This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/W7ppn0Yq9RA6fSEPPAZseN7eElE.roa File: W7ppn0Yq9RA6fSEPPAZseN7eElE.roa (raw, json) Hash identifier: ctzixGfPc0/jvJeo+fQHID/2g2cTVJ/qIEmoDuN2Cbg= Subject key identifier: 5B:BA:69:9F:46:2A:F5:10:3A:7D:21:0F:3C:06:6C:78:DE:DE:12:51 Certificate issuer: /CN=60581e673d80f7474936b21337eafcc1bdc385e9 Certificate serial: 019B88F557966B180147F7C7174C0A2484F7 Authority key identifier: 60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/W7ppn0Yq9RA6fSEPPAZseN7eElE.roa Signing time: Sun 04 Jan 2026 12:22:18 +0000 ROA not before: Sun 04 Jan 2026 12:22:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16276 IP address blocks: 45.43.142.0/24 maxlen: 24 104.222.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.mft rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:88:f5:57:96:6b:18:01:47:f7:c7:17:4c:0a:24:84:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=60581e673d80f7474936b21337eafcc1bdc385e9 Validity Not Before: Jan 4 12:22:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5bba699f462af5103a7d210f3c066c78dede1251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e0:8f:7b:c8:ca:a5:fb:2b:39:77:e6:03:89: 63:1c:01:69:60:d9:fa:e7:9b:2d:46:0b:a4:62:03: b4:ba:fc:5b:76:e2:b4:2d:8e:a3:be:8b:0d:fd:e1: 7f:be:c5:97:60:52:96:88:56:20:cf:6f:97:a1:fe: 27:73:e9:df:40:43:98:4b:d9:b8:19:d2:8e:fb:d8: c4:b1:df:cb:bc:71:74:8f:5d:cb:b2:4c:4f:34:18: 09:1a:ff:83:9f:3f:ec:17:c7:79:4e:8e:aa:4c:20: 9f:3c:05:2b:02:4d:39:b2:a9:75:9e:ab:66:de:c5: 04:69:be:8c:ac:74:20:fe:84:c5:49:44:70:98:da: da:bd:50:66:5e:fa:43:f4:7f:8d:36:0d:cb:03:f6: 63:d5:de:17:48:55:89:ae:db:0f:66:19:09:3d:52: 09:4a:06:34:a7:05:5f:68:9e:4c:a0:7a:e0:92:db: 0c:59:37:99:ce:fe:3c:91:22:fe:94:49:87:20:8a: 15:61:e4:81:fd:31:74:a2:c1:18:70:94:53:26:da: 3f:c7:bb:81:a5:75:a4:77:06:92:f6:be:59:bf:76: da:6c:23:59:c0:5f:c2:65:ce:b8:8f:43:d9:69:fc: 21:10:14:90:af:34:3e:a9:2a:e9:5f:b3:e9:78:4b: ee:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:BA:69:9F:46:2A:F5:10:3A:7D:21:0F:3C:06:6C:78:DE:DE:12:51 X509v3 Authority Key Identifier: keyid:60:58:1E:67:3D:80:F7:47:49:36:B2:13:37:EA:FC:C1:BD:C3:85:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YFgeZz2A90dJNrITN-r8wb3Dhek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/W7ppn0Yq9RA6fSEPPAZseN7eElE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/fdd633-c658-49c5-9e8f-fb07955f3aaa/1/YFgeZz2A90dJNrITN-r8wb3Dhek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.43.142.0/24 