This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/wjtu5rouI6o5sivHqgZWiEyWYSQ.roa File: wjtu5rouI6o5sivHqgZWiEyWYSQ.roa (raw, json) Hash identifier: dh0LGwDXw+QvpsnUYRFis+d3wj/qLdu8NaoSILnm1ps= Subject key identifier: C2:3B:6E:E6:BA:2E:23:AA:39:B2:2B:C7:AA:06:56:88:4C:96:61:24 Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d Certificate serial: 019B7F845596E986772C17F580A66B7CD017 Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/wjtu5rouI6o5sivHqgZWiEyWYSQ.roa Signing time: Fri 02 Jan 2026 16:22:17 +0000 ROA not before: Fri 02 Jan 2026 16:22:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216459 IP address blocks: 45.130.54.0/23 maxlen: 23 193.109.137.0/24 maxlen: 24 194.156.176.0/24 maxlen: 24 194.156.178.0/24 maxlen: 24 194.156.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:24:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:55:96:e9:86:77:2c:17:f5:80:a6:6b:7c:d0:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d Validity Not Before: Jan 2 16:22:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c23b6ee6ba2e23aa39b22bc7aa0656884c966124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:2c:d9:2e:c6:78:2a:63:cc:ad:fd:4a:42:ed: 80:db:be:0f:d1:3c:00:5e:29:4f:b2:da:c0:a1:2e: 7f:1c:87:47:ab:dd:b6:7b:85:36:15:2a:1c:13:bf: e5:e9:a4:8b:68:22:ef:06:c1:14:79:bf:ac:0b:24: 49:53:c1:23:17:8b:59:11:93:22:42:e8:c4:0b:05: e6:7c:ae:dd:c6:cb:63:41:93:05:80:25:27:3c:b2: d1:43:d3:7b:11:56:f9:6f:0f:f3:af:27:1f:d8:bf: 92:a7:67:a1:1b:0f:1a:84:10:14:dc:15:9f:23:87: 73:44:25:bd:b1:91:73:c9:b7:58:1a:91:a0:32:9c: bc:ba:31:a9:bb:3f:e4:c5:23:23:ce:ef:29:55:62: 8f:3c:8f:26:09:15:20:a7:62:38:51:50:6c:8a:dc: b9:ae:f0:6f:d2:68:4f:36:6a:98:89:10:f6:19:ab: fd:c3:97:74:23:9c:b7:f1:01:33:eb:15:d1:5b:25: 7a:65:d0:11:50:ee:f4:1c:6f:1e:3e:9e:5a:b8:18: dd:76:53:d3:5a:64:53:b8:96:98:c8:9c:4c:72:d7: 07:9d:50:40:c4:35:85:ad:03:24:47:e6:c3:3d:a7: c2:1d:ca:d6:a7:ee:02:3b:52:88:39:7f:af:a7:d8: 32:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:3B:6E:E6:BA:2E:23:AA:39:B2:2B:C7:AA:06:56:88:4C:96:61:24 X509v3 Authority Key Identifier: keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/wjtu5rouI6o5sivHqgZWiEyWYSQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.130.54.0/23 193.109.137.0/24 194.156.176.0/24 194.156.178.0/23 Signature Algorithm: sha256WithRSAEncryption 96:cc:d2:75:78:0b:a0:6b:50:58:bf:4d:5c:2e:13:d4:9d:7f: ab:50:08:bf:8f:35:20:94:34:7c:51:53:38:2e:3b:91:3f:8c: 14:4c:c1:1e:fd:78:ea:31:8d:2a:33:95:23:20:64:da:78:5d: 8f:26:32:c5:01:5c:f1:d5:ff:10:e1:4d:46:bf:f1:e9:76:13: 1c:29:c8:4b:e8:dc:cd:92:d9:2f:6c:71:62:26:55:68:99:64: 00:44:4e:0c:f2:a6:d3:0d:77:d8:72:b5:5d:dd:9f:a9:07:9f: 7c:0a:c6:3c:cb:8b:4f:4f:9a:03:73:5c:ca:f5:2c:20:3c:51: 14:bc:ac:87:30:d1:f0:c2:3a:f6:e5:ad:b4:e3:70:2f:54:11: 48:a5:1b:7c:9e:9a:a6:69:bf:61:02:e8:33:15:0b:d7:3d:c1: 40:9c:e1:0f:05:76:4b:c3:6d:d5:e9:b6:0e:05:c1:36:54:d7: 07:35:45:7f:71:c0:7d:b0:ad:a3:da:9f:ea:fc:02:77:3f:70: c1:c7:ea:a2:fb:cc:d8:81:cf:f8:69:5c:16:18:78:c6:3d:07: ab:00:4e:2b:3e:3f:71:f2:e7:3f:b2:d3:94:1e:9f:8f:15:08: 22:7a:04:94:e5:51:1a:a3:cc:38:bc:9d:fe:f0:cf:ea:d2:eb: 65:6f:21:c2 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt/hFWW6YZ3LBf1gKZrfNAXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw MTRiOGQwHhcNMjYwMTAyMTYyMjE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjNiNmVlNmJhMmUyM2FhMzliMjJiYzdhYTA2NTY4ODRjOTY2MTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yzZLsZ4KmPMrf1KQu2A274P0TwA XilPstrAoS5/HIdHq922e4U2FSocE7/l6aSLaCLvBsEUeb+sCyRJU8EjF4tZEZMi QujECwXmfK7dxstjQZMFgCUnPLLRQ9N7EVb5bw/zrycf2L+Sp2ehGw8ahBAU3BWf I4dzRCW9sZFzybdYGpGgMpy8ujGpuz/kxSMjzu8pVWKPPI8mCRUgp2I4UVBsity5 rvBv0mhPNmqYiRD2Gav9w5d0I5y38QEz6xXRWyV6ZdARUO70HG8ePp5auBjddlPT WmRTuJaYyJxMctcHnVBAxDWFrQMkR+bDPafCHcrWp+4CO1KIOX+vp9gy9QIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFMI7bua6LiOqObIrx6oGVohMlmEkMB8GA1UdIwQY MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt NmJjNzU1NzhiNGMzLzEvd2p0dTVyb3VJNm81c2l2SHFnWldpRXlXWVNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBLYI2AwQA wW2JAwQAwpywAwQBwpyyMA0GCSqGSIb3DQEBCwUAA4IBAQCWzNJ1eAuga1BYv01c LhPUnX+rUAi/jzUglDR8UVM4LjuRP4wUTMEe/XjqMY0qM5UjIGTaeF2PJjLFAVzx 1f8Q4U1Gv/HpdhMcKchL6NzNktkvbHFiJlVomWQARE4M8qbTDXfYcrVd3Z+pB598 CsY8y4tPT5oDc1zK9SwgPFEUvKyHMNHwwjr25a2043AvVBFIpRt8npqmab9hAugz FQvXPcFAnOEPBXZLw23V6bYOBcE2VNcHNUV/ccB9sK2j2p/q/AJ3P3DBx+qi+8zY gc/4aVwWGHjGPQerAE4rPj9x8uc/stOUHp+PFQgiegSU5VEao8w4vJ3+8M/q0utl byHC -----END CERTIFICATE-----Generated at Wed Jan 21 16:58:58 2026 by rpki-client