This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/wl3GFHoVFq2V6agPvVTqKcV6mcw.roa File: wl3GFHoVFq2V6agPvVTqKcV6mcw.roa (raw, json) Hash identifier: kC952UxlZ4u8JejZZo0O0+1EVkE3lenB3kDD7eQXlTY= Subject key identifier: C2:5D:C6:14:7A:15:16:AD:95:E9:A8:0F:BD:54:EA:29:C5:7A:99:CC Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370 Certificate serial: 019B7F15CB606EB05B536EA9CC6DD0A8E94B Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/wl3GFHoVFq2V6agPvVTqKcV6mcw.roa Signing time: Fri 02 Jan 2026 14:21:33 +0000 ROA not before: Fri 02 Jan 2026 14:21:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51202 IP address blocks: 185.236.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:cb:60:6e:b0:5b:53:6e:a9:cc:6d:d0:a8:e9:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370 Validity Not Before: Jan 2 14:21:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c25dc6147a1516ad95e9a80fbd54ea29c57a99cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8a:28:30:47:23:69:42:87:90:38:bc:dc:19: f4:c6:bb:f1:f3:81:1c:d4:bd:78:a6:f8:1f:77:59: fc:67:e4:7c:e0:26:d8:3d:39:c3:5f:62:27:dd:cf: fe:fb:0d:fa:8f:37:ed:bb:3e:a1:74:38:71:56:88: 67:fd:ff:db:79:86:90:2e:7b:f0:73:8a:29:50:08: 2e:ae:83:f0:63:68:58:41:cd:66:ac:16:d5:fd:41: 19:4d:a4:7f:8d:5c:77:3a:dd:3b:f1:08:0d:02:3c: 41:6d:24:fa:d5:57:9b:46:77:e6:83:4a:9d:d5:41: 5f:df:b5:8c:7b:b9:ce:73:3f:d8:b4:0c:94:09:83: 68:fa:c9:7f:f2:e2:55:fe:c4:58:3d:8c:0f:6b:d2: 73:5c:84:d4:4b:a8:a5:59:35:c1:b9:a5:58:08:92: 48:2b:1e:39:59:89:b9:42:b7:7a:79:78:bd:40:cf: 98:b6:6d:69:c5:aa:78:c6:23:b6:6f:aa:70:98:0d: 47:f5:ee:32:30:cd:44:71:bb:cd:c3:77:32:4b:d8: 33:47:31:a4:c2:75:5b:08:4a:cd:8e:5f:34:e5:d6: b4:28:23:00:23:f2:b1:8b:b3:64:27:3a:de:f3:a5: 28:da:ad:b9:5d:aa:8f:b7:d7:87:46:84:bf:83:4e: fb:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:5D:C6:14:7A:15:16:AD:95:E9:A8:0F:BD:54:EA:29:C5:7A:99:CC X509v3 Authority Key Identifier: keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/wl3GFHoVFq2V6agPvVTqKcV6mcw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.236.11.0/24 Signature Algorithm: sha256WithRSAEncryption 56:b2:bb:fb:d5:52:22:0c:d5:1f:cf:63:82:6f:c6:59:f3:62: cc:c8:8a:d3:ae:d0:31:cf:88:be:f2:c0:93:63:e3:a8:4b:1a: 2b:b9:38:3e:03:83:87:e7:63:81:73:11:43:55:1f:b3:2e:b3: bd:2d:88:87:bb:9f:57:00:b4:9e:e4:28:dd:58:36:2a:2e:f3: ea:80:dd:ea:a5:f5:7a:18:a2:24:78:dc:6a:4e:3a:ae:37:c0: 43:e2:68:e7:50:05:c5:55:66:c6:e0:3d:21:27:e8:bc:7e:3c: 70:00:e1:84:46:bf:9a:7c:54:ff:07:fb:9a:80:77:5d:0f:0f: d3:f2:c3:ba:bd:a2:15:44:3a:c5:a7:19:55:5d:0f:16:df:4f: 88:0f:8d:7e:ae:7a:02:fb:da:1a:41:0c:59:31:69:74:e7:37: db:cb:ec:39:ae:74:6c:ff:82:1d:e6:81:e4:6d:c1:66:1d:f5: 48:0a:ab:bf:fc:ea:07:4e:10:f6:09:65:7c:aa:93:54:3b:92: 3c:77:81:48:b2:86:e6:08:3d:47:02:01:23:ba:e3:61:43:ce: f5:84:a6:87:5d:dc:74:39:ff:a3:74:3a:ab:c3:64:b5:d2:e0: 96:d4:bb:81:2f:19:3e:a4:75:b4:0b:1c:df:5b:1a:2e:94:15: a0:83:60:89 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FctgbrBbU26pzG3QqOlLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmOGFlYTJmMDI1ZjQ5NWJlYWNlZTdjZTVhODgyMDUxOWRk YTEzNzAwHhcNMjYwMTAyMTQyMTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjVkYzYxNDdhMTUxNmFkOTVlOWE4MGZiZDU0ZWEyOWM1N2E5OWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIooMEcjaUKHkDi83Bn0xrvx84Ec 1L14pvgfd1n8Z+R84CbYPTnDX2In3c/++w36jzftuz6hdDhxVohn/f/beYaQLnvw c4opUAguroPwY2hYQc1mrBbV/UEZTaR/jVx3Ot078QgNAjxBbST61VebRnfmg0qd 1UFf37WMe7nOcz/YtAyUCYNo+sl/8uJV/sRYPYwPa9JzXITUS6ilWTXBuaVYCJJI Kx45WYm5Qrd6eXi9QM+Ytm1pxap4xiO2b6pwmA1H9e4yMM1EcbvNw3cyS9gzRzGk wnVbCErNjl805da0KCMAI/Kxi7NkJzre86Uo2q25XaqPt9eHRoS/g077IwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMJdxhR6FRatlemoD71U6inFepnMMB8GA1UdIwQY MBaAFE+K6i8CX0lb6s7nzlqIIFGd2hNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUt NjA4MDk1MmYwZTA0LzEvd2wzR0ZIb1ZGcTJWNmFnUHZWVHFLY1Y2bWN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUtNjA4MDk1MmYwZTA0 LzEvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuewLMA0G CSqGSIb3DQEBCwUAA4IBAQBWsrv71VIiDNUfz2OCb8ZZ82LMyIrTrtAxz4i+8sCT Y+OoSxoruTg+A4OH52OBcxFDVR+zLrO9LYiHu59XALSe5CjdWDYqLvPqgN3qpfV6 GKIkeNxqTjquN8BD4mjnUAXFVWbG4D0hJ+i8fjxwAOGERr+afFT/B/uagHddDw/T 8sO6vaIVRDrFpxlVXQ8W30+ID41+rnoC+9oaQQxZMWl05zfby+w5rnRs/4Id5oHk bcFmHfVICqu//OoHThD2CWV8qpNUO5I8d4FIsobmCD1HAgEjuuNhQ871hKaHXdx0 Of+jdDqrw2S10uCW1LuBLxk+pHW0CxzfWxoulBWgg2CJ -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:03 2026 by rpki-client