This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/wb3Uxkn8voTzDwcrNKLjdYKwRZo.roa File: wb3Uxkn8voTzDwcrNKLjdYKwRZo.roa (raw, json) Hash identifier: e7gIuzOOhyYERCBNmfCsDBCus3fRDqXK6S2fVbX8rlo= Subject key identifier: C1:BD:D4:C6:49:FC:BE:84:F3:0F:07:2B:34:A2:E3:75:82:B0:45:9A Certificate issuer: /CN=30a55632ec9034c9b9a3f290aaecd9a07c1f26ab Certificate serial: 019B797F184F9D12ACD829E5D0B5A3CAAA1F Authority key identifier: 30:A5:56:32:EC:90:34:C9:B9:A3:F2:90:AA:EC:D9:A0:7C:1F:26:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/wb3Uxkn8voTzDwcrNKLjdYKwRZo.roa Signing time: Thu 01 Jan 2026 12:18:51 +0000 ROA not before: Thu 01 Jan 2026 12:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 45010 IP address blocks: 62.220.224.0/22 maxlen: 22 93.90.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.crl rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.mft rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:18:4f:9d:12:ac:d8:29:e5:d0:b5:a3:ca:aa:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30a55632ec9034c9b9a3f290aaecd9a07c1f26ab Validity Not Before: Jan 1 12:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1bdd4c649fcbe84f30f072b34a2e37582b0459a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0b:8d:64:58:d1:ac:aa:4a:e4:67:4d:8b:36: b2:c9:0d:ab:f6:16:b2:7a:a8:3d:a9:9f:d7:45:5a: b8:2f:70:04:a7:34:b3:23:ba:35:e9:67:f6:43:85: 5a:e7:9c:ef:ab:16:ec:d5:73:e7:d9:64:7b:74:b7: 9b:1c:15:23:e3:60:90:9b:1b:4c:d7:90:9a:08:12: a7:60:6d:1b:ec:be:59:43:81:68:dc:cf:ae:d4:90: 2b:0b:40:f5:32:f0:23:a4:79:c9:18:bf:3d:13:87: c8:83:09:21:71:58:29:6e:6a:7d:f8:83:f2:57:70: 75:cf:2b:92:58:e7:07:99:32:41:f7:c3:a9:ad:e3: 88:8d:e2:27:6b:2d:94:3e:a7:a9:e2:51:03:85:00: 5d:43:4e:1c:c3:a8:d8:06:9c:86:63:c6:64:15:ba: 99:b3:e8:78:cd:69:01:e0:a1:17:99:2b:16:d0:ec: 5d:ed:d5:81:e1:3a:d8:c4:0e:3f:1c:95:6e:f8:80: e1:2e:1e:d8:89:98:d7:75:ea:07:3a:e3:9d:58:ab: 42:dc:4f:e1:f6:d8:f4:86:42:de:cc:7a:68:22:4e: 3e:4b:e6:cc:58:3c:6b:7b:df:77:23:40:6d:b7:9b: ab:c2:c3:9c:5d:4b:74:ab:4c:ee:cb:07:39:4d:01: 04:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:BD:D4:C6:49:FC:BE:84:F3:0F:07:2B:34:A2:E3:75:82:B0:45:9A X509v3 Authority Key Identifier: keyid:30:A5:56:32:EC:90:34:C9:B9:A3:F2:90:AA:EC:D9:A0:7C:1F:26:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MKVWMuyQNMm5o_KQquzZoHwfJqs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/wb3Uxkn8voTzDwcrNKLjdYKwRZo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/850024-84ee-44c8-b2d9-7d20eb063455/1/MKVWMuyQNMm5o_KQquzZoHwfJqs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.220.224.0/22 