This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/Wwry0pTyAtK1A6b2shrM5APPbZI.roa File: Wwry0pTyAtK1A6b2shrM5APPbZI.roa (raw, json) Hash identifier: CHi4AVwGvGrl5tChQ0TUYjHIVyCz1akOxd1fug9TFQ0= Subject key identifier: 5B:0A:F2:D2:94:F2:02:D2:B5:03:A6:F6:B2:1A:CC:E4:03:CF:6D:92 Certificate issuer: /CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97 Certificate serial: 019BD7C3567752AFF8DB2DF5E952082991E7 Authority key identifier: BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/Wwry0pTyAtK1A6b2shrM5APPbZI.roa Signing time: Mon 19 Jan 2026 19:37:41 +0000 ROA not before: Mon 19 Jan 2026 19:37:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9232 IP address blocks: 45.87.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d7:c3:56:77:52:af:f8:db:2d:f5:e9:52:08:29:91:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97 Validity Not Before: Jan 19 19:37:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b0af2d294f202d2b503a6f6b21acce403cf6d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6e:a5:42:5e:2d:40:30:e0:7e:32:d3:7d:b6: e3:6d:1d:0f:c6:d9:98:be:e7:b9:5c:a8:f9:55:9b: 62:67:e7:3c:28:5b:e1:90:85:2b:ac:5b:25:a6:d4: a7:46:70:81:b5:bb:66:ab:b8:ee:28:31:aa:e2:64: 95:f4:0f:e4:e2:4b:2d:da:ec:f0:c0:0e:d9:36:74: f0:e3:ed:ef:02:db:9b:f5:ca:11:c4:81:62:b3:fe: 7a:56:7c:54:75:40:d5:86:db:09:ca:4a:30:5d:c2: c2:a3:4c:2e:c2:f0:3f:7b:21:87:40:9c:76:f3:19: 87:b8:cc:be:3b:d7:e9:38:2a:47:7f:25:a0:24:57: dc:87:13:aa:27:5c:67:5a:be:3f:af:d7:34:69:9d: 1a:d4:d4:08:ab:36:c4:bf:d3:b7:ef:01:08:5c:f7: ed:77:93:85:02:73:8d:da:38:2f:85:df:6a:de:42: 20:f4:83:0f:98:03:ef:8d:c0:3e:e4:54:56:4e:dd: 5a:29:0c:8a:1b:77:a6:6b:44:25:f3:02:8b:5b:7e: 8d:f4:ae:8e:13:2e:b3:8f:8b:0a:d0:71:48:e6:ff: 5f:d1:32:b2:d4:f9:63:9d:fc:3c:b4:c6:eb:7d:05: 20:b7:d0:e5:79:ce:ad:89:4d:81:40:b4:4b:4d:a6: e7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:0A:F2:D2:94:F2:02:D2:B5:03:A6:F6:B2:1A:CC:E4:03:CF:6D:92 X509v3 Authority Key Identifier: keyid:BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/Wwry0pTyAtK1A6b2shrM5APPbZI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.101.0/24 Signature Algorithm: sha256WithRSAEncryption 63:cc:41:99:3f:ee:1a:48:96:7d:be:af:3a:60:fe:f0:aa:25: b0:cb:42:0b:68:8f:82:53:d5:22:04:d6:be:a0:f7:5e:60:6d: 5f:ec:05:9d:64:7d:1a:be:2e:d1:17:d0:59:c7:71:45:2e:29: 0d:12:44:5a:4f:c5:36:98:8d:97:4a:9e:6f:3a:90:b9:51:f0: cd:e5:f8:6c:00:58:05:8d:f1:65:37:61:39:35:34:2c:32:31: 6c:7c:17:a1:6e:0c:48:7f:27:2f:4a:b4:93:d2:33:8c:a2:c0: bd:44:b8:7a:44:9a:c8:6f:fc:b4:e8:fd:58:4d:1d:cf:8c:20: 41:ec:b4:82:6f:0b:d5:7c:05:c5:0d:ab:17:17:2e:97:66:3c: 28:f3:e1:99:ce:82:80:97:21:11:0f:fa:ec:37:43:85:68:bc: 18:85:05:d9:d3:4d:c3:41:6d:d5:fa:00:71:5e:5c:0b:eb:c9: c8:13:97:10:0e:57:21:23:e8:f7:1e:12:49:8f:ef:7c:76:1a: d4:a2:60:8e:9d:79:b3:b1:70:d8:25:1f:a9:e6:a6:12:b7:8e: 09:4e:ae:8a:07:60:d4:37:a6:a9:18:b2:d4:8a:b2:d1:01:6d: 9a:bd:90:08:ee:17:72:85:94:e3:9c:fe:dd:80:6e:b5:f4:48: 6a:79:23:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvXw1Z3Uq/42y316VIIKZHnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNDFhZGRjOWE0ZWVhMjQ2ZDQyZjk4YzdjNzJiMzBiNjhk NjdhOTcwHhcNMjYwMTE5MTkzNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjBhZjJkMjk0ZjIwMmQyYjUwM2E2ZjZiMjFhY2NlNDAzY2Y2ZDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmG6lQl4tQDDgfjLTfbbjbR0PxtmY vue5XKj5VZtiZ+c8KFvhkIUrrFslptSnRnCBtbtmq7juKDGq4mSV9A/k4kst2uzw wA7ZNnTw4+3vAtub9coRxIFis/56VnxUdUDVhtsJykowXcLCo0wuwvA/eyGHQJx2 8xmHuMy+O9fpOCpHfyWgJFfchxOqJ1xnWr4/r9c0aZ0a1NQIqzbEv9O37wEIXPft d5OFAnON2jgvhd9q3kIg9IMPmAPvjcA+5FRWTt1aKQyKG3ema0Ql8wKLW36N9K6O Ey6zj4sK0HFI5v9f0TKy1Pljnfw8tMbrfQUgt9Dlec6tiU2BQLRLTabnJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFsK8tKU8gLStQOm9rIazOQDz22SMB8GA1UdIwQY MBaAFL9BrdyaTuokbUL5jHxyswto1nqXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjBHdDNKcE82aVJ0UXZtTWZIS3pDMmpXZXBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83MGZjYjMtODMwMi00MWU0LTgzNmEt ZWVhZDUwOGJlNGVlLzEvV3dyeTBwVHlBdEsxQTZiMnNock01QVBQYlpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS83MGZjYjMtODMwMi00MWU0LTgzNmEtZWVhZDUwOGJlNGVl LzEvdjBHdDNKcE82aVJ0UXZtTWZIS3pDMmpXZXBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVdlMA0G CSqGSIb3DQEBCwUAA4IBAQBjzEGZP+4aSJZ9vq86YP7wqiWwy0ILaI+CU9UiBNa+ oPdeYG1f7AWdZH0avi7RF9BZx3FFLikNEkRaT8U2mI2XSp5vOpC5UfDN5fhsAFgF jfFlN2E5NTQsMjFsfBehbgxIfycvSrST0jOMosC9RLh6RJrIb/y06P1YTR3PjCBB 7LSCbwvVfAXFDasXFy6XZjwo8+GZzoKAlyERD/rsN0OFaLwYhQXZ003DQW3V+gBx XlwL68nIE5cQDlchI+j3HhJJj+98dhrUomCOnXmzsXDYJR+p5qYSt44JTq6KB2DU N6apGLLUirLRAW2avZAI7hdyhZTjnP7dgG619EhqeSOs -----END CERTIFICATE-----Generated at Fri Jan 23 11:39:02 2026 by rpki-client