This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/wim6z6Qps0aBjMJXEvJ79OHVt2I.roa File: wim6z6Qps0aBjMJXEvJ79OHVt2I.roa (raw, json) Hash identifier: Xvtl1HpjZETCKdBHr+BV103OhtUw84OetTQurPvOKE8= Subject key identifier: C2:29:BA:CF:A4:29:B3:46:81:8C:C2:57:12:F2:7B:F4:E1:D5:B7:62 Certificate issuer: /CN=85add8eaaeb3a478d7e5df3e7ee1c323f166bf28 Certificate serial: 019B7CEDEDADDBCE5D967C8FC9D04548F20E Authority key identifier: 85:AD:D8:EA:AE:B3:A4:78:D7:E5:DF:3E:7E:E1:C3:23:F1:66:BF:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/wim6z6Qps0aBjMJXEvJ79OHVt2I.roa Signing time: Fri 02 Jan 2026 04:18:46 +0000 ROA not before: Fri 02 Jan 2026 04:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 45.84.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.crl rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.mft rsync://rpki.ripe.net/repository/DEFAULT/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:ed:ad:db:ce:5d:96:7c:8f:c9:d0:45:48:f2:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85add8eaaeb3a478d7e5df3e7ee1c323f166bf28 Validity Not Before: Jan 2 04:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c229bacfa429b346818cc25712f27bf4e1d5b762 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:bd:a4:5e:cf:de:26:b7:74:08:46:18:35:c3: 2e:e5:1e:b5:e5:f1:9d:dd:29:dd:bd:a1:14:87:15: b5:29:55:55:f1:3f:2a:2f:76:2f:e0:e1:1c:50:d3: 7c:e3:12:0f:e3:98:c0:31:61:ce:08:aa:e1:09:ce: f3:eb:7d:f8:9b:11:17:57:8a:3a:39:02:88:ff:8c: 04:53:9e:e8:5d:0d:7e:dc:46:06:2f:c5:6b:bd:e9: b4:ae:e5:fd:b2:18:e1:35:fd:71:f2:a3:24:60:45: bb:82:b3:21:71:b5:20:01:c7:ee:ff:2a:fe:c7:ad: c0:90:99:20:2e:f2:17:ff:93:be:4d:15:aa:87:c3: 4a:93:d1:7d:80:3d:b7:01:58:82:62:81:5d:63:d8: 4e:e4:4f:a3:c9:21:d7:5d:34:26:91:80:66:8e:bc: e7:20:a9:c9:05:c6:7c:4e:db:8d:2b:12:9d:82:bd: dc:92:3f:39:70:6d:99:19:4f:af:b6:29:6e:cf:74: a9:7f:b9:a3:12:8e:03:51:de:72:3b:b4:3f:ef:e4: 64:42:42:b9:31:5c:1a:61:34:8c:29:3e:d5:51:c3: c5:66:b6:a0:e2:2c:fc:f7:41:b7:06:20:b8:0c:84: 92:ed:c4:14:f8:1e:7a:21:bc:12:92:69:79:28:85: 6d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:29:BA:CF:A4:29:B3:46:81:8C:C2:57:12:F2:7B:F4:E1:D5:B7:62 X509v3 Authority Key Identifier: keyid:85:AD:D8:EA:AE:B3:A4:78:D7:E5:DF:3E:7E:E1:C3:23:F1:66:BF:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/wim6z6Qps0aBjMJXEvJ79OHVt2I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/d44dd0-05b7-4427-a082-1b7ec38e9f44/1/ha3Y6q6zpHjX5d8-fuHDI_Fmvyg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.84.238.0/24 Signature Algorithm: