This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/waYyNFExSdDb4pjEWC7v8WzE25w.roa File: waYyNFExSdDb4pjEWC7v8WzE25w.roa (raw, json) Hash identifier: QpqnSfIAB59gYEFGwLFX8k3s0MRKnA0BvlDR3rEBjC0= Subject key identifier: C1:A6:32:34:51:31:49:D0:DB:E2:98:C4:58:2E:EF:F1:6C:C4:DB:9C Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Certificate serial: 019B76EABC27826B15D4A70DE25E3CBC4029 Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/waYyNFExSdDb4pjEWC7v8WzE25w.roa Signing time: Thu 01 Jan 2026 00:17:33 +0000 ROA not before: Thu 01 Jan 2026 00:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 46261 IP address blocks: 5.253.38.0/24 maxlen: 24 45.15.143.0/24 maxlen: 24 45.92.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:bc:27:82:6b:15:d4:a7:0d:e2:5e:3c:bc:40:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704 Validity Not Before: Jan 1 00:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1a63234513149d0dbe298c4582eeff16cc4db9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:51:2a:34:fc:03:fc:a4:95:70:a2:7a:6d:99: 9f:66:91:a2:8f:bd:97:31:70:3e:24:ae:dc:3e:47: e5:e8:60:28:57:44:3c:94:a2:13:fd:08:42:c9:8d: fc:4f:4a:e5:0f:75:89:c6:c7:16:fc:55:11:6a:18: 4f:2b:6e:28:4e:5a:e0:bd:0a:fd:ff:b8:7d:2b:9a: 38:de:a4:7a:18:aa:46:03:0f:35:36:48:00:0e:02: 51:78:1c:54:ae:ae:1e:73:d7:3a:26:e6:e6:27:4f: e6:f8:74:48:7f:6a:c5:f9:2f:95:70:fd:6e:8c:23: 93:c8:32:f8:94:22:be:2b:3d:a3:fe:d8:4c:6c:35: 9b:bd:62:03:79:dc:0d:13:20:1c:ef:e4:18:70:c2: 91:ba:dc:11:f9:73:3e:5d:4e:7e:8b:c8:9c:e6:d4: b4:8d:bb:40:2d:ce:6b:59:36:ca:92:80:64:bd:a8: 0f:60:13:c6:74:70:9d:f9:fd:b2:89:71:10:66:24: 18:b0:65:ac:a3:36:4e:ae:24:32:2b:ca:8b:62:54: 10:c1:f6:3c:45:54:73:34:30:e3:55:d7:b6:f9:86: b1:2f:52:a0:9f:4d:f2:da:a7:b8:2a:cd:dd:29:94: 69:28:91:fd:1d:e8:ce:60:f0:40:58:68:75:06:2b: e0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:A6:32:34:51:31:49:D0:DB:E2:98:C4:58:2E:EF:F1:6C:C4:DB:9C X509v3 Authority Key Identifier: keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/waYyNFExSdDb4pjEWC7v8WzE25w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.253.38.0/24 45.15.143.0/24 45.92.195.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:97:b6:26:cc:b8:ce:46:b4:fc:d3:46:34:ee:08:16:27:4a: 93:dd:54:ca:f2:ab:f4:07:6b:f4:ed:01:93:47:f4:48:3b:d3: 72:5f:8f:b7:10:74:f2:de:9d:b1:4e:b6:06:5a:27:b2:d4:f8: b5:19:23:24:cb:08:b8:c3:46:95:49:91:e4:61:f3:ed:8b:29: 52:64:bf:38:bf:e7:a9:51:92:4b:0e:c9:02:e8:59:25:25:5d: 72:47:3c:9a:54:05:44:22:29:21:9d:eb:fd:b5:e1:e7:e0:9f: d1:19:36:38:03:3c:04:39:39:dc:b5:8c:98:f6:34:c7:a9:4a: 05:66:5c:64:29:d0:b0:2d:c4:75:e7:28:6b:44:0b:26:7b:8d: 7d:71:5f:b1:1d:c8:1f:d1:52:95:94:10:95:55:c4:e6:23:1c: 1f:fb:34:05:ef:fb:34:a7:c5:2b:51:9f:b5:a1:cd:96:6d:f1: 98:f6:4a:7b:8f:53:62:59:37:60:a0:82:a4:5b:1c:0c:59:fb: 3f:2e:14:33:a8:51:68:7c:5f:3c:fc:7e:e2:4a:a3:28:bc:b2: 66:60:91:ad:cc:f0:f7:40:24:9c:d2:1c:88:54:ee:97:2d:69: 2a:1f:f9:6f:91:63:38:fe:a0:35:2d:4d:29:fd:95:dc:62:6a: 20:cd:2b:a9 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt26rwngmsV1KcN4l48vEApMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj Zjk3MDQwHhcNMjYwMTAxMDAxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWE2MzIzNDUxMzE0OWQwZGJlMjk4YzQ1ODJlZWZmMTZjYzRkYjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFEqNPwD/KSVcKJ6bZmfZpGij72X MXA+JK7cPkfl6GAoV0Q8lKIT/QhCyY38T0rlD3WJxscW/FURahhPK24oTlrgvQr9 /7h9K5o43qR6GKpGAw81NkgADgJReBxUrq4ec9c6JubmJ0/m+HRIf2rF+S+VcP1u jCOTyDL4lCK+Kz2j/thMbDWbvWIDedwNEyAc7+QYcMKRutwR+XM+XU5+i8ic5tS0 jbtALc5rWTbKkoBkvagPYBPGdHCd+f2yiXEQZiQYsGWsozZOriQyK8qLYlQQwfY8 RVRzNDDjVde2+YaxL1Kgn03y2qe4Ks3dKZRpKJH9HejOYPBAWGh1BivgPQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMGmMjRRMUnQ2+KYxFgu7/FsxNucMB8GA1UdIwQY MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct ZTg2MTIxYzU5NGRmLzEvd2FZeU5GRXhTZERiNHBqRVdDN3Y4V3pFMjV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABf0mAwQA LQ+PAwQALVzDMA0GCSqGSIb3DQEBCwUAA4IBAQB6l7YmzLjORrT800Y07ggWJ0qT 3VTK8qv0B2v07QGTR/RIO9NyX4+3EHTy3p2xTrYGWiey1Pi1GSMkywi4w0aVSZHk YfPtiylSZL84v+epUZJLDskC6FklJV1yRzyaVAVEIikhnev9teHn4J/RGTY4AzwE OTnctYyY9jTHqUoFZlxkKdCwLcR15yhrRAsme419cV+xHcgf0VKVlBCVVcTmIxwf +zQF7/s0p8UrUZ+1oc2WbfGY9kp7j1NiWTdgoIKkWxwMWfs/LhQzqFFofF88/H7i SqMovLJmYJGtzPD3QCSc0hyIVO6XLWkqH/lvkWM4/qA1LU0p/ZXcYmogzSup -----END CERTIFICATE-----Generated at Wed Jan 21 07:21:53 2026 by rpki-client