This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/wQa-_QrhebKsuNtc3pbAHGeGKYE.roa File: wQa-_QrhebKsuNtc3pbAHGeGKYE.roa (raw, json) Hash identifier: mXyLCczbJEb1sWHa1tj9M1BYnDbJgfQv+z61kz4D2so= Subject key identifier: C1:06:BE:FD:0A:E1:79:B2:AC:B8:DB:5C:DE:96:C0:1C:67:86:29:81 Certificate issuer: /CN=3eb903284a1d15dc158ad7182ea0bce786ceb2ad Certificate serial: 019B7C7EE9F5AB4A25B4656B46693CCBA200 Authority key identifier: 3E:B9:03:28:4A:1D:15:DC:15:8A:D7:18:2E:A0:BC:E7:86:CE:B2:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/wQa-_QrhebKsuNtc3pbAHGeGKYE.roa Signing time: Fri 02 Jan 2026 02:17:30 +0000 ROA not before: Fri 02 Jan 2026 02:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209522 IP address blocks: 130.180.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.crl rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.mft rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:e9:f5:ab:4a:25:b4:65:6b:46:69:3c:cb:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eb903284a1d15dc158ad7182ea0bce786ceb2ad Validity Not Before: Jan 2 02:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c106befd0ae179b2acb8db5cde96c01c67862981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c7:f4:e6:8a:7d:c4:fe:d1:92:10:13:9a:b4: fa:e8:3e:eb:8e:e0:d7:5d:86:7b:d3:76:6c:f0:21: 50:8d:b2:bb:4f:ed:c8:50:13:90:20:87:a8:bf:93: 03:10:40:4e:cf:7d:47:11:a9:ef:63:7d:2f:3e:c3: 3a:a5:6b:be:00:d9:d6:bb:fb:8d:75:0b:47:ed:78: 7d:bc:1c:88:7a:1a:03:d6:a0:94:82:37:2e:8d:0f: 6a:77:99:80:c8:cb:42:33:4c:72:b7:9c:ea:0a:51: f0:a4:4e:16:2a:9d:b6:46:ad:45:bd:20:57:e4:d6: a7:16:50:3c:cf:84:c4:5b:ec:2f:b6:11:4b:34:1a: db:dc:12:62:16:b2:ef:73:e9:09:b3:29:be:fc:b9: 08:f4:2f:99:5f:68:5c:54:8e:e2:d9:90:84:42:83: b8:c9:6b:2f:53:78:dd:57:1c:1a:f7:b2:7d:5a:42: c2:57:c1:5d:6e:b7:44:77:90:25:de:63:31:e3:55: f3:70:0b:21:2b:ac:87:c2:11:52:fa:3c:e3:f6:7a: 61:ca:36:5d:8a:e7:e4:27:f1:f0:4c:de:23:14:c0: 46:b7:43:03:a7:52:72:a7:31:99:65:40:af:13:45: 3b:61:52:65:e1:e5:ca:a0:df:fb:bc:4c:91:37:53: 5b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:06:BE:FD:0A:E1:79:B2:AC:B8:DB:5C:DE:96:C0:1C:67:86:29:81 X509v3 Authority Key Identifier: keyid:3E:B9:03:28:4A:1D:15:DC:15:8A:D7:18:2E:A0:BC:E7:86:CE:B2:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrkDKEodFdwVitcYLqC854bOsq0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/wQa-_QrhebKsuNtc3pbAHGeGKYE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/92ea9f-b12e-4dd5-9bd3-b77dc8dc1c7e/1/PrkDKEodFdwVitcYLqC854bOsq0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 