This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/wlANpCzVRa0ThrSUi-vK0VC98Nc.roa File: wlANpCzVRa0ThrSUi-vK0VC98Nc.roa (raw, json) Hash identifier: xx4oA1bsZ7cBKVFFolZuNGrp9fy72eKFuy/z7tUTNxg= Subject key identifier: C2:50:0D:A4:2C:D5:45:AD:13:86:B4:94:8B:EB:CA:D1:50:BD:F0:D7 Certificate issuer: /CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97 Certificate serial: 019B79ED0969F680D2BEA8F98ACD01936868 Authority key identifier: BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/wlANpCzVRa0ThrSUi-vK0VC98Nc.roa Signing time: Thu 01 Jan 2026 14:18:56 +0000 ROA not before: Thu 01 Jan 2026 14:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 147003 IP address blocks: 45.87.102.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 04:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:09:69:f6:80:d2:be:a8:f9:8a:cd:01:93:68:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97 Validity Not Before: Jan 1 14:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2500da42cd545ad1386b4948bebcad150bdf0d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:26:e1:2a:e4:ea:9a:12:b8:c4:16:35:e8:71: 0f:93:e8:7d:0f:f1:48:ab:44:8f:f9:c2:a2:da:a8: fb:0a:c8:da:00:c4:74:ed:03:dd:d4:cf:21:dd:46: 0e:e0:12:b3:6e:1b:1d:fb:c7:d3:c7:d4:b0:d5:c8: f8:2f:ed:69:70:ab:bf:a9:c0:24:15:28:db:db:26: d9:3a:84:dd:4b:ee:b5:55:cf:f7:fd:84:49:88:e7: 13:1b:56:0a:05:6d:59:6c:10:13:22:79:31:bd:51: 52:8d:20:b1:0c:e1:60:2c:16:60:f8:ae:f3:64:43: 35:d8:93:23:5c:93:8a:dc:a1:38:0a:57:e7:48:03: 8f:72:2e:12:be:6b:d4:80:a1:da:63:f0:27:43:5f: bd:b3:6a:af:22:69:d4:3f:da:4c:c9:3a:8f:c1:a9: e0:02:5b:a6:30:b1:eb:1c:8f:3a:cf:79:a1:b4:c8: 1c:1b:0d:40:69:e0:3e:9c:d7:7b:dc:b3:ec:f8:0e: f0:89:1b:f5:82:ba:cd:7f:01:62:05:c1:62:ad:41: b4:fd:75:49:6f:5a:a2:1f:37:ba:79:f8:ea:a6:87: 06:45:73:00:a2:a6:93:5a:da:ea:89:5b:dd:a6:6e: 02:a3:5b:58:df:72:0b:c5:99:91:76:9d:19:72:a4: 74:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:50:0D:A4:2C:D5:45:AD:13:86:B4:94:8B:EB:CA:D1:50:BD:F0:D7 X509v3 Authority Key Identifier: keyid:BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/wlANpCzVRa0ThrSUi-vK0VC98Nc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.87.102.0/23 Signature Algorithm: sha256WithRSAEncryption 46:67:70:54:a6:c5:b5:1f:cd:c0:e1:2d:6d:5a:8e:9b:de:d9: 36:46:bd:74:de:bd:87:18:f1:67:e0:11:d4:6c:94:e7:6a:6d: bd:18:a1:df:a2:fb:65:41:0c:9b:8a:63:f1:95:54:86:a1:a1: b6:de:81:83:f1:8d:00:7e:75:b7:8d:e3:69:13:25:cb:ad:b2: d5:e5:c6:50:8b:3f:e6:ea:fb:bf:3b:e3:7b:39:86:c6:64:fb: 90:9e:1a:71:93:98:7e:41:d0:b2:74:ab:b3:86:02:e5:e5:ae: e6:77:db:a3:56:36:e6:68:66:88:f2:ea:31:8f:39:0e:89:3e: bb:13:f3:d7:a7:56:52:b5:ab:1d:f1:2f:23:1a:ec:aa:ec:92: 05:1f:00:c4:8d:ca:3e:b6:01:4c:b2:ad:21:dd:95:c1:fc:a2: 20:32:33:0b:16:b0:d7:c3:d0:62:aa:d0:8e:cc:7c:07:c3:77: cd:e5:98:bf:87:50:28:ad:ea:72:5e:92:69:98:fa:db:0b:e7: d0:d1:21:fb:13:82:b3:19:9a:03:4a:f0:61:72:e2:63:56:93: 19:1a:f4:13:50:94:97:11:74:d5:83:fa:55:43:22:66:41:3c: 9a:1d:6b:4b:c9:37:dc:70:86:c9:e7:df:b0:a5:9c:1f:35:6f: af:3b:0b:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57Qlp9oDSvqj5is0Bk2hoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNDFhZGRjOWE0ZWVhMjQ2ZDQyZjk4YzdjNzJiMzBiNjhk NjdhOTcwHhcNMjYwMTAxMTQxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjUwMGRhNDJjZDU0NWFkMTM4NmI0OTQ4YmViY2FkMTUwYmRmMGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ibhKuTqmhK4xBY16HEPk+h9D/FI q0SP+cKi2qj7CsjaAMR07QPd1M8h3UYO4BKzbhsd+8fTx9Sw1cj4L+1pcKu/qcAk FSjb2ybZOoTdS+61Vc/3/YRJiOcTG1YKBW1ZbBATInkxvVFSjSCxDOFgLBZg+K7z ZEM12JMjXJOK3KE4ClfnSAOPci4SvmvUgKHaY/AnQ1+9s2qvImnUP9pMyTqPwang AlumMLHrHI86z3mhtMgcGw1AaeA+nNd73LPs+A7wiRv1grrNfwFiBcFirUG0/XVJ b1qiHze6efjqpocGRXMAoqaTWtrqiVvdpm4Co1tY33ILxZmRdp0ZcqR0UwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMJQDaQs1UWtE4a0lIvrytFQvfDXMB8GA1UdIwQY MBaAFL9BrdyaTuokbUL5jHxyswto1nqXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjBHdDNKcE82aVJ0UXZtTWZIS3pDMmpXZXBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS83MGZjYjMtODMwMi00MWU0LTgzNmEt ZWVhZDUwOGJlNGVlLzEvd2xBTnBDelZSYTBUaHJTVWktdkswVkM5OE5jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS83MGZjYjMtODMwMi00MWU0LTgzNmEtZWVhZDUwOGJlNGVl LzEvdjBHdDNKcE82aVJ0UXZtTWZIS3pDMmpXZXBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLVdmMA0G CSqGSIb3DQEBCwUAA4IBAQBGZ3BUpsW1H83A4S1tWo6b3tk2Rr103r2HGPFn4BHU bJTnam29GKHfovtlQQybimPxlVSGoaG23oGD8Y0AfnW3jeNpEyXLrbLV5cZQiz/m 6vu/O+N7OYbGZPuQnhpxk5h+QdCydKuzhgLl5a7md9ujVjbmaGaI8uoxjzkOiT67 E/PXp1ZStasd8S8jGuyq7JIFHwDEjco+tgFMsq0h3ZXB/KIgMjMLFrDXw9BiqtCO zHwHw3fN5Zi/h1AorepyXpJpmPrbC+fQ0SH7E4KzGZoDSvBhcuJjVpMZGvQTUJSX EXTVg/pVQyJmQTyaHWtLyTfccIbJ59+wpZwfNW+vOwu4 -----END CERTIFICATE-----Generated at Fri Jan 23 13:57:58 2026 by rpki-client