This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/wA3yzq_z75jJrcxF21_yaXTLA1E.roa File: wA3yzq_z75jJrcxF21_yaXTLA1E.roa (raw, json) Hash identifier: iBqEBSf11enOfh3VlmmIO8pdDcGFw1PdUgNRwZ2N9r8= Subject key identifier: C0:0D:F2:CE:AF:F3:EF:98:C9:AD:CC:45:DB:5F:F2:69:74:CB:03:51 Certificate issuer: /CN=a982f3d0e66429b685b1850a9dff25c7aa37a0c6 Certificate serial: 019B7BA4ED7AF62B9C7E567635C7ADC71DF7 Authority key identifier: A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/wA3yzq_z75jJrcxF21_yaXTLA1E.roa Signing time: Thu 01 Jan 2026 22:19:24 +0000 ROA not before: Thu 01 Jan 2026 22:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 45.13.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.mft rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:ed:7a:f6:2b:9c:7e:56:76:35:c7:ad:c7:1d:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a982f3d0e66429b685b1850a9dff25c7aa37a0c6 Validity Not Before: Jan 1 22:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c00df2ceaff3ef98c9adcc45db5ff26974cb0351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a9:c6:cb:63:20:7f:41:c4:cf:e8:60:df:79: dd:18:4e:f8:9f:3a:fb:32:a0:78:92:e8:b8:f7:a4: 67:9f:0c:92:01:a5:95:97:10:e3:43:71:c7:cc:7b: 1a:61:7a:b3:80:6d:6c:8f:07:b6:4e:f1:d1:38:d1: 36:94:b7:ca:0f:8d:e6:2c:2a:d6:a5:28:6a:65:98: 43:83:a6:35:ab:30:48:41:93:e4:5d:17:55:7f:67: fc:49:7c:65:76:d5:1a:15:bb:70:ef:86:1f:7a:03: d1:62:fe:2b:4e:be:d0:52:04:38:ba:49:ba:fe:d7: 44:f1:82:c1:67:63:ab:e8:8b:a9:bb:f2:a7:e6:1f: 3a:42:ec:bc:1b:f5:85:10:79:14:8b:5c:90:3c:6f: 6a:7d:c4:12:a8:75:b4:97:d0:c4:52:9e:a0:f4:3c: 37:ed:24:72:fb:58:6d:1f:39:3d:b5:78:45:60:06: 88:c6:3e:72:55:34:df:da:b1:ef:c6:f0:36:87:92: 1a:bc:ae:c8:08:9e:23:98:4b:22:f2:c4:88:96:64: 07:1e:3b:1f:5c:53:25:a4:46:72:7c:94:21:29:38: b2:c7:89:62:1a:d9:84:ca:b8:76:c0:1e:4a:bd:69: 4f:42:29:80:ca:0e:b5:5c:07:4d:ba:fa:b4:45:29: 80:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:0D:F2:CE:AF:F3:EF:98:C9:AD:CC:45:DB:5F:F2:69:74:CB:03:51 X509v3 Authority Key Identifier: keyid:A9:82:F3:D0:E6:64:29:B6:85:B1:85:0A:9D:FF:25:C7:AA:37:A0:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYLz0OZkKbaFsYUKnf8lx6o3oMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/wA3yzq_z75jJrcxF21_yaXTLA1E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b45ba4-ab36-49ab-98e4-8b4793f90f15/1/qYLz0OZkKbaFsYUKnf8lx6o3oMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.100.0/22 Signature Algorithm: sha256WithRSAEncryption 76:b7:bf:05:6a:a0:21:b3:3b:cd:42:04:92:f6:f3:47:ad:96: 03:23:f0:38:5b:27:3f:a8:40:60:96:1f:cc:14:75:c1:c7:bd: f2:f2:14:b9:93:b5:36:ef:9b:26:3a:8c:b1:44:be:b0:7c:2e: 19:36:87:67:0e:47:d3:4e:a5:0c:ac:90:2c:79:b0:d4:a4:f1: e1:26:55:be:9a:5d:bc:66:1c:b1:a4:9e:b6:d9:7b:75:0a:25: df:ed:00:f8:03:36:d5:37:20:05:96:55:30:b3:22:77:2e:36: ba:fe:a4:57:2e:57:1f:f3:0b:74:20:27:9b:4a:78:22:4e:b4: c1:8c:11:9c:35:cd:a2:c2:4f:73:e6:be:5a:2d:f1:73:ed:74: 50:27:0d:ac:d4:2c:5e:67:41:d2:c6:9d:10:72:20:7f:c7:67: 2d:b3:0b:f0:f1:04:d2:7a:d4:d2:6e:cc:88:ff:df:26:39:47: b5:d3:9e:3c:7d:bd:ad:43:f5:3e:86:8f:d7:35:14:1a:19:03: 6c:86:3d:f9:f0:e7:c1:16:32:4a:d5:0f:bd:e2:e3:5f:55:b8: 1e:7f:79:e7:a4:84:a4:2c:eb:fd:8d:ea:6e:86:94:65:57:b7: 76:e8:cc:ba:54:91:fa:37:a1:e8:e6:85:ea:ea:54:7a:24:2f: ca:bd:0e:dc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pO169iucflZ2Ncetxx33MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE5ODJmM2QwZTY2NDI5YjY4NWIxODUwYTlkZmYyNWM3YWEz N2EwYzYwHhcNMjYwMTAxMjIxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDBkZjJjZWFmZjNlZjk4YzlhZGNjNDVkYjVmZjI2OTc0Y2IwMzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6nGy2Mgf0HEz+hg33ndGE74nzr7 MqB4kui496RnnwySAaWVlxDjQ3HHzHsaYXqzgG1sjwe2TvHRONE2lLfKD43mLCrW pShqZZhDg6Y1qzBIQZPkXRdVf2f8SXxldtUaFbtw74YfegPRYv4rTr7QUgQ4ukm6 /tdE8YLBZ2Or6Iupu/Kn5h86Quy8G/WFEHkUi1yQPG9qfcQSqHW0l9DEUp6g9Dw3 7SRy+1htHzk9tXhFYAaIxj5yVTTf2rHvxvA2h5IavK7ICJ4jmEsi8sSIlmQHHjsf XFMlpEZyfJQhKTiyx4liGtmEyrh2wB5KvWlPQimAyg61XAdNuvq0RSmAXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMAN8s6v8++Yya3MRdtf8ml0ywNRMB8GA1UdIwQY MBaAFKmC89DmZCm2hbGFCp3/JceqN6DGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcVlMejBPWmtLYmFGc1lVS25mOGx4Nm8zb01ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9iNDViYTQtYWIzNi00OWFiLTk4ZTQt OGI0NzkzZjkwZjE1LzEvd0EzeXpxX3o3NWpKcmN4RjIxX3lhWFRMQTFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS9iNDViYTQtYWIzNi00OWFiLTk4ZTQtOGI0NzkzZjkwZjE1 LzEvcVlMejBPWmtLYmFGc1lVS25mOGx4Nm8zb01ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQ1kMA0G CSqGSIb3DQEBCwUAA4IBAQB2t78FaqAhszvNQgSS9vNHrZYDI/A4Wyc/qEBglh/M FHXBx73y8hS5k7U275smOoyxRL6wfC4ZNodnDkfTTqUMrJAsebDUpPHhJlW+ml28 ZhyxpJ622Xt1CiXf7QD4AzbVNyAFllUwsyJ3Lja6/qRXLlcf8wt0ICebSngiTrTB jBGcNc2iwk9z5r5aLfFz7XRQJw2s1CxeZ0HSxp0QciB/x2ctswvw8QTSetTSbsyI /98mOUe10548fb2tQ/U+ho/XNRQaGQNshj358OfBFjJK1Q+94uNfVbgef3nnpISk LOv9jepuhpRlV7d26My6VJH6N6Ho5oXq6lR6JC/KvQ7c -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:09 2026 by rpki-client