This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/WlLOTRCWvlIYiS-TgTY4hAdHm7Y.roa File: WlLOTRCWvlIYiS-TgTY4hAdHm7Y.roa (raw, json) Hash identifier: bxPUG4RUFxYGi4wK66fAhQIJ42FQsayg/q85b6OoGU8= Subject key identifier: 5A:52:CE:4D:10:96:BE:52:18:89:2F:93:81:36:38:84:07:47:9B:B6 Certificate issuer: /CN=988296c50d94bbed225f2867231fa5093debea91 Certificate serial: 019B7C1294D336F182F2192FD16FF2948629 Authority key identifier: 98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/WlLOTRCWvlIYiS-TgTY4hAdHm7Y.roa Signing time: Fri 02 Jan 2026 00:19:11 +0000 ROA not before: Fri 02 Jan 2026 00:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6282 IP address blocks: 45.158.200.0/23 maxlen: 24 45.158.202.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.mft rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:94:d3:36:f1:82:f2:19:2f:d1:6f:f2:94:86:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=988296c50d94bbed225f2867231fa5093debea91 Validity Not Before: Jan 2 00:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a52ce4d1096be5218892f938136388407479bb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:a1:08:43:91:34:f7:4d:8e:6f:2d:d3:d9:86: 6b:d4:85:fa:ed:e2:70:03:b1:39:4c:5e:a9:c0:ea: a6:7c:18:93:12:98:e1:50:f9:0f:f1:bb:bb:cc:94: 30:72:44:e5:42:6d:b7:3e:e6:d7:fd:d7:a3:37:95: 03:ba:b2:0f:a0:bf:8f:af:c3:0b:1f:88:f1:ac:d4: 9b:7d:22:cb:d5:f7:65:3b:d1:e2:95:11:bc:a9:d9: d1:09:29:37:5c:4e:ff:24:93:1c:bd:7a:3e:cc:31: fe:74:86:0e:61:db:14:ef:1e:f8:e4:1a:ad:2a:0c: 59:70:cd:21:d7:d3:66:15:a5:b7:4a:14:4a:3e:98: 83:56:e0:77:be:83:41:71:1f:10:51:a2:3f:e7:2f: 66:28:b3:1a:4c:11:57:21:d5:c3:8a:9b:b6:6f:a9: 3b:52:84:12:ea:fc:9e:54:1e:91:93:dd:8c:82:85: 27:5c:61:7f:ab:3e:52:3c:ea:0b:08:8d:f8:e8:51: 73:c5:e2:61:62:0f:d4:0e:54:3c:9e:28:f7:cb:4d: 30:1a:73:a8:0c:9d:0d:4f:72:99:24:f1:11:45:8b: f7:e1:d6:28:3a:c7:e0:a5:ce:40:ff:f0:98:f2:eb: fb:b1:33:c8:12:2b:50:15:a2:97:87:6a:65:9a:a3: 00:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:52:CE:4D:10:96:BE:52:18:89:2F:93:81:36:38:84:07:47:9B:B6 X509v3 Authority Key Identifier: keyid:98:82:96:C5:0D:94:BB:ED:22:5F:28:67:23:1F:A5:09:3D:EB:EA:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/WlLOTRCWvlIYiS-TgTY4hAdHm7Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f760d0-2f67-4307-9f0c-3993b50b2064/1/mIKWxQ2Uu-0iXyhnIx-lCT3r6pE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.158.200.0/22 Signature Algorithm: sha256WithRSAEncryption