104.222.182.0/24 Signature Algorithm: sha256WithRSAEncryption 1f:ba:38:8a:97:64:d6:5c:33:10:00:7c:28:f3:50:78:ad:ba: 92:b7:59:4b:e4:2c:6a:fe:c0:52:e1:d7:a0:af:bb:4e:e0:fe: 6a:3f:a6:cf:d6:5c:9a:6d:2e:ed:ed:0c:45:a0:7e:8c:ff:14: 08:33:0c:6e:b7:5c:03:49:4c:fe:24:af:47:f3:6f:7e:ac:ba: f0:7f:f3:7e:d1:c1:70:b5:db:11:d7:68:6e:15:ce:2a:92:59: 63:04:09:ef:1a:54:a6:79:a0:55:b7:19:de:01:dc:b0:8e:5b: c9:65:dd:3b:d5:d2:86:2b:ec:db:0c:9f:82:36:a6:3b:98:dd: 44:3c:68:a4:49:4c:06:c3:74:d7:d6:5f:7c:5a:00:cd:13:74: 21:81:e5:2b:c0:4d:d5:41:f4:ad:a9:ca:0f:31:35:aa:48:f9: 7c:1c:f8:d3:6b:5c:61:77:ab:b3:1f:d2:26:67:44:12:80:06: 7c:b1:f2:f1:ef:8b:bc:02:4d:41:02:d4:e5:56:17:3f:0d:ce: 9c:0c:fc:61:84:9d:3a:04:9d:9c:e7:ae:2f:c1:98:73:9f:ec: 7e:23:14:e0:a6:19:17:4c:33:48:bf:ab:2a:6c:28:d6:db:64: ac:5b:24:76:a1:df:cf:e6:0b:86:80:9b:29:cc:00:02:6f:85: 63:45:80:ad -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZuI9VeWaxgBR/fHF0wKJIT3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYwNTgxZTY3M2Q4MGY3NDc0OTM2YjIxMzM3ZWFmY2MxYmRj Mzg1ZTkwHhcNMjYwMTA0MTIyMjE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmJhNjk5ZjQ2MmFmNTEwM2E3ZDIxMGYzYzA2NmM3OGRlZGUxMjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOCPe8jKpfsrOXfmA4ljHAFpYNn6 55stRgukYgO0uvxbduK0LY6jvosN/eF/vsWXYFKWiFYgz2+Xof4nc+nfQEOYS9m4 GdKO+9jEsd/LvHF0j13LskxPNBgJGv+Dnz/sF8d5To6qTCCfPAUrAk05sql1nqtm 3sUEab6MrHQg/oTFSURwmNravVBmXvpD9H+NNg3LA/Zj1d4XSFWJrtsPZhkJPVIJ SgY0pwVfaJ5MoHrgktsMWTeZzv48kSL+lEmHIIoVYeSB/TF0osEYcJRTJto/x7uB pXWkdwaS9r5Zv3babCNZwF/CZc64j0PZafwhEBSQrzQ+qSrpX7PpeEvuwQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFu6aZ9GKvUQOn0hDzwGbHje3hJRMB8GA1UdIwQY MBaAFGBYHmc9gPdHSTayEzfq/MG9w4XpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYt ZmIwNzk1NWYzYWFhLzEvVzdwcG4wWXE5UkE2ZlNFUFBBWnNlTjdlRWxFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9mZGQ2MzMtYzY1OC00OWM1LTllOGYtZmIwNzk1NWYzYWFh LzEvWUZnZVp6MkE5MGRKTnJJVE4tcjh3YjNEaGVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALSuOAwQA aN62MA0GCSqGSIb3DQEBCwUAA4IBAQAfujiKl2TWXDMQAHwo81B4rbqSt1lL5Cxq /sBS4degr7tO4P5qP6bP1lyabS7t7QxFoH6M/xQIMwxut1wDSUz+JK9H829+rLrw f/N+0cFwtdsR12huFc4qklljBAnvGlSmeaBVtxneAdywjlvJZd071dKGK+zbDJ+C NqY7mN1EPGikSUwGw3TX1l98WgDNE3QhgeUrwE3VQfStqcoPMTWqSPl8HPjTa1xh d6uzH9ImZ0QSgAZ8sfLx74u8Ak1BAtTlVhc/Dc6cDPxhhJ06BJ2c564vwZhzn+x+ IxTgphkXTDNIv6sqbCjW22SsWyR2od/P5guGgJspzAACb4VjRYCt -----END CERTIFICATE-----Generated at Thu Jan 8 16:04:39 2026 by rpki-client