This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WKdkBRnwmga-uzIBsL5dMyBHmJk.roa File: WKdkBRnwmga-uzIBsL5dMyBHmJk.roa (raw, json) Hash identifier: Y9YIhWJGJlEYcUMMoCdOmw++eO5Kgma7PJ5HVOLACl8= Subject key identifier: 58:A7:64:05:19:F0:9A:06:BE:BB:32:01:B0:BE:5D:33:20:47:98:99 Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5CC53D5DEA3C1EABA9C4F09F26A346 Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WKdkBRnwmga-uzIBsL5dMyBHmJk.roa Signing time: Fri 02 Jan 2026 06:19:50 +0000 ROA not before: Fri 02 Jan 2026 06:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 136557 IP address blocks: 109.61.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:c5:3d:5d:ea:3c:1e:ab:a9:c4:f0:9f:26:a3:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58a7640519f09a06bebb3201b0be5d3320479899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:99:b8:ce:20:28:81:2c:1a:cc:90:27:87:d2: e5:a0:09:2b:26:c1:2d:71:e6:78:b2:70:f9:13:7a: a6:83:25:39:73:35:5c:7c:e3:e2:09:ab:54:7c:cc: 49:6d:43:85:3e:9c:29:0e:18:69:59:91:c6:76:73: 1c:8c:ac:46:0a:4d:6e:87:1b:eb:4f:09:65:ff:9c: 41:13:44:c3:5a:e2:04:a6:61:b3:bf:5d:83:7d:ef: 4b:24:fe:f7:04:0e:6c:36:62:26:44:6d:0f:7a:25: a4:c2:4d:04:0f:4e:2a:84:91:c4:bd:98:dc:ee:d2: d0:7d:ca:37:5b:6c:52:35:9b:8f:62:94:8e:70:93: a5:19:6d:e9:3e:f4:45:30:fc:85:e8:41:1a:29:85: aa:e9:e0:ba:5c:25:f4:81:db:6f:7f:dc:a9:3c:59: 45:c6:7b:b4:5c:33:73:80:f2:0a:1d:01:af:59:64: 4b:70:00:32:81:62:94:d7:05:6d:92:09:09:9c:13: 00:31:ec:51:be:ff:1c:71:22:4c:69:d2:9c:2e:e9: 11:29:9b:5b:05:fa:e9:1d:3e:6c:b2:97:d9:4e:df: a1:e8:be:c7:56:1d:9e:d4:c9:b7:fd:16:c6:05:61: b4:62:21:be:d5:ce:f3:ee:fe:57:25:0d:1c:aa:45: 13:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A7:64:05:19:F0:9A:06:BE:BB:32:01:B0:BE:5D:33:20:47:98:99 X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/WKdkBRnwmga-uzIBsL5dMyBHmJk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.61.109.0/24 Signature Algorithm: sha256WithRSAEncryption a6:23:25:28:a6:13:b4:f5:f8:b0:94:73:8b:02:bd:f8:4d:68: 3e:06:db:ee:0f:1d:48:f9:a9:6d:3a:f9:79:95:48:40:f9:0d: dc:0f:53:b5:2e:b9:5d:22:2b:24:2c:a6:36:96:3d:4f:a1:93: dd:0a:c5:e6:6c:39:a4:cd:b1:f1:60:1f:d1:87:d9:e4:85:68: 37:08:9b:0e:26:4b:7f:61:ac:2b:4f:52:a0:11:ba:19:95:28: b0:dd:59:de:a8:ad:11:eb:4d:3f:ef:7c:c8:55:f4:6b:0f:fe: ae:37:86:d1:56:88:19:7a:f8:6c:bd:30:42:74:e1:a9:40:c2: 52:62:5a:5b:9e:7f:62:0b:40:7c:82:85:ab:7e:c0:13:6d:dd: 52:9a:5d:42:6c:8d:21:69:aa:88:bc:e8:bd:d6:3d:cd:78:39: e2:cf:27:8a:40:ad:89:ac:65:16:6b:7a:ed:36:a1:20:2f:f3: 5b:d2:c5:5a:44:1d:6c:9b:eb:1b:6c:94:74:95:2a:c0:e9:15: 0d:6f:c8:94:57:7b:e8:4f:d8:e8:35:bc:bb:05:35:25:79:7a: db:2b:15:94:3d:a2:d6:24:f6:58:c6:ae:9e:15:1a:55:6f:58: 6d:14:2c:9f:d3:b0:dd:96:82:8d:56:6d:1d:c8:67:3e:2a:45: 6c:4c:c6:a9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XMU9Xeo8HqupxPCfJqNGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGE3NjQwNTE5ZjA5YTA2YmViYjMyMDFiMGJlNWQzMzIwNDc5ODk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5m4ziAogSwazJAnh9LloAkrJsEt ceZ4snD5E3qmgyU5czVcfOPiCatUfMxJbUOFPpwpDhhpWZHGdnMcjKxGCk1uhxvr Twll/5xBE0TDWuIEpmGzv12Dfe9LJP73BA5sNmImRG0PeiWkwk0ED04qhJHEvZjc 7tLQfco3W2xSNZuPYpSOcJOlGW3pPvRFMPyF6EEaKYWq6eC6XCX0gdtvf9ypPFlF xnu0XDNzgPIKHQGvWWRLcAAygWKU1wVtkgkJnBMAMexRvv8ccSJMadKcLukRKZtb BfrpHT5sspfZTt+h6L7HVh2e1Mm3/RbGBWG0YiG+1c7z7v5XJQ0cqkUT3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFinZAUZ8JoGvrsyAbC+XTMgR5iZMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvV0tka0JSbndtZ2EtdXpJQnNMNWRNeUJIbUprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbT1tMA0G CSqGSIb3DQEBCwUAA4IBAQCmIyUophO09fiwlHOLAr34TWg+BtvuDx1I+altOvl5 lUhA+Q3cD1O1LrldIiskLKY2lj1PoZPdCsXmbDmkzbHxYB/Rh9nkhWg3CJsOJkt/ YawrT1KgEboZlSiw3VneqK0R600/73zIVfRrD/6uN4bRVogZevhsvTBCdOGpQMJS Ylpbnn9iC0B8goWrfsATbd1Sml1CbI0haaqIvOi91j3NeDnizyeKQK2JrGUWa3rt NqEgL/Nb0sVaRB1sm+sbbJR0lSrA6RUNb8iUV3voT9joNby7BTUleXrbKxWUPaLW JPZYxq6eFRpVb1htFCyf07DdloKNVm0dyGc+KkVsTMap -----END CERTIFICATE-----Generated at Fri Jan 9 13:12:02 2026 by rpki-client