This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/WJ9oqhmXo-zSQWwQXwhZxlAovv8.roa File: WJ9oqhmXo-zSQWwQXwhZxlAovv8.roa (raw, json) Hash identifier: 9cBUrTvNAMwMyGtFOHt2AaxMY72cnaGUYjkjnfx36t0= Subject key identifier: 58:9F:68:AA:19:97:A3:EC:D2:41:6C:10:5F:08:59:C6:50:28:BE:FF Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603 Certificate serial: 019B791116027B5DC5324EE7E4CA9AA92988 Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/WJ9oqhmXo-zSQWwQXwhZxlAovv8.roa Signing time: Thu 01 Jan 2026 10:18:41 +0000 ROA not before: Thu 01 Jan 2026 10:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20860 IP address blocks: 107.181.136.0/24 maxlen: 24 162.220.244.0/24 maxlen: 24 162.220.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:16:02:7b:5d:c5:32:4e:e7:e4:ca:9a:a9:29:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603 Validity Not Before: Jan 1 10:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=589f68aa1997a3ecd2416c105f0859c65028beff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:75:aa:c3:b8:07:bd:38:69:6d:12:a5:0b:a5: b9:75:b0:16:2f:44:cc:64:57:d9:d0:2a:b5:4f:69: 0f:63:60:6c:61:c0:f1:94:40:b1:24:70:cc:26:c6: 0f:d8:bc:31:c8:3c:b3:03:93:e3:fd:c2:74:0c:93: 1a:bb:8e:0c:dc:b4:31:2a:e1:f5:10:89:45:e0:9d: 44:9c:47:8f:ca:0f:11:22:95:c6:98:ce:da:45:72: a9:f7:3a:5d:31:84:81:7c:3d:38:7e:d5:83:7e:df: fb:01:93:ad:08:a1:f1:01:84:21:d1:0e:90:43:d1: f3:15:c1:76:c3:b3:87:7b:d9:e2:7b:67:ba:94:18: 0c:20:b0:00:16:46:dc:2c:f5:ae:09:cf:ed:7c:b4: 9f:06:d7:1f:3c:34:3d:21:49:f0:dc:36:91:51:fa: 0f:73:be:47:5f:60:c5:dc:b8:25:5a:be:30:8a:55: 01:9a:89:99:7d:74:b8:56:3e:6c:8a:53:57:4d:bd: 99:8e:7e:2b:0b:e5:95:46:a9:10:a7:f5:37:5d:c0: bc:07:a3:6e:f4:42:d2:e6:b7:95:ad:4f:79:08:5e: b0:c1:f6:f4:14:50:26:f6:6d:46:6c:99:52:0c:d7: 04:7b:d4:4f:eb:d0:5d:57:a2:96:94:f4:1b:07:73: f8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:9F:68:AA:19:97:A3:EC:D2:41:6C:10:5F:08:59:C6:50:28:BE:FF X509v3 Authority Key Identifier: keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/WJ9oqhmXo-zSQWwQXwhZxlAovv8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 107.181.136.0/24 162.220.244.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:14:1a:d3:c5:3f:51:f2:0d:b5:d1:39:b1:65:fa:9d:84:2c: 87:90:a9:f8:8b:97:d4:2a:2a:8f:92:93:ad:7d:33:c5:eb:fa: 83:97:26:18:58:1c:4b:e4:6b:5e:26:c1:93:36:3f:e1:aa:0f: e9:d2:94:a2:29:57:f8:17:c8:32:05:eb:29:1d:e4:68:7a:3c: 53:63:58:16:f7:07:14:3f:3d:f3:0d:f9:20:10:9d:bf:9b:fd: e4:0e:55:c5:31:33:96:fc:60:a6:3c:26:8a:0b:6c:bf:87:b1: 69:7f:8b:71:8f:72:b0:41:39:8d:35:5f:71:49:67:a4:b0:a8: d9:a3:3d:c9:e4:fd:4d:f9:64:78:7f:08:93:c3:b1:9d:20:03: ee:39:d8:14:d2:e9:fe:4e:1a:05:db:8d:1d:e4:bb:8e:b3:2e: d2:1f:81:4d:4b:58:78:d6:97:b6:e0:96:95:2a:3f:76:2a:0b: ba:52:3a:1b:f6:31:50:3e:3a:5d:86:1f:cd:2c:0a:0d:c3:2c: 3d:54:8d:74:af:1f:97:ae:bf:06:bb:21:2f:cc:e1:2d:02:f8: bc:3d:2b:dd:0f:6f:a7:15:0b:04:eb:05:5f:38:e8:6e:bd:e7: e9:82:a7:24:2b:43:a3:57:dd:85:7a:22:e3:cb:2f:f9:f0:82: 05:a0:a7:64 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5ERYCe13FMk7n5MqaqSmIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NTRjMzQ3ZDY4ZDE1NDkzZGU3MWJiOTYyZjBhNTY3ZTEz NGQ2MDMwHhcNMjYwMTAxMTAxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODlmNjhhYTE5OTdhM2VjZDI0MTZjMTA1ZjA4NTljNjUwMjhiZWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXWqw7gHvThpbRKlC6W5dbAWL0TM ZFfZ0Cq1T2kPY2BsYcDxlECxJHDMJsYP2LwxyDyzA5Pj/cJ0DJMau44M3LQxKuH1 EIlF4J1EnEePyg8RIpXGmM7aRXKp9zpdMYSBfD04ftWDft/7AZOtCKHxAYQh0Q6Q Q9HzFcF2w7OHe9nie2e6lBgMILAAFkbcLPWuCc/tfLSfBtcfPDQ9IUnw3DaRUfoP c75HX2DF3LglWr4wilUBmomZfXS4Vj5silNXTb2Zjn4rC+WVRqkQp/U3XcC8B6Nu 9ELS5reVrU95CF6wwfb0FFAm9m1GbJlSDNcEe9RP69BdV6KWlPQbB3P45wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFifaKoZl6Ps0kFsEF8IWcZQKL7/MB8GA1UdIwQY MBaAFOdUw0fWjRVJPecbuWLwpWfhNNYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2It MzdiNjJkMjIzOTI0LzEvV0o5b3FobVhvLXpTUVd3UVh3aFp4bEFvdnY4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2ItMzdiNjJkMjIzOTI0 LzEvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAa7WIAwQB otz0MA0GCSqGSIb3DQEBCwUAA4IBAQB6FBrTxT9R8g210TmxZfqdhCyHkKn4i5fU KiqPkpOtfTPF6/qDlyYYWBxL5GteJsGTNj/hqg/p0pSiKVf4F8gyBespHeRoejxT Y1gW9wcUPz3zDfkgEJ2/m/3kDlXFMTOW/GCmPCaKC2y/h7Fpf4txj3KwQTmNNV9x SWeksKjZoz3J5P1N+WR4fwiTw7GdIAPuOdgU0un+ThoF240d5LuOsy7SH4FNS1h4 1pe24JaVKj92Kgu6Ujob9jFQPjpdhh/NLAoNwyw9VI10rx+Xrr8GuyEvzOEtAvi8 PSvdD2+nFQsE6wVfOOhuvefpgqckK0OjV92FeiLjyy/58IIFoKdk -----END CERTIFICATE-----Generated at Mon Jan 19 17:34:11 2026 by rpki-client