This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/1W3BSwVG-h7UZlkgwu2hlwiy8YA.roa File: 1W3BSwVG-h7UZlkgwu2hlwiy8YA.roa (raw, json) Hash identifier: Fu4OZcK7zm2ud74FBJ+MpudFzFh4S7/e94Cue8aAGCc= Subject key identifier: D5:6D:C1:4B:05:46:FA:1E:D4:66:59:20:C2:ED:A1:97:08:B2:F1:80 Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a Certificate serial: 019B7EA5347AE0E74827DECAC98C570BB819 Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/1W3BSwVG-h7UZlkgwu2hlwiy8YA.roa Signing time: Fri 02 Jan 2026 12:18:34 +0000 ROA not before: Fri 02 Jan 2026 12:18:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59463 IP address blocks: 109.160.16.0/21 maxlen: 21 109.160.16.0/24 maxlen: 24 109.160.17.0/24 maxlen: 24 109.160.18.0/24 maxlen: 24 109.160.19.0/24 maxlen: 24 109.160.20.0/24 maxlen: 24 109.160.21.0/24 maxlen: 24 109.160.22.0/24 maxlen: 24 109.160.23.0/24 maxlen: 24 109.160.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:34:7a:e0:e7:48:27:de:ca:c9:8c:57:0b:b8:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a Validity Not Before: Jan 2 12:18:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d56dc14b0546fa1ed4665920c2eda19708b2f180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c1:d6:fc:df:ca:62:a3:cc:80:50:26:21:2e: 69:7b:85:0a:a3:d5:a8:31:24:9f:0f:a6:89:a5:f5: 24:c1:f6:af:89:a9:db:36:db:c6:2c:51:fe:cc:6a: 5f:9b:ab:17:aa:6d:8c:cc:31:e6:93:05:1f:31:43: c9:c8:4b:02:a4:99:d6:c5:29:ab:a3:71:a8:ad:86: 70:e7:1c:0c:22:a2:a0:d9:55:42:a3:9c:13:01:af: 99:12:83:4f:81:c2:50:92:98:33:45:85:68:83:55: 14:e4:de:3a:7f:fd:0b:5a:f3:66:62:06:48:4c:72: de:d6:73:f4:3f:c2:8e:e1:1a:c9:30:b4:6e:f3:bc: 1e:cf:c0:91:b0:f0:b6:b3:ba:5a:0d:e7:35:fc:5f: 30:63:12:b5:d8:83:04:32:ae:e5:1e:ca:2c:12:da: 98:de:1c:13:cb:f6:c1:8f:b0:e2:dc:16:6e:3c:d5: 12:85:74:25:10:a4:88:8c:8f:2f:39:72:cf:27:71: 5c:b2:70:65:d4:7a:d9:02:43:3c:d5:b7:f8:0f:62: 08:f6:c8:e0:78:08:4a:d0:11:8d:2c:84:96:e4:82: 16:79:b9:25:c0:b1:e2:1d:2a:9c:e1:c8:42:75:03: 49:7f:52:88:96:0e:04:00:61:3b:bf:fd:41:d3:56: bf:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:6D:C1:4B:05:46:FA:1E:D4:66:59:20:C2:ED:A1:97:08:B2:F1:80 X509v3 Authority Key Identifier: keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/1W3BSwVG-h7UZlkgwu2hlwiy8YA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.160.16.0/21 109.160.62.0/24 Signature Algorithm: sha256WithRSAEncryption 71:9f:0d:5e:62:39:8f:38:85:10:e9:bf:19:ad:3b:a4:83:88: 79:83:52:a9:54:96:eb:ba:1a:55:20:c2:c6:4d:b1:a5:7c:cb: 52:bf:e8:80:2a:e4:7e:9d:58:88:32:45:ca:cb:16:07:75:f3: 32:c2:9e:94:15:38:01:a7:cc:37:3d:06:0f:52:77:64:ea:60: fd:53:82:e9:b7:8f:55:02:e2:a0:53:f0:43:61:d9:e9:19:e6: 4c:e5:71:c0:4c:73:65:50:2e:cd:e2:aa:6d:a0:1d:47:09:72: bd:12:ec:7f:97:e6:54:24:b1:a2:1e:9b:d7:e3:8b:2c:53:46: 7d:4c:89:90:80:e8:54:bb:b6:bc:a1:c0:1c:c4:fd:6c:0f:b6: ab:d2:07:fb:df:fd:b3:7e:02:7e:b6:93:05:6e:12:19:c3:88: 7b:57:7b:3f:44:91:92:0e:b0:01:6d:c8:0a:dc:9a:1d:f7:f3: 68:4d:ee:4c:5e:f1:ce:78:7a:51:77:72:61:da:a1:97:f9:72: 05:bc:7a:2d:1c:41:56:6d:06:6b:d1:f3:72:e1:18:a1:89:a7: 6f:38:98:c3:19:40:13:c0:db:63:38:c6:b6:3a:62:41:d2:f5: 76:03:dc:bd:25:68:28:6f:ba:57:1b:5b:5e:2e:58:b3:90:91: 45:53:8c:e0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pTR64OdIJ97KyYxXC7gZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My ODc3M2EwHhcNMjYwMTAyMTIxODM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNTZkYzE0YjA1NDZmYTFlZDQ2NjU5MjBjMmVkYTE5NzA4YjJmMTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMHW/N/KYqPMgFAmIS5pe4UKo9Wo MSSfD6aJpfUkwfavianbNtvGLFH+zGpfm6sXqm2MzDHmkwUfMUPJyEsCpJnWxSmr o3GorYZw5xwMIqKg2VVCo5wTAa+ZEoNPgcJQkpgzRYVog1UU5N46f/0LWvNmYgZI THLe1nP0P8KO4RrJMLRu87wez8CRsPC2s7paDec1/F8wYxK12IMEMq7lHsosEtqY 3hwTy/bBj7Di3BZuPNUShXQlEKSIjI8vOXLPJ3FcsnBl1HrZAkM81bf4D2II9sjg eAhK0BGNLISW5IIWebklwLHiHSqc4chCdQNJf1KIlg4EAGE7v/1B01a/NQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNVtwUsFRvoe1GZZIMLtoZcIsvGAMB8GA1UdIwQY MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt YTU1OGVlNjU0MzFmLzEvMVczQlN3VkctaDdVWmxrZ3d1Mmhsd2l5OFlBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDbaAQAwQA baA+MA0GCSqGSIb3DQEBCwUAA4IBAQBxnw1eYjmPOIUQ6b8ZrTukg4h5g1KpVJbr uhpVIMLGTbGlfMtSv+iAKuR+nViIMkXKyxYHdfMywp6UFTgBp8w3PQYPUndk6mD9 U4Lpt49VAuKgU/BDYdnpGeZM5XHATHNlUC7N4qptoB1HCXK9Eux/l+ZUJLGiHpvX 44ssU0Z9TImQgOhUu7a8ocAcxP1sD7ar0gf73/2zfgJ+tpMFbhIZw4h7V3s/RJGS DrABbcgK3Jod9/NoTe5MXvHOeHpRd3Jh2qGX+XIFvHotHEFWbQZr0fNy4Rihiadv OJjDGUATwNtjOMa2OmJB0vV2A9y9JWgob7pXG1teLlizkJFFU4zg -----END CERTIFICATE-----Generated at Tue Jan 20 03:36:47 2026 by rpki-client