This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/wgY3cF_O_xiUPvFNRKMjB3s-XoM.roa File: wgY3cF_O_xiUPvFNRKMjB3s-XoM.roa (raw, json) Hash identifier: RGpRUe3K2yY5x3EKu/w9NolhZdC3sCxQVWFfcsYcLA4= Subject key identifier: C2:06:37:70:5F:CE:FF:18:94:3E:F1:4D:44:A3:23:07:7B:3E:5E:83 Certificate issuer: /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Certificate serial: 019B77C6F755728CA7BC5A6160BD6D349F2F Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/wgY3cF_O_xiUPvFNRKMjB3s-XoM.roa Signing time: Thu 01 Jan 2026 04:18:06 +0000 ROA not before: Thu 01 Jan 2026 04:18:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208328 IP address blocks: 45.133.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:f7:55:72:8c:a7:bc:5a:61:60:bd:6d:34:9f:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9 Validity Not Before: Jan 1 04:18:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c20637705fceff18943ef14d44a323077b3e5e83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9c:6c:4b:5a:5d:c8:43:13:e0:67:02:fd:f8: 86:a5:b5:99:2d:5b:a7:ba:7b:96:a8:27:c1:0d:dc: b9:3f:2d:8b:0c:f6:34:fa:76:d9:39:8f:f1:06:37: 06:76:f6:e9:18:93:5e:f4:0d:12:96:52:a8:8e:46: ce:5c:e7:2e:24:e4:63:72:da:19:a9:10:a6:0b:6c: c6:68:c7:bb:56:fc:55:7b:32:dd:88:fb:53:f9:f6: b7:9a:ce:b4:86:aa:fa:e8:d5:1b:1a:f9:01:3e:f3: 70:b5:36:a6:aa:cc:d0:1a:65:96:79:0c:9f:1f:61: db:8f:c0:a1:ea:7e:8a:fa:0f:4e:fd:78:78:76:8b: 56:af:9f:39:57:a1:5b:41:bd:49:cd:61:65:81:2e: be:dd:bf:1c:22:54:82:16:70:19:be:ba:af:d0:88: 2a:1e:e5:52:ab:f2:39:d6:fb:0d:bf:2d:02:e5:36: 47:dc:37:b2:1f:12:f3:0f:cb:f4:6f:ff:19:00:ef: 51:75:22:fa:3e:63:0a:1b:41:8e:ec:85:20:75:81: 5e:b6:b0:73:a7:a7:db:80:46:4b:f0:92:14:59:c2: 4f:d6:6c:1d:be:96:f1:f0:85:68:b9:7f:2a:bb:2d: c5:25:1e:43:40:91:3b:1f:79:cf:f7:d2:a6:a6:4f: f1:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:06:37:70:5F:CE:FF:18:94:3E:F1:4D:44:A3:23:07:7B:3E:5E:83 X509v3 Authority Key Identifier: keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/wgY3cF_O_xiUPvFNRKMjB3s-XoM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.133.119.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:81:b2:e2:26:3a:d3:ae:a3:69:2a:5d:fa:15:b5:0a:19:39: 3b:33:b1:09:51:c7:ac:c7:f5:e4:65:98:cb:89:73:a5:d4:1a: 6f:d6:ee:52:96:72:3f:44:55:09:15:fa:c1:aa:f9:7c:03:00: 2c:e9:7e:34:80:96:27:23:2f:d8:b9:ff:54:9b:e1:18:20:91: 26:5f:1d:06:0a:f8:65:2e:c4:4f:d6:15:62:08:8a:38:d9:e9: 1b:3b:15:db:be:0a:03:e3:7e:a3:c8:22:65:08:45:b8:5e:07: 21:f4:80:00:16:4f:9b:ed:e2:08:79:38:fc:b3:0f:35:56:c3: 73:dd:f8:ef:60:16:51:6b:93:a2:3c:a2:08:38:a7:4f:93:c4: 19:16:e6:6c:5c:ae:7c:a3:58:a3:4f:33:8a:c3:e1:b3:1b:8d: 5c:6f:9a:51:0f:92:be:22:a1:f4:f7:1f:c2:1c:66:39:07:b3: 96:ed:9b:8f:3b:48:20:5f:e7:cb:ef:cc:ac:30:f9:16:85:10: e8:0d:48:76:f8:c2:93:bc:1f:34:47:e0:36:2a:b8:ec:cb:22: 91:d2:c6:05:05:b8:a4:38:9c:3c:90:1a:09:1d:d4:38:dd:29: c0:7d:3f:32:31:06:1b:fe:84:53:b8:a7:e4:d8:4b:13:0b:13: b1:ef:96:ee -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xvdVcoynvFphYL1tNJ8vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMTdiZjI0OThmMzY4MmQ3MTgzZTQ3Zjc1YjI4YWY0MWMy ODE1YjkwHhcNMjYwMTAxMDQxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjA2Mzc3MDVmY2VmZjE4OTQzZWYxNGQ0NGEzMjMwNzdiM2U1ZTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpxsS1pdyEMT4GcC/fiGpbWZLVun unuWqCfBDdy5Py2LDPY0+nbZOY/xBjcGdvbpGJNe9A0SllKojkbOXOcuJORjctoZ qRCmC2zGaMe7VvxVezLdiPtT+fa3ms60hqr66NUbGvkBPvNwtTamqszQGmWWeQyf H2Hbj8Ch6n6K+g9O/Xh4dotWr585V6FbQb1JzWFlgS6+3b8cIlSCFnAZvrqv0Igq HuVSq/I51vsNvy0C5TZH3DeyHxLzD8v0b/8ZAO9RdSL6PmMKG0GO7IUgdYFetrBz p6fbgEZL8JIUWcJP1mwdvpbx8IVouX8quy3FJR5DQJE7H3nP99Kmpk/xjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMIGN3Bfzv8YlD7xTUSjIwd7Pl6DMB8GA1UdIwQY MBaAFA8XvySY82gtcYPkf3WyivQcKBW5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMt YTQ5Y2JiODRmOTgyLzEvd2dZM2NGX09feGlVUHZGTlJLTWpCM3MtWG9NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC83YmU2MTQtMWU2ZS00YjQwLWI2ZGMtYTQ5Y2JiODRmOTgy LzEvRHhlX0pKanphQzF4Zy1SX2RiS0s5QndvRmJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYV3MA0G CSqGSIb3DQEBCwUAA4IBAQA/gbLiJjrTrqNpKl36FbUKGTk7M7EJUcesx/XkZZjL iXOl1Bpv1u5SlnI/RFUJFfrBqvl8AwAs6X40gJYnIy/Yuf9Um+EYIJEmXx0GCvhl LsRP1hViCIo42ekbOxXbvgoD436jyCJlCEW4Xgch9IAAFk+b7eIIeTj8sw81VsNz 3fjvYBZRa5OiPKIIOKdPk8QZFuZsXK58o1ijTzOKw+GzG41cb5pRD5K+IqH09x/C HGY5B7OW7ZuPO0ggX+fL78ysMPkWhRDoDUh2+MKTvB80R+A2KrjsyyKR0sYFBbik OJw8kBoJHdQ43SnAfT8yMQYb/oRTuKfk2EsTCxOx75bu -----END CERTIFICATE-----Generated at Sun Jan 18 06:34:32 2026 by rpki-client