This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Wftdz9SidaflmmWiz0KLCvhfgfM.roa File: Wftdz9SidaflmmWiz0KLCvhfgfM.roa (raw, json) Hash identifier: AaKwc/p/ugBaJI/nEzVfYSgVz2V8jbu30kIIogooZcw= Subject key identifier: 59:FB:5D:CF:D4:A2:75:A7:E5:9A:65:A2:CF:42:8B:0A:F8:5F:81:F3 Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019BE43B9D08616F621B7483D6DFC6E6EB7B Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Wftdz9SidaflmmWiz0KLCvhfgfM.roa Signing time: Thu 22 Jan 2026 05:44:30 +0000 ROA not before: Thu 22 Jan 2026 05:44:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209023 IP address blocks: 45.137.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 11:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e4:3b:9d:08:61:6f:62:1b:74:83:d6:df:c6:e6:eb:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 22 05:44:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59fb5dcfd4a275a7e59a65a2cf428b0af85f81f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e8:71:28:92:86:9a:75:84:2f:56:0d:b4:09: 68:4f:fd:36:e9:8e:2e:da:f1:8c:46:d9:6f:2f:70: c6:c5:d6:45:6f:9b:e7:0f:ca:58:d9:7b:e0:6a:ff: 79:08:c0:9c:91:5d:60:f1:37:12:af:30:63:60:95: cf:a4:98:82:7e:cb:d0:04:fd:e7:85:cf:c1:8b:87: b3:f4:24:2d:c9:13:33:63:7a:ad:96:60:e4:cd:48: 1c:52:06:4c:bb:39:b4:73:7d:ed:b4:df:8d:1c:c4: 35:fe:04:2a:11:01:63:f1:54:ff:0f:e0:3e:91:38: cd:59:ad:d9:d1:a1:4a:9b:67:d8:6f:ed:11:10:16: d7:67:dd:e6:a4:7a:8e:42:95:bb:dc:aa:ea:53:35: 55:93:1b:48:c5:5b:9a:fd:dc:6d:5d:d6:64:48:ea: 57:7e:56:f4:8e:03:91:90:57:6b:a3:a5:b8:67:33: bb:f5:78:3d:af:7c:5f:f7:c9:2e:28:7b:76:cc:b9: 29:67:28:12:f4:5f:53:ce:51:66:a9:ba:97:f5:83: 54:ce:17:80:1b:dc:52:77:46:6b:d4:b8:d0:7a:19: 24:6f:4e:ad:19:cc:bb:57:c6:06:0c:75:b9:ce:99: 7d:f6:4a:83:58:02:69:0e:b3:2e:cb:b2:46:9b:c0: 54:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:FB:5D:CF:D4:A2:75:A7:E5:9A:65:A2:CF:42:8B:0A:F8:5F:81:F3 X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Wftdz9SidaflmmWiz0KLCvhfgfM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.137.14.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:39:c1:93:32:4e:3c:18:a9:4f:a7:31:55:be:a4:30:3a:b1: d0:53:29:bb:f7:6e:82:0b:8f:8a:63:0c:19:8b:57:45:63:75: 2b:c7:4b:bf:4c:d9:9a:31:b4:cc:3d:92:bb:3d:d4:a2:db:92: 54:0a:43:d3:9d:f8:f8:63:ac:27:fb:de:6f:53:6f:39:26:0a: 0a:77:49:8f:a9:cf:78:e8:ff:39:be:60:5c:b7:c0:72:3a:31: 56:62:a3:4d:b1:0f:92:36:65:f6:2b:6f:c1:8b:d4:c8:fa:b1: 73:4a:e1:45:4c:76:7b:94:f9:bb:0e:97:77:58:be:98:08:70: 73:f5:17:c9:ce:f5:4c:ed:70:34:c7:48:f7:ef:1e:f0:c3:66: f0:ef:16:bf:4c:7e:b3:d2:ec:6f:9c:cb:5b:2d:1b:ce:c8:08: d9:1b:17:cf:6d:91:f4:6b:58:3d:12:51:e4:69:0a:8c:f8:96: 73:77:f2:04:17:39:6f:ef:0f:b8:df:ea:31:2e:48:d1:31:da: 44:a3:4e:c1:c2:50:cc:60:67:d2:00:95:d7:aa:56:ee:f5:e5: 52:cb:89:3e:e2:f7:f7:07:7b:5a:fd:a8:51:2d:ec:8b:cd:92: b1:df:57:8f:79:25:ad:fe:6d:4f:40:06:af:41:09:95:49:bc: ef:ce:72:92 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvkO50IYW9iG3SD1t/G5ut7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTIyMDU0NDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OWZiNWRjZmQ0YTI3NWE3ZTU5YTY1YTJjZjQyOGIwYWY4NWY4MWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquhxKJKGmnWEL1YNtAloT/026Y4u 2vGMRtlvL3DGxdZFb5vnD8pY2Xvgav95CMCckV1g8TcSrzBjYJXPpJiCfsvQBP3n hc/Bi4ez9CQtyRMzY3qtlmDkzUgcUgZMuzm0c33ttN+NHMQ1/gQqEQFj8VT/D+A+ kTjNWa3Z0aFKm2fYb+0REBbXZ93mpHqOQpW73KrqUzVVkxtIxVua/dxtXdZkSOpX flb0jgORkFdro6W4ZzO79Xg9r3xf98kuKHt2zLkpZygS9F9TzlFmqbqX9YNUzheA G9xSd0Zr1LjQehkkb06tGcy7V8YGDHW5zpl99kqDWAJpDrMuy7JGm8BUYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFn7Xc/UonWn5Zplos9Ciwr4X4HzMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvV2Z0ZHo5U2lkYWZsbW1XaXowS0xDdmhmZ2ZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYkOMA0G CSqGSIb3DQEBCwUAA4IBAQBqOcGTMk48GKlPpzFVvqQwOrHQUym7926CC4+KYwwZ i1dFY3Urx0u/TNmaMbTMPZK7PdSi25JUCkPTnfj4Y6wn+95vU285JgoKd0mPqc94 6P85vmBct8ByOjFWYqNNsQ+SNmX2K2/Bi9TI+rFzSuFFTHZ7lPm7Dpd3WL6YCHBz 9RfJzvVM7XA0x0j37x7ww2bw7xa/TH6z0uxvnMtbLRvOyAjZGxfPbZH0a1g9ElHk aQqM+JZzd/IEFzlv7w+43+oxLkjRMdpEo07BwlDMYGfSAJXXqlbu9eVSy4k+4vf3 B3ta/ahRLeyLzZKx31ePeSWt/m1PQAavQQmVSbzvznKS -----END CERTIFICATE-----Generated at Fri Jan 23 21:37:07 2026 by rpki-client