This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/WgWNaVmU9E5xXUIGmyCC2OcNY3c.roa File: WgWNaVmU9E5xXUIGmyCC2OcNY3c.roa (raw, json) Hash identifier: cWtuYK+6VV+VjEhyOVWmGzilVk5qEDQtOwKSnWsxU8w= Subject key identifier: 5A:05:8D:69:59:94:F4:4E:71:5D:42:06:9B:20:82:D8:E7:0D:63:77 Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Certificate serial: 019B7CEE00B8482D6D573D0DD912F8B954B1 Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/WgWNaVmU9E5xXUIGmyCC2OcNY3c.roa Signing time: Fri 02 Jan 2026 04:18:51 +0000 ROA not before: Fri 02 Jan 2026 04:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 81.29.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:00:b8:48:2d:6d:57:3d:0d:d9:12:f8:b9:54:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47 Validity Not Before: Jan 2 04:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a058d695994f44e715d42069b2082d8e70d6377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6a:4c:24:2d:5e:8d:6c:b1:dc:e5:3c:f7:b9: de:5f:e9:09:5f:89:b3:0c:52:53:bd:69:8e:4d:de: a6:58:b3:13:b4:2d:c4:9b:aa:6e:e6:dc:54:b3:71: 72:08:f5:71:8e:9f:9b:43:c0:f9:1c:43:51:5e:aa: e2:b8:88:9f:18:be:c2:56:0f:6f:02:1a:5e:4f:1f: c8:d1:cc:b2:62:98:f0:e7:7a:cc:7a:30:77:18:06: e6:e4:eb:72:5f:4f:d5:e3:2a:0d:df:3b:94:2f:85: df:65:6e:26:ca:eb:0b:eb:b2:9c:e0:b1:a7:15:bc: 31:25:54:de:03:08:0e:cb:51:88:39:04:ef:60:9b: 35:cf:97:dc:74:79:83:cf:05:28:dd:db:41:e4:97: 15:8b:9a:b5:d4:66:2c:b2:ab:0d:d2:88:1e:41:93: da:ac:70:d6:43:83:c9:a4:b7:b0:fd:2a:cf:f1:ef: 8c:3e:c9:43:8d:3e:47:5b:03:40:7d:4c:62:26:f3: dc:7c:c9:38:f7:6c:a3:2a:73:36:95:dd:09:c3:d1: 71:db:2e:67:f8:0b:47:b3:f0:ce:52:68:5e:ef:11: 45:b9:e4:5a:66:c1:f1:e9:5e:98:70:16:55:85:b0: 52:6b:18:18:f8:4a:7e:e2:ba:6b:59:bb:46:84:82: 5d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:05:8D:69:59:94:F4:4E:71:5D:42:06:9B:20:82:D8:E7:0D:63:77 X509v3 Authority Key Identifier: keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/WgWNaVmU9E5xXUIGmyCC2OcNY3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 81.29.152.0/24 Signature Algorithm: sha256WithRSAEncryption 37:ca:7a:0e:67:04:c4:97:ba:27:b9:46:10:42:77:0d:ba:1c: 80:4e:cb:5a:0f:d3:ea:67:cf:9e:09:19:b5:d8:ec:78:bd:d0: ba:88:e2:03:50:e5:59:46:28:c8:cb:48:4f:0c:0a:ae:89:ea: 23:4b:2f:90:90:42:f8:8f:f2:0d:86:46:73:27:56:3e:00:a2: 33:10:40:2f:fb:f0:d5:9f:98:4c:a3:9d:17:64:1c:8f:d8:41: 7c:6e:68:5b:ed:ba:78:d1:67:32:a3:1c:ab:e8:b1:2d:4f:97: 09:7c:5c:0a:d2:a7:10:7c:36:6e:84:04:a9:ba:17:a1:bc:be: 8c:27:13:b5:e4:e5:e7:0c:c1:9f:83:39:9f:3c:7c:fd:ac:d2: e4:92:21:e4:6b:2f:54:93:9e:12:e9:54:69:5e:e1:73:56:c8: 30:51:e7:83:1d:f9:be:67:f3:94:bd:ac:41:68:de:41:48:f0: d8:69:87:37:5f:a6:f4:3c:b6:b5:0b:f1:ff:a7:de:fe:b9:3a: a6:d0:99:a9:e1:8e:c0:3c:c2:0d:54:59:2d:0d:d5:6c:47:d1: 29:e9:8d:94:55:90:fb:19:16:b4:ee:cb:c6:7d:7f:eb:50:6e: 65:08:93:9a:fc:f0:77:bc:f8:b8:05:d2:49:1a:50:59:f7:af: f6:15:5d:96 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87gC4SC1tVz0N2RL4uVSxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx MDhlNDcwHhcNMjYwMTAyMDQxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTA1OGQ2OTU5OTRmNDRlNzE1ZDQyMDY5YjIwODJkOGU3MGQ2Mzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGpMJC1ejWyx3OU897neX+kJX4mz DFJTvWmOTd6mWLMTtC3Em6pu5txUs3FyCPVxjp+bQ8D5HENRXqriuIifGL7CVg9v AhpeTx/I0cyyYpjw53rMejB3GAbm5OtyX0/V4yoN3zuUL4XfZW4myusL67Kc4LGn FbwxJVTeAwgOy1GIOQTvYJs1z5fcdHmDzwUo3dtB5JcVi5q11GYssqsN0ogeQZPa rHDWQ4PJpLew/SrP8e+MPslDjT5HWwNAfUxiJvPcfMk492yjKnM2ld0Jw9Fx2y5n +AtHs/DOUmhe7xFFueRaZsHx6V6YcBZVhbBSaxgY+Ep+4rprWbtGhIJdZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFoFjWlZlPROcV1CBpsggtjnDWN3MB8GA1UdIwQY MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt MTkxODliM2M5YzdkLzEvV2dXTmFWbVU5RTV4WFVJR215Q0MyT2NOWTNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUR2YMA0G CSqGSIb3DQEBCwUAA4IBAQA3ynoOZwTEl7onuUYQQncNuhyATstaD9PqZ8+eCRm1 2Ox4vdC6iOIDUOVZRijIy0hPDAquieojSy+QkEL4j/INhkZzJ1Y+AKIzEEAv+/DV n5hMo50XZByP2EF8bmhb7bp40Wcyoxyr6LEtT5cJfFwK0qcQfDZuhASpuhehvL6M JxO15OXnDMGfgzmfPHz9rNLkkiHkay9Uk54S6VRpXuFzVsgwUeeDHfm+Z/OUvaxB aN5BSPDYaYc3X6b0PLa1C/H/p97+uTqm0Jmp4Y7APMINVFktDdVsR9Ep6Y2UVZD7 GRa07svGfX/rUG5lCJOa/PB3vPi4BdJJGlBZ96/2FV2W -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:08 2026 by rpki-client