This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/waZwL5p70K3eubkjn4rt16lrpmo.roa File: waZwL5p70K3eubkjn4rt16lrpmo.roa (raw, json) Hash identifier: Yb1Set22MMS78/VHLDK1SdDRV6cNd11Qc3kiWPaHjXE= Subject key identifier: C1:A6:70:2F:9A:7B:D0:AD:DE:B9:B9:23:9F:8A:ED:D7:A9:6B:A6:6A Certificate issuer: /CN=2628cc7f06ea09a247f6be9e9e574c4f37b4e9b6 Certificate serial: 019B7CEE33F2FE26BD3FE47869AAFECD435F Authority key identifier: 26:28:CC:7F:06:EA:09:A2:47:F6:BE:9E:9E:57:4C:4F:37:B4:E9:B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JijMfwbqCaJH9r6enldMTze06bY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/waZwL5p70K3eubkjn4rt16lrpmo.roa Signing time: Fri 02 Jan 2026 04:19:04 +0000 ROA not before: Fri 02 Jan 2026 04:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56595 IP address blocks: 45.149.252.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.crl rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.mft rsync://rpki.ripe.net/repository/DEFAULT/JijMfwbqCaJH9r6enldMTze06bY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:33:f2:fe:26:bd:3f:e4:78:69:aa:fe:cd:43:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2628cc7f06ea09a247f6be9e9e574c4f37b4e9b6 Validity Not Before: Jan 2 04:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1a6702f9a7bd0addeb9b9239f8aedd7a96ba66a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:85:c3:3a:aa:91:6d:9a:19:12:6d:35:2c:ce: c5:2d:88:35:99:49:2d:97:e9:a8:9f:f6:35:4d:29: bb:b3:ed:25:91:2c:15:f0:d8:97:0a:b9:7e:24:75: 2f:63:95:a4:d5:12:85:b8:fb:e0:e3:aa:9a:d8:59: fe:16:d2:82:8b:b5:66:6e:50:50:61:34:db:16:3b: 0c:cb:62:a3:42:38:fa:c0:79:81:96:c4:62:98:88: fa:d0:64:e8:22:f7:e6:5b:87:6e:49:99:bb:1c:a8: c4:16:1b:0f:ef:33:9d:5f:8a:93:a9:16:bf:84:be: 1b:a4:03:d8:e9:c4:ff:7e:c0:87:8b:d3:43:89:47: 4e:88:55:07:6b:98:40:20:3b:4d:02:a0:2e:64:7f: 62:37:2a:08:64:3a:3a:71:5e:25:e1:6a:7c:2b:97: 48:7f:3a:1a:25:36:03:cc:56:5c:5e:71:34:c4:07: c6:df:a6:ad:1a:8f:a4:80:32:ed:62:71:c7:d0:fb: bd:52:70:46:02:9a:e2:2d:8e:33:08:ef:fc:1c:ca: 80:70:61:b8:41:27:5a:4a:45:71:47:fd:b0:5d:3d: 45:77:7c:85:f0:1e:d0:81:98:45:75:a6:34:f0:dc: 3c:5a:d1:ea:ec:c8:1a:71:90:1c:3e:ed:9b:0e:99: 4c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A6:70:2F:9A:7B:D0:AD:DE:B9:B9:23:9F:8A:ED:D7:A9:6B:A6:6A X509v3 Authority Key Identifier: keyid:26:28:CC:7F:06:EA:09:A2:47:F6:BE:9E:9E:57:4C:4F:37:B4:E9:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JijMfwbqCaJH9r6enldMTze06bY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/waZwL5p70K3eubkjn4rt16lrpmo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/27145a-3e6f-4b92-b95b-12a29761e094/1/JijMfwbqCaJH9r6enldMTze06bY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.252.0/22 