This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/WTnZHawCrFt92HJ5c52B4Lpjzyk.roa File: WTnZHawCrFt92HJ5c52B4Lpjzyk.roa (raw, json) Hash identifier: ULPffjH4r407eXPyl6PQZZu6OtSid0XwosfEwigrGuo= Subject key identifier: 59:39:D9:1D:AC:02:AC:5B:7D:D8:72:79:73:9D:81:E0:BA:63:CF:29 Certificate issuer: /CN=e1a323546484220cb402063380f4016369262acf Certificate serial: 019B7C1187CB70A03EA69D5B37A29D4A8A1C Authority key identifier: E1:A3:23:54:64:84:22:0C:B4:02:06:33:80:F4:01:63:69:26:2A:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/WTnZHawCrFt92HJ5c52B4Lpjzyk.roa Signing time: Fri 02 Jan 2026 00:18:02 +0000 ROA not before: Fri 02 Jan 2026 00:18:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202361 IP address blocks: 45.129.167.0/24 maxlen: 24 2a13:40::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.crl rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:87:cb:70:a0:3e:a6:9d:5b:37:a2:9d:4a:8a:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1a323546484220cb402063380f4016369262acf Validity Not Before: Jan 2 00:18:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5939d91dac02ac5b7dd87279739d81e0ba63cf29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:64:d6:2f:40:02:cc:aa:cf:a1:f0:d1:70:f1: a3:f2:79:fd:fe:97:8a:a7:fe:c0:70:6c:7e:5e:60: 4e:d3:03:6d:81:c0:4e:bc:63:d5:6a:de:da:1e:da: 1e:12:e7:12:94:03:9b:c2:ab:76:23:b5:8e:94:95: f2:54:4c:13:1c:db:9b:05:c3:db:2d:c5:21:75:cf: 9e:7a:96:67:80:58:fa:ba:a5:1c:28:0c:97:fa:80: 63:8c:18:b0:8a:ef:cc:6e:b6:5a:2b:9d:a9:41:be: 69:18:b3:79:6d:20:d2:e0:f2:27:fc:58:82:af:15: 51:10:36:67:b9:ad:37:a6:85:7f:a8:93:9f:c0:01: eb:af:f8:2c:66:a0:0e:a1:89:c2:ea:c7:e2:96:3e: bd:2e:28:cd:00:d7:aa:bd:94:3a:55:5d:07:a2:bc: 3d:54:e8:70:b3:1f:90:08:9b:91:9e:aa:d5:4d:48: c8:78:18:37:a1:3d:ab:03:e7:be:78:23:6d:44:09: 38:6d:1b:85:58:5c:18:91:d5:6f:32:65:b3:5e:2e: 4b:a8:0a:b9:48:85:8c:b7:86:68:b0:9d:d4:fb:c6: 70:94:8e:14:13:2d:6d:b7:a6:2d:cf:83:00:43:9d: 1e:12:71:17:43:13:d6:f0:0f:33:0c:2a:8e:63:1e: 3f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:39:D9:1D:AC:02:AC:5B:7D:D8:72:79:73:9D:81:E0:BA:63:CF:29 X509v3 Authority Key Identifier: keyid:E1:A3:23:54:64:84:22:0C:B4:02:06:33:80:F4:01:63:69:26:2A:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/WTnZHawCrFt92HJ5c52B4Lpjzyk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.167.0/24 IPv6: 2a13:40::/32 Signature Algorithm: sha256WithRSAEncryption 3d:10:8e:08:64:d8:07:94:67:39:ae:c5:1e:fa:90:90:69:63: 