This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/Wdloadg_jaSIWNimJpIr6kOshxY.roa File: Wdloadg_jaSIWNimJpIr6kOshxY.roa (raw, json) Hash identifier: xgmHkwMMNOck0R3y8/daNlcMrAkpPhMbZk/5vahLUtI= Subject key identifier: 59:D9:68:69:D8:3F:8D:A4:88:58:D8:A6:26:92:2B:EA:43:AC:87:16 Certificate issuer: /CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f Certificate serial: 019B7CED06BEB664386CC1D2F082C64E2572 Authority key identifier: DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/Wdloadg_jaSIWNimJpIr6kOshxY.roa Signing time: Fri 02 Jan 2026 04:17:47 +0000 ROA not before: Fri 02 Jan 2026 04:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60781 IP address blocks: 45.13.84.0/22 maxlen: 22 45.13.84.0/24 maxlen: 24 45.13.85.0/24 maxlen: 24 45.13.86.0/24 maxlen: 24 45.13.87.0/24 maxlen: 24 2a12:fd00::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.crl rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.mft rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:06:be:b6:64:38:6c:c1:d2:f0:82:c6:4e:25:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc102f6131ce5a746eb5981dd4c1d6b4e17b033f Validity Not Before: Jan 2 04:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59d96869d83f8da48858d8a626922bea43ac8716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f8:48:28:12:4e:bc:0e:79:29:f5:1d:04:59: b4:7b:f0:c4:1f:ae:b6:67:e4:b9:54:82:01:2f:98: e4:af:85:81:e1:cd:97:25:dc:15:29:c1:c7:9f:00: c2:d0:38:cd:83:da:21:e6:35:40:47:7d:54:84:2b: 15:19:9c:03:74:fa:59:8c:ee:7a:c1:4d:a6:20:7d: 30:20:17:9c:62:fb:83:33:c0:e9:bb:d2:d1:9d:ed: 03:3e:fe:7c:1b:e0:f2:c9:76:c3:15:b2:5c:aa:d8: e6:af:c0:4e:0b:f8:63:19:96:ce:72:d6:00:af:e3: d3:0a:13:ac:4c:5a:3b:fc:38:83:41:5f:5c:2a:de: f2:ae:88:a1:88:f3:c8:fb:c8:10:bc:19:1b:4f:c0: 4b:78:5e:dd:b8:cc:32:14:09:c9:f5:e9:8b:2c:ad: 10:14:4c:b3:87:3f:92:12:16:89:c8:c3:fb:51:91: 5e:13:df:15:97:30:53:52:ee:af:85:b3:4d:03:00: 94:e8:6a:75:24:e5:12:c0:77:be:b9:29:71:7e:f5: 1b:df:e4:65:80:74:aa:49:7e:b6:c3:fc:4e:40:ce: 40:14:08:f6:1e:a4:a6:3e:de:fb:74:bc:71:93:f3: cc:17:2c:32:0e:cc:c0:38:eb:8f:9b:9b:eb:72:e0: aa:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:D9:68:69:D8:3F:8D:A4:88:58:D8:A6:26:92:2B:EA:43:AC:87:16 X509v3 Authority Key Identifier: keyid:DC:10:2F:61:31:CE:5A:74:6E:B5:98:1D:D4:C1:D6:B4:E1:7B:03:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BAvYTHOWnRutZgd1MHWtOF7Az8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/Wdloadg_jaSIWNimJpIr6kOshxY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c8d65e-e5c8-4120-ae1d-b097d9f8ec22/1/3BAvYTHOWnRutZgd1MHWtOF7Az8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.84.0/22 