This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/WY3x6Nj5UF4V6lDGjNvXztQ1Byo.roa File: WY3x6Nj5UF4V6lDGjNvXztQ1Byo.roa (raw, json) Hash identifier: aBowCUk8GvTX31weJsT2u+VJHO3DLPfjbtv1Dgnekcs= Subject key identifier: 59:8D:F1:E8:D8:F9:50:5E:15:EA:50:C6:8C:DB:D7:CE:D4:35:07:2A Certificate issuer: /CN=e8564a4b5fef4444477df0da5b19924d52d10094 Certificate serial: 019B79ECFFEC131985E3C7491055E86A21B0 Authority key identifier: E8:56:4A:4B:5F:EF:44:44:47:7D:F0:DA:5B:19:92:4D:52:D1:00:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6FZKS1_vRERHffDaWxmSTVLRAJQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/WY3x6Nj5UF4V6lDGjNvXztQ1Byo.roa Signing time: Thu 01 Jan 2026 14:18:53 +0000 ROA not before: Thu 01 Jan 2026 14:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47373 IP address blocks: 45.134.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.mft rsync://rpki.ripe.net/repository/DEFAULT/6FZKS1_vRERHffDaWxmSTVLRAJQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:ff:ec:13:19:85:e3:c7:49:10:55:e8:6a:21:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8564a4b5fef4444477df0da5b19924d52d10094 Validity Not Before: Jan 1 14:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=598df1e8d8f9505e15ea50c68cdbd7ced435072a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:44:61:db:3d:83:f8:18:27:37:c6:4d:1c:27: 9d:ca:3a:e1:5e:34:bb:5d:fa:bd:36:c4:72:2d:a6: 4d:90:10:85:01:74:76:e4:83:2f:64:17:39:37:96: 32:50:90:31:59:21:bd:a0:78:00:6d:f0:b6:b8:a7: 44:67:c3:0d:59:35:ed:a4:f6:60:9c:ed:fa:ee:0b: 34:83:4c:d0:99:de:70:b3:3c:9e:d7:b8:f3:6f:e9: 03:49:0f:a5:7c:91:64:46:f8:f5:ca:01:a9:aa:1c: 48:41:61:b3:36:ee:91:92:0d:48:2e:d4:d5:34:4e: cd:4f:35:2b:66:e6:9f:d8:07:38:91:43:b4:d0:6a: 1b:e7:9e:db:3d:1c:98:6d:c5:77:f4:f2:9f:34:b0: 1c:b4:ef:f2:da:f1:e1:03:0a:c5:c5:7d:51:e1:c1: b1:5a:3d:44:b2:f2:df:36:f6:7c:ba:72:fb:c4:91: 42:b4:5f:1b:e5:c6:d2:3d:2f:b8:85:8c:b5:d6:37: 42:cb:e8:38:c8:aa:03:a8:e4:7c:4f:6c:16:7c:a4: 09:6d:18:17:fa:98:e2:29:48:b5:77:be:08:28:72: 8b:c6:09:4b:5e:a0:24:0c:2e:9e:e2:73:cf:c4:d7: c1:6b:78:0e:dc:4f:1f:03:be:60:82:0c:8e:9b:4b: 76:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:8D:F1:E8:D8:F9:50:5E:15:EA:50:C6:8C:DB:D7:CE:D4:35:07:2A X509v3 Authority Key Identifier: keyid:E8:56:4A:4B:5F:EF:44:44:47:7D:F0:DA:5B:19:92:4D:52:D1:00:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6FZKS1_vRERHffDaWxmSTVLRAJQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/WY3x6Nj5UF4V6lDGjNvXztQ1Byo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/3f378e-e8a7-4a9f-858b-5c49c8264a7b/1/6FZKS1_vRERHffDaWxmSTVLRAJQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.134.244.0/22 