This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/wAgPAR1yzaKF5ISv6v3dvwjLWao.roa File: wAgPAR1yzaKF5ISv6v3dvwjLWao.roa (raw, json) Hash identifier: hhxh1IVQoJ4OjQ4sKNlyVMIfwcDlCbms6Xn0khvEao4= Subject key identifier: C0:08:0F:01:1D:72:CD:A2:85:E4:84:AF:EA:FD:DD:BF:08:CB:59:AA Certificate issuer: /CN=cf9833261697652c35547e98fc05a7e2294edbc7 Certificate serial: 019B7E38E0BE62CB907F76CFEAA42CB5E8E8 Authority key identifier: CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/wAgPAR1yzaKF5ISv6v3dvwjLWao.roa Signing time: Fri 02 Jan 2026 10:20:15 +0000 ROA not before: Fri 02 Jan 2026 10:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6762 IP address blocks: 45.149.168.0/23 maxlen: 24 45.149.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.mft rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:e0:be:62:cb:90:7f:76:cf:ea:a4:2c:b5:e8:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf9833261697652c35547e98fc05a7e2294edbc7 Validity Not Before: Jan 2 10:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0080f011d72cda285e484afeafdddbf08cb59aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:87:ca:ac:d3:33:01:3f:9e:68:ac:0d:cb:54: 5e:96:3c:06:18:8c:c2:ec:86:24:e8:37:f8:7e:37: d6:c0:37:0b:68:27:5b:ba:68:36:3f:f7:6c:e0:08: 33:24:fc:20:01:57:5e:9c:82:fb:af:f7:17:21:06: 2e:7a:27:3a:35:ba:fe:21:04:da:01:a8:6f:eb:1f: 27:92:b0:46:a5:c5:0d:cb:6b:53:78:14:cd:7c:c1: 1b:2b:1d:7e:4d:08:71:85:05:cc:15:14:31:ee:2c: 80:87:59:4e:c3:c2:fc:f1:40:32:3f:b6:26:8b:ac: 20:bf:10:46:6a:4f:7c:c7:31:32:97:45:09:9b:c1: 86:64:1c:9c:dc:cd:5b:fb:ae:ae:91:99:14:d6:62: 94:64:5f:8e:6d:1c:1a:b4:0b:a1:b1:11:a4:bc:4f: 87:de:c8:ba:4a:a6:4b:27:c8:c2:37:48:e2:17:4c: cc:39:2b:8a:60:db:ed:06:0b:67:38:25:78:ca:ec: 93:fc:b8:39:bc:1d:03:31:00:54:0e:8f:ba:26:bd: b6:e6:a3:5e:77:a4:1d:c2:8b:e9:62:ee:81:dc:e2: 28:6c:a6:22:36:8a:fd:47:6e:3a:3a:4d:3b:21:ac: 53:33:00:76:95:c3:eb:7e:5f:ac:13:09:86:17:36: f1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:08:0F:01:1D:72:CD:A2:85:E4:84:AF:EA:FD:DD:BF:08:CB:59:AA X509v3 Authority Key Identifier: keyid:CF:98:33:26:16:97:65:2C:35:54:7E:98:FC:05:A7:E2:29:4E:DB:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5gzJhaXZSw1VH6Y_AWn4ilO28c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/wAgPAR1yzaKF5ISv6v3dvwjLWao.