This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/waeTsyFFtzykXpyunRHnBh5Najs.roa File: waeTsyFFtzykXpyunRHnBh5Najs.roa (raw, json) Hash identifier: jOc4AlVV0FOdwHFKYPPk0RYmzNxr5NAUY6W+DsVQWhE= Subject key identifier: C1:A7:93:B3:21:45:B7:3C:A4:5E:9C:AE:9D:11:E7:06:1E:4D:6A:3B Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Certificate serial: 019B7E381D0176AC7A67BAE4D9F2FE4D002B Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/waeTsyFFtzykXpyunRHnBh5Najs.roa Signing time: Fri 02 Jan 2026 10:19:25 +0000 ROA not before: Fri 02 Jan 2026 10:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39421 IP address blocks: 5.101.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:1d:01:76:ac:7a:67:ba:e4:d9:f2:fe:4d:00:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Validity Not Before: Jan 2 10:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1a793b32145b73ca45e9cae9d11e7061e4d6a3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3b:5b:de:5f:ba:4c:d2:3d:cb:19:7a:c7:fb: ef:19:ed:02:d9:5d:0c:3f:f7:4a:ab:c2:34:d6:fe: 8f:48:ae:17:b9:1b:03:60:34:5d:45:dd:ed:e4:b8: 23:76:9d:9d:08:21:a2:f6:9c:da:74:33:4e:72:54: 79:54:54:40:e6:4b:19:13:29:68:c8:41:c9:f7:6e: 76:63:d5:b0:b4:a2:e8:ed:30:dd:1a:76:b5:99:09: 5d:19:3a:d9:93:f2:5e:a3:dd:80:cd:93:0f:38:1b: be:e0:17:83:24:d0:c1:c3:a0:be:5d:21:f5:e0:5b: 43:2c:68:aa:5c:d9:c0:4b:0a:35:0a:cb:95:68:e8: 9a:49:1f:e6:c7:04:db:e4:49:69:78:d1:0c:05:ff: 56:4e:99:26:85:0b:c3:2a:30:57:95:2f:e2:d1:db: 16:64:f4:45:0f:b0:7d:b0:06:67:b9:fb:b6:c3:db: 28:bd:ad:a6:a8:dd:23:c1:77:75:cb:9b:be:0f:ad: b2:42:57:7a:b1:e5:76:c9:7d:ed:d0:55:77:c1:8b: 7e:d4:4a:5d:15:1d:fb:ba:ee:cd:07:4e:56:93:64: 8a:a8:94:b5:4c:ab:93:22:d1:a3:63:02:0f:c2:e1: f4:83:33:6d:b3:ad:bf:5a:30:5f:ab:8d:53:23:e3: d5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A7:93:B3:21:45:B7:3C:A4:5E:9C:AE:9D:11:E7:06:1E:4D:6A:3B X509v3 Authority Key Identifier: keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/waeTsyFFtzykXpyunRHnBh5Najs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.101.34.0/24 Signature Algorithm: sha256WithRSAEncryption 42:05:ae:8c:af:eb:c0:9f:4d:4c:08:2b:c5:83:6a:c0:7b:6e: 7c:7e:a6:df:a5:dd:93:5d:03:52:e0:80:0e:32:bd:8f:52:5e: 48:42:2d:07:5a:98:58:2d:82:74:5d:14:c9:43:04:74:04:b8: d6:bf:74:19:fe:82:7b:70:82:44:87:cc:63:c4:69:b9:6c:80: 68:d1:d7:22:fa:bf:2e:0a:54:3c:22:e6:f3:7b:52:1d:78:54: bb:54:95:e5:eb:58:3e:02:6d:c2:04:d3:8b:8b:55:77:fa:b4: 0e:5f:98:a2:af:a8:44:b1:e5:a0:d8:60:3a:3e:36:82:d6:46: dd:5b:22:e9:03:40:04:0f:18:36:ad:5b:ca:77:68:57:e1:e5: 0f:cd:23:81:63:68:3b:4a:0a:67:47:06:0e:88:6b:c8:35:6b: ca:f3:2b:5a:08:86:1b:60:72:a3:f5:35:85:b0:4a:e2:73:8b: 74:fd:93:a1:ab:4a:ab:9b:24:91:b5:69:34:3d:37:3a:dc:5e: 1c:bc:a8:77:21:4a:04:64:f0:68:8e:25:13:95:f1:51:4d:14: 59:37:80:2c:39:06:61:03:b4:61:21:4e:52:39:8f:30:d8:2f: 36:ba:44:03:44:e1:60:d8:35:d4:e2:32:dc:20:6f:65:cf:d7: bb:51:c7:3c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OB0Bdqx6Z7rk2fL+TQArMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl Y2EwNzEwHhcNMjYwMTAyMTAxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWE3OTNiMzIxNDViNzNjYTQ1ZTljYWU5ZDExZTcwNjFlNGQ2YTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTtb3l+6TNI9yxl6x/vvGe0C2V0M P/dKq8I01v6PSK4XuRsDYDRdRd3t5Lgjdp2dCCGi9pzadDNOclR5VFRA5ksZEylo yEHJ9252Y9WwtKLo7TDdGna1mQldGTrZk/Jeo92AzZMPOBu+4BeDJNDBw6C+XSH1 4FtDLGiqXNnASwo1CsuVaOiaSR/mxwTb5ElpeNEMBf9WTpkmhQvDKjBXlS/i0dsW ZPRFD7B9sAZnufu2w9sova2mqN0jwXd1y5u+D62yQld6seV2yX3t0FV3wYt+1Epd FR37uu7NB05Wk2SKqJS1TKuTItGjYwIPwuH0gzNts62/WjBfq41TI+PVgQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMGnk7MhRbc8pF6crp0R5wYeTWo7MB8GA1UdIwQY MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt ODlkMDkyNDBjNDNiLzEvd2FlVHN5RkZ0enlrWHB5dW5SSG5CaDVOYWpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABWUiMA0G CSqGSIb3DQEBCwUAA4IBAQBCBa6Mr+vAn01MCCvFg2rAe258fqbfpd2TXQNS4IAO Mr2PUl5IQi0HWphYLYJ0XRTJQwR0BLjWv3QZ/oJ7cIJEh8xjxGm5bIBo0dci+r8u ClQ8Iubze1IdeFS7VJXl61g+Am3CBNOLi1V3+rQOX5iir6hEseWg2GA6PjaC1kbd WyLpA0AEDxg2rVvKd2hX4eUPzSOBY2g7SgpnRwYOiGvINWvK8ytaCIYbYHKj9TWF sEric4t0/ZOhq0qrmySRtWk0PTc63F4cvKh3IUoEZPBojiUTlfFRTRRZN4AsOQZh A7RhIU5SOY8w2C82ukQDROFg2DXU4jLcIG9lz9e7Ucc8 -----END CERTIFICATE-----Generated at Tue Jan 20 09:20:29 2026 by rpki-client