This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/wnOM5EHF6nfVvr0FqZJ_XlrpdUo.roa File: wnOM5EHF6nfVvr0FqZJ_XlrpdUo.roa (raw, json) Hash identifier: CzTKoLpU+KVC67tkElsOnwd+vAA1NZMBJOWkm7nD350= Subject key identifier: C2:73:8C:E4:41:C5:EA:77:D5:BE:BD:05:A9:92:7F:5E:5A:E9:75:4A Certificate issuer: /CN=29493731efccc74ad5c273874b9360f7aa689465 Certificate serial: 019B7F8371D756316821FDFF17C38F1C42B4 Authority key identifier: 29:49:37:31:EF:CC:C7:4A:D5:C2:73:87:4B:93:60:F7:AA:68:94:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/wnOM5EHF6nfVvr0FqZJ_XlrpdUo.roa Signing time: Fri 02 Jan 2026 16:21:19 +0000 ROA not before: Fri 02 Jan 2026 16:21:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208376 IP address blocks: 45.141.228.0/22 maxlen: 24 2a0e:d0c0::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:71:d7:56:31:68:21:fd:ff:17:c3:8f:1c:42:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29493731efccc74ad5c273874b9360f7aa689465 Validity Not Before: Jan 2 16:21:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2738ce441c5ea77d5bebd05a9927f5e5ae9754a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e2:f6:48:ca:0b:83:ff:63:5d:d3:b1:55:ff: 1c:a4:cd:b8:16:ce:ff:91:92:6d:18:9b:9e:70:96: e9:1c:51:1c:d0:df:60:37:37:97:1d:12:36:c9:f7: 2a:8c:60:d1:f9:b1:48:33:87:13:20:2f:42:0c:99: 1a:11:79:fa:a9:aa:41:ba:1f:3a:48:73:44:1d:9d: a1:e6:32:e1:4b:cf:94:68:50:92:2c:1d:ee:e9:5c: 8b:76:95:7f:be:e8:53:0b:8c:31:07:84:42:81:88: 1d:eb:56:61:78:8c:d8:08:ed:92:e2:9e:f6:55:39: 9c:e5:fc:58:5c:f0:38:f0:8f:6a:90:c1:e7:9c:b8: f6:bc:18:0f:e3:85:dc:ad:7d:d8:d6:59:81:4b:b2: 31:a0:b4:9b:2c:30:fb:62:f0:60:f4:6d:37:11:96: b6:cf:32:bd:a3:09:34:7a:98:0e:df:9e:14:04:1d: 0d:e6:f7:de:4d:07:94:59:69:8c:20:95:a9:87:7a: 3f:6b:d4:86:f3:79:9a:f5:44:6b:44:fa:6a:d6:8a: e2:c3:f1:d9:51:4d:cf:f5:97:b5:c2:b6:62:a0:4c: bc:19:0c:6b:ab:74:9b:2b:c4:82:7a:9e:a7:f7:10: 42:ed:91:ce:0c:e4:62:6f:c8:65:5b:bf:de:b1:37: 98:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:73:8C:E4:41:C5:EA:77:D5:BE:BD:05:A9:92:7F:5E:5A:E9:75:4A X509v3 Authority Key Identifier: keyid:29:49:37:31:EF:CC:C7:4A:D5:C2:73:87:4B:93:60:F7:AA:68:94:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/wnOM5EHF6nfVvr0FqZJ_XlrpdUo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.141.228.0/22 IPv6: 2a0e:d0c0::/29 Signature Algorithm: sha256WithRSAEncryption 35:96:8a:4f:a8:26:b4:94:7c:5a:15:4f:78:f1:d3:46:7d:dd: 