This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/wUMPjyaePLfaPVSKvgwCuAqDAQ0.roa File: wUMPjyaePLfaPVSKvgwCuAqDAQ0.roa (raw, json) Hash identifier: k0jrrwPLfAKgb8aLxsTq8mOsryCm0vJUYn3NAWB82sU= Subject key identifier: C1:43:0F:8F:26:9E:3C:B7:DA:3D:54:8A:BE:0C:02:B8:0A:83:01:0D Certificate issuer: /CN=6c0a9614ac4e10e7a2e2a5bc12f8623064c89ef9 Certificate serial: 019B7C12B42E1742C9EA5411113D586BCB0D Authority key identifier: 6C:0A:96:14:AC:4E:10:E7:A2:E2:A5:BC:12:F8:62:30:64:C8:9E:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/wUMPjyaePLfaPVSKvgwCuAqDAQ0.roa Signing time: Fri 02 Jan 2026 00:19:19 +0000 ROA not before: Fri 02 Jan 2026 00:19:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208144 IP address blocks: 45.157.152.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.crl rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:b4:2e:17:42:c9:ea:54:11:11:3d:58:6b:cb:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c0a9614ac4e10e7a2e2a5bc12f8623064c89ef9 Validity Not Before: Jan 2 00:19:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1430f8f269e3cb7da3d548abe0c02b80a83010d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:86:a3:4f:65:b0:08:c4:e6:33:2e:67:96:27: 9b:63:b2:be:0a:54:17:22:35:1a:c4:c1:ab:bf:35: 2d:5a:5b:10:28:eb:bb:5b:00:0b:26:d8:9d:ab:96: af:37:04:ab:90:28:e8:ed:b0:bf:fe:27:ab:9d:1a: 98:3d:d9:10:f3:b2:0b:d1:21:54:a6:6a:59:8b:c3: b2:15:ca:6f:6e:94:df:93:b7:dd:2b:53:f9:25:65: fd:9c:2b:5e:07:3c:d6:bb:a7:7e:2a:b8:ed:f6:67: 64:6b:87:1e:c8:a1:75:1f:25:d9:62:95:cc:2f:b3: d8:cf:da:72:b0:58:47:bb:6f:f2:9c:69:a7:cd:70: 30:9b:9f:98:58:15:42:d3:ea:8b:d5:21:70:7d:44: e4:8e:91:6b:84:ce:74:52:84:7f:33:c5:3a:23:fa: 96:fe:7c:c4:93:01:5b:09:7e:2d:18:4c:80:85:e1: 30:af:68:f1:f2:05:fa:b2:7e:04:27:56:a9:b6:ed: c7:21:67:52:69:46:82:21:77:bb:2d:42:91:77:0d: 6f:08:ac:b3:b2:54:7d:a5:d4:4f:24:0c:6c:82:38: ac:2e:ca:55:52:90:01:a3:06:43:1c:2a:a5:06:f5: e1:bb:46:a0:8a:7b:0b:95:bf:4f:ed:ae:95:15:1c: 8c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:43:0F:8F:26:9E:3C:B7:DA:3D:54:8A:BE:0C:02:B8:0A:83:01:0D X509v3 Authority Key Identifier: keyid:6C:0A:96:14:AC:4E:10:E7:A2:E2:A5:BC:12:F8:62:30:64:C8:9E:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/wUMPjyaePLfaPVSKvgwCuAqDAQ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.157.152.0/22 Signature Algorithm: sha256WithRSAEncryption bb:57:63:80:44:69:d1:e3:a6:6a:b3:0c:66:63:34:79:32:3e: cf:a4:fa:37:3c:6f:72:ac:da:27:fb:29:07:a9:50:10:50:e9: 7f:32:ca:1b:05:e9:90:90:27:42:08:a5:1d:e3:5e:51:61:47: d6:2d:6d:1c:79:43:4b:fc:a1:a5:ff:22:1c:18:d7:65:62:e2: ee:81:f2:7a:58:75:23:61:6a:b6:84:a0:5e:a2:9b:f5:1d:26: 74:a8:35:2f:cb:ed:e7:ef:89:79:8f:21:69:1e:b6:a0:51:1a: 8a:84:98:70:f5:65:f4:4c:26:68:a7:09:aa:bf:bd:6f:11:a7: d5:aa:9f:d5:56:59:05:7e:e9:80:ce:06:26:93:90:16:3b:6e: 8d:c9:bc:cf:1e:04:52:7f:d0:37:f0:19:e2:0f:77:26:0f:19: b3:82:c9:b9:a4:2e:33:8a:69:56:61:fd:d3:23:8b:d4:82:96: fa:d1:ff:72:27:15:91:2b:a2:58:7b:9a:fd:9b:39:30:c2:5f: 2f:77:09:a2:78:0f:0b:0d:26:7e:23:8a:65:8e:70:90:90:c8: bd:d6:96:24:62:75:1f:4b:06:d4:c1:4c:96:20:02:b6:6b:c3: 02:1a:71:e6:d4:7f:4c:dc:57:50:93:c9:3a:d0:2b:db:63:5c: c2:58:6c:66 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8ErQuF0LJ6lQRET1Ya8sNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMGE5NjE0YWM0ZTEwZTdhMmUyYTViYzEyZjg2MjMwNjRj ODllZjkwHhcNMjYwMTAyMDAxOTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTQzMGY4ZjI2OWUzY2I3ZGEzZDU0OGFiZTBjMDJiODBhODMwMTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIajT2WwCMTmMy5nliebY7K+ClQX IjUaxMGrvzUtWlsQKOu7WwALJtidq5avNwSrkCjo7bC//iernRqYPdkQ87IL0SFU pmpZi8OyFcpvbpTfk7fdK1P5JWX9nCteBzzWu6d+Krjt9mdka4ceyKF1HyXZYpXM L7PYz9pysFhHu2/ynGmnzXAwm5+YWBVC0+qL1SFwfUTkjpFrhM50UoR/M8U6I/qW /nzEkwFbCX4tGEyAheEwr2jx8gX6sn4EJ1aptu3HIWdSaUaCIXe7LUKRdw1vCKyz slR9pdRPJAxsgjisLspVUpABowZDHCqlBvXhu0aginsLlb9P7a6VFRyMlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMFDD48mnjy32j1Uir4MArgKgwENMB8GA1UdIwQY MBaAFGwKlhSsThDnouKlvBL4YjBkyJ75MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkFxV0ZLeE9FT2VpNHFXOEV2aGlNR1RJbnZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi82NGEzOTItMzcyZS00OGE2LWEwZTIt ZjVhZDE2N2Q4NDk0LzEvd1VNUGp5YWVQTGZhUFZTS3Znd0N1QXFEQVEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi82NGEzOTItMzcyZS00OGE2LWEwZTItZjVhZDE2N2Q4NDk0 LzEvYkFxV0ZLeE9FT2VpNHFXOEV2aGlNR1RJbnZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZ2YMA0G CSqGSIb3DQEBCwUAA4IBAQC7V2OARGnR46ZqswxmYzR5Mj7PpPo3PG9yrNon+ykH qVAQUOl/MsobBemQkCdCCKUd415RYUfWLW0ceUNL/KGl/yIcGNdlYuLugfJ6WHUj YWq2hKBeopv1HSZ0qDUvy+3n74l5jyFpHragURqKhJhw9WX0TCZopwmqv71vEafV qp/VVlkFfumAzgYmk5AWO26NybzPHgRSf9A38BniD3cmDxmzgsm5pC4zimlWYf3T I4vUgpb60f9yJxWRK6JYe5r9mzkwwl8vdwmieA8LDSZ+I4pljnCQkMi91pYkYnUf SwbUwUyWIAK2a8MCGnHm1H9M3FdQk8k60CvbY1zCWGxm -----END CERTIFICATE-----Generated at Tue Feb 10 06:00:41 2026 by rpki-client