This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/w5L3FIDQ5dVgBosrxy8T9UB3MsY.roa File: w5L3FIDQ5dVgBosrxy8T9UB3MsY.roa (raw, json) Hash identifier: q5Br3i/0tMxLM8djHNXqPKfHBcAZeWinp2LOD2kGfo8= Subject key identifier: C3:92:F7:14:80:D0:E5:D5:60:06:8B:2B:C7:2F:13:F5:40:77:32:C6 Certificate issuer: /CN=8c7af79da5f2b68986c8356460a43fa42d37f3a6 Certificate serial: 019B7C1277DB3C445FDF93B8EF55E667DBD0 Authority key identifier: 8C:7A:F7:9D:A5:F2:B6:89:86:C8:35:64:60:A4:3F:A4:2D:37:F3:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/w5L3FIDQ5dVgBosrxy8T9UB3MsY.roa Signing time: Fri 02 Jan 2026 00:19:03 +0000 ROA not before: Fri 02 Jan 2026 00:19:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24933 IP address blocks: 185.44.32.0/22 maxlen: 22 2a04:9880::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.mft rsync://rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:77:db:3c:44:5f:df:93:b8:ef:55:e6:67:db:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c7af79da5f2b68986c8356460a43fa42d37f3a6 Validity Not Before: Jan 2 00:19:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c392f71480d0e5d560068b2bc72f13f5407732c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ef:5f:ea:0c:17:81:12:d8:f8:c5:b6:fb:a2: d1:27:31:bf:e5:d5:23:ac:5b:13:0e:e7:56:c7:2b: c8:66:9b:26:ad:e5:a1:9f:78:42:cf:63:d6:d0:25: 2d:90:a1:21:0c:fc:4b:55:8e:be:74:de:bd:35:1b: 61:13:7a:1d:54:ff:bd:1c:d0:a2:65:cd:31:e6:c1: 7f:ab:c1:43:bc:7c:cd:9f:b6:97:d2:48:35:56:12: 06:84:6f:e1:e4:f1:67:93:07:55:77:2c:8a:ab:d0: e1:45:ee:6e:e4:ad:2f:71:3a:11:90:bd:e3:40:c6: 95:b3:ce:f7:91:00:c0:cc:2b:2a:f5:aa:ee:d8:b5: 65:e0:4d:0f:b2:bb:8a:47:c4:87:a6:63:de:60:b8: 0f:d7:64:26:6d:65:d9:7d:f2:03:82:ea:48:19:8d: 60:32:b1:07:eb:e0:48:06:4f:72:8b:19:24:d6:97: 9a:2e:41:14:de:10:5d:de:b9:17:a8:6c:1c:01:82: fc:e3:18:98:e5:35:20:d8:67:ce:d3:c1:c7:9e:d3: 6c:9f:93:51:7e:e6:9c:26:a8:a3:6a:f5:4c:f8:29: 7c:9d:a4:9c:77:bd:a3:01:72:77:8b:1e:08:ca:66: 7f:69:11:0c:b3:c8:2f:18:79:c9:8e:b8:62:13:a7: 4d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:92:F7:14:80:D0:E5:D5:60:06:8B:2B:C7:2F:13:F5:40:77:32:C6 X509v3 Authority Key Identifier: keyid:8C:7A:F7:9D:A5:F2:B6:89:86:C8:35:64:60:A4:3F:A4:2D:37:F3:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHr3naXytomGyDVkYKQ_pC0386Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/w5L3FIDQ5dVgBosrxy8T9UB3MsY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27086d-37f3-4130-8729-bcedbbd6e574/1/jHr3naXytomGyDVkYKQ_pC0386Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.44.32.0/22 IPv6: 2a04:9880::/29 