This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/_WGs2Jc-WyeIv5oA6p86FML3z0M.roa File: _WGs2Jc-WyeIv5oA6p86FML3z0M.roa (raw, json) Hash identifier: tNNhBcebJheDJ1zVBR8Zzc7EFcsm3cyViqUtT/u6NpQ= Subject key identifier: FD:61:AC:D8:97:3E:5B:27:88:BF:9A:00:EA:9F:3A:14:C2:F7:CF:43 Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 019B7F15EC14CC39E270D7902D5CCC51628B Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/_WGs2Jc-WyeIv5oA6p86FML3z0M.roa Signing time: Fri 02 Jan 2026 14:21:41 +0000 ROA not before: Fri 02 Jan 2026 14:21:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203511 IP address blocks: 45.94.171.0/24 maxlen: 24 45.151.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Jan 2026 14:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:ec:14:cc:39:e2:70:d7:90:2d:5c:cc:51:62:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Jan 2 14:21:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd61acd8973e5b2788bf9a00ea9f3a14c2f7cf43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:35:43:a4:f8:90:c9:85:31:a9:7a:1f:1d:35: 9a:41:a7:8b:f5:8e:13:bc:78:cc:0e:2a:8f:9b:d7: ba:7a:0e:d0:c8:fc:2f:c6:4c:38:8a:9a:72:ad:92: fc:4d:4f:5e:25:e8:13:2e:f0:65:5d:a2:e2:8c:33: aa:0b:74:9d:5e:8a:b8:29:57:df:5f:14:a9:91:a4: a3:d0:35:48:6f:f4:8f:aa:dc:3d:b5:38:60:89:ce: bc:f1:bc:99:d3:ba:72:b6:00:a5:bf:cb:17:b1:d2: a7:6a:49:bf:76:11:a1:cb:2b:b0:6d:4d:2b:8d:98: be:17:ed:2d:25:1e:1b:c1:35:d2:e1:9e:f8:e1:76: e1:21:31:ef:db:c0:ee:e6:4e:fa:c3:79:36:da:a2: ba:82:33:d6:4b:9f:07:10:cd:82:c1:99:54:ff:77: df:f4:74:75:04:cf:5a:ec:a9:7a:33:cb:c9:dd:92: 2c:60:47:a0:a0:83:08:e9:17:fb:c7:60:af:90:a7: 01:05:14:31:30:ed:5c:fd:49:63:54:17:7e:90:35: b7:40:51:af:66:4c:02:ee:82:1d:e3:b2:aa:fa:39: c5:3c:e6:41:d3:1d:d5:35:b3:ff:56:88:0f:e5:2a: 94:65:f3:a5:80:ac:a7:99:39:1a:1e:ca:53:c5:17: 49:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:61:AC:D8:97:3E:5B:27:88:BF:9A:00:EA:9F:3A:14:C2:F7:CF:43 X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/_WGs2Jc-WyeIv5oA6p86FML3z0M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.94.171.0/24 45.151.2.0/24 Signature Algorithm: sha256WithRSAEncryption be:89:ad:69:68:ad:c2:e4:4d:a2:b3:d1:ca:d2:72:40:36:f6: c9:ac:0f:1e:a8:ba:9e:1a:af:d3:b3:72:bd:d8:95:e2:0d:6c: 7f:10:1c:55:45:32:1d:4c:06:ac:ae:56:04:e2:28:ee:08:bc: e2:c3:fb:98:95:01:18:3a:75:9d:eb:e1:53:21:6d:c9:45:a3: 60:df:54:48:95:ab:80:97:51:c8:88:7f:95:53:25:9c:0c:0c: 93:ec:a2:86:de:e5:4f:f5:78:b4:bb:18:9b:29:13:f3:7f:23: 51:19:de:c8:ba:2d:1e:33:b5:a3:b5:fc:8f:2d:10:68:7b:a9: c0:48:33:bf:e6:e8:24:3c:02:e2:a7:dd:64:e3:3f:ae:fc:f6: 16:8d:fb:30:ee:6e:5a:ae:7b:d0:82:c3:00:dc:ce:83:e4:49: e0:ec:32:cc:8b:84:2d:7b:6f:f8:ff:6c:77:b9:6a:24:1d:64: 81:da:ed:53:b4:c3:e5:7d:17:58:97:d9:72:03:05:74:c1:29: db:dc:3a:57:6d:10:b9:68:0a:a8:fe:7f:8c:51:38:57:11:3d: 2a:22:0e:20:2d:39:2d:b4:55:f6:6f:b0:30:de:cc:c7:b7:e2: d0:84:3a:df:92:ee:c9:a7:84:cf:0c:4d:87:bf:eb:d5:c4:9a: c5:1e:75:ad -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FewUzDnicNeQLVzMUWKLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjYwMTAyMTQyMTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDYxYWNkODk3M2U1YjI3ODhiZjlhMDBlYTlmM2ExNGMyZjdjZjQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTVDpPiQyYUxqXofHTWaQaeL9Y4T vHjMDiqPm9e6eg7QyPwvxkw4ippyrZL8TU9eJegTLvBlXaLijDOqC3SdXoq4KVff XxSpkaSj0DVIb/SPqtw9tThgic688byZ07pytgClv8sXsdKnakm/dhGhyyuwbU0r jZi+F+0tJR4bwTXS4Z744XbhITHv28Du5k76w3k22qK6gjPWS58HEM2CwZlU/3ff 9HR1BM9a7Kl6M8vJ3ZIsYEegoIMI6Rf7x2CvkKcBBRQxMO1c/UljVBd+kDW3QFGv ZkwC7oId47Kq+jnFPOZB0x3VNbP/VogP5SqUZfOlgKynmTkaHspTxRdJEwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFP1hrNiXPlsniL+aAOqfOhTC989DMB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvX1dHczJKYy1XeWVJdjVvQTZwODZGTUwzejBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALV6rAwQA LZcCMA0GCSqGSIb3DQEBCwUAA4IBAQC+ia1paK3C5E2is9HK0nJANvbJrA8eqLqe Gq/Ts3K92JXiDWx/EBxVRTIdTAasrlYE4ijuCLziw/uYlQEYOnWd6+FTIW3JRaNg 31RIlauAl1HIiH+VUyWcDAyT7KKG3uVP9Xi0uxibKRPzfyNRGd7Iui0eM7WjtfyP LRBoe6nASDO/5ugkPALip91k4z+u/PYWjfsw7m5arnvQgsMA3M6D5Eng7DLMi4Qt e2/4/2x3uWokHWSB2u1TtMPlfRdYl9lyAwV0wSnb3DpXbRC5aAqo/n+MUThXET0q Ig4gLTkttFX2b7Aw3szHt+LQhDrfku7Jp4TPDE2Hv+vVxJrFHnWt -----END CERTIFICATE-----Generated at Tue Jan 6 20:50:43 2026 by rpki-client