sha256WithRSAEncryption ab:86:ce:c7:6a:1a:71:39:ee:a6:68:df:96:8b:c8:22:de:81: 19:58:ce:8f:92:4e:c6:a4:1f:f5:0e:09:1a:bb:35:89:e1:9f: 95:e8:ab:77:d7:8e:ce:c9:52:c2:5e:06:f1:45:73:bd:07:15: f6:05:96:54:ef:f6:bf:2f:b1:71:c2:93:9a:e0:cb:72:32:6f: 94:41:ee:e5:b2:be:e4:96:00:d9:6c:d0:25:1d:ef:e5:f7:33: 96:2e:07:b4:b6:0d:ac:b5:5c:ae:75:82:a3:56:cf:90:cd:7d: 95:27:f6:cd:5d:8f:0a:f8:cb:ba:88:3b:d6:5f:ba:a6:ec:d8: 3e:34:65:3a:11:c4:2c:c9:f5:26:6f:1d:9a:14:28:33:ae:da: d2:39:85:63:b5:2d:72:9e:c1:6e:6f:8f:e9:ca:0f:83:af:6c: 75:b0:ff:26:e8:97:42:9f:84:39:82:9f:bd:89:7d:86:32:20: 2e:ff:b1:f0:f6:fe:02:af:bc:0a:bc:43:99:0b:35:f3:c1:92: 68:51:48:ec:88:0c:e5:a1:ef:07:b9:c5:dc:aa:a7:d1:1b:fe: 8d:99:65:d1:b1:8b:88:9c:0a:a6:ff:e3:b2:47:df:01:61:48: d5:4e:e6:36:89:ad:9b:d0:0e:ec:e8:bd:15:17:a6:11:ee:ae: 66:ae:69:f5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87e2t285dlnyPydBFSPIOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1YWRkOGVhYWViM2E0NzhkN2U1ZGYzZTdlZTFjMzIzZjE2 NmJmMjgwHhcNMjYwMTAyMDQxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjI5YmFjZmE0MjliMzQ2ODE4Y2MyNTcxMmYyN2JmNGUxZDViNzYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2L2kXs/eJrd0CEYYNcMu5R615fGd 3SndvaEUhxW1KVVV8T8qL3Yv4OEcUNN84xIP45jAMWHOCKrhCc7z6334mxEXV4o6 OQKI/4wEU57oXQ1+3EYGL8Vrvem0ruX9shjhNf1x8qMkYEW7grMhcbUgAcfu/yr+ x63AkJkgLvIX/5O+TRWqh8NKk9F9gD23AViCYoFdY9hO5E+jySHXXTQmkYBmjrzn IKnJBcZ8TtuNKxKdgr3ckj85cG2ZGU+vtiluz3Spf7mjEo4DUd5yO7Q/7+RkQkK5 MVwaYTSMKT7VUcPFZrag4iz890G3BiC4DISS7cQU+B56IbwSkml5KIVtawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMIpus+kKbNGgYzCVxLye/Th1bdiMB8GA1UdIwQY MBaAFIWt2Oqus6R41+XfPn7hwyPxZr8oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGEzWTZxNnpwSGpYNWQ4LWZ1SERJX0ZtdnlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kNDRkZDAtMDViNy00NDI3LWEwODIt MWI3ZWMzOGU5ZjQ0LzEvd2ltNno2UXBzMGFCak1KWEV2Sjc5T0hWdDJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi9kNDRkZDAtMDViNy00NDI3LWEwODItMWI3ZWMzOGU5ZjQ0 LzEvaGEzWTZxNnpwSGpYNWQ4LWZ1SERJX0ZtdnlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVTuMA0G CSqGSIb3DQEBCwUAA4IBAQCrhs7HahpxOe6maN+Wi8gi3oEZWM6Pkk7GpB/1Dgka uzWJ4Z+V6Kt3147OyVLCXgbxRXO9BxX2BZZU7/a/L7FxwpOa4MtyMm+UQe7lsr7k lgDZbNAlHe/l9zOWLge0tg2stVyudYKjVs+QzX2VJ/bNXY8K+Mu6iDvWX7qm7Ng+ NGU6EcQsyfUmbx2aFCgzrtrSOYVjtS1ynsFub4/pyg+Dr2x1sP8m6JdCn4Q5gp+9 iX2GMiAu/7Hw9v4Cr7wKvEOZCzXzwZJoUUjsiAzloe8HucXcqqfRG/6NmWXRsYuI nAqm/+OyR98BYUjVTuY2ia2b0A7s6L0VF6YR7q5mrmn1 -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:00 2026 by rpki-client