IPv6: 2a12:fd00::/36 Signature Algorithm: sha256WithRSAEncryption 29:b6:6e:43:ee:fa:d2:e4:89:bf:77:ef:dd:b6:f2:45:33:bc: 8c:2f:e5:a4:76:b0:4a:bb:19:6c:4a:bb:93:38:ad:be:3c:6e: b6:f7:85:9d:13:89:67:06:1d:e2:33:f9:c6:a1:77:2d:2a:47: 56:bd:ac:71:0d:90:d7:9d:cc:eb:aa:ae:4a:38:d6:10:20:f3: 1e:87:12:3a:a5:8b:3d:24:c9:0b:f3:e1:60:c0:28:ea:d6:33: 19:2d:e5:37:5b:f3:4e:6b:83:dc:c2:81:25:e3:09:0b:6b:17: 5c:c1:18:77:53:00:69:01:55:a8:3c:01:21:3c:72:db:f2:88: 01:01:15:0d:a1:79:73:3d:c9:b8:8d:e3:a4:68:cd:27:47:1e: a4:65:c2:72:0b:ce:72:af:19:07:57:11:ba:74:46:59:07:79: f4:08:79:49:33:39:d0:a5:c2:1f:53:7c:4c:23:88:a6:fc:f6: a9:5c:e6:92:d0:73:53:e9:0b:74:35:88:e3:a8:87:1e:c0:c5: b1:71:e9:be:d4:4b:12:d7:69:75:cf:55:9a:ce:fb:73:e1:d8: 5d:cc:b4:0f:02:71:32:bb:83:bd:db:dc:8e:f0:b3:8d:90:68: 07:12:bf:af:3b:11:23:5b:9f:a6:15:15:99:11:78:75:ac:1b: 69:c6:bb:89 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt87Qa+tmQ4bMHS8ILGTiVyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMTAyZjYxMzFjZTVhNzQ2ZWI1OTgxZGQ0YzFkNmI0ZTE3 YjAzM2YwHhcNMjYwMTAyMDQxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OWQ5Njg2OWQ4M2Y4ZGE0ODg1OGQ4YTYyNjkyMmJlYTQzYWM4NzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/hIKBJOvA55KfUdBFm0e/DEH662 Z+S5VIIBL5jkr4WB4c2XJdwVKcHHnwDC0DjNg9oh5jVAR31UhCsVGZwDdPpZjO56 wU2mIH0wIBecYvuDM8Dpu9LRne0DPv58G+DyyXbDFbJcqtjmr8BOC/hjGZbOctYA r+PTChOsTFo7/DiDQV9cKt7yroihiPPI+8gQvBkbT8BLeF7duMwyFAnJ9emLLK0Q FEyzhz+SEhaJyMP7UZFeE98VlzBTUu6vhbNNAwCU6Gp1JOUSwHe+uSlxfvUb3+Rl gHSqSX62w/xOQM5AFAj2HqSmPt77dLxxk/PMFywyDszAOOuPm5vrcuCqVwIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFFnZaGnYP42kiFjYpiaSK+pDrIcWMB8GA1UdIwQY MBaAFNwQL2Exzlp0brWYHdTB1rThewM/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0JBdllUSE9XblJ1dFpnZDFNSFd0T0Y3QXo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jOGQ2NWUtZTVjOC00MTIwLWFlMWQt YjA5N2Q5ZjhlYzIyLzEvV2Rsb2FkZ19qYVNJV05pbUpwSXI2a09zaHhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9jOGQ2NWUtZTVjOC00MTIwLWFlMWQtYjA5N2Q5ZjhlYzIy LzEvM0JBdllUSE9XblJ1dFpnZDFNSFd0T0Y3QXo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCLQ1UMA4E AgACMAgDBgQqEv0AADANBgkqhkiG9w0BAQsFAAOCAQEAKbZuQ+760uSJv3fv3bby RTO8jC/lpHawSrsZbEq7kzitvjxutveFnROJZwYd4jP5xqF3LSpHVr2scQ2Q153M 66quSjjWECDzHocSOqWLPSTJC/PhYMAo6tYzGS3lN1vzTmuD3MKBJeMJC2sXXMEY d1MAaQFVqDwBITxy2/KIAQEVDaF5cz3JuI3jpGjNJ0cepGXCcgvOcq8ZB1cRunRG WQd59Ah5STM50KXCH1N8TCOIpvz2qVzmktBzU+kLdDWI46iHHsDFsXHpvtRLEtdp dc9Vms77c+HYXcy0DwJxMruDvdvcjvCzjZBoBxK/rzsRI1ufphUVmRF4dawbaca7 iQ== -----END CERTIFICATE-----Generated at Mon Jan 19 16:50:35 2026 by rpki-client