This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/wa5EsEjjf8dZLFe1smI8Mc7-Wac.roa File: wa5EsEjjf8dZLFe1smI8Mc7-Wac.roa (raw, json) Hash identifier: hs9hA8TNugivRwbaXq2Cd+gZQT+LQBaaFDtqCrqGbck= Subject key identifier: C1:AE:44:B0:48:E3:7F:C7:59:2C:57:B5:B2:62:3C:31:CE:FE:59:A7 Certificate issuer: /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Certificate serial: 019B78A34FA7B554D033566592267268ECD5 Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/wa5EsEjjf8dZLFe1smI8Mc7-Wac.roa Signing time: Thu 01 Jan 2026 08:18:47 +0000 ROA not before: Thu 01 Jan 2026 08:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400909 IP address blocks: 94.241.162.0/23 maxlen: 24 178.253.26.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:4f:a7:b5:54:d0:33:56:65:92:26:72:68:ec:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9 Validity Not Before: Jan 1 08:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1ae44b048e37fc7592c57b5b2623c31cefe59a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ce:ce:4f:de:5e:80:9f:5e:7a:79:bb:98:4c: 67:e6:cf:f1:a3:09:ee:87:42:2f:90:e0:6f:e4:af: 89:b0:28:9f:a6:5c:15:1d:ce:93:ff:bf:5c:01:26: 9d:1e:a0:6f:03:26:b8:85:9c:87:1e:fb:9d:55:6d: cc:aa:10:e1:11:6e:15:08:83:5c:b9:70:dc:2b:76: 5f:01:5e:55:c3:1c:13:59:9c:9f:21:17:d0:9a:93: 1b:0a:d1:8f:c0:0e:b1:7a:a7:f1:3c:9f:e3:1a:1f: 59:39:5a:7c:5e:c7:dd:97:32:f1:b3:6b:e8:59:db: 3b:b5:db:f4:ca:64:0f:0c:0c:78:8b:e7:64:2a:d0: 8a:67:50:6a:53:c7:14:24:c9:e7:26:a3:56:c5:aa: 69:a6:14:db:89:70:ca:41:a9:e7:d5:eb:64:19:2c: 2e:2c:59:43:4e:22:be:9a:2b:6b:68:57:5d:2b:3d: ca:8f:40:61:48:1e:de:12:d4:f4:ef:04:69:0a:9a: 91:c1:d0:ee:60:61:3c:a4:37:24:2a:d6:f0:ee:f2: 00:5e:79:a5:79:49:bd:d9:37:75:83:a2:95:fb:e5: d2:82:43:a8:e0:70:57:c7:7f:7d:57:69:d1:15:3f: 46:6f:4a:e2:75:ef:94:28:e7:ea:2a:0a:41:08:f2: cb:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:AE:44:B0:48:E3:7F:C7:59:2C:57:B5:B2:62:3C:31:CE:FE:59:A7 X509v3 Authority Key Identifier: keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/wa5EsEjjf8dZLFe1smI8Mc7-Wac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.241.162.0/23 178.253.26.0/23 Signature Algorithm: sha256WithRSAEncryption 01:07:e5:5c:22:50:fc:76:98:6c:57:ae:a2:ae:4d:57:a8:08: 02:0a:f1:98:44:7d:92:19:a4:23:7b:3e:60:87:5f:3f:07:08: 5e:57:b7:e6:e6:b3:86:fa:68:37:e7:36:4a:65:22:2b:5d:53: 02:93:1a:d1:04:0b:72:e9:aa:52:5a:a6:ba:dc:b6:cc:f2:ef: 53:72:95:50:07:2e:0d:8c:b6:dc:a2:72:ff:fb:3d:86:b3:d3: dd:bc:93:5d:64:e9:64:ee:f8:f3:7d:09:00:4c:7a:d4:e1:30: f4:a7:b1:a8:00:09:24:be:28:43:1b:36:3e:83:25:22:95:1e: fb:7c:f7:aa:de:49:75:15:64:8f:73:42:07:4b:0e:0e:39:b7: 70:70:9a:d8:54:14:e6:4b:0c:aa:d5:7f:27:21:6e:e4:93:40: 4a:3d:e8:44:58:58:43:e1:a8:02:00:c5:c0:58:39:58:27:84: 5f:73:ac:f3:73:6f:f3:c1:1e:26:ec:f1:67:84:cc:07:bc:8f: b0:ec:af:a1:ad:c9:9a:e3:00:03:b2:7f:9d:06:df:05:dc:9d: 46:3a:90:2d:4d:a9:db:04:79:3f:6a:53:e8:88:95:55:de:e0: 7a:91:c0:8b:f9:da:01:94:54:de:70:42:dc:52:dd:2d:fd:3d: 33:fa:fa:2e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4o0+ntVTQM1ZlkiZyaOzVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU1YmFmMjY5Njc1MTBiM2M1MmU0NmQxZGM1OTM5NjdjZGYy OWY5YzkwHhcNMjYwMTAxMDgxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWFlNDRiMDQ4ZTM3ZmM3NTkyYzU3YjViMjYyM2MzMWNlZmU1OWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps7OT95egJ9eenm7mExn5s/xownu h0IvkOBv5K+JsCifplwVHc6T/79cASadHqBvAya4hZyHHvudVW3MqhDhEW4VCINc uXDcK3ZfAV5VwxwTWZyfIRfQmpMbCtGPwA6xeqfxPJ/jGh9ZOVp8XsfdlzLxs2vo Wds7tdv0ymQPDAx4i+dkKtCKZ1BqU8cUJMnnJqNWxappphTbiXDKQann1etkGSwu LFlDTiK+mitraFddKz3Kj0BhSB7eEtT07wRpCpqRwdDuYGE8pDckKtbw7vIAXnml eUm92Td1g6KV++XSgkOo4HBXx399V2nRFT9Gb0ride+UKOfqKgpBCPLLYQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMGuRLBI43/HWSxXtbJiPDHO/lmnMB8GA1UdIwQY MBaAFFW68mlnUQs8UuRtHcWTlnzfKfnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAt NDlmOTgxZWU1OTgxLzEvd2E1RXNFampmOGRaTEZlMXNtSThNYzctV2FjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAtNDlmOTgxZWU1OTgx LzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBXvGiAwQB sv0aMA0GCSqGSIb3DQEBCwUAA4IBAQABB+VcIlD8dphsV66irk1XqAgCCvGYRH2S GaQjez5gh18/BwheV7fm5rOG+mg35zZKZSIrXVMCkxrRBAty6apSWqa63LbM8u9T cpVQBy4NjLbconL/+z2Gs9PdvJNdZOlk7vjzfQkATHrU4TD0p7GoAAkkvihDGzY+ gyUilR77fPeq3kl1FWSPc0IHSw4OObdwcJrYVBTmSwyq1X8nIW7kk0BKPehEWFhD 4agCAMXAWDlYJ4Rfc6zzc2/zwR4m7PFnhMwHvI+w7K+hrcma4wADsn+dBt8F3J1G OpAtTanbBHk/alPoiJVV3uB6kcCL+doBlFTecELcUt0t/T0z+vou -----END CERTIFICATE-----Generated at Mon Jan 19 23:36:32 2026 by rpki-client