This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/WKluDkXLbOUe3fiyMU_sfUku4Zk.roa File: WKluDkXLbOUe3fiyMU_sfUku4Zk.roa (raw, json) Hash identifier: g8pqi7RglCM3KJkQHe8MWM6i4Vof+uHKV1U9w7O5DtE= Subject key identifier: 58:A9:6E:0E:45:CB:6C:E5:1E:DD:F8:B2:31:4F:EC:7D:49:2E:E1:99 Certificate issuer: /CN=6c73bd24fd830886bfa2d2961416d2185de33772 Certificate serial: 019B7DC948BD625FCEE8BB0C6EE6250B216B Authority key identifier: 6C:73:BD:24:FD:83:08:86:BF:A2:D2:96:14:16:D2:18:5D:E3:37:72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bHO9JP2DCIa_otKWFBbSGF3jN3I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/WKluDkXLbOUe3fiyMU_sfUku4Zk.roa Signing time: Fri 02 Jan 2026 08:18:21 +0000 ROA not before: Fri 02 Jan 2026 08:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208654 IP address blocks: 45.85.148.0/22 maxlen: 24 2a0e:c680::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.crl rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.mft rsync://rpki.ripe.net/repository/DEFAULT/bHO9JP2DCIa_otKWFBbSGF3jN3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:48:bd:62:5f:ce:e8:bb:0c:6e:e6:25:0b:21:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c73bd24fd830886bfa2d2961416d2185de33772 Validity Not Before: Jan 2 08:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58a96e0e45cb6ce51eddf8b2314fec7d492ee199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b1:e6:e8:ea:5c:63:23:03:7b:f3:5f:64:9f: 62:1f:4e:1d:d8:99:8d:f3:d2:09:a2:82:3d:7c:fe: 60:55:f4:d0:34:56:31:fe:7e:7d:40:5a:82:6c:5b: 01:55:3b:b9:90:19:76:53:b4:da:d3:3f:26:26:9d: 7d:2c:1c:b1:fc:f2:a8:e1:08:e7:ad:c1:43:d6:49: 09:d8:99:9f:b1:09:85:75:29:45:fc:1a:88:b3:35: 65:d8:55:34:a0:e4:5d:87:b6:7b:54:f5:86:62:ba: 47:76:38:35:76:50:bb:59:96:8d:84:bd:45:5a:54: 7f:59:9a:8d:b5:90:46:99:51:cd:7e:44:c3:36:7c: 93:95:0e:33:99:26:5c:c9:a9:dd:ba:b6:2e:ba:a0: 8d:55:c3:18:85:4c:86:1a:8b:09:f6:96:19:da:b1: 26:b5:72:7c:65:6c:bd:62:11:f3:97:b3:48:12:9a: 0a:03:75:56:8f:c1:c3:c0:21:cd:ff:fd:4c:72:e5: 25:98:87:25:d5:55:c6:49:30:d0:a6:a9:ac:d9:6c: 51:5d:c3:c5:52:60:d0:b5:6e:2e:b6:a6:19:8a:d9: ae:29:77:b3:04:9b:33:a5:f2:34:ad:9c:17:28:89: 7b:d2:d3:4e:02:49:88:68:34:85:f2:22:e6:f4:e9: 74:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A9:6E:0E:45:CB:6C:E5:1E:DD:F8:B2:31:4F:EC:7D:49:2E:E1:99 X509v3 Authority Key Identifier: keyid:6C:73:BD:24:FD:83:08:86:BF:A2:D2:96:14:16:D2:18:5D:E3:37:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bHO9JP2DCIa_otKWFBbSGF3jN3I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/WKluDkXLbOUe3fiyMU_sfUku4Zk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/18/98dab8-7b24-49f3-a36f-73a157a2b99f/1/bHO9JP2DCIa_otKWFBbSGF3jN3I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.85.148.0/22 