This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/0Wjk9l1QhuxvdjIcz90Nw41rL5w.roa File: 0Wjk9l1QhuxvdjIcz90Nw41rL5w.roa (raw, json) Hash identifier: Caj4l9PAOAxFAYu5KWqHCixuTZ8X9Q83HewhtLbLO3g= Subject key identifier: D1:68:E4:F6:5D:50:86:EC:6F:76:32:1C:CF:DD:0D:C3:8D:6B:2F:9C Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Certificate serial: 019B7BA491168215D1FBE79DABA75B63C6EE Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/0Wjk9l1QhuxvdjIcz90Nw41rL5w.roa Signing time: Thu 01 Jan 2026 22:19:01 +0000 ROA not before: Thu 01 Jan 2026 22:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43278 IP address blocks: 45.129.237.0/24 maxlen: 24 45.137.154.0/24 maxlen: 24 213.226.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:91:16:82:15:d1:fb:e7:9d:ab:a7:5b:63:c6:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Validity Not Before: Jan 1 22:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d168e4f65d5086ec6f76321ccfdd0dc38d6b2f9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:08:42:66:5b:19:79:da:c4:7f:3a:a2:0e:46: 49:5c:c1:86:2b:b0:5f:d4:68:78:eb:79:52:07:da: 2f:a2:3a:47:fa:e1:fd:5a:53:0b:60:a8:ce:60:c3: 80:e8:b7:0f:eb:2a:5f:38:46:0d:1a:9e:61:90:3e: 66:81:c8:57:9a:51:91:4f:de:03:c5:e2:22:4d:fb: ef:e1:ba:f7:c8:9f:1d:99:2c:14:85:58:93:76:5b: 97:34:60:dd:24:8f:c3:99:52:05:c9:f5:65:97:cb: 26:a6:46:15:1d:6d:69:b2:f8:f9:d7:db:d6:78:51: 67:4a:36:2b:cc:8a:d2:6d:73:20:d0:4b:cc:ae:d1: f4:c5:9f:80:db:64:d9:e8:bc:c7:e7:d8:b4:51:cf: 81:0e:4c:12:a2:0e:f2:ea:24:47:90:df:cb:0d:12: 96:94:85:4e:31:ac:26:81:bf:0a:8d:89:3a:16:c1: ba:84:53:64:32:b0:13:98:9e:3d:98:92:52:fe:95: 4c:6d:e5:c4:58:be:e8:b6:b0:c9:bf:5d:c5:3b:22: a7:a0:11:a6:be:13:86:99:46:63:55:47:d3:47:5c: 95:97:58:47:6f:43:0f:9b:52:77:6e:20:ad:07:e8: 18:a0:cf:24:28:e7:db:3c:e1:67:aa:24:5e:6d:63: 4d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:68:E4:F6:5D:50:86:EC:6F:76:32:1C:CF:DD:0D:C3:8D:6B:2F:9C X509v3 Authority Key Identifier: keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/0Wjk9l1QhuxvdjIcz90Nw41rL5w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.237.0/24 45.137.154.0/24 213.226.115.0/24 Signature Algorithm: sha256WithRSAEncryption 82:d5:0b:49:46:05:37:21:db:d6:69:cb:d5:96:03:37:2a:39: 9f:33:56:c3:c1:ab:30:6a:82:c7:87:82:9a:cb:20:28:11:68: 0b:8c:88:77:9f:be:2b:42:64:b4:b8:e9:04:19:1a:63:7f:c9: 52:dd:41:2d:b9:45:b9:30:92:4a:fd:c4:bb:b5:a5:e6:85:56: 92:d0:b0:f6:f8:6f:67:34:f7:23:e7:3c:2a:6d:b2:3a:fa:e1: e0:c6:f0:e0:71:65:3b:c4:23:b3:ed:f7:ca:6f:86:ef:54:50: 23:c6:35:27:3c:03:18:b0:7c:4b:06:34:53:4c:29:d3:52:a1: b7:84:7d:42:54:f2:f1:9b:d6:3b:35:3b:f0:60:4f:fc:bb:9c: 31:42:b3:6c:8f:69:b1:9b:58:99:1f:4d:f5:28:e3:33:1b:7e: 80:d1:06:39:d5:13:72:d9:59:9d:ee:5b:4d:9f:97:81:f9:1a: 7f:97:5f:6c:30:c8:c1:21:4b:32:aa:0a:e5:0c:90:51:6c:93: 1f:6c:1a:89:ef:81:81:7d:46:d5:d8:63:a8:85:c7:24:ac:40: f4:41:00:f6:f5:52:d6:34:9d:6f:b4:51:91:50:f4:87:b9:7a: b6:b5:b7:bf:b7:13:a8:b8:33:49:29:23:d9:37:1c:34:62:7b: 79:86:7a:93 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7pJEWghXR++edq6dbY8buMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4 YWJjYzUwHhcNMjYwMTAxMjIxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTY4ZTRmNjVkNTA4NmVjNmY3NjMyMWNjZmRkMGRjMzhkNmIyZjljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAhCZlsZedrEfzqiDkZJXMGGK7Bf 1Gh463lSB9ovojpH+uH9WlMLYKjOYMOA6LcP6ypfOEYNGp5hkD5mgchXmlGRT94D xeIiTfvv4br3yJ8dmSwUhViTdluXNGDdJI/DmVIFyfVll8smpkYVHW1psvj519vW eFFnSjYrzIrSbXMg0EvMrtH0xZ+A22TZ6LzH59i0Uc+BDkwSog7y6iRHkN/LDRKW lIVOMawmgb8KjYk6FsG6hFNkMrATmJ49mJJS/pVMbeXEWL7otrDJv13FOyKnoBGm vhOGmUZjVUfTR1yVl1hHb0MPm1J3biCtB+gYoM8kKOfbPOFnqiRebWNNkQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNFo5PZdUIbsb3YyHM/dDcONay+cMB8GA1UdIwQY MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt NmZlOWJmNjA1NjFjLzEvMFdqazlsMVFodXh2ZGpJY3o5ME53NDFyTDV3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALYHtAwQA LYmaAwQA1eJzMA0GCSqGSIb3DQEBCwUAA4IBAQCC1QtJRgU3IdvWacvVlgM3Kjmf M1bDwaswaoLHh4KayyAoEWgLjIh3n74rQmS0uOkEGRpjf8lS3UEtuUW5MJJK/cS7 taXmhVaS0LD2+G9nNPcj5zwqbbI6+uHgxvDgcWU7xCOz7ffKb4bvVFAjxjUnPAMY sHxLBjRTTCnTUqG3hH1CVPLxm9Y7NTvwYE/8u5wxQrNsj2mxm1iZH031KOMzG36A 0QY51RNy2Vmd7ltNn5eB+Rp/l19sMMjBIUsyqgrlDJBRbJMfbBqJ74GBfUbV2GOo hcckrED0QQD29VLWNJ1vtFGRUPSHuXq2tbe/txOouDNJKSPZNxw0Ynt5hnqT -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:51 2026 by rpki-client