This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/wlOq_n0_05HtOczXJqqOw_68LpU.roa File: wlOq_n0_05HtOczXJqqOw_68LpU.roa (raw, json) Hash identifier: 1Tj+cOl/hD9SIEQtRVHRwxzCjUoxQ4ZamDLu1yYmL0c= Subject key identifier: C2:53:AA:FE:7D:3F:D3:91:ED:39:CC:D7:26:AA:8E:C3:FE:BC:2E:95 Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430 Certificate serial: 019B7FF199AA36CC6B75F15E477C127A9109 Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/wlOq_n0_05HtOczXJqqOw_68LpU.roa Signing time: Fri 02 Jan 2026 18:21:38 +0000 ROA not before: Fri 02 Jan 2026 18:21:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211705 IP address blocks: 46.38.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:99:aa:36:cc:6b:75:f1:5e:47:7c:12:7a:91:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430 Validity Not Before: Jan 2 18:21:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c253aafe7d3fd391ed39ccd726aa8ec3febc2e95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ac:78:d7:d9:f4:5b:d6:98:3b:e0:0f:91:df: 8d:6d:bb:db:00:34:96:9b:f9:1c:75:64:17:a9:69: 25:59:b0:0b:c0:57:13:b7:e9:e6:95:bc:b7:70:d9: 27:79:e5:5e:14:8b:f1:1e:6f:42:f3:c7:77:ca:d8: 21:81:11:19:ca:94:f1:08:f2:72:e3:fa:ba:98:89: 8b:0c:ba:6f:dc:c5:61:1a:2f:d9:ed:4d:80:5c:f9: 38:7a:52:4f:d3:40:61:5b:4d:a4:3d:2a:74:bc:84: 63:ca:1a:a4:a5:10:a1:50:c2:fd:fb:0f:f7:c2:fb: 38:a6:34:87:86:96:68:89:91:ed:06:3e:80:96:bc: be:cc:2e:60:5f:da:48:d8:e5:be:26:0c:b6:0b:b7: 0f:bd:65:18:38:54:79:5a:09:e6:6f:dd:d7:51:cb: b1:ef:62:34:0b:96:22:fa:5d:34:46:16:c8:47:48: cd:3d:19:e5:9d:51:56:27:31:39:9e:7f:09:ee:39: 95:d0:8f:27:b7:a5:02:4b:11:72:c9:06:98:ca:6d: 45:86:b3:d3:9b:6d:e2:97:c2:59:9a:97:66:13:ae: 38:d2:cc:67:6d:27:02:d2:de:90:93:ae:48:13:76: 62:48:c3:85:9f:29:5d:ee:4b:bd:c1:84:8f:e3:4b: 16:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:53:AA:FE:7D:3F:D3:91:ED:39:CC:D7:26:AA:8E:C3:FE:BC:2E:95 X509v3 Authority Key Identifier: keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/wlOq_n0_05HtOczXJqqOw_68LpU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.38.159.0/24 Signature Algorithm: sha256WithRSAEncryption 34:78:b2:5c:69:ec:6d:64:df:26:a8:42:a1:fa:96:86:ce:79: 3a:48:49:4f:3b:40:ae:c8:f5:11:75:ef:6e:62:23:bd:52:c0: cf:83:d3:58:bb:97:6e:f1:ff:f6:8d:f9:f1:c3:35:6f:05:c9: 27:2c:e3:c2:ac:c1:42:d7:a6:36:b1:9e:48:b7:76:3d:bd:8f: ba:18:14:fa:90:e6:8a:5f:d6:ab:87:23:bb:5f:1b:61:95:15: cd:d0:91:a6:d2:b1:2c:eb:e4:7a:18:f1:cf:65:c9:5f:72:88: 3a:2d:46:62:b2:a9:b1:e1:15:b8:d5:0e:a3:70:ac:26:ae:e8: d9:10:39:e6:b9:e4:5e:be:1c:a0:96:f8:3a:09:36:52:20:8b: f3:30:83:fc:e9:7a:6c:da:5a:dd:d8:c1:18:11:b2:85:4b:b6: 05:e6:60:65:da:ee:ab:67:39:d6:04:6f:62:43:25:01:71:3b: ba:77:96:5a:05:76:ed:27:24:bb:f0:ad:c3:2b:4a:f2:ee:97: fb:1b:32:18:3f:8f:22:d7:3b:6f:7b:a1:4e:8b:a6:55:69:d5: 80:6a:50:4a:9c:53:d6:99:49:ea:16:64:cd:a4:7b:de:f9:30: c5:02:fc:db:8c:d6:74:cc:57:4f:cd:27:cf:3c:6b:53:a7:dc: 74:bc:f4:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8ZmqNsxrdfFeR3wSepEJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj NWY0MzAwHhcNMjYwMTAyMTgyMTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjUzYWFmZTdkM2ZkMzkxZWQzOWNjZDcyNmFhOGVjM2ZlYmMyZTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ax419n0W9aYO+APkd+NbbvbADSW m/kcdWQXqWklWbALwFcTt+nmlby3cNkneeVeFIvxHm9C88d3ytghgREZypTxCPJy 4/q6mImLDLpv3MVhGi/Z7U2AXPk4elJP00BhW02kPSp0vIRjyhqkpRChUML9+w/3 wvs4pjSHhpZoiZHtBj6Alry+zC5gX9pI2OW+Jgy2C7cPvWUYOFR5Wgnmb93XUcux 72I0C5Yi+l00RhbIR0jNPRnlnVFWJzE5nn8J7jmV0I8nt6UCSxFyyQaYym1FhrPT m23il8JZmpdmE6440sxnbScC0t6Qk65IE3ZiSMOFnyld7ku9wYSP40sWJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMJTqv59P9OR7TnM1yaqjsP+vC6VMB8GA1UdIwQY MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt MmEwOWNjNTNhODA1LzEvd2xPcV9uMF8wNUh0T2N6WEpxcU93XzY4THBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1 LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiafMA0G CSqGSIb3DQEBCwUAA4IBAQA0eLJcaextZN8mqEKh+paGznk6SElPO0CuyPURde9u YiO9UsDPg9NYu5du8f/2jfnxwzVvBcknLOPCrMFC16Y2sZ5It3Y9vY+6GBT6kOaK X9arhyO7XxthlRXN0JGm0rEs6+R6GPHPZclfcog6LUZisqmx4RW41Q6jcKwmrujZ EDnmueRevhyglvg6CTZSIIvzMIP86Xps2lrd2MEYEbKFS7YF5mBl2u6rZznWBG9i QyUBcTu6d5ZaBXbtJyS78K3DK0ry7pf7GzIYP48i1ztve6FOi6ZVadWAalBKnFPW mUnqFmTNpHve+TDFAvzbjNZ0zFdPzSfPPGtTp9x0vPTT -----END CERTIFICATE-----Generated at Wed Jan 21 04:05:33 2026 by rpki-client