This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/WlwTaKkU2HZMWF5XkuLfssrKAJI.roa File: WlwTaKkU2HZMWF5XkuLfssrKAJI.roa (raw, json) Hash identifier: WLJEj2SUE7vXaqpiVwG7I1eOetKgXvyeAJ7z58uzNlw= Subject key identifier: 5A:5C:13:68:A9:14:D8:76:4C:58:5E:57:92:E2:DF:B2:CA:CA:00:92 Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019B7F15E1BDF87B613DFB4238D2263F3DA9 Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/WlwTaKkU2HZMWF5XkuLfssrKAJI.roa Signing time: Fri 02 Jan 2026 14:21:39 +0000 ROA not before: Fri 02 Jan 2026 14:21:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42708 IP address blocks: 45.13.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:e1:bd:f8:7b:61:3d:fb:42:38:d2:26:3f:3d:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Jan 2 14:21:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a5c1368a914d8764c585e5792e2dfb2caca0092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:11:fe:7d:5e:37:6a:88:37:64:03:ed:8e:20: e4:9a:8c:a3:41:93:ba:46:06:58:fa:52:d1:8d:d3: 35:ef:d8:28:23:89:78:37:96:10:9a:f8:15:41:e2: 3c:40:98:b0:92:57:9d:8b:52:04:4e:f6:d2:f3:eb: aa:f6:eb:b5:9d:86:d1:c2:31:cd:78:2f:24:13:35: 20:be:45:aa:71:f6:31:24:29:64:75:b4:3d:d4:b9: 96:66:bb:37:8c:7d:2a:6d:a5:02:0b:e4:f1:e5:9d: e0:c2:23:2a:65:da:25:ed:5d:3b:5c:11:83:9a:05: 0f:02:99:67:2b:96:96:2b:94:a0:d2:42:ea:fe:23: e8:dd:0b:c4:13:9c:7a:03:b9:f4:db:9a:73:d0:98: 84:14:8f:d8:c7:60:97:4a:16:5e:48:3a:f5:d1:b6: b2:66:03:46:aa:87:6b:15:b8:68:04:b0:e6:4d:a1: f4:58:aa:aa:fe:e8:af:4a:5a:89:6a:28:5f:65:9d: a5:9a:11:61:d0:9e:2d:98:18:ee:b2:90:3d:f1:c2: ee:d0:bb:1a:75:b6:ce:a9:fc:73:f2:88:c7:97:91: 06:b8:ac:c3:94:a7:8f:54:da:98:d8:17:d1:00:60: 70:5a:65:a0:6e:43:e8:b4:29:13:1f:19:c3:9b:7e: 90:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:5C:13:68:A9:14:D8:76:4C:58:5E:57:92:E2:DF:B2:CA:CA:00:92 X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/WlwTaKkU2HZMWF5XkuLfssrKAJI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.191.0/24 Signature Algorithm: sha256WithRSAEncryption 56:a0:38:5c:52:28:34:d8:c6:6d:fb:70:a9:d5:92:36:ed:bc: a2:4a:ee:d5:d5:74:0b:a0:ab:97:22:ff:7a:9b:fa:57:aa:f0: 56:9e:d2:c3:81:79:f5:23:ac:6b:3f:3e:a4:dc:0b:08:49:0e: 21:44:2c:8a:13:6c:0b:6e:8a:d4:2f:f6:e0:4f:ee:d9:7d:5d: cf:b4:82:e2:29:e4:9a:4b:b3:93:c0:96:5d:6b:35:93:51:77: b3:00:9e:35:01:81:23:13:1c:81:37:05:01:3d:ee:b2:73:1f: e8:bd:32:3c:b9:53:51:cc:43:6a:fa:56:a9:da:6b:96:6d:61: 00:67:fc:9a:45:fa:cf:75:20:59:99:fb:8d:c3:64:01:e3:df: 1d:dd:c7:7f:02:a5:d0:de:9d:fe:85:ba:d2:7c:3e:bd:ae:b7: 4a:b1:74:a2:52:25:6a:10:99:19:4a:d6:a6:c8:e8:9a:b0:b8: 46:8b:1e:c1:ad:ae:3b:5f:b7:7b:22:39:1d:d5:cd:21:fd:5e: 8a:38:71:69:6d:73:28:ae:32:d6:8a:c6:13:4b:49:ff:38:de: f8:27:08:e1:83:e9:53:c3:a8:18:e2:3d:d9:2c:f5:31:d6:b7: b2:53:8c:1c:f5:f3:a3:1a:5e:4e:9c:42:5b:0b:53:5b:a2:16: d1:b8:43:b0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FeG9+HthPftCONImPz2pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjYwMTAyMTQyMTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTVjMTM2OGE5MTRkODc2NGM1ODVlNTc5MmUyZGZiMmNhY2EwMDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxH+fV43aog3ZAPtjiDkmoyjQZO6 RgZY+lLRjdM179goI4l4N5YQmvgVQeI8QJiwkledi1IETvbS8+uq9uu1nYbRwjHN eC8kEzUgvkWqcfYxJClkdbQ91LmWZrs3jH0qbaUCC+Tx5Z3gwiMqZdol7V07XBGD mgUPAplnK5aWK5Sg0kLq/iPo3QvEE5x6A7n025pz0JiEFI/Yx2CXShZeSDr10bay ZgNGqodrFbhoBLDmTaH0WKqq/uivSlqJaihfZZ2lmhFh0J4tmBjuspA98cLu0Lsa dbbOqfxz8ojHl5EGuKzDlKePVNqY2BfRAGBwWmWgbkPotCkTHxnDm36QcwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFpcE2ipFNh2TFheV5Li37LKygCSMB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvV2x3VGFLa1UySFpNV0Y1WGt1TGZzc3JLQUpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQ2/MA0G CSqGSIb3DQEBCwUAA4IBAQBWoDhcUig02MZt+3Cp1ZI27byiSu7V1XQLoKuXIv96 m/pXqvBWntLDgXn1I6xrPz6k3AsISQ4hRCyKE2wLborUL/bgT+7ZfV3PtILiKeSa S7OTwJZdazWTUXezAJ41AYEjExyBNwUBPe6ycx/ovTI8uVNRzENq+lap2muWbWEA Z/yaRfrPdSBZmfuNw2QB498d3cd/AqXQ3p3+hbrSfD69rrdKsXSiUiVqEJkZStam yOiasLhGix7Bra47X7d7Ijkd1c0h/V6KOHFpbXMorjLWisYTS0n/ON74Jwjhg+lT w6gY4j3ZLPUx1reyU4wc9fOjGl5OnEJbC1NbohbRuEOw -----END CERTIFICATE-----Generated at Tue Jan 6 20:51:37 2026 by rpki-client