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8yYjQ4N2UtMGE3Yy00YzQ2LWEyNDEt M2QwZGI4ZWI0ZTEzLzEvdzFsbmFYYzBzdFl0aTRENUhLYXBBUTIwd2lNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8yYjQ4N2UtMGE3Yy00YzQ2LWEyNDEtM2QwZGI4ZWI0ZTEz LzEvZTRodU01Y1FGUERqWDY1dTQxV3BYdVVfRTVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAufmfMA0G CSqGSIb3DQEBCwUAA4IBAQBmMTjd+Lhi/te0Pg7Y0R78sDUlin0r12V8O6KmWo1D 8KbGAYZfL20WEJliuT/tfFE42rHQG2MsDI7WQ/nYBX6UAxInnggTCcPbgyAdPxRh W/Xjhq4/6GI4Jh41wVgxcs5A7UsG+nGKYZ9M9IyTD4eVe83TW28SYaVnTjlloUH0 GVFMkH2yVz9CdqULgC6etv+ubjqKgHLcKl/Dgyj0fJ2qmdCtSamXh8m8NaaHZ/hC 4xSefQJ6jU8WZznnD34ck8AZG8gw1vIh633KFA9djRHDzJUbO23qpWKZ45R885d+ bRgRIYcz0fl5171N7MWyhfavlAy+3Ame26zOQkO1XPDb -----END CERTIFICATE-----Generated at Tue Jan 20 04:29:47 2026 by rpki-client