130.180.199.0/24 Signature Algorithm: sha256WithRSAEncryption 99:03:e8:a3:26:27:3e:a5:9a:2a:a4:2f:28:28:e5:92:29:7c: b5:d7:88:2a:a9:8b:79:05:fe:1a:26:0c:e2:65:7f:02:0c:89: 00:67:05:45:ca:c9:bc:d7:dd:45:29:dd:cc:91:83:5f:2e:79: 61:d7:e8:6d:ae:94:ab:e1:c5:8f:8e:99:24:74:7b:ea:45:0b: 7f:68:79:e3:3a:60:70:eb:4e:3c:a1:43:99:b0:00:8d:c9:01: d2:84:4b:7b:7f:f5:a9:4a:e8:b0:d1:13:d6:fd:a1:05:27:56: 64:59:e8:2c:a1:2f:34:9c:4d:c3:b9:80:19:d6:2b:ea:50:d3: 19:a8:86:90:9a:2c:0a:ae:67:55:78:05:9d:45:f5:40:60:8c: bd:2a:80:90:73:53:be:32:cd:52:d8:59:ae:2a:06:62:7a:97: be:64:6b:d8:9b:e7:cc:6a:5b:64:d8:de:88:0c:eb:d6:03:d3: 8a:8e:8b:17:63:61:c9:05:e3:d5:0c:0b:19:58:aa:5e:fc:2d: bd:40:e7:0e:b5:cc:b3:36:7b:c0:80:b3:58:fd:cd:a0:33:19: 44:6f:87:b5:7a:8f:c3:0c:8b:8c:c9:11:ad:cb:d5:5c:78:67: e7:ec:30:95:5b:52:8c:f8:7b:3b:b8:11:0b:64:4a:89:0d:bf: 94:db:e2:39 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8fun1q0oltGVrRmk8y6IAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYjkwMzI4NGExZDE1ZGMxNThhZDcxODJlYTBiY2U3ODZj ZWIyYWQwHhcNMjYwMTAyMDIxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTA2YmVmZDBhZTE3OWIyYWNiOGRiNWNkZTk2YzAxYzY3ODYyOTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8f05op9xP7RkhATmrT66D7rjuDX XYZ703Zs8CFQjbK7T+3IUBOQIIeov5MDEEBOz31HEanvY30vPsM6pWu+ANnWu/uN dQtH7Xh9vByIehoD1qCUgjcujQ9qd5mAyMtCM0xyt5zqClHwpE4WKp22Rq1FvSBX 5NanFlA8z4TEW+wvthFLNBrb3BJiFrLvc+kJsym+/LkI9C+ZX2hcVI7i2ZCEQoO4 yWsvU3jdVxwa97J9WkLCV8FdbrdEd5Al3mMx41XzcAshK6yHwhFS+jzj9nphyjZd iufkJ/HwTN4jFMBGt0MDp1JypzGZZUCvE0U7YVJl4eXKoN/7vEyRN1NbuQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMEGvv0K4XmyrLjbXN6WwBxnhimBMB8GA1UdIwQY MBaAFD65AyhKHRXcFYrXGC6gvOeGzrKtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHJrREtFb2RGZHdWaXRjWUxxQzg1NGJPc3EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi85MmVhOWYtYjEyZS00ZGQ1LTliZDMt Yjc3ZGM4ZGMxYzdlLzEvd1FhLV9RcmhlYktzdU50YzNwYkFIR2VHS1lFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi85MmVhOWYtYjEyZS00ZGQ1LTliZDMtYjc3ZGM4ZGMxYzdl LzEvUHJrREtFb2RGZHdWaXRjWUxxQzg1NGJPc3EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgrTHMA0G CSqGSIb3DQEBCwUAA4IBAQCZA+ijJic+pZoqpC8oKOWSKXy114gqqYt5Bf4aJgzi ZX8CDIkAZwVFysm8191FKd3MkYNfLnlh1+htrpSr4cWPjpkkdHvqRQt/aHnjOmBw 6048oUOZsACNyQHShEt7f/WpSuiw0RPW/aEFJ1ZkWegsoS80nE3DuYAZ1ivqUNMZ qIaQmiwKrmdVeAWdRfVAYIy9KoCQc1O+Ms1S2FmuKgZiepe+ZGvYm+fMaltk2N6I DOvWA9OKjosXY2HJBePVDAsZWKpe/C29QOcOtcyzNnvAgLNY/c2gMxlEb4e1eo/D DIuMyRGty9VceGfn7DCVW1KM+Hs7uBELZEqJDb+U2+I5 -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:31 2026 by rpki-client