4d:99:7a:61:1e:e4:2e:b5:09:20:33:9b:12:5a:31:6a:f2:21: c5:2d:27:f4:53:18:ab:d6:6a:19:68:d8:e6:2a:af:4f:74:48: 6f:77:f4:79:e7:ba:86:30:68:35:d1:3c:d5:a1:82:e1:fa:0d: ef:8f:c3:50:b4:8b:1e:45:f1:2c:28:2f:88:08:52:58:46:d3: ae:8c:35:90:8f:b8:f3:d2:4a:4c:f5:1c:87:7b:e0:1d:74:58: d4:f4:b7:f9:be:f5:50:e2:05:4c:e9:04:e8:fd:07:92:89:53: 1d:0e:41:20:e7:1b:47:6c:c1:cf:ed:45:9e:62:fe:6e:e1:6e: 26:d3:00:ae:91:d0:d1:e7:ff:a8:2a:7d:5c:3f:1f:ad:79:fe: b5:52:45:0c:a7:09:8c:90:04:63:5f:51:46:e7:9e:fd:2a:5c: e6:45:5f:59:2e:00:a4:5b:5e:48:3c:4c:5a:2f:44:4b:5d:ba: 7d:4f:fa:e6:96:83:e8:83:2d:8d:ed:b5:eb:40:b1:e9:ef:16: 8d:9f:46:da:29:94:5e:bc:1a:a7:5e:01:d9:9d:27:7d:30:ee: 5f:36:29:a1:5f:97:06:b2:a8:de:ef:c9:23:d0:af:71:fc:fd: de:45:90:86 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8EYfLcKA+pp1bN6KdSoocMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxYTMyMzU0NjQ4NDIyMGNiNDAyMDYzMzgwZjQwMTYzNjky NjJhY2YwHhcNMjYwMTAyMDAxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTM5ZDkxZGFjMDJhYzViN2RkODcyNzk3MzlkODFlMGJhNjNjZjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGTWL0ACzKrPofDRcPGj8nn9/peK p/7AcGx+XmBO0wNtgcBOvGPVat7aHtoeEucSlAObwqt2I7WOlJXyVEwTHNubBcPb LcUhdc+eepZngFj6uqUcKAyX+oBjjBiwiu/MbrZaK52pQb5pGLN5bSDS4PIn/FiC rxVREDZnua03poV/qJOfwAHrr/gsZqAOoYnC6sfilj69LijNANeqvZQ6VV0Horw9 VOhwsx+QCJuRnqrVTUjIeBg3oT2rA+e+eCNtRAk4bRuFWFwYkdVvMmWzXi5LqAq5 SIWMt4ZosJ3U+8ZwlI4UEy1tt6Ytz4MAQ50eEnEXQxPW8A8zDCqOYx4/6QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFFk52R2sAqxbfdhyeXOdgeC6Y88pMB8GA1UdIwQY MBaAFOGjI1RkhCIMtAIGM4D0AWNpJirPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGFNalZHU0VJZ3kwQWdZemdQUUJZMmttS3M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9kMjFkYTQtZjY1Yi00NTMxLTk3NmEt OGVjMDYwNGU2OTI5LzEvV1RuWkhhd0NyRnQ5MkhKNWM1MkI0THBqenlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9kMjFkYTQtZjY1Yi00NTMxLTk3NmEtOGVjMDYwNGU2OTI5 LzEvNGFNalZHU0VJZ3kwQWdZemdQUUJZMmttS3M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALYGnMA0E AgACMAcDBQAqEwBAMA0GCSqGSIb3DQEBCwUAA4IBAQA9EI4IZNgHlGc5rsUe+pCQ aWNNmXphHuQutQkgM5sSWjFq8iHFLSf0Uxir1moZaNjmKq9PdEhvd/R557qGMGg1 0TzVoYLh+g3vj8NQtIseRfEsKC+ICFJYRtOujDWQj7jz0kpM9RyHe+AddFjU9Lf5 vvVQ4gVM6QTo/QeSiVMdDkEg5xtHbMHP7UWeYv5u4W4m0wCukdDR5/+oKn1cPx+t ef61UkUMpwmMkARjX1FG5579KlzmRV9ZLgCkW15IPExaL0RLXbp9T/rmloPogy2N 7bXrQLHp7xaNn0baKZRevBqnXgHZnSd9MO5fNimhX5cGsqje78kj0K9x/P3eRZCG -----END CERTIFICATE-----Generated at Mon Feb 2 08:08:21 2026 by rpki-client