This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/wkBj6meKGNLkzfK8dNJpio292qU.roa File: wkBj6meKGNLkzfK8dNJpio292qU.roa (raw, json) Hash identifier: fCT5GXsj0OqKgF2zl8rl9o29Q7I6qVhp6IsQiy2sl9c= Subject key identifier: C2:40:63:EA:67:8A:18:D2:E4:CD:F2:BC:74:D2:69:8A:8D:BD:DA:A5 Certificate issuer: /CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546 Certificate serial: 019B7B36B2825933191C5837043A7CE45530 Authority key identifier: B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/wkBj6meKGNLkzfK8dNJpio292qU.roa Signing time: Thu 01 Jan 2026 20:19:00 +0000 ROA not before: Thu 01 Jan 2026 20:19:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34919 IP address blocks: 45.136.240.0/22 maxlen: 24 2a0e:9dc0::/29 maxlen: 48 2a0e:9dc0:1::/48 maxlen: 48 2a0e:9dc0:2::/48 maxlen: 48 2a0e:9dc0:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:b2:82:59:33:19:1c:58:37:04:3a:7c:e4:55:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546 Validity Not Before: Jan 1 20:19:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c24063ea678a18d2e4cdf2bc74d2698a8dbddaa5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0a:21:3a:57:63:04:18:ed:ed:0e:93:43:06: 75:b8:86:b2:27:7a:4e:e2:b8:ec:a8:9e:d3:7c:fd: 64:27:c2:04:07:47:1a:ce:5c:43:c2:f2:f0:52:0f: 3c:9f:6b:10:88:f7:11:1f:be:02:5c:b5:de:d3:01: f3:c2:e5:8a:4f:f4:77:5f:0c:73:ec:ab:46:73:0e: 91:72:73:68:86:4d:a7:54:17:73:cf:fa:db:47:dd: 0d:89:17:3f:31:cf:ae:8a:08:2b:46:3f:b2:68:af: 19:2b:5c:08:eb:07:67:ef:71:54:4f:db:0c:d7:66: 54:ac:5b:72:47:66:bd:64:42:ad:4c:57:65:fd:e0: 64:bc:c5:94:b3:a0:ee:52:78:49:9a:05:aa:29:2e: f8:b3:9f:b3:dd:a3:03:da:fb:63:8c:ca:50:f9:11: 3b:c4:fc:a3:69:b9:be:ac:09:5a:85:c3:45:4a:8c: c9:52:35:43:b8:6d:70:22:ec:8e:cd:e5:34:a5:f2: 0b:87:0a:44:ed:48:c0:b1:58:2b:e1:56:fa:e6:95: 7d:dd:38:2c:5c:28:20:f6:70:55:fa:b2:56:46:05: 53:b7:b0:e0:36:50:a5:18:4c:e4:e0:6f:c4:7a:1e: 40:f3:3b:1e:a3:8a:9a:0b:a1:b2:41:ce:a8:00:80: ce:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:40:63:EA:67:8A:18:D2:E4:CD:F2:BC:74:D2:69:8A:8D:BD:DA:A5 X509v3 Authority Key Identifier: keyid:B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/wkBj6meKGNLkzfK8dNJpio292qU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.136.240.0/22 IPv6: 2a0e:9dc0::/29 Signature Algorithm: sha256WithRSAEncryption 9c:61:12:4f:a5:84:6b:f4:71:ab:59:0c:0d:eb:27:3e:9a:95: 76:d9:69:e0:ad:16:d5:b7:19:8b:0a:66:cc:98:b6:ce:7a:d2: 