Signature Algorithm: sha256WithRSAEncryption 8a:c5:a8:f5:1d:42:1c:bb:39:08:dd:84:33:14:f8:46:3e:c1: 24:9f:bd:1a:9a:a7:9d:c8:7d:cb:e1:c4:b8:e5:5e:f3:51:4c: 68:3d:4a:86:36:32:01:5b:7e:b8:e0:0f:45:93:a1:d8:82:c0: 74:67:4e:34:ee:9d:34:71:6b:76:94:32:33:1f:52:27:3b:99: 73:66:53:4d:75:02:f2:cf:75:18:7f:66:77:3c:64:6c:47:63: 8d:7a:5f:c8:34:1d:48:46:bd:44:65:78:69:65:2c:44:a0:bf: 72:64:04:11:57:be:18:f9:a2:a9:20:ce:e1:e2:d9:e4:c6:ca: b9:d1:45:76:2c:bc:3e:df:b3:a6:a2:d3:6e:67:64:61:a1:c9: 53:12:1a:df:c9:d1:4b:10:a7:dc:2d:92:cb:ed:4f:07:9a:aa: 93:33:61:38:29:7a:c2:e5:05:4b:73:cb:49:56:0e:e0:11:3b: 30:cd:34:89:12:1a:d5:5d:9c:8e:e9:5d:26:ec:94:03:07:fd: c9:97:f0:d1:fb:31:52:0f:f8:24:6e:73:9c:a9:0d:df:53:f3: 12:10:60:4c:9f:a4:0f:a9:28:65:93:40:47:f9:8a:9c:fd:a5: 92:ea:9a:61:16:ea:58:90:e0:64:1b:d2:01:ac:b2:57:8f:8e: fb:11:6f:fb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57P/sExmF48dJEFXoaiGwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NTY0YTRiNWZlZjQ0NDQ0NzdkZjBkYTViMTk5MjRkNTJk MTAwOTQwHhcNMjYwMTAxMTQxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OThkZjFlOGQ4Zjk1MDVlMTVlYTUwYzY4Y2RiZDdjZWQ0MzUwNzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwURh2z2D+BgnN8ZNHCedyjrhXjS7 Xfq9NsRyLaZNkBCFAXR25IMvZBc5N5YyUJAxWSG9oHgAbfC2uKdEZ8MNWTXtpPZg nO367gs0g0zQmd5wszye17jzb+kDSQ+lfJFkRvj1ygGpqhxIQWGzNu6Rkg1ILtTV NE7NTzUrZuaf2Ac4kUO00Gob557bPRyYbcV39PKfNLActO/y2vHhAwrFxX1R4cGx Wj1EsvLfNvZ8unL7xJFCtF8b5cbSPS+4hYy11jdCy+g4yKoDqOR8T2wWfKQJbRgX +pjiKUi1d74IKHKLxglLXqAkDC6e4nPPxNfBa3gO3E8fA75gggyOm0t2SQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFmN8ejY+VBeFepQxozb187UNQcqMB8GA1UdIwQY MBaAFOhWSktf70RER33w2lsZkk1S0QCUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkZaS1MxX3ZSRVJIZmZEYVd4bVNUVkxSQUpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8zZjM3OGUtZThhNy00YTlmLTg1OGIt NWM0OWM4MjY0YTdiLzEvV1kzeDZOajVVRjRWNmxER2pOdlh6dFExQnlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8zZjM3OGUtZThhNy00YTlmLTg1OGItNWM0OWM4MjY0YTdi LzEvNkZaS1MxX3ZSRVJIZmZEYVd4bVNUVkxSQUpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYb0MA0G CSqGSIb3DQEBCwUAA4IBAQCKxaj1HUIcuzkI3YQzFPhGPsEkn70amqedyH3L4cS4 5V7zUUxoPUqGNjIBW3644A9Fk6HYgsB0Z0407p00cWt2lDIzH1InO5lzZlNNdQLy z3UYf2Z3PGRsR2ONel/INB1IRr1EZXhpZSxEoL9yZAQRV74Y+aKpIM7h4tnkxsq5 0UV2LLw+37OmotNuZ2RhoclTEhrfydFLEKfcLZLL7U8HmqqTM2E4KXrC5QVLc8tJ Vg7gETswzTSJEhrVXZyO6V0m7JQDB/3Jl/DR+zFSD/gkbnOcqQ3fU/MSEGBMn6QP qShlk0BH+Yqc/aWS6pphFupYkOBkG9IBrLJXj477EW/7 -----END CERTIFICATE-----Generated at Mon Feb 9 22:26:52 2026 by rpki-client