This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/iWERPsQjBjOg7P2MlEko3KqBJk4.roa File: iWERPsQjBjOg7P2MlEko3KqBJk4.roa (raw, json) Hash identifier: r2S9jXegLTLDs5TdcDl1C/SzyFIEfCu0kDdQUZgvfsg= Subject key identifier: 89:61:11:3E:C4:23:06:33:A0:EC:FD:8C:94:49:28:DC:AA:81:26:4E Certificate issuer: /CN=99282d77c662e68bb87e83338b76ad6bead93185 Certificate serial: 019B7AC894BDE2A1DA48E6F414D20747A285 Authority key identifier: 99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/iWERPsQjBjOg7P2MlEko3KqBJk4.roa Signing time: Thu 01 Jan 2026 18:18:44 +0000 ROA not before: Thu 01 Jan 2026 18:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29208 IP address blocks: 185.176.136.0/24 maxlen: 32 185.176.137.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 21:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:94:bd:e2:a1:da:48:e6:f4:14:d2:07:47:a2:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99282d77c662e68bb87e83338b76ad6bead93185 Validity Not Before: Jan 1 18:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8961113ec4230633a0ecfd8c944928dcaa81264e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8e:0c:03:bb:38:73:4f:89:00:51:28:04:08: 84:97:1f:a1:2a:c3:5d:02:cc:32:cb:8e:9a:f2:2c: e5:7a:e6:cd:13:54:6e:11:e1:2e:20:e3:89:c6:40: 91:2b:ce:02:67:19:46:23:e8:8d:b0:6d:7c:ca:6c: c0:bc:1e:0b:c3:b8:e0:b5:3c:86:69:a4:e9:f8:14: 34:d8:40:2c:56:35:da:8d:3b:b2:cb:33:27:aa:57: 36:94:94:77:0f:34:aa:ab:dc:e3:c2:92:ac:de:00: e0:6f:a3:f7:9c:a5:61:0e:b5:a9:91:82:8d:a8:1c: a5:ca:c6:86:34:00:17:ac:53:dd:e4:97:b8:a1:f4: fb:7e:f6:37:d4:12:51:bf:76:60:e4:c8:2b:bb:19: 24:f5:f5:31:4c:a3:1f:72:0b:18:ec:5e:cd:b2:a8: 70:c8:76:56:a8:1c:f9:a7:bd:11:0a:a5:60:1c:b7: 1e:d5:d2:fd:ca:5a:52:4f:d8:82:b1:91:c2:15:45: db:0e:c8:ca:77:e3:13:0a:64:c5:5c:c3:69:1b:dd: 2e:9b:f2:f7:bf:b8:53:ec:8d:42:75:a4:4a:cf:e1: fe:df:e6:e7:ac:2b:ba:07:7f:a8:5f:78:29:a8:1e: a5:72:94:e8:ec:75:04:13:a0:9b:99:cd:c6:f5:95: 36:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:61:11:3E:C4:23:06:33:A0:EC:FD:8C:94:49:28:DC:AA:81:26:4E X509v3 Authority Key Identifier: keyid:99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/iWERPsQjBjOg7P2MlEko3KqBJk4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.176.136.0/23 Signature Algorithm: sha256WithRSAEncryption 7f:cb:f0:85:9a:eb:90:f3:fa:82:10:4e:ad:d9:69:84:48:6b: 71:01:ad:6b:07:c1:61:16:5a:d5:99:3e:15:78:b2:35:f6:b6: 