Signature Algorithm: sha256WithRSAEncryption 77:33:8e:12:fd:11:5f:d2:01:d7:b4:9d:ae:fc:b1:b5:39:12: b0:ba:12:f1:16:40:d6:fb:cf:c8:73:0e:02:61:27:29:af:5c: 0f:b5:eb:0f:9c:e0:b4:db:1e:a5:17:00:34:5a:a8:5c:92:45: cd:fd:59:87:9c:c8:48:a8:ba:e2:76:6b:5e:3f:b4:27:94:7d: d4:83:56:2d:f4:3f:80:30:52:70:ae:28:6b:38:4f:26:82:73: 55:ff:50:32:9e:d3:bf:e0:97:b3:3b:04:09:1a:f3:29:38:28: a5:71:5f:10:4a:92:71:5d:48:79:b5:96:fd:57:04:ec:1c:8e: 62:70:b5:64:40:20:8e:a0:ad:91:33:16:98:11:81:51:6f:70: 32:63:9c:7c:98:69:e2:14:b5:7f:18:ae:08:60:88:0e:e5:53: 55:e1:2b:b4:f9:69:ee:05:08:07:7c:74:60:e9:d3:22:aa:02: 5f:79:76:44:a2:ef:5b:83:95:ef:64:19:11:3d:3c:e7:6b:ea: 13:fb:41:b4:2c:d7:6e:24:70:9f:92:40:03:53:e6:07:37:ae: 98:c5:43:aa:3d:62:dd:72:f6:a7:82:fc:db:3c:5e:fd:02:00: 9b:15:1d:a6:d4:c9:5d:bf:b0:75:6c:04:aa:39:e5:68:87:cd: bd:c8:00:cb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87jPy/ia9P+R4aar+zUNfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI2MjhjYzdmMDZlYTA5YTI0N2Y2YmU5ZTllNTc0YzRmMzdi NGU5YjYwHhcNMjYwMTAyMDQxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWE2NzAyZjlhN2JkMGFkZGViOWI5MjM5ZjhhZWRkN2E5NmJhNjZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIXDOqqRbZoZEm01LM7FLYg1mUkt l+mon/Y1TSm7s+0lkSwV8NiXCrl+JHUvY5Wk1RKFuPvg46qa2Fn+FtKCi7VmblBQ YTTbFjsMy2KjQjj6wHmBlsRimIj60GToIvfmW4duSZm7HKjEFhsP7zOdX4qTqRa/ hL4bpAPY6cT/fsCHi9NDiUdOiFUHa5hAIDtNAqAuZH9iNyoIZDo6cV4l4Wp8K5dI fzoaJTYDzFZcXnE0xAfG36atGo+kgDLtYnHH0Pu9UnBGApriLY4zCO/8HMqAcGG4 QSdaSkVxR/2wXT1Fd3yF8B7QgZhFdaY08Nw8WtHq7MgacZAcPu2bDplMSQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMGmcC+ae9Ct3rm5I5+K7depa6ZqMB8GA1UdIwQY MBaAFCYozH8G6gmiR/a+np5XTE83tOm2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSmlqTWZ3YnFDYUpIOXI2ZW5sZE1UemUwNmJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8yNzE0NWEtM2U2Zi00YjkyLWI5NWIt MTJhMjk3NjFlMDk0LzEvd2Fad0w1cDcwSzNldWJram40cnQxNmxycG1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8yNzE0NWEtM2U2Zi00YjkyLWI5NWItMTJhMjk3NjFlMDk0 LzEvSmlqTWZ3YnFDYUpIOXI2ZW5sZE1UemUwNmJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZX8MA0G CSqGSIb3DQEBCwUAA4IBAQB3M44S/RFf0gHXtJ2u/LG1ORKwuhLxFkDW+8/Icw4C YScpr1wPtesPnOC02x6lFwA0WqhckkXN/VmHnMhIqLridmteP7QnlH3Ug1Yt9D+A MFJwrihrOE8mgnNV/1AyntO/4JezOwQJGvMpOCilcV8QSpJxXUh5tZb9VwTsHI5i cLVkQCCOoK2RMxaYEYFRb3AyY5x8mGniFLV/GK4IYIgO5VNV4Su0+WnuBQgHfHRg 6dMiqgJfeXZEou9bg5XvZBkRPTzna+oT+0G0LNduJHCfkkADU+YHN66YxUOqPWLd cvangvzbPF79AgCbFR2m1Mldv7B1bASqOeVoh829yADL -----END CERTIFICATE-----Generated at Mon Jan 26 10:49:11 2026 by rpki-client