Signature Algorithm: sha256WithRSAEncryption 6e:6c:41:2d:9f:7d:e7:15:23:b4:6b:c8:20:0b:5b:bd:51:ca: 5d:b2:2b:b9:50:8c:df:53:71:71:37:3e:c1:fd:bd:0d:d5:29: bf:8e:c1:f5:18:5f:a1:77:ff:1b:28:e4:90:d0:10:20:7e:26: 54:2e:5d:dd:b5:ce:30:93:3f:11:91:50:bd:37:1c:87:ef:2d: 8f:b6:87:56:12:69:1b:9c:ff:a5:ea:84:5f:2e:34:f5:7f:d9: 08:6f:12:7d:76:0f:8c:ee:4f:7b:d5:3f:64:e5:ed:ea:b8:95: fc:39:f5:39:d9:01:3b:03:16:ff:04:5b:74:3d:a2:17:05:ea: 7e:b6:23:bd:87:96:79:93:f0:76:3d:f4:56:93:8f:b1:09:63: 76:aa:fa:a8:f1:f4:dd:4b:e1:aa:28:8f:30:a1:c2:41:99:78: 30:8b:a6:4a:0a:df:03:b2:e4:54:43:fe:92:78:e0:19:9c:91: 9c:40:96:48:8f:28:63:60:5e:c7:76:47:aa:6c:a9:b0:91:5c: ab:27:9c:0d:bc:60:0f:94:c3:98:b9:bd:5a:d7:5c:17:0c:17: 3d:e2:92:1e:ab:42:29:3c:3d:f6:2e:10:c2:60:bf:ab:08:3d: f3:1d:17:c1:48:81:52:48:90:40:49:3b:19:91:85:18:f2:24: d5:7c:83:2e -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8EnfbPERf35O471XmZ9vQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjN2FmNzlkYTVmMmI2ODk4NmM4MzU2NDYwYTQzZmE0MmQz N2YzYTYwHhcNMjYwMTAyMDAxOTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzkyZjcxNDgwZDBlNWQ1NjAwNjhiMmJjNzJmMTNmNTQwNzczMmM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAre9f6gwXgRLY+MW2+6LRJzG/5dUj rFsTDudWxyvIZpsmreWhn3hCz2PW0CUtkKEhDPxLVY6+dN69NRthE3odVP+9HNCi Zc0x5sF/q8FDvHzNn7aX0kg1VhIGhG/h5PFnkwdVdyyKq9DhRe5u5K0vcToRkL3j QMaVs873kQDAzCsq9aru2LVl4E0PsruKR8SHpmPeYLgP12QmbWXZffIDgupIGY1g MrEH6+BIBk9yixkk1peaLkEU3hBd3rkXqGwcAYL84xiY5TUg2GfO08HHntNsn5NR fuacJqijavVM+Cl8naScd72jAXJ3ix4IymZ/aREMs8gvGHnJjrhiE6dNSwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMOS9xSA0OXVYAaLK8cvE/VAdzLGMB8GA1UdIwQY MBaAFIx6952l8raJhsg1ZGCkP6QtN/OmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvakhyM25hWHl0b21HeURWa1lLUV9wQzAzODZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8yNzA4NmQtMzdmMy00MTMwLTg3Mjkt YmNlZGJiZDZlNTc0LzEvdzVMM0ZJRFE1ZFZnQm9zcnh5OFQ5VUIzTXNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC8yNzA4NmQtMzdmMy00MTMwLTg3MjktYmNlZGJiZDZlNTc0 LzEvakhyM25hWHl0b21HeURWa1lLUV9wQzAzODZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuSwgMA0E AgACMAcDBQMqBJiAMA0GCSqGSIb3DQEBCwUAA4IBAQBubEEtn33nFSO0a8ggC1u9 Ucpdsiu5UIzfU3FxNz7B/b0N1Sm/jsH1GF+hd/8bKOSQ0BAgfiZULl3dtc4wkz8R kVC9NxyH7y2PtodWEmkbnP+l6oRfLjT1f9kIbxJ9dg+M7k971T9k5e3quJX8OfU5 2QE7Axb/BFt0PaIXBep+tiO9h5Z5k/B2PfRWk4+xCWN2qvqo8fTdS+GqKI8wocJB mXgwi6ZKCt8DsuRUQ/6SeOAZnJGcQJZIjyhjYF7HdkeqbKmwkVyrJ5wNvGAPlMOY ub1a11wXDBc94pIeq0IpPD32LhDCYL+rCD3zHRfBSIFSSJBASTsZkYUY8iTVfIMu -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:09 2026 by rpki-client