IPv6: 2a0e:c680::/32 Signature Algorithm: sha256WithRSAEncryption 07:01:de:1c:b9:43:5a:6d:46:fa:4e:7a:6f:8e:bd:de:b4:e5: e4:e6:0f:f2:04:68:34:37:91:31:1d:5d:4d:dc:83:45:02:9d: 03:b7:6c:ed:05:9e:b6:33:9c:32:a7:4b:76:62:bc:52:3e:41: 03:ea:52:ad:86:31:b8:ef:72:97:ed:0b:1b:57:06:0f:09:3d: 38:2f:81:87:8d:4b:b4:ce:14:88:9a:52:45:75:93:f3:fe:63: f2:9c:c7:a9:0c:98:51:e0:7a:61:6e:ad:ed:8c:60:84:ed:47: fd:b6:6f:f4:8c:2d:15:6e:fb:91:71:eb:fe:14:e9:4d:20:cf: cc:f3:c2:b8:8d:fc:94:d3:41:30:58:c8:bf:4e:c2:bd:f9:2f: 9c:9c:59:60:c6:8c:73:3a:46:54:03:d2:7f:a4:24:71:c0:36: 05:f1:f9:27:e8:64:3a:68:df:89:b9:ae:cd:8d:cb:28:21:27: 39:c8:cb:ef:c3:88:b0:92:50:6c:b3:2a:ed:0a:0e:c9:b1:c4: 45:59:8f:dc:98:45:72:d2:38:db:06:d3:00:59:90:d6:e7:c2: 08:f1:be:05:d9:ff:56:39:ac:06:3a:5b:be:17:f5:19:88:c4: ea:14:d5:ea:83:f2:b9:35:1c:48:75:81:84:94:7b:59:7d:70: ba:3f:24:90 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9yUi9Yl/O6LsMbuYlCyFrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjNzNiZDI0ZmQ4MzA4ODZiZmEyZDI5NjE0MTZkMjE4NWRl MzM3NzIwHhcNMjYwMTAyMDgxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGE5NmUwZTQ1Y2I2Y2U1MWVkZGY4YjIzMTRmZWM3ZDQ5MmVlMTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbHm6OpcYyMDe/NfZJ9iH04d2JmN 89IJooI9fP5gVfTQNFYx/n59QFqCbFsBVTu5kBl2U7Ta0z8mJp19LByx/PKo4Qjn rcFD1kkJ2JmfsQmFdSlF/BqIszVl2FU0oORdh7Z7VPWGYrpHdjg1dlC7WZaNhL1F WlR/WZqNtZBGmVHNfkTDNnyTlQ4zmSZcyandurYuuqCNVcMYhUyGGosJ9pYZ2rEm tXJ8ZWy9YhHzl7NIEpoKA3VWj8HDwCHN//1McuUlmIcl1VXGSTDQpqms2WxRXcPF UmDQtW4utqYZitmuKXezBJszpfI0rZwXKIl70tNOAkmIaDSF8iLm9Ol00QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFipbg5Fy2zlHt34sjFP7H1JLuGZMB8GA1UdIwQY MBaAFGxzvST9gwiGv6LSlhQW0hhd4zdyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkhPOUpQMkRDSWFfb3RLV0ZCYlNHRjNqTjNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC85OGRhYjgtN2IyNC00OWYzLWEzNmYt NzNhMTU3YTJiOTlmLzEvV0tsdURrWExiT1VlM2ZpeU1VX3NmVWt1NFprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOC85OGRhYjgtN2IyNC00OWYzLWEzNmYtNzNhMTU3YTJiOTlm LzEvYkhPOUpQMkRDSWFfb3RLV0ZCYlNHRjNqTjNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLVWUMA0E AgACMAcDBQAqDsaAMA0GCSqGSIb3DQEBCwUAA4IBAQAHAd4cuUNabUb6Tnpvjr3e tOXk5g/yBGg0N5ExHV1N3INFAp0Dt2ztBZ62M5wyp0t2YrxSPkED6lKthjG473KX 7QsbVwYPCT04L4GHjUu0zhSImlJFdZPz/mPynMepDJhR4Hphbq3tjGCE7Uf9tm/0 jC0VbvuRcev+FOlNIM/M88K4jfyU00EwWMi/TsK9+S+cnFlgxoxzOkZUA9J/pCRx wDYF8fkn6GQ6aN+Jua7NjcsoISc5yMvvw4iwklBssyrtCg7JscRFWY/cmEVy0jjb BtMAWZDW58II8b4F2f9WOawGOlu+F/UZiMTqFNXqg/K5NRxIdYGElHtZfXC6PySQ -----END CERTIFICATE-----Generated at Tue Feb 10 07:29:47 2026 by rpki-client