This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/WvNXvSqa41K6jpO-SSKdxIotyhs.roa File: WvNXvSqa41K6jpO-SSKdxIotyhs.roa (raw, json) Hash identifier: 6daa5/h/miwNEmBXaEvppFFjCHE2OMcMlO6YVkzT+kg= Subject key identifier: 5A:F3:57:BD:2A:9A:E3:52:BA:8E:93:BE:49:22:9D:C4:8A:2D:CA:1B Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019B7F15EED4D724B865C4500B396CE56147 Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/WvNXvSqa41K6jpO-SSKdxIotyhs.roa Signing time: Fri 02 Jan 2026 14:21:42 +0000 ROA not before: Fri 02 Jan 2026 14:21:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207267 IP address blocks: 45.94.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ee:d4:d7:24:b8:65:c4:50:0b:39:6c:e5:61:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Jan 2 14:21:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5af357bd2a9ae352ba8e93be49229dc48a2dca1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f7:ef:52:fa:4d:cf:db:1c:b8:82:8a:3f:fa: 10:74:3c:f4:d4:ce:f8:ef:2f:27:a1:a8:74:4d:54: 0c:41:18:00:12:51:d6:e1:75:79:a9:91:c4:c2:2e: 64:79:26:20:46:ae:1b:ac:d3:09:f0:5f:08:2e:ad: 6b:bc:39:97:ca:13:9f:59:45:4c:fc:87:a9:64:a7: 2b:ea:8a:df:9b:33:ca:2f:9a:5b:30:3a:ca:cb:5e: bb:e9:65:f8:81:9f:05:71:73:dd:86:c6:4b:6a:15: e1:f8:4c:cb:ab:ad:be:6b:37:15:7e:da:a9:50:58: 6d:6b:e1:80:c6:ad:25:3f:b9:b9:cb:a7:fb:96:ff: d9:cf:ff:86:eb:1d:66:3c:43:86:08:dd:80:ae:30: dd:28:3d:f2:6b:eb:48:93:58:33:aa:4d:ca:fd:2e: aa:c5:5c:9d:d0:63:20:3a:79:fc:5c:e6:b9:92:5f: de:c9:9f:7f:46:96:96:87:7f:76:8d:3a:ac:f4:5d: ac:93:4e:0d:26:b5:02:41:c2:e0:e9:9e:f5:42:a4: 93:df:62:7e:07:6d:de:1f:96:00:94:ee:c5:a7:6b: 52:45:1a:68:5d:65:bf:b9:94:50:f1:e4:b5:e8:80: c4:f6:55:63:fb:a6:d6:7e:36:b4:7e:e0:b1:98:db: 36:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:F3:57:BD:2A:9A:E3:52:BA:8E:93:BE:49:22:9D:C4:8A:2D:CA:1B X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/WvNXvSqa41K6jpO-SSKdxIotyhs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.94.169.0/24 Signature Algorithm: sha256WithRSAEncryption 19:f2:d5:35:0a:26:42:b4:76:f2:58:c9:d4:f9:43:62:b1:f7: 14:ae:e2:5f:4e:7d:c4:c2:cf:40:ec:89:52:79:06:1a:99:4e: 2e:71:de:f4:5e:53:2d:a6:f1:c2:94:07:1d:06:1d:a0:03:0f: a1:6f:71:aa:f1:12:a1:94:f8:36:46:3f:97:8e:b1:13:d5:ab: 83:e8:20:ff:16:92:a6:76:a1:d5:a6:3d:08:c1:4d:b4:0f:8f: 11:1d:84:dd:00:92:04:fb:fc:0b:0b:74:65:11:09:3d:c5:e1: 5d:a3:73:7f:bd:94:43:63:fd:d4:12:52:e0:ec:93:40:c5:1f: 1d:d1:0b:1c:04:82:d7:f7:14:93:f9:b0:90:fb:08:14:d3:a5: 1e:5e:11:6f:de:82:af:da:57:76:0e:3e:71:c9:f8:e9:cc:2d: f7:5c:cd:ba:50:bd:c0:cf:30:d7:4b:02:db:de:65:be:15:17: cf:1c:85:76:52:40:e0:e4:4a:e3:e3:88:3c:e7:6b:4b:3b:79: 7c:e7:2f:ca:55:2b:13:6f:c5:42:72:9d:57:cd:1a:b4:4a:bf: e2:d2:2b:48:aa:21:25:16:bb:b7:5a:86:ba:41:f0:14:ae:37: d7:0a:a2:ff:9e:bb:3c:f5:74:b7:d3:3b:1b:d8:da:3b:04:e8: fa:94:e6:89 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/Fe7U1yS4ZcRQCzls5WFHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjYwMTAyMTQyMTQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWYzNTdiZDJhOWFlMzUyYmE4ZTkzYmU0OTIyOWRjNDhhMmRjYTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvfvUvpNz9scuIKKP/oQdDz01M74 7y8noah0TVQMQRgAElHW4XV5qZHEwi5keSYgRq4brNMJ8F8ILq1rvDmXyhOfWUVM /IepZKcr6orfmzPKL5pbMDrKy1676WX4gZ8FcXPdhsZLahXh+EzLq62+azcVftqp UFhta+GAxq0lP7m5y6f7lv/Zz/+G6x1mPEOGCN2ArjDdKD3ya+tIk1gzqk3K/S6q xVyd0GMgOnn8XOa5kl/eyZ9/RpaWh392jTqs9F2sk04NJrUCQcLg6Z71QqST32J+ B23eH5YAlO7Fp2tSRRpoXWW/uZRQ8eS16IDE9lVj+6bWfja0fuCxmNs2jwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFrzV70qmuNSuo6TvkkincSKLcobMB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvV3ZOWHZTcWE0MUs2anBPLVNTS2R4SW90eWhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV6pMA0G CSqGSIb3DQEBCwUAA4IBAQAZ8tU1CiZCtHbyWMnU+UNisfcUruJfTn3Ews9A7IlS eQYamU4ucd70XlMtpvHClAcdBh2gAw+hb3Gq8RKhlPg2Rj+XjrET1auD6CD/FpKm dqHVpj0IwU20D48RHYTdAJIE+/wLC3RlEQk9xeFdo3N/vZRDY/3UElLg7JNAxR8d 0QscBILX9xST+bCQ+wgU06UeXhFv3oKv2ld2Dj5xyfjpzC33XM26UL3AzzDXSwLb 3mW+FRfPHIV2UkDg5Erj44g852tLO3l85y/KVSsTb8VCcp1XzRq0Sr/i0itIqiEl Fru3Woa6QfAUrjfXCqL/nrs89XS30zsb2No7BOj6lOaJ -----END CERTIFICATE-----Generated at Tue Jan 6 20:50:42 2026 by rpki-client