c0:04:fb:73:61:55:7b:a9:b7:ee:c5:58:e0:fc:51:98:3a:0e: 69:f9:81:10:85:4f:9f:25:45:18:f9:87:71:41:2c:57:ea:c7: e6:2d:cc:13:bf:6e:b2:d3:54:dd:18:b8:ba:b9:a0:92:27:e6: 86:2b:67:a8:09:7d:ac:b7:8c:5d:3c:6f:2a:83:fe:3a:3c:34: 15:ef:7e:3d:9b:71:93:46:76:56:39:a8:45:57:8b:90:cc:59: 5a:eb:67:a0:73:57:fd:61:76:26:92:94:48:29:4d:f0:37:d5: d7:3b:25:5f:3a:06:ac:c6:80:02:fd:a7:bb:b4:5b:3b:95:11: 7f:fa:ce:61:da:93:cb:43:0d:e9:8a:69:54:22:dc:73:8e:5d: 3b:04:ee:7d:cf:eb:79:5b:df:75:75:60:83:6b:41:9e:a6:eb: 02:2b:ce:3b:4e:d4:34:7a:b5:c7:52:61:b7:ac:75:e8:4b:4e: 5a:97:f4:9e:08:78:7b:07:6f:76:3f:0e:3f:be:b7:21:30:f1: 80:ee:9f:27:f5:1b:21:e7:46:f9:d3:92:c2:24:15:13:c6:2e: 30:06:8d:7b:3a:c2:f5:22:2e:b0:50:5d:de:d8:2e:7b:74:61: ff:39:79:79:6c:06:a7:3e:33:7d:b5:aa:31:fa:e7:59:01:6a: 2b:6a:d3:b3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EpTTNvGC8hkv0W/ylIYpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4ODI5NmM1MGQ5NGJiZWQyMjVmMjg2NzIzMWZhNTA5M2Rl YmVhOTEwHhcNMjYwMTAyMDAxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTUyY2U0ZDEwOTZiZTUyMTg4OTJmOTM4MTM2Mzg4NDA3NDc5YmI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA96EIQ5E0902Oby3T2YZr1IX67eJw A7E5TF6pwOqmfBiTEpjhUPkP8bu7zJQwckTlQm23PubX/dejN5UDurIPoL+Pr8ML H4jxrNSbfSLL1fdlO9HilRG8qdnRCSk3XE7/JJMcvXo+zDH+dIYOYdsU7x745Bqt KgxZcM0h19NmFaW3ShRKPpiDVuB3voNBcR8QUaI/5y9mKLMaTBFXIdXDipu2b6k7 UoQS6vyeVB6Rk92MgoUnXGF/qz5SPOoLCI346FFzxeJhYg/UDlQ8nij3y00wGnOo DJ0NT3KZJPERRYv34dYoOsfgpc5A//CY8uv7sTPIEitQFaKXh2plmqMAqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFpSzk0Qlr5SGIkvk4E2OIQHR5u2MB8GA1UdIwQY MBaAFJiClsUNlLvtIl8oZyMfpQk96+qRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUlLV3hRMlV1LTBpWHlobkl4LWxDVDNyNnBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9mNzYwZDAtMmY2Ny00MzA3LTlmMGMt Mzk5M2I1MGIyMDY0LzEvV2xMT1RSQ1d2bElZaVMtVGdUWTRoQWRIbTdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9mNzYwZDAtMmY2Ny00MzA3LTlmMGMtMzk5M2I1MGIyMDY0 LzEvbUlLV3hRMlV1LTBpWHlobkl4LWxDVDNyNnBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZ7IMA0G CSqGSIb3DQEBCwUAA4IBAQDABPtzYVV7qbfuxVjg/FGYOg5p+YEQhU+fJUUY+Ydx QSxX6sfmLcwTv26y01TdGLi6uaCSJ+aGK2eoCX2st4xdPG8qg/46PDQV7349m3GT RnZWOahFV4uQzFla62egc1f9YXYmkpRIKU3wN9XXOyVfOgasxoAC/ae7tFs7lRF/ +s5h2pPLQw3pimlUItxzjl07BO59z+t5W991dWCDa0GepusCK847TtQ0erXHUmG3 rHXoS05al/SeCHh7B292Pw4/vrchMPGA7p8n9Rsh50b505LCJBUTxi4wBo17OsL1 Ii6wUF3e2C57dGH/OXl5bAanPjN9taox+udZAWoratOz -----END CERTIFICATE-----Generated at Mon Feb 9 18:44:06 2026 by rpki-client