This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/wAqKbj4uE-SV3-6ArgALhXzEuyo.roa File: wAqKbj4uE-SV3-6ArgALhXzEuyo.roa (raw, json) Hash identifier: SGlhyvH/FuhTrBAQH4yJ1hH0kNwwN8CUfzfr/9TOmDI= Subject key identifier: C0:0A:8A:6E:3E:2E:13:E4:95:DF:EE:80:AE:00:0B:85:7C:C4:BB:2A Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019B77C697079A3EE4A3787CB4D043259210 Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/wAqKbj4uE-SV3-6ArgALhXzEuyo.roa Signing time: Thu 01 Jan 2026 04:17:42 +0000 ROA not before: Thu 01 Jan 2026 04:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 46.8.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:97:07:9a:3e:e4:a3:78:7c:b4:d0:43:25:92:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Jan 1 04:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c00a8a6e3e2e13e495dfee80ae000b857cc4bb2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:36:99:3f:f9:f4:9b:8f:99:ea:7f:14:75:30: 30:31:9d:85:4a:39:2e:c8:e7:bf:5b:5c:28:75:7f: c8:8f:98:18:e4:3d:16:ef:c0:9e:f7:88:65:3a:a9: aa:5d:ec:1f:b4:d8:82:5e:a4:4c:98:79:7a:1b:e2: 7b:70:d3:73:a1:da:30:7d:4a:f2:dd:18:ed:a4:c6: c5:33:5a:46:d8:db:8b:dc:99:7f:fe:6b:f5:38:b4: 69:8b:1c:eb:f6:b3:c7:dd:e6:7c:c2:58:f4:3a:e2: 53:4b:cb:30:79:38:ff:8f:ad:7f:b2:53:93:43:17: 16:d2:65:82:49:7d:15:c0:e4:1a:ba:c8:65:b9:02: 5e:7b:7d:41:8c:58:07:29:60:e5:a7:0d:5f:56:57: 9c:a6:a0:cf:8d:b4:0f:0c:a9:5d:3c:a4:26:80:1e: 5c:df:c3:ba:66:62:e1:a5:4d:b4:f6:26:de:54:27: 18:dd:45:7f:55:51:47:bc:ec:f7:05:60:23:c3:3c: c9:10:37:0c:2a:25:5f:1a:2f:21:b0:52:ba:ba:3d: f2:3b:f7:f6:06:f0:dc:20:de:37:69:9b:41:99:91: 16:1d:fb:05:13:bc:32:5e:20:3d:c6:d9:5a:32:f5: 4a:2c:47:a6:6f:1e:95:d3:0b:80:9a:b6:ff:66:1e: f8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:0A:8A:6E:3E:2E:13:E4:95:DF:EE:80:AE:00:0B:85:7C:C4:BB:2A X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/wAqKbj4uE-SV3-6ArgALhXzEuyo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.8.118.0/23 Signature Algorithm: sha256WithRSAEncryption 44:d7:1e:63:0c:78:1f:e9:39:da:57:e3:f2:96:46:19:74:6c: 7e:cd:a0:38:bf:d3:0c:67:29:6d:f1:49:2a:2f:63:2b:17:1c: be:68:aa:1c:09:9f:03:66:f1:95:e4:69:98:5d:97:e4:02:a9: 59:6d:b1:28:4d:d6:4d:e6:0f:16:77:55:11:0c:97:3c:2a:ed: 7a:1f:1a:3c:92:4d:b5:4f:07:06:77:1e:37:fd:bf:07:8d:30: 6d:4b:04:4f:46:e0:b8:04:6c:16:fa:f9:36:65:90:8d:28:de: a0:45:4f:9b:a5:0f:ec:03:87:4d:25:a2:5e:02:cc:8e:0f:6a: 57:a9:b5:08:07:2c:58:93:ec:32:54:d0:1c:69:ff:aa:ff:bc: f4:98:1a:3c:a9:a1:c4:f5:8c:aa:24:79:c9:02:4e:3b:fb:d1: 0c:31:3e:c0:e7:50:f0:e6:cf:64:a3:5e:9f:c4:93:ec:e7:84: 8a:be:19:da:dd:bd:af:31:e9:68:9e:78:cf:8a:42:3d:7f:cd: 7f:8d:6b:9f:16:cc:73:70:bf:f4:76:51:b5:62:da:f0:ac:0a: f8:3e:59:1c:6c:ba:3d:47:81:97:82:f5:1b:da:61:f9:04:db: 69:1a:69:0c:77:a0:b0:e9:1d:8b:04:91:0b:8f:85:1f:38:e9: a8:d5:bb:dc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xpcHmj7ko3h8tNBDJZIQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjYwMTAxMDQxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDBhOGE2ZTNlMmUxM2U0OTVkZmVlODBhZTAwMGI4NTdjYzRiYjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTaZP/n0m4+Z6n8UdTAwMZ2FSjku yOe/W1wodX/Ij5gY5D0W78Ce94hlOqmqXewftNiCXqRMmHl6G+J7cNNzodowfUry 3RjtpMbFM1pG2NuL3Jl//mv1OLRpixzr9rPH3eZ8wlj0OuJTS8sweTj/j61/slOT QxcW0mWCSX0VwOQaushluQJee31BjFgHKWDlpw1fVlecpqDPjbQPDKldPKQmgB5c 38O6ZmLhpU209ibeVCcY3UV/VVFHvOz3BWAjwzzJEDcMKiVfGi8hsFK6uj3yO/f2 BvDcIN43aZtBmZEWHfsFE7wyXiA9xtlaMvVKLEembx6V0wuAmrb/Zh74xQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMAKim4+LhPkld/ugK4AC4V8xLsqMB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEvd0FxS2JqNHVFLVNWMy02QXJnQUxoWHpFdXlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLgh2MA0G CSqGSIb3DQEBCwUAA4IBAQBE1x5jDHgf6TnaV+PylkYZdGx+zaA4v9MMZylt8Ukq L2MrFxy+aKocCZ8DZvGV5GmYXZfkAqlZbbEoTdZN5g8Wd1URDJc8Ku16Hxo8kk21 TwcGdx43/b8HjTBtSwRPRuC4BGwW+vk2ZZCNKN6gRU+bpQ/sA4dNJaJeAsyOD2pX qbUIByxYk+wyVNAcaf+q/7z0mBo8qaHE9YyqJHnJAk47+9EMMT7A51Dw5s9ko16f xJPs54SKvhna3b2vMelonnjPikI9f81/jWufFsxzcL/0dlG1YtrwrAr4PlkcbLo9 R4GXgvUb2mH5BNtpGmkMd6Cw6R2LBJELj4UfOOmo1bvc -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:10 2026 by rpki-client