This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/wuDe0P9KWPBSUDn_Z5LtRuHcTN0.roa File: wuDe0P9KWPBSUDn_Z5LtRuHcTN0.roa (raw, json) Hash identifier: PlqJyT9jtqG0tUJWI/AH+Gyp3H4OOPzXZR3URdxEA3U= Subject key identifier: C2:E0:DE:D0:FF:4A:58:F0:52:50:39:FF:67:92:ED:46:E1:DC:4C:DD Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Certificate serial: 019B7F838ED9C4A83B0EAE02D3C5AE936665 Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/wuDe0P9KWPBSUDn_Z5LtRuHcTN0.roa Signing time: Fri 02 Jan 2026 16:21:26 +0000 ROA not before: Fri 02 Jan 2026 16:21:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213693 IP address blocks: 45.65.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.mft rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:8e:d9:c4:a8:3b:0e:ae:02:d3:c5:ae:93:66:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab Validity Not Before: Jan 2 16:21:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2e0ded0ff4a58f0525039ff6792ed46e1dc4cdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:a2:ad:72:a8:aa:f2:a5:80:89:6a:ae:06:91: f5:67:2a:54:b1:b0:f5:82:84:f4:2f:b3:c0:2e:54: 21:ea:53:9e:cd:64:07:c0:36:1d:bc:34:38:96:87: ba:bf:51:ab:ad:08:07:79:33:1d:b9:3b:7f:a0:d3: 9e:dc:0d:35:aa:73:9b:e7:42:b1:c0:c2:9e:58:e9: 93:7c:32:54:2a:a3:e1:e2:7b:d7:b6:94:32:7e:7d: 6d:d7:84:95:cf:2a:07:09:3e:47:b6:da:1c:5f:70: a9:21:7b:85:63:8f:5e:6a:23:c7:a8:39:7a:4f:57: 32:fb:c1:e2:c6:47:a9:f5:84:88:22:68:a0:37:25: ec:50:02:41:4c:6d:e5:e8:8d:36:a1:13:76:b7:cf: 45:17:db:d2:ad:e9:3a:13:39:da:36:c7:e6:d3:0b: c3:1c:8c:7e:07:83:36:19:57:86:d6:81:ea:d8:eb: 41:0b:8c:e6:cf:39:d8:e8:16:42:16:db:55:7d:80: cb:a3:ed:63:44:c1:ae:77:3f:c7:fb:16:b5:bf:45: 85:78:5d:4c:44:b4:82:4d:f0:01:f2:8b:bf:37:78: 2a:9f:e4:9f:b1:8e:61:ae:06:b6:62:94:b3:ba:9c: b6:c5:ca:02:29:b9:6a:cc:9d:c8:03:1f:1a:33:71: f9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:E0:DE:D0:FF:4A:58:F0:52:50:39:FF:67:92:ED:46:E1:DC:4C:DD X509v3 Authority Key Identifier: keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/wuDe0P9KWPBSUDn_Z5LtRuHcTN0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.65.112.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:85:28:38:b3:13:ec:d4:c8:1a:d4:8a:b1:3e:c7:da:e3:f9: 61:94:27:f4:af:48:3f:5d:5b:8d:a5:3e:4e:b9:56:c6:ed:69: c3:9c:d0:11:d7:2b:78:79:76:ad:02:1a:c3:45:d5:5f:eb:ce: b4:b6:dc:80:a8:e6:62:fe:ac:64:f0:b7:17:e6:76:34:9a:15: 5a:cb:b6:8e:ea:51:66:05:6d:0b:3f:d5:75:d4:14:2f:07:df: 84:ce:0a:9f:62:8f:88:04:64:75:e7:a8:f1:e7:14:31:81:11: 9a:1a:a9:07:70:71:a1:18:99:22:60:a7:cc:eb:dd:c7:d9:da: 61:cd:a2:99:c1:23:68:82:42:c6:cc:56:1e:51:df:e5:bb:b2: 80:66:fd:2e:82:b7:1b:f2:92:41:05:97:c9:e9:80:d6:df:8a: 2b:1d:00:81:65:7e:07:e3:55:f8:2a:01:b7:ac:60:d1:cb:d4: b9:72:5f:97:11:fe:f0:21:20:15:af:35:d4:f8:57:69:86:a3: 07:c9:c5:57:a8:7f:c6:fc:dd:f7:92:36:fa:65:10:40:60:e3: 5b:ed:4d:73:90:0f:5f:59:d2:45:be:e2:d9:4f:40:61:cb:56: ac:32:90:1a:68:89:56:55:cd:9f:86:b3:3a:3e:e5:44:08:53: c1:42:51:0f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g47ZxKg7Dq4C08Wuk2ZlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MWYyOTQ2MmU3YTdkYTdlYjVmNDVkYTc4NzNmMTRlNDAz ZmUzYWIwHhcNMjYwMTAyMTYyMTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMmUwZGVkMGZmNGE1OGYwNTI1MDM5ZmY2NzkyZWQ0NmUxZGM0Y2RkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8aKtcqiq8qWAiWquBpH1ZypUsbD1 goT0L7PALlQh6lOezWQHwDYdvDQ4loe6v1GrrQgHeTMduTt/oNOe3A01qnOb50Kx wMKeWOmTfDJUKqPh4nvXtpQyfn1t14SVzyoHCT5HttocX3CpIXuFY49eaiPHqDl6 T1cy+8Hixkep9YSIImigNyXsUAJBTG3l6I02oRN2t89FF9vSrek6EznaNsfm0wvD HIx+B4M2GVeG1oHq2OtBC4zmzznY6BZCFttVfYDLo+1jRMGudz/H+xa1v0WFeF1M RLSCTfAB8ou/N3gqn+SfsY5hrga2YpSzupy2xcoCKblqzJ3IAx8aM3H5+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMLg3tD/SljwUlA5/2eS7Ubh3EzdMB8GA1UdIwQY MBaAFAUfKUYuen2n619F2nhz8U5AP+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEt M2Y4YjU1ZGExYWM0LzEvd3VEZTBQOUtXUEJTVURuX1o1THRSdUhjVE4wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEtM2Y4YjU1ZGExYWM0 LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALUFwMA0G CSqGSIb3DQEBCwUAA4IBAQA8hSg4sxPs1Mga1IqxPsfa4/lhlCf0r0g/XVuNpT5O uVbG7WnDnNAR1yt4eXatAhrDRdVf6860ttyAqOZi/qxk8LcX5nY0mhVay7aO6lFm BW0LP9V11BQvB9+EzgqfYo+IBGR156jx5xQxgRGaGqkHcHGhGJkiYKfM693H2dph zaKZwSNogkLGzFYeUd/lu7KAZv0ugrcb8pJBBZfJ6YDW34orHQCBZX4H41X4KgG3 rGDRy9S5cl+XEf7wISAVrzXU+FdphqMHycVXqH/G/N33kjb6ZRBAYONb7U1zkA9f WdJFvuLZT0Bhy1asMpAaaIlWVc2fhrM6PuVECFPBQlEP -----END CERTIFICATE-----Generated at Tue Jan 20 02:49:03 2026 by rpki-client