87:f2:c2:8b:8c:bb:cc:94:cb:d2:b0:a6:be:1f:21:07:f9:5d: fd:67:52:91:6b:0f:e6:02:a6:31:52:05:80:51:64:54:05:26: aa:9f:4b:b3:aa:67:0c:ef:c3:f3:cb:4e:06:26:05:e5:9b:14: 3f:8d:aa:1c:91:e4:e4:99:0a:5e:33:26:69:c5:1a:07:8f:ee: bf:5d:d5:d5:18:19:7c:24:33:ad:24:07:29:d5:73:c0:64:84: b2:29:ec:07:7e:c3:67:fb:e3:58:30:8a:95:76:07:cb:01:77: 76:01:aa:fe:bc:b9:ac:1c:92:01:71:ea:6b:94:6a:58:95:3f: 4f:a4:1e:51:52:a7:75:23:6d:ec:97:09:98:d4:e5:07:26:08: 95:a6:e9:b3:dc:df:e0:01:e3:9a:eb:e6:3a:ba:88:1d:52:2d: f6:cf:b4:c2:d0:8b:b6:af:cd:d7:1f:b6:e1:38:56:03:10:3a: d1:d3:91:34:31:96:45:3b:19:67:a4:2a:e6:06:f2:7b:18:22: b4:96:a0:76:cc:a2:6e:ae:e1:5c:96:87:99:1e:39:ca:b9:cb: 69:c0:73:68 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yJS94qHaSOb0FNIHR6KFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5MjgyZDc3YzY2MmU2OGJiODdlODMzMzhiNzZhZDZiZWFk OTMxODUwHhcNMjYwMTAxMTgxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OTYxMTEzZWM0MjMwNjMzYTBlY2ZkOGM5NDQ5MjhkY2FhODEyNjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAio4MA7s4c0+JAFEoBAiElx+hKsNd Aswyy46a8izleubNE1RuEeEuIOOJxkCRK84CZxlGI+iNsG18ymzAvB4Lw7jgtTyG aaTp+BQ02EAsVjXajTuyyzMnqlc2lJR3DzSqq9zjwpKs3gDgb6P3nKVhDrWpkYKN qBylysaGNAAXrFPd5Je4ofT7fvY31BJRv3Zg5Mgruxkk9fUxTKMfcgsY7F7Nsqhw yHZWqBz5p70RCqVgHLce1dL9ylpST9iCsZHCFUXbDsjKd+MTCmTFXMNpG90um/L3 v7hT7I1CdaRKz+H+3+bnrCu6B3+oX3gpqB6lcpTo7HUEE6Cbmc3G9ZU20wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIlhET7EIwYzoOz9jJRJKNyqgSZOMB8GA1UdIwQY MBaAFJkoLXfGYuaLuH6DM4t2rWvq2TGFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbVNndGQ4Wmk1b3U0Zm9NemkzYXRhLXJaTVlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS82MWM2MWQtNWVkOC00NzY2LTliNGIt MDU2YjljMjMxZjM0LzEvaVdFUlBzUWpCak9nN1AyTWxFa28zS3FCSms0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS82MWM2MWQtNWVkOC00NzY2LTliNGItMDU2YjljMjMxZjM0 LzEvbVNndGQ4Wmk1b3U0Zm9NemkzYXRhLXJaTVlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBubCIMA0G CSqGSIb3DQEBCwUAA4IBAQB/y/CFmuuQ8/qCEE6t2WmESGtxAa1rB8FhFlrVmT4V eLI19raH8sKLjLvMlMvSsKa+HyEH+V39Z1KRaw/mAqYxUgWAUWRUBSaqn0uzqmcM 78Pzy04GJgXlmxQ/jaockeTkmQpeMyZpxRoHj+6/XdXVGBl8JDOtJAcp1XPAZISy KewHfsNn++NYMIqVdgfLAXd2Aar+vLmsHJIBceprlGpYlT9PpB5RUqd1I23slwmY 1OUHJgiVpumz3N/gAeOa6+Y6uogdUi32z7TC0Iu2r83XH7bhOFYDEDrR05E0MZZF OxlnpCrmBvJ7GCK0lqB2zKJuruFcloeZHjnKuctpwHNo -----END CERTIFICATE-----Generated at Sat Jan 3 06:51:00 2026 by rpki-client