This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/wiGLQyWknE9Q0DbJBFc2_UiEPyg.roa File: wiGLQyWknE9Q0DbJBFc2_UiEPyg.roa (raw, json) Hash identifier: 6+VFxXFCYHFOAFHox1khJ8uv/TaUkfz3Bllt2T6nbok= Subject key identifier: C2:21:8B:43:25:A4:9C:4F:50:D0:36:C9:04:57:36:FD:48:84:3F:28 Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c Certificate serial: 019B7DCB85D363B9CCC0198F887B63B673D4 Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/wiGLQyWknE9Q0DbJBFc2_UiEPyg.roa Signing time: Fri 02 Jan 2026 08:20:48 +0000 ROA not before: Fri 02 Jan 2026 08:20:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214833 IP address blocks: 45.131.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:85:d3:63:b9:cc:c0:19:8f:88:7b:63:b6:73:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c Validity Not Before: Jan 2 08:20:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2218b4325a49c4f50d036c9045736fd48843f28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:29:bf:bc:e1:1b:b8:27:0f:2c:0c:84:40:52: 55:17:43:b0:42:2f:8e:3f:95:e7:2d:10:7f:81:49: 10:0d:78:41:97:ef:06:0b:57:a3:e5:be:5a:95:c1: cf:df:1e:5e:18:9f:70:54:23:a1:9a:5e:77:5c:41: aa:26:32:5c:5a:43:f5:fc:9f:f2:f6:bd:be:cc:27: 1f:29:fc:37:7a:2f:9b:a3:f8:64:70:7a:92:98:4b: 47:66:e7:78:fd:f5:a9:9b:b2:f9:ff:70:4a:e4:85: 0b:e6:65:df:5e:af:b7:16:10:e3:ec:0b:05:28:1e: 40:c9:f0:e9:80:44:1b:b5:1f:9c:05:9d:79:f7:36: 45:a3:64:88:72:43:6a:06:0c:f3:7f:d5:d6:80:a0: 59:3b:8e:6d:04:11:1f:62:a2:67:9a:64:f1:ff:55: e1:bc:1a:6f:9a:e1:03:1e:15:2f:2a:26:13:de:48: 86:eb:5f:b0:b6:07:b6:a5:a1:ce:98:e6:22:7a:ff: 32:c2:94:5a:8c:f3:d5:4a:60:34:7e:e2:05:99:66: 8e:4b:b5:0e:c8:7a:a9:48:10:ae:18:3a:64:de:cc: db:67:d7:7f:d4:da:b7:b6:5d:7f:6d:31:95:8c:46: 80:68:09:b6:07:3a:24:b9:57:ea:cc:93:a1:7c:12: 89:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:21:8B:43:25:A4:9C:4F:50:D0:36:C9:04:57:36:FD:48:84:3F:28 X509v3 Authority Key Identifier: keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/wiGLQyWknE9Q0DbJBFc2_UiEPyg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.131.163.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:fb:68:38:ce:48:d8:68:a6:62:07:d6:dc:24:e2:19:e9:83: 77:2e:82:78:ab:51:82:10:3f:4f:96:b8:6d:85:61:75:25:0f: 29:cc:02:36:cb:bd:50:d9:64:72:03:d5:48:43:25:f6:7d:23: d4:db:f8:fb:69:03:e8:ae:1d:23:22:96:f2:fa:98:68:09:da: d5:f0:43:b1:46:5a:de:bd:8e:03:dd:f4:6b:a8:4d:5f:06:7f: 54:c4:8b:bc:94:8c:7d:00:b2:fd:d1:f0:c3:bb:c9:a7:0c:71: 1e:b4:c5:fe:c0:cf:7f:93:90:6c:97:76:8c:9a:63:0e:95:97: d6:1f:2c:0c:27:e9:59:79:8b:83:fb:4e:5e:3e:19:b3:9f:06: 67:b1:a6:de:e1:6b:70:fb:d6:a4:74:51:a3:91:8b:88:c2:af: 50:cd:37:c1:c2:b8:80:7d:18:00:91:c5:46:62:6a:03:67:17: 4a:9f:db:e9:72:48:90:16:25:2c:69:26:fa:1a:29:9b:5a:ca: b0:64:47:30:2e:40:92:11:37:e8:96:85:0f:65:d6:b3:25:e7: 02:f2:82:20:3d:73:6f:12:5a:69:ba:88:3e:48:03:4f:1c:d4: 97:98:86:1b:b9:24:35:7f:4d:82:e0:0f:dd:3d:84:be:15:00: b3:15:66:b0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y4XTY7nMwBmPiHtjtnPUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4 ZmNjNGMwHhcNMjYwMTAyMDgyMDQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjIxOGI0MzI1YTQ5YzRmNTBkMDM2YzkwNDU3MzZmZDQ4ODQzZjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjim/vOEbuCcPLAyEQFJVF0OwQi+O P5XnLRB/gUkQDXhBl+8GC1ej5b5alcHP3x5eGJ9wVCOhml53XEGqJjJcWkP1/J/y 9r2+zCcfKfw3ei+bo/hkcHqSmEtHZud4/fWpm7L5/3BK5IUL5mXfXq+3FhDj7AsF KB5AyfDpgEQbtR+cBZ159zZFo2SIckNqBgzzf9XWgKBZO45tBBEfYqJnmmTx/1Xh vBpvmuEDHhUvKiYT3kiG61+wtge2paHOmOYiev8ywpRajPPVSmA0fuIFmWaOS7UO yHqpSBCuGDpk3szbZ9d/1Nq3tl1/bTGVjEaAaAm2BzokuVfqzJOhfBKJYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMIhi0MlpJxPUNA2yQRXNv1IhD8oMB8GA1UdIwQY MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt MjM5ZDJmZTM5OGIxLzEvd2lHTFF5V2tuRTlRMERiSkJGYzJfVWlFUHlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYOjMA0G CSqGSIb3DQEBCwUAA4IBAQBd+2g4zkjYaKZiB9bcJOIZ6YN3LoJ4q1GCED9Plrht hWF1JQ8pzAI2y71Q2WRyA9VIQyX2fSPU2/j7aQPorh0jIpby+phoCdrV8EOxRlre vY4D3fRrqE1fBn9UxIu8lIx9ALL90fDDu8mnDHEetMX+wM9/k5Bsl3aMmmMOlZfW HywMJ+lZeYuD+05ePhmznwZnsabe4Wtw+9akdFGjkYuIwq9QzTfBwriAfRgAkcVG YmoDZxdKn9vpckiQFiUsaSb6GimbWsqwZEcwLkCSETfoloUPZdazJecC8oIgPXNv Elppuog+SANPHNSXmIYbuSQ1f02C4A/dPYS+FQCzFWaw -----END CERTIFICATE-----Generated at Tue Jan 20 02:45:57 2026 by rpki-client