7b:44:e6:38:21:6f:f9:79:9e:84:f3:40:b5:4c:8b:75:77:2d: 41:01:88:8e:3b:5b:0b:7d:28:56:25:52:c9:67:67:0c:27:b7: 56:ae:cf:4d:4e:22:c1:e9:d8:91:a4:c2:e4:a4:87:f7:e4:2e: ae:a3:b9:44:59:b5:e1:4c:17:6e:24:c9:39:2d:af:0e:7e:49: 7b:d4:b3:a3:5b:49:4e:c4:63:03:4e:c2:21:d4:24:e6:11:37: 29:3a:b7:a2:94:50:85:50:a0:f7:12:e1:41:44:50:d9:76:5a: 9b:e1:f9:81:8f:57:18:7a:93:56:0c:8d:92:28:5e:ea:62:b8: 3b:d0:10:e2:3c:da:29:4c:33:1f:ba:ce:96:7b:6a:57:24:ac: e8:df:a7:10:3c:88:52:0a:63:05:c5:d2:b6:ac:d2:b3:b6:49: e6:6a:a8:fe:93:80:af:f7:5f:22:ca:74:b9:08:8a:f5:d4:20: c7:a8:88:f9:4e:f9:f3:47:ee:5f:63:ef:2c:30:89:e3:e8:98: 21:8d:3f:f4:33:db:d6:e4:2b:3c:02:63:f4:a7:8e:0e:51:a5: d2:8e:5f:63:cc:34:97:37:59:16:01:cc:43:e7:31:b0:bf:a3: 75:58:32:7c -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt/g3HXVjFoIf3/F8OPHEK0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5NDkzNzMxZWZjY2M3NGFkNWMyNzM4NzRiOTM2MGY3YWE2 ODk0NjUwHhcNMjYwMTAyMTYyMTE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjczOGNlNDQxYzVlYTc3ZDViZWJkMDVhOTkyN2Y1ZTVhZTk3NTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuL2SMoLg/9jXdOxVf8cpM24Fs7/ kZJtGJuecJbpHFEc0N9gNzeXHRI2yfcqjGDR+bFIM4cTIC9CDJkaEXn6qapBuh86 SHNEHZ2h5jLhS8+UaFCSLB3u6VyLdpV/vuhTC4wxB4RCgYgd61ZheIzYCO2S4p72 VTmc5fxYXPA48I9qkMHnnLj2vBgP44XcrX3Y1lmBS7IxoLSbLDD7YvBg9G03EZa2 zzK9owk0epgO354UBB0N5vfeTQeUWWmMIJWph3o/a9SG83ma9URrRPpq1oriw/HZ UU3P9Ze1wrZioEy8GQxrq3SbK8SCep6n9xBC7ZHODORib8hlW7/esTeYBQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMJzjORBxep31b69BamSf15a6XVKMB8GA1UdIwQY MBaAFClJNzHvzMdK1cJzh0uTYPeqaJRlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1VrM01lX014MHJWd25PSFM1Tmc5NnBvbEdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9hZjRjMDktYzhjMi00ODkzLWExMGIt MGNkOGE2OTcyOWI3LzEvd25PTTVFSEY2bmZWdnIwRnFaSl9YbHJwZFVvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9hZjRjMDktYzhjMi00ODkzLWExMGItMGNkOGE2OTcyOWI3 LzEvS1VrM01lX014MHJWd25PSFM1Tmc5NnBvbEdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLY3kMA0E AgACMAcDBQMqDtDAMA0GCSqGSIb3DQEBCwUAA4IBAQA1lopPqCa0lHxaFU948dNG fd17ROY4IW/5eZ6E80C1TIt1dy1BAYiOO1sLfShWJVLJZ2cMJ7dWrs9NTiLB6diR pMLkpIf35C6uo7lEWbXhTBduJMk5La8Ofkl71LOjW0lOxGMDTsIh1CTmETcpOrei lFCFUKD3EuFBRFDZdlqb4fmBj1cYepNWDI2SKF7qYrg70BDiPNopTDMfus6We2pX JKzo36cQPIhSCmMFxdK2rNKztknmaqj+k4Cv918iynS5CIr11CDHqIj5TvnzR+5f Y+8sMInj6JghjT/0M9vW5Cs8AmP0p44OUaXSjl9jzDSXN1kWAcxD5zGwv6N1WDJ8 -----END CERTIFICATE-----Generated at Tue Feb 10 02:54:51 2026 by rpki-client