93.90.48.0/20 Signature Algorithm: sha256WithRSAEncryption 78:b2:55:2d:0a:db:76:51:db:7d:17:e2:03:0d:19:64:e1:a5: 65:69:9f:c0:e1:23:19:f5:06:fe:a4:a0:66:f5:5b:93:6c:b4: 08:88:d0:c1:94:57:65:b8:be:77:62:e5:2a:25:cf:a1:48:f2: 8f:50:f1:22:8d:a3:20:2c:81:c0:e3:8f:0b:34:87:8e:5f:8e: 37:d9:fe:70:af:44:00:1a:64:a3:7d:71:21:90:ab:cc:32:4c: 43:6c:8b:f6:dc:58:3f:f3:56:8a:14:e8:f3:78:63:4d:05:98: cd:9c:a0:5a:c5:20:db:92:6b:69:b6:fc:f1:7f:09:96:77:b1: 71:40:72:7d:9c:21:1e:ba:ca:47:bb:36:12:72:28:0c:07:61: 15:f7:32:1f:fb:22:21:d6:bf:82:44:b1:e1:e2:4a:b7:f1:a7: 49:6d:92:81:3c:09:ba:51:68:c2:e9:86:23:6d:fb:0f:57:f8: 98:15:7b:3b:46:41:8e:37:26:71:48:51:b7:14:68:8b:66:91: 0b:27:21:f5:d6:67:b1:9c:4e:05:68:38:6c:d7:62:dd:04:8b: a9:a4:09:b7:53:dd:f0:02:44:4b:61:d2:7f:a1:51:df:f4:ed: 95:42:9a:6c:70:ed:42:17:98:90:11:13:e1:83:4d:6c:2d:e1: 9e:a8:e0:67 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5fxhPnRKs2Cnl0LWjyqofMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYTU1NjMyZWM5MDM0YzliOWEzZjI5MGFhZWNkOWEwN2Mx ZjI2YWIwHhcNMjYwMTAxMTIxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWJkZDRjNjQ5ZmNiZTg0ZjMwZjA3MmIzNGEyZTM3NTgyYjA0NTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAuNZFjRrKpK5GdNizayyQ2r9hay eqg9qZ/XRVq4L3AEpzSzI7o16Wf2Q4Va55zvqxbs1XPn2WR7dLebHBUj42CQmxtM 15CaCBKnYG0b7L5ZQ4Fo3M+u1JArC0D1MvAjpHnJGL89E4fIgwkhcVgpbmp9+IPy V3B1zyuSWOcHmTJB98OpreOIjeInay2UPqep4lEDhQBdQ04cw6jYBpyGY8ZkFbqZ s+h4zWkB4KEXmSsW0Oxd7dWB4TrYxA4/HJVu+IDhLh7YiZjXdeoHOuOdWKtC3E/h 9tj0hkLezHpoIk4+S+bMWDxre993I0Btt5urwsOcXUt0q0zuywc5TQEEGwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMG91MZJ/L6E8w8HKzSi43WCsEWaMB8GA1UdIwQY MBaAFDClVjLskDTJuaPykKrs2aB8HyarMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUtWV011eVFOTW01b19LUXF1elpvSHdmSnFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84NTAwMjQtODRlZS00NGM4LWIyZDkt N2QyMGViMDYzNDU1LzEvd2IzVXhrbjh2b1R6RHdjck5LTGpkWUt3UlpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS84NTAwMjQtODRlZS00NGM4LWIyZDktN2QyMGViMDYzNDU1 LzEvTUtWV011eVFOTW01b19LUXF1elpvSHdmSnFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCPtzgAwQE XVowMA0GCSqGSIb3DQEBCwUAA4IBAQB4slUtCtt2Udt9F+IDDRlk4aVlaZ/A4SMZ 9Qb+pKBm9VuTbLQIiNDBlFdluL53YuUqJc+hSPKPUPEijaMgLIHA448LNIeOX443 2f5wr0QAGmSjfXEhkKvMMkxDbIv23Fg/81aKFOjzeGNNBZjNnKBaxSDbkmtptvzx fwmWd7FxQHJ9nCEeuspHuzYScigMB2EV9zIf+yIh1r+CRLHh4kq38adJbZKBPAm6 UWjC6YYjbfsPV/iYFXs7RkGONyZxSFG3FGiLZpELJyH11mexnE4FaDhs12LdBIup pAm3U93wAkRLYdJ/oVHf9O2VQppscO1CF5iQERPhg01sLeGeqOBn -----END CERTIFICATE-----Generated at Fri Jan 2 18:33:59 2026 by rpki-client