This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/WgE1MGBGPR7k5rh3nE3hf7taSUw.roa File: WgE1MGBGPR7k5rh3nE3hf7taSUw.roa (raw, json) Hash identifier: tpDyS9JuhgZT9rKwZWlbjacZtc36iJXeis37wFMFBNY= Subject key identifier: 5A:01:35:30:60:46:3D:1E:E4:E6:B8:77:9C:4D:E1:7F:BB:5A:49:4C Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Certificate serial: 019B7C80A28383FF975CE55AF237B7456A59 Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/WgE1MGBGPR7k5rh3nE3hf7taSUw.roa Signing time: Fri 02 Jan 2026 02:19:23 +0000 ROA not before: Fri 02 Jan 2026 02:19:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213590 IP address blocks: 89.43.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:a2:83:83:ff:97:5c:e5:5a:f2:37:b7:45:6a:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9 Validity Not Before: Jan 2 02:19:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a01353060463d1ee4e6b8779c4de17fbb5a494c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4f:30:96:1f:17:04:8d:19:b2:76:78:30:08: 63:37:99:39:1d:26:95:d9:9a:6b:c8:2f:ef:a3:fa: 6e:b4:cf:e5:0a:8f:b1:2d:9b:57:1e:35:e0:06:fd: d0:78:ee:f7:2a:3d:f7:8d:3f:db:be:8b:9b:49:fd: f1:7d:d4:6a:43:25:23:3c:c1:87:69:40:8c:9a:bc: f2:67:29:34:38:60:6c:c1:36:1c:36:a7:31:4a:bb: 45:0e:b1:c3:52:f5:7a:e6:b5:6b:85:85:c7:f4:c1: 68:39:24:d2:9b:17:24:b6:fa:11:4c:9b:a5:bd:6d: 26:9e:00:b7:b3:36:22:4c:ef:93:af:46:0c:30:c9: f1:cf:b8:45:c6:f0:8c:e0:40:15:4c:65:8f:e6:67: 99:06:4f:d9:c7:fb:ad:55:c2:d5:7c:3f:8d:a5:b5: 0f:ec:e4:de:2a:52:7a:05:11:7e:7f:18:dd:21:6b: 90:dc:a5:99:c9:ce:70:3e:d1:5c:16:db:93:58:8a: 4e:a7:32:6d:51:c4:88:8b:9e:c7:6a:a4:65:eb:21: a8:33:5a:4d:e6:31:92:29:b9:7b:e5:49:da:c1:6f: aa:3c:48:12:7c:57:25:ac:5c:e9:4a:d2:02:ca:ae: b8:f7:75:6a:ba:48:16:34:ce:b8:d4:7b:0e:9f:56: 80:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:01:35:30:60:46:3D:1E:E4:E6:B8:77:9C:4D:E1:7F:BB:5A:49:4C X509v3 Authority Key Identifier: keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/WgE1MGBGPR7k5rh3nE3hf7taSUw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 89.43.45.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:12:61:34:7d:e6:53:10:45:d2:0f:f8:35:b2:74:18:6c:7a: a4:a4:8a:da:d9:ce:b0:68:fc:25:c5:7f:d6:b7:7a:3f:cf:5e: 65:7b:f1:2a:ef:7d:93:11:d9:37:a7:3a:41:67:5b:7b:a2:87: 93:de:5b:51:e9:f8:a7:4a:44:c3:d9:d8:9b:1c:e1:5b:ad:ad: 8b:95:3e:ff:f1:f7:3a:22:59:ed:5d:0d:28:4c:57:18:39:97: 45:6f:a6:0f:a2:47:56:a6:6d:7a:b8:a9:09:6b:ac:ff:68:d8: 5a:b7:05:81:c2:62:c7:d6:67:59:4b:35:d3:b7:cb:94:18:6a: 11:20:e8:7b:e0:d1:df:44:06:77:56:80:0c:d9:83:d1:cb:89: 56:db:5c:2c:aa:f3:04:5e:20:01:ee:00:bd:59:d6:e3:56:0b: 06:46:b5:91:76:94:33:53:e9:69:7d:f1:33:31:16:c4:44:0a: 13:00:d0:42:ac:fc:89:78:d2:23:ac:a9:28:78:9b:fe:a0:ce: a2:b7:e1:d4:ad:1c:e2:49:55:1d:5e:af:15:44:d4:d8:6a:03: f2:d2:84:4d:99:24:15:d7:c0:27:91:c9:67:bf:54:51:b6:8c: 0b:27:ab:bf:d3:53:05:1d:b0:0e:da:e3:1d:95:4e:d6:be:80: 8f:c2:ec:78 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gKKDg/+XXOVa8je3RWpZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlNTg5NTJkMzkzOTM1ZjBkM2JjZTgxNGZkOTE3OGQwNDY5 M2FlYjkwHhcNMjYwMTAyMDIxOTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTAxMzUzMDYwNDYzZDFlZTRlNmI4Nzc5YzRkZTE3ZmJiNWE0OTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx08wlh8XBI0ZsnZ4MAhjN5k5HSaV 2ZpryC/vo/putM/lCo+xLZtXHjXgBv3QeO73Kj33jT/bvoubSf3xfdRqQyUjPMGH aUCMmrzyZyk0OGBswTYcNqcxSrtFDrHDUvV65rVrhYXH9MFoOSTSmxcktvoRTJul vW0mngC3szYiTO+Tr0YMMMnxz7hFxvCM4EAVTGWP5meZBk/Zx/utVcLVfD+NpbUP 7OTeKlJ6BRF+fxjdIWuQ3KWZyc5wPtFcFtuTWIpOpzJtUcSIi57HaqRl6yGoM1pN 5jGSKbl75UnawW+qPEgSfFclrFzpStICyq6493VqukgWNM641HsOn1aAaQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFoBNTBgRj0e5Oa4d5xN4X+7WklMMB8GA1UdIwQY MBaAFP5YlS05OTXw07zoFP2ReNBGk665MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUt NWQ0OGI2NWNlNTczLzEvV2dFMU1HQkdQUjdrNXJoM25FM2hmN3RhU1V3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9iMjZhYTgtYWNlNy00ZmE2LTllOGUtNWQ0OGI2NWNlNTcz LzEvX2xpVkxUazVOZkRUdk9nVV9aRjQwRWFUcnJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSstMA0G CSqGSIb3DQEBCwUAA4IBAQCKEmE0feZTEEXSD/g1snQYbHqkpIra2c6waPwlxX/W t3o/z15le/Eq732TEdk3pzpBZ1t7ooeT3ltR6finSkTD2dibHOFbra2LlT7/8fc6 IlntXQ0oTFcYOZdFb6YPokdWpm16uKkJa6z/aNhatwWBwmLH1mdZSzXTt8uUGGoR IOh74NHfRAZ3VoAM2YPRy4lW21wsqvMEXiAB7gC9WdbjVgsGRrWRdpQzU+lpffEz MRbERAoTANBCrPyJeNIjrKkoeJv+oM6it+HUrRziSVUdXq8VRNTYagPy0oRNmSQV 18Ankclnv1RRtowLJ6u/01MFHbAO2uMdlU7WvoCPwux4 -----END CERTIFICATE-----Generated at Wed Jan 21 10:48:44 2026 by rpki-client