13:45:01:49:ca:0c:f2:78:7a:05:21:df:1f:5a:19:e5:82:64: fe:c3:71:8e:2c:92:06:36:21:c9:11:c1:65:73:6b:cc:ec:81: fb:81:97:03:e1:28:d3:0f:60:c2:1e:07:45:9a:93:75:7b:ec: 8e:46:16:61:f5:dd:7b:85:93:28:4d:de:da:4f:c0:ef:25:01: 95:c4:e8:3d:15:13:f1:ee:15:f0:f3:dc:61:75:0a:d2:6a:ef: 8f:0a:7e:f3:22:1e:0d:04:8a:be:73:d6:97:c2:b2:53:d4:98: bf:90:8b:21:8a:41:72:e0:5f:d3:69:3f:ac:cc:c1:bd:3a:24: 50:cf:cb:ce:97:03:99:d7:6d:c9:55:d2:50:b1:50:d9:46:2b: bc:0b:99:8a:64:86:4d:f1:64:3b:2f:ee:00:9a:5f:ee:50:90: 95:3a:b5:c0:43:a3:2c:00:b1:8d:61:5c:40:5d:a1:95:01:24: 77:7d:f1:42:d8:7f:9d:36:a2:b6:0b:a4:db:7a:72:44:91:cd: c0:3e:a3:f4:16:89:40:1a:1a:90:2d:e9:38:f0:3f:a5:df:9b: 88:db:54:53 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt7NrKCWTMZHFg3BDp85FUwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI1ZjE5ZWIwZGQ0OGUxYjI0OTI0OTA4YmI1YjY4NDhjYzE2 Nzg1NDYwHhcNMjYwMTAxMjAxOTAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjQwNjNlYTY3OGExOGQyZTRjZGYyYmM3NGQyNjk4YThkYmRkYWE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAohOldjBBjt7Q6TQwZ1uIayJ3pO 4rjsqJ7TfP1kJ8IEB0cazlxDwvLwUg88n2sQiPcRH74CXLXe0wHzwuWKT/R3Xwxz 7KtGcw6RcnNohk2nVBdzz/rbR90NiRc/Mc+uiggrRj+yaK8ZK1wI6wdn73FUT9sM 12ZUrFtyR2a9ZEKtTFdl/eBkvMWUs6DuUnhJmgWqKS74s5+z3aMD2vtjjMpQ+RE7 xPyjabm+rAlahcNFSozJUjVDuG1wIuyOzeU0pfILhwpE7UjAsVgr4Vb65pV93Tgs XCgg9nBV+rJWRgVTt7DgNlClGEzk4G/Eeh5A8zseo4qaC6GyQc6oAIDOiQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMJAY+pnihjS5M3yvHTSaYqNvdqlMB8GA1UdIwQY MBaAFLXxnrDdSOGySSSQi7W2hIzBZ4VGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGZHZXNOMUk0YkpKSkpDTHRiYUVqTUZuaFVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9jZTAwMWItYTRkOC00ZjBlLTgzMWQt MzVjNjZkN2M1MjYwLzEvd2tCajZtZUtHTkxremZLOGROSnBpbzI5MnFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9jZTAwMWItYTRkOC00ZjBlLTgzMWQtMzVjNjZkN2M1MjYw LzEvdGZHZXNOMUk0YkpKSkpDTHRiYUVqTUZuaFVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLYjwMA0E AgACMAcDBQMqDp3AMA0GCSqGSIb3DQEBCwUAA4IBAQCcYRJPpYRr9HGrWQwN6yc+ mpV22WngrRbVtxmLCmbMmLbOetITRQFJygzyeHoFId8fWhnlgmT+w3GOLJIGNiHJ EcFlc2vM7IH7gZcD4SjTD2DCHgdFmpN1e+yORhZh9d17hZMoTd7aT8DvJQGVxOg9 FRPx7hXw89xhdQrSau+PCn7zIh4NBIq+c9aXwrJT1Ji/kIshikFy4F/TaT+szMG9 OiRQz8vOlwOZ123JVdJQsVDZRiu8C5mKZIZN8WQ7L+4Aml/uUJCVOrXAQ6MsALGN YVxAXaGVASR3ffFC2H+dNqK2C6TbenJEkc3APqP0FolAGhqQLek48D+l35uI21RT -----END CERTIFICATE-----Generated at Sat Jan 10 14:07:01 2026 by rpki-client