This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/ws3LMFUwqOssAgdFH0sQW1QshrQ.roa File: ws3LMFUwqOssAgdFH0sQW1QshrQ.roa (raw, json) Hash identifier: 0QPouBqOetwvm5EolmlFqYseOotdTyUeyqwZDQ7ojQU= Subject key identifier: C2:CD:CB:30:55:30:A8:EB:2C:02:07:45:1F:4B:10:5B:54:2C:86:B4 Certificate issuer: /CN=43301775b3fdff04a227d6d859c01b6d633a4f0b Certificate serial: 019B783457BCE65C06EAE4F5405AEB20C1EA Authority key identifier: 43:30:17:75:B3:FD:FF:04:A2:27:D6:D8:59:C0:1B:6D:63:3A:4F:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/ws3LMFUwqOssAgdFH0sQW1QshrQ.roa Signing time: Thu 01 Jan 2026 06:17:34 +0000 ROA not before: Thu 01 Jan 2026 06:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201946 IP address blocks: 185.49.8.0/22 maxlen: 22 185.49.8.0/24 maxlen: 24 185.49.9.0/24 maxlen: 24 185.49.10.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.mft rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:57:bc:e6:5c:06:ea:e4:f5:40:5a:eb:20:c1:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43301775b3fdff04a227d6d859c01b6d633a4f0b Validity Not Before: Jan 1 06:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2cdcb305530a8eb2c0207451f4b105b542c86b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c1:76:b2:c7:3d:81:7b:8e:b4:3b:ac:6f:03: c9:1b:46:0b:0b:9e:cc:86:1a:96:db:44:08:fa:1b: de:96:b8:a8:9c:e0:cc:f0:6a:d1:98:e3:60:c4:0e: 19:73:5e:11:33:32:2b:bd:cd:9e:e6:73:c2:b2:16: 2a:34:0c:69:d0:3b:29:bd:72:dd:f7:93:9c:9b:0f: 87:e0:03:af:4c:d3:80:2d:3d:4d:02:4c:3a:28:bb: 6d:23:19:f5:b0:fb:ba:6f:47:ad:f4:17:c7:c4:36: 15:43:58:3c:4c:b6:7b:f5:30:6f:7a:8b:ef:46:61: 6d:57:7f:e1:83:57:d4:c7:69:b6:26:0b:f0:03:82: d0:da:1b:d2:65:55:94:41:6c:80:3f:1d:e5:ef:dc: ca:2e:6b:0e:fe:33:46:4b:4d:13:be:1b:9d:7d:dc: 3f:86:d9:50:f8:70:3f:3b:40:52:f3:07:bf:4c:1e: fd:a1:60:60:db:ac:45:af:4b:15:08:78:f9:d3:ce: 25:66:29:66:f4:f1:34:fe:06:cc:28:58:09:ba:5a: 7d:05:37:92:c2:76:53:37:f0:8b:54:c5:04:e1:3d: af:5d:2c:68:ab:1c:cc:ea:92:4f:cd:06:97:3c:45: 5d:84:d6:34:31:e7:c2:74:9a:b5:99:b7:9d:cd:7b: f6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:CD:CB:30:55:30:A8:EB:2C:02:07:45:1F:4B:10:5B:54:2C:86:B4 X509v3 Authority Key Identifier: keyid:43:30:17:75:B3:FD:FF:04:A2:27:D6:D8:59:C0:1B:6D:63:3A:4F:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/ws3LMFUwqOssAgdFH0sQW1QshrQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/3e8fb3-48be-4083-b221-2cd00910bcb7/1/QzAXdbP9_wSiJ9bYWcAbbWM6Tws.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.49.8.0/22 Signature Algorithm: sha256WithRSAEncryption 82:e2:92:ef:a5:22:ce:37:f8:d5:6a:5d:e4:cc:23:01:26:71: 72:d2:7b:53:ea:db:83:2a:69:1c:39:5b:63:ef:9b:e9:0e:4a: dd:54:a6:43:f9:0e:f2:26:02:b0:d6:e5:98:0c:fd:54:b3:53: 8d:5b:f8:e9:fb:9a:52:eb:6d:98:a9:3a:e4:c2:e9:2b:5d:d1: c2:e7:49:00:fe:cf:5d:71:2c:43:6f:b8:27:e1:ba:0f:bb:21: 99:dd:7c:b9:fc:06:94:a7:2e:91:e5:c5:9c:eb:b2:27:7d:36: 08:1e:76:ca:db:e2:89:6a:7d:00:61:86:cd:52:16:c6:57:41: fe:f1:dd:4f:d3:0e:ce:5d:33:62:b2:26:a5:de:53:9c:9a:3c: 3e:10:90:b8:9c:a1:29:f5:9b:cb:b1:0a:2d:61:83:9a:5b:b1: 52:5f:a2:9c:67:65:31:69:a8:95:5c:14:aa:93:2e:17:99:7a: 18:83:4a:8c:c2:fb:04:e7:fb:ef:57:66:bf:31:a8:4e:cc:69: d5:9a:06:3e:f0:ba:11:22:16:2d:92:19:cb:ee:25:a0:f2:39: be:6a:88:46:f7:20:12:30:47:5a:e6:39:dd:39:20:0a:57:d4: 42:0e:0a:a6:82:8a:96:ed:38:9a:96:e3:40:e3:e3:e6:7e:28: c9:9b:bb:22 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NFe85lwG6uT1QFrrIMHqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzMzAxNzc1YjNmZGZmMDRhMjI3ZDZkODU5YzAxYjZkNjMz YTRmMGIwHhcNMjYwMTAxMDYxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMmNkY2IzMDU1MzBhOGViMmMwMjA3NDUxZjRiMTA1YjU0MmM4NmI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscF2ssc9gXuOtDusbwPJG0YLC57M hhqW20QI+hvelrionODM8GrRmONgxA4Zc14RMzIrvc2e5nPCshYqNAxp0DspvXLd 95Ocmw+H4AOvTNOALT1NAkw6KLttIxn1sPu6b0et9BfHxDYVQ1g8TLZ79TBveovv RmFtV3/hg1fUx2m2JgvwA4LQ2hvSZVWUQWyAPx3l79zKLmsO/jNGS00Tvhudfdw/ htlQ+HA/O0BS8we/TB79oWBg26xFr0sVCHj5084lZilm9PE0/gbMKFgJulp9BTeS wnZTN/CLVMUE4T2vXSxoqxzM6pJPzQaXPEVdhNY0MefCdJq1mbedzXv2lwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMLNyzBVMKjrLAIHRR9LEFtULIa0MB8GA1UdIwQY MBaAFEMwF3Wz/f8EoifW2FnAG21jOk8LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXpBWGRiUDlfd1NpSjliWVdjQWJiV002VHdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8zZThmYjMtNDhiZS00MDgzLWIyMjEt MmNkMDA5MTBiY2I3LzEvd3MzTE1GVXdxT3NzQWdkRkgwc1FXMVFzaHJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8zZThmYjMtNDhiZS00MDgzLWIyMjEtMmNkMDA5MTBiY2I3 LzEvUXpBWGRiUDlfd1NpSjliWVdjQWJiV002VHdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTEIMA0G CSqGSIb3DQEBCwUAA4IBAQCC4pLvpSLON/jVal3kzCMBJnFy0ntT6tuDKmkcOVtj 75vpDkrdVKZD+Q7yJgKw1uWYDP1Us1ONW/jp+5pS622YqTrkwukrXdHC50kA/s9d cSxDb7gn4boPuyGZ3Xy5/AaUpy6R5cWc67InfTYIHnbK2+KJan0AYYbNUhbGV0H+ 8d1P0w7OXTNisial3lOcmjw+EJC4nKEp9ZvLsQotYYOaW7FSX6KcZ2UxaaiVXBSq ky4XmXoYg0qMwvsE5/vvV2a/MahOzGnVmgY+8LoRIhYtkhnL7iWg8jm+aohG9yAS MEda5jndOSAKV9RCDgqmgoqW7TialuNA4+PmfijJm7si -----END CERTIFICATE-----Generated at Mon Feb 9 23:42:44 2026 by rpki-client