This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/nwWoxyfeZ0vZo2FUj5MajXpH3kY.roa File: nwWoxyfeZ0vZo2FUj5MajXpH3kY.roa (raw, json) Hash identifier: sY2bCxjxo0ci2bvDv4Rjq6+XrMtq9QVH+g5SCrc5djQ= Subject key identifier: 9F:05:A8:C7:27:DE:67:4B:D9:A3:61:54:8F:93:1A:8D:7A:47:DE:46 Certificate issuer: /CN=3787b324b0d32fb1a3678b02c482286d4c26ba0f Certificate serial: 019B77C7241A29F1BA80BF4857E26E15FEC1 Authority key identifier: 37:87:B3:24:B0:D3:2F:B1:A3:67:8B:02:C4:82:28:6D:4C:26:BA:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4ezJLDTL7GjZ4sCxIIobUwmug8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/nwWoxyfeZ0vZo2FUj5MajXpH3kY.roa Signing time: Thu 01 Jan 2026 04:18:18 +0000 ROA not before: Thu 01 Jan 2026 04:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205315 IP address blocks: 185.222.116.0/24 maxlen: 24 2a0c:3800::/40 maxlen: 48 2a0c:3800:ff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.mft rsync://rpki.ripe.net/repository/DEFAULT/N4ezJLDTL7GjZ4sCxIIobUwmug8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:24:1a:29:f1:ba:80:bf:48:57:e2:6e:15:fe:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3787b324b0d32fb1a3678b02c482286d4c26ba0f Validity Not Before: Jan 1 04:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f05a8c727de674bd9a361548f931a8d7a47de46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bf:8f:79:2f:4e:ce:39:5a:5d:f1:1a:83:8d: 93:4a:e7:32:33:c5:c7:60:db:d4:0a:d0:88:d8:ca: c1:88:30:90:4f:f0:41:be:73:0e:c5:ae:db:80:44: 4c:b1:00:7b:3b:e0:a2:10:4a:f5:01:00:dc:c5:73: 76:ef:e7:73:f6:98:57:f7:d8:ae:e0:4c:8d:ca:69: 9b:6c:7d:73:c4:37:95:1c:19:b2:e8:9c:6a:c6:a7: be:24:de:c3:d4:8d:e2:0c:07:e6:6b:c0:96:86:3b: f3:57:b6:16:87:61:35:d2:5d:a6:c0:bd:5a:78:06: d7:2f:ee:49:ef:77:3d:88:3d:c0:ac:e3:97:37:aa: 1d:5c:80:c5:cc:f4:81:ec:cf:54:6d:b5:5b:3d:4b: d4:4c:6f:33:6c:5c:49:12:46:3f:9c:a9:ea:1e:ce: 51:92:7f:5f:18:e9:7e:8e:ab:92:02:bd:52:ed:4d: 20:07:48:b4:db:6a:33:d0:1e:bf:fe:36:76:14:c8: f8:c3:9f:84:dd:62:40:22:a7:73:ad:80:9a:45:c0: 1d:47:2a:b0:4c:b0:17:00:4f:ac:27:dc:a9:ac:24: ec:12:e0:9a:a9:be:7e:b4:ca:3e:eb:cf:41:d6:02: 36:b9:79:f9:55:e7:fe:1b:42:94:89:81:30:b0:10: a5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:05:A8:C7:27:DE:67:4B:D9:A3:61:54:8F:93:1A:8D:7A:47:DE:46 X509v3 Authority Key Identifier: keyid:37:87:B3:24:B0:D3:2F:B1:A3:67:8B:02:C4:82:28:6D:4C:26:BA:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4ezJLDTL7GjZ4sCxIIobUwmug8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/nwWoxyfeZ0vZo2FUj5MajXpH3kY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/602244-7699-4103-bc7e-c4711482380e/1/N4ezJLDTL7GjZ4sCxIIobUwmug8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.222.116.0/24 IPv6: 2a0c:3800::/40 Signature Algorithm: sha256WithRSAEncryption 25:3e:2f:d9:74:ef:de:ba:dd:20:1d:f7:98:9b:97:49:c4:14: 17:7d:36:e9:f1:03:18:37:e1:f6:29:6f:49:b4:cd:12:20:f0: 12:0f:12:c9:fc:54:99:16:e6:26:84:ed:e6:a9:e5:00:0b:1c: f2:20:62:a4:20:bc:f7:6c:ec:e8:15:8b:03:ed:32:07:3e:da: e3:ef:8a:bd:92:ed:4c:d9:f6:a0:ce:eb:3b:73:70:4b:0c:24: ca:96:88:60:f8:68:c8:bf:04:1a:ea:76:2a:10:a4:cb:34:5e: a5:c5:f8:3f:60:ad:ab:c5:9a:dd:ec:18:f4:67:35:2b:e2:79: 4e:02:ea:5f:cf:d7:00:1e:99:0f:82:c4:de:89:4a:26:16:37: 8d:31:c4:f0:b8:1a:10:22:31:45:5c:e6:30:e7:a8:85:2d:65: 59:d5:be:01:45:be:f0:37:9a:bc:00:a5:a7:ec:ce:6c:63:0a: 85:20:8c:8d:23:e2:20:6b:eb:4a:1f:ee:ba:2f:d0:55:2d:20: f6:bb:14:be:01:fc:ec:95:84:52:20:a4:a5:c0:68:f1:3c:d4: 04:4f:51:a5:47:1a:32:78:f8:3c:4d:c4:9c:32:46:67:a7:cb: fb:1e:ff:97:ff:92:42:01:c4:14:0a:f9:ab:9b:5a:8f:70:6e: 69:c5:27:80 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt3xyQaKfG6gL9IV+JuFf7BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3ODdiMzI0YjBkMzJmYjFhMzY3OGIwMmM0ODIyODZkNGMy NmJhMGYwHhcNMjYwMTAxMDQxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjA1YThjNzI3ZGU2NzRiZDlhMzYxNTQ4ZjkzMWE4ZDdhNDdkZTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur+PeS9OzjlaXfEag42TSucyM8XH YNvUCtCI2MrBiDCQT/BBvnMOxa7bgERMsQB7O+CiEEr1AQDcxXN27+dz9phX99iu 4EyNymmbbH1zxDeVHBmy6Jxqxqe+JN7D1I3iDAfma8CWhjvzV7YWh2E10l2mwL1a eAbXL+5J73c9iD3ArOOXN6odXIDFzPSB7M9UbbVbPUvUTG8zbFxJEkY/nKnqHs5R kn9fGOl+jquSAr1S7U0gB0i022oz0B6//jZ2FMj4w5+E3WJAIqdzrYCaRcAdRyqw TLAXAE+sJ9yprCTsEuCaqb5+tMo+689B1gI2uXn5Vef+G0KUiYEwsBClXQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFJ8FqMcn3mdL2aNhVI+TGo16R95GMB8GA1UdIwQY MBaAFDeHsySw0y+xo2eLAsSCKG1MJroPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTjRlekpMRFRMN0dqWjRzQ3hJSW9iVXdtdWc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS82MDIyNDQtNzY5OS00MTAzLWJjN2Ut YzQ3MTE0ODIzODBlLzEvbndXb3h5ZmVaMHZabzJGVWo1TWFqWHBIM2tZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS82MDIyNDQtNzY5OS00MTAzLWJjN2UtYzQ3MTE0ODIzODBl LzEvTjRlekpMRFRMN0dqWjRzQ3hJSW9iVXdtdWc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAud50MA4E AgACMAgDBgAqDDgAADANBgkqhkiG9w0BAQsFAAOCAQEAJT4v2XTv3rrdIB33mJuX ScQUF3026fEDGDfh9ilvSbTNEiDwEg8SyfxUmRbmJoTt5qnlAAsc8iBipCC892zs 6BWLA+0yBz7a4++KvZLtTNn2oM7rO3NwSwwkypaIYPhoyL8EGup2KhCkyzRepcX4 P2Ctq8Wa3ewY9Gc1K+J5TgLqX8/XAB6ZD4LE3olKJhY3jTHE8LgaECIxRVzmMOeo hS1lWdW+AUW+8DeavAClp+zObGMKhSCMjSPiIGvrSh/uui/QVS0g9rsUvgH87JWE UiCkpcBo8TzUBE9RpUcaMnj4PE3EnDJGZ6fL+x7/l/+SQgHEFAr5q5taj3BuacUn gA== -----END CERTIFICATE-----Generated at Fri Jan 9 18:11:24 2026 by rpki-client