This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/wFdaLOCyiU_48a3O9Dbv_LFAkOs.roa File: wFdaLOCyiU_48a3O9Dbv_LFAkOs.roa (raw, json) Hash identifier: hyhtGqjnMT+/jeuDX8xuONdz8WGq7IKNwe4x/V5SQVA= Subject key identifier: C0:57:5A:2C:E0:B2:89:4F:F8:F1:AD:CE:F4:36:EF:FC:B1:40:90:EB Certificate issuer: /CN=fb782b78f20a6e4b70643052bd1a40af15a56338 Certificate serial: 019B77C69FC450AE33EA9EB5C3BAB3DE6AB8 Authority key identifier: FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/wFdaLOCyiU_48a3O9Dbv_LFAkOs.roa Signing time: Thu 01 Jan 2026 04:17:44 +0000 ROA not before: Thu 01 Jan 2026 04:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209689 IP address blocks: 185.174.148.0/24 maxlen: 24 185.174.149.0/24 maxlen: 24 185.174.150.0/24 maxlen: 24 185.174.151.0/24 maxlen: 24 212.87.208.0/23 maxlen: 24 212.87.210.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:9f:c4:50:ae:33:ea:9e:b5:c3:ba:b3:de:6a:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb782b78f20a6e4b70643052bd1a40af15a56338 Validity Not Before: Jan 1 04:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0575a2ce0b2894ff8f1adcef436effcb14090eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:3a:0f:38:84:6a:00:cf:8a:9a:c5:97:ef:51: 22:23:b6:3a:58:41:78:23:8d:43:ef:5c:3c:03:0d: 70:fa:71:9e:2d:3c:2d:73:d3:a3:ad:69:50:86:f6: f6:2b:b5:8c:c5:f7:28:91:01:04:79:86:92:ac:b6: 6b:80:6e:3e:fc:d9:0f:ec:85:e1:2e:77:6e:07:5c: 68:72:35:d6:44:aa:a9:ae:48:96:cc:20:73:8b:03: b1:65:d0:5f:91:f6:23:a0:b0:bc:76:36:74:a1:77: 4c:b3:b2:52:90:35:b0:dd:d3:e6:a6:c2:0b:87:09: e9:f7:94:18:fa:5e:cb:fe:59:f8:3d:ac:2d:9f:c2: 1b:af:82:e5:d1:3e:db:1e:ff:b7:6f:34:91:05:08: cd:10:7c:01:fb:18:fc:87:40:ce:76:37:a3:a5:9f: ec:17:86:88:ad:fe:dc:8a:c4:78:21:e5:bf:18:3f: da:6b:17:6c:3c:81:fe:eb:bc:bc:0a:cd:5e:be:55: d1:29:06:21:b2:49:31:d6:c1:87:ba:c1:ed:10:dd: a0:68:2a:9c:3d:45:78:2c:28:a4:c0:6c:50:23:98: 6f:2f:7b:b9:e7:83:6a:69:f6:a8:86:4b:14:98:32: 99:cc:cb:45:ae:5e:d9:63:ee:08:17:52:c5:5d:3a: 9d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:57:5A:2C:E0:B2:89:4F:F8:F1:AD:CE:F4:36:EF:FC:B1:40:90:EB X509v3 Authority Key Identifier: keyid:FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/wFdaLOCyiU_48a3O9Dbv_LFAkOs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.174.148.0/22 212.87.208.0/22 Signature Algorithm: sha256WithRSAEncryption 98:73:82:c2:15:cf:0e:90:fd:38:9d:90:fa:a9:4a:7d:08:3b: 61:94:20:27:4a:05:92:34:65:28:2c:41:f0:da:01:62:04:64: 63:62:05:09:e0:78:85:a9:68:4d:2d:48:6d:db:79:88:a4:b2: bb:5d:71:af:6b:84:75:d5:36:61:d6:d7:d8:d8:28:54:f6:b0: 8b:ad:63:ac:a3:4a:b8:de:01:76:b9:06:1d:70:dc:94:00:b6: 8d:3a:77:90:48:a4:63:ba:35:c4:5c:24:01:f9:97:2f:dd:3c: 48:a0:5b:ae:7f:2a:81:d3:16:5f:d4:68:75:41:42:ea:ef:74: b3:44:25:1d:19:ea:88:63:a8:31:65:4d:c4:bc:37:ab:8f:c0: 0a:ec:8c:e6:8e:76:13:57:c4:55:b3:fe:cf:34:ac:a8:47:cb: 83:04:a8:69:26:51:fc:71:5c:4f:40:51:d0:bc:a1:3d:2b:dd: 65:95:f1:3d:e5:a6:54:86:32:80:8e:81:b1:ae:4f:6a:b0:e9: 6d:ee:b1:d9:4f:e0:1e:60:74:44:0e:a8:14:61:15:7a:a3:d0: 3f:06:61:f4:20:fe:43:ab:9c:85:2d:a9:0a:99:86:22:d1:4a: e5:f1:99:e9:af:ca:2a:a8:4b:97:42:3d:a5:8f:9e:cc:89:8e: 2a:45:7e:55 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xp/EUK4z6p61w7qz3mq4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiNzgyYjc4ZjIwYTZlNGI3MDY0MzA1MmJkMWE0MGFmMTVh NTYzMzgwHhcNMjYwMTAxMDQxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDU3NWEyY2UwYjI4OTRmZjhmMWFkY2VmNDM2ZWZmY2IxNDA5MGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzoPOIRqAM+KmsWX71EiI7Y6WEF4 I41D71w8Aw1w+nGeLTwtc9OjrWlQhvb2K7WMxfcokQEEeYaSrLZrgG4+/NkP7IXh LnduB1xocjXWRKqprkiWzCBziwOxZdBfkfYjoLC8djZ0oXdMs7JSkDWw3dPmpsIL hwnp95QY+l7L/ln4Pawtn8Ibr4Ll0T7bHv+3bzSRBQjNEHwB+xj8h0DOdjejpZ/s F4aIrf7cisR4IeW/GD/aaxdsPIH+67y8Cs1evlXRKQYhskkx1sGHusHtEN2gaCqc PUV4LCikwGxQI5hvL3u554NqafaohksUmDKZzMtFrl7ZY+4IF1LFXTqdwQIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFMBXWizgsolP+PGtzvQ27/yxQJDrMB8GA1UdIwQY MBaAFPt4K3jyCm5LcGQwUr0aQK8VpWM4MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0zZ3JlUElLYmt0d1pEQlN2UnBBcnhXbFl6Zy5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZTMvOWRjOTMzLTVjMGQtNDQ2MS1hNDVk LThmN2Q1NjkxYzFiZS8xL3dGZGFMT0N5aVVfNDhhM085RGJ2X0xGQWtPcy5yb2Ew gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZTMvOWRjOTMzLTVjMGQtNDQ2MS1hNDVkLThmN2Q1NjkxYzFi ZS8xLzEtM2dyZVBJS2JrdHdaREJTdlJwQXJ4V2xZemcuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwJQYIKwYBBQUHAQcBAf8EFjAUMBIEAgABMAwDBAK5rpQD BALUV9AwDQYJKoZIhvcNAQELBQADggEBAJhzgsIVzw6Q/TidkPqpSn0IO2GUICdK BZI0ZSgsQfDaAWIEZGNiBQngeIWpaE0tSG3beYiksrtdca9rhHXVNmHW19jYKFT2 sIutY6yjSrjeAXa5Bh1w3JQAto06d5BIpGO6NcRcJAH5ly/dPEigW65/KoHTFl/U aHVBQurvdLNEJR0Z6ohjqDFlTcS8N6uPwArsjOaOdhNXxFWz/s80rKhHy4MEqGkm UfxxXE9AUdC8oT0r3WWV8T3lplSGMoCOgbGuT2qw6W3usdlP4B5gdEQOqBRhFXqj 0D8GYfQg/kOrnIUtqQqZhiLRSuXxmemvyiqoS5dCPaWPnsyJjipFflU= -----END CERTIFICATE-----Generated at Tue Feb 3 10:16:38 2026 by rpki-client