This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/WPen9AQLg4buTCCsUn5KogcYujo.roa File: WPen9AQLg4buTCCsUn5KogcYujo.roa (raw, json) Hash identifier: xWP6B5u/qd33sPJPBO7KeU9HIuWmZbtZLwN1kXx/T7M= Subject key identifier: 58:F7:A7:F4:04:0B:83:86:EE:4C:20:AC:52:7E:4A:A2:07:18:BA:3A Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Certificate serial: 019B7D5D2D2D68AFEDB9D3D41BBC48395DC7 Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/WPen9AQLg4buTCCsUn5KogcYujo.roa Signing time: Fri 02 Jan 2026 06:20:17 +0000 ROA not before: Fri 02 Jan 2026 06:20:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 13335 IP address blocks: 45.141.24.0/24 maxlen: 24 45.144.225.0/24 maxlen: 24 89.31.216.0/24 maxlen: 24 178.239.199.0/24 maxlen: 24 203.159.80.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:2d:2d:68:af:ed:b9:d3:d4:1b:bc:48:39:5d:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2 Validity Not Before: Jan 2 06:20:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58f7a7f4040b8386ee4c20ac527e4aa20718ba3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e3:dc:de:d0:8c:e7:86:bc:26:f7:28:80:40: 57:75:90:83:a8:cd:4c:b8:94:1a:e8:4e:2a:f9:09: c0:f8:e0:13:c3:5f:04:dc:7a:eb:42:83:75:0d:94: 4d:ee:98:16:52:0d:55:13:f0:eb:20:4e:91:87:27: 68:ed:e7:fc:94:31:21:46:d9:35:74:96:3d:3e:80: d9:16:e4:d1:85:8f:e5:e8:e5:bc:f0:4b:27:d3:57: d5:7a:bf:4c:44:6e:1e:d2:dd:6d:27:e0:d9:14:a9: 91:30:61:c3:86:28:43:eb:17:bd:03:75:82:ee:28: 72:e8:fc:44:58:7a:ba:21:f4:4e:df:57:17:b1:e9: 52:84:8c:9f:e2:79:e9:a3:06:ed:d9:fa:e7:84:0a: aa:3b:44:5b:b5:f2:b7:4c:70:ee:cc:09:27:97:09: eb:59:b1:b1:01:75:57:7a:48:13:d2:51:17:cf:1a: 39:cb:30:4d:8b:9f:11:d5:09:83:b7:8a:b1:0c:04: 34:20:7f:25:70:93:f9:99:2c:3b:31:dd:b2:d5:7f: 90:99:03:d9:e1:1a:c9:5b:8e:9a:08:5d:e4:1c:9e: fc:ad:36:2d:c3:a0:e9:7b:be:dc:52:00:57:ba:cd: 3f:51:ae:e1:63:03:8a:d0:d5:77:23:13:6f:36:09: 9b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:F7:A7:F4:04:0B:83:86:EE:4C:20:AC:52:7E:4A:A2:07:18:BA:3A X509v3 Authority Key Identifier: keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/WPen9AQLg4buTCCsUn5KogcYujo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.24.0/24 45.144.225.0/24 89.31.216.0/24 178.239.199.0/24 203.159.80.0/24 Signature Algorithm: sha256WithRSAEncryption 59:7b:ef:81:d2:fe:dc:82:e9:5a:9f:65:0f:7a:ce:ba:67:31: 58:fb:79:ee:7c:50:5c:c2:08:0a:16:9f:15:94:20:e1:d9:c7: b3:78:f9:3c:c1:1c:25:8e:22:ad:6b:94:f6:0c:9f:66:8e:d2: 47:ea:0e:42:8a:23:8b:ad:e6:c8:e6:8b:fb:f2:4a:f0:98:15: c9:0d:cd:5c:c8:1c:9d:88:c9:21:93:3a:79:08:2b:5f:c8:12: 5f:af:60:64:1b:44:b5:cb:6e:54:64:78:f0:20:00:05:e8:40: 82:5d:7b:c5:85:1e:cc:c7:47:83:ec:f2:eb:7f:f6:d8:cf:c9: 32:08:93:88:1d:91:cd:2e:82:50:8b:34:66:fc:f8:c1:36:70: 2e:66:6f:30:1c:b1:cf:a5:ef:41:1e:68:c1:0c:1d:7d:74:9f: e9:be:13:22:0c:4f:1d:74:22:3d:78:81:1e:d5:03:61:44:c5: b1:b7:02:4d:35:91:34:5f:dc:d5:e6:c2:77:b4:0b:80:ed:c1: 8d:9a:9d:4c:f1:a3:ae:19:c1:f8:ef:3a:14:8c:14:14:48:94: b2:26:a8:0d:fe:b8:50:cb:03:ce:07:13:76:9c:61:15:67:e7: 90:a2:f8:40:c1:ca:98:a7:2d:1e:ee:0d:e2:6e:fe:88:8a:9f: 18:5a:37:ac -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt9XS0taK/tudPUG7xIOV3HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw NWIwZTIwHhcNMjYwMTAyMDYyMDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGY3YTdmNDA0MGI4Mzg2ZWU0YzIwYWM1MjdlNGFhMjA3MThiYTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApePc3tCM54a8JvcogEBXdZCDqM1M uJQa6E4q+QnA+OATw18E3HrrQoN1DZRN7pgWUg1VE/DrIE6Rhydo7ef8lDEhRtk1 dJY9PoDZFuTRhY/l6OW88Esn01fVer9MRG4e0t1tJ+DZFKmRMGHDhihD6xe9A3WC 7ihy6PxEWHq6IfRO31cXselShIyf4nnpowbt2frnhAqqO0RbtfK3THDuzAknlwnr WbGxAXVXekgT0lEXzxo5yzBNi58R1QmDt4qxDAQ0IH8lcJP5mSw7Md2y1X+QmQPZ 4RrJW46aCF3kHJ78rTYtw6Dpe77cUgBXus0/Ua7hYwOK0NV3IxNvNgmbrQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFFj3p/QEC4OG7kwgrFJ+SqIHGLo6MB8GA1UdIwQY MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt MmNjZWRiOTY2YTU4LzEvV1BlbjlBUUxnNGJ1VENDc1VuNUtvZ2NZdWpvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4 LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALY0YAwQA LZDhAwQAWR/YAwQAsu/HAwQAy59QMA0GCSqGSIb3DQEBCwUAA4IBAQBZe++B0v7c gulan2UPes66ZzFY+3nufFBcwggKFp8VlCDh2cezePk8wRwljiKta5T2DJ9mjtJH 6g5CiiOLrebI5ov78krwmBXJDc1cyBydiMkhkzp5CCtfyBJfr2BkG0S1y25UZHjw IAAF6ECCXXvFhR7Mx0eD7PLrf/bYz8kyCJOIHZHNLoJQizRm/PjBNnAuZm8wHLHP pe9BHmjBDB19dJ/pvhMiDE8ddCI9eIEe1QNhRMWxtwJNNZE0X9zV5sJ3tAuA7cGN mp1M8aOuGcH47zoUjBQUSJSyJqgN/rhQywPOBxN2nGEVZ+eQovhAwcqYpy0e7g3i bv6Iip8YWjes -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:17 2026 by rpki-client