This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/wAY5XuB45x4wJW7P8rfB4j4exyw.roa File: wAY5XuB45x4wJW7P8rfB4j4exyw.roa (raw, json) Hash identifier: EyRdGq3OnE9JKFrNRIEE2sn/Nvgcr+BeZbnGqbJfWwQ= Subject key identifier