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3606f5-17e1-4319-9703-ae401a37c044/1/z5gzJhaXZSw1VH6Y_AWn4ilO28c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.149.168.0/22 Signature Algorithm: sha256WithRSAEncryption 8b:ff:87:53:d2:19:7b:96:9e:4a:e7:0f:78:ae:43:56:78:a5: b5:77:3c:f9:18:9a:e1:bb:18:12:88:76:06:40:0a:80:2b:88: 36:41:f3:b5:77:e3:0c:d6:08:da:e5:f4:f7:07:ee:dd:dc:21: 13:98:4a:aa:93:ff:d4:38:eb:10:75:b9:89:ea:bb:82:20:3e: f7:0a:5a:3b:75:aa:c1:68:c8:0f:87:af:4c:64:2e:14:7c:db: a6:b4:79:24:fc:a4:9a:7b:a9:0a:a4:de:df:69:7a:49:dc:ff: 53:1e:2c:cf:12:95:14:30:45:f0:37:30:55:c6:ed:16:18:a3: bb:04:52:7f:01:f3:fd:11:39:97:f7:99:5f:06:ee:eb:31:59: 16:b6:be:c9:c1:d4:f2:7e:c4:d5:ac:27:fa:bf:2e:87:04:33: 40:a3:8a:a4:3d:ba:8a:7d:92:32:0e:91:0f:d7:40:43:84:64: 00:a3:36:dc:3f:1f:3e:c3:d1:f1:d6:ea:a9:59:d6:45:72:3f: d8:1f:d3:a8:16:14:a0:05:22:8e:e9:03:6c:46:0a:f6:c9:0b: 3f:21:91:7b:80:40:c6:04:9b:3b:7a:c4:de:c9:8d:26:c8:01: 7a:19:c8:5f:50:c9:66:2f:e0:79:98:c6:7c:7e:0a:9f:1e:81: e3:8d:1c:d0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OOC+YsuQf3bP6qQstejoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmOTgzMzI2MTY5NzY1MmMzNTU0N2U5OGZjMDVhN2UyMjk0 ZWRiYzcwHhcNMjYwMTAyMTAyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDA4MGYwMTFkNzJjZGEyODVlNDg0YWZlYWZkZGRiZjA4Y2I1OWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIfKrNMzAT+eaKwNy1ReljwGGIzC 7IYk6Df4fjfWwDcLaCdbumg2P/ds4AgzJPwgAVdenIL7r/cXIQYueic6Nbr+IQTa Aahv6x8nkrBGpcUNy2tTeBTNfMEbKx1+TQhxhQXMFRQx7iyAh1lOw8L88UAyP7Ym i6wgvxBGak98xzEyl0UJm8GGZByc3M1b+66ukZkU1mKUZF+ObRwatAuhsRGkvE+H 3si6SqZLJ8jCN0jiF0zMOSuKYNvtBgtnOCV4yuyT/Lg5vB0DMQBUDo+6Jr225qNe d6QdwovpYu6B3OIobKYiNor9R246Ok07IaxTMwB2lcPrfl+sEwmGFzbxqwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMAIDwEdcs2iheSEr+r93b8Iy1mqMB8GA1UdIwQY MBaAFM+YMyYWl2UsNVR+mPwFp+IpTtvHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejVnekpoYVhaU3cxVkg2WV9BV240aWxPMjhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8zNjA2ZjUtMTdlMS00MzE5LTk3MDMt YWU0MDFhMzdjMDQ0LzEvd0FnUEFSMXl6YUtGNUlTdjZ2M2R2d2pMV2FvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8zNjA2ZjUtMTdlMS00MzE5LTk3MDMtYWU0MDFhMzdjMDQ0 LzEvejVnekpoYVhaU3cxVkg2WV9BV240aWxPMjhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZWoMA0G CSqGSIb3DQEBCwUAA4IBAQCL/4dT0hl7lp5K5w94rkNWeKW1dzz5GJrhuxgSiHYG QAqAK4g2QfO1d+MM1gja5fT3B+7d3CETmEqqk//UOOsQdbmJ6ruCID73Clo7darB aMgPh69MZC4UfNumtHkk/KSae6kKpN7faXpJ3P9THizPEpUUMEXwNzBVxu0WGKO7 BFJ/AfP9ETmX95lfBu7rMVkWtr7JwdTyfsTVrCf6vy6HBDNAo4qkPbqKfZIyDpEP 10BDhGQAozbcPx8+w9Hx1uqpWdZFcj/YH9OoFhSgBSKO6QNsRgr2yQs/IZF7gEDG BJs7esTeyY0myAF6GchfUMlmL+B5mMZ8fgqfHoHjjRzQ -----END CERTIFICATE-----Generated at Tue Jan 20 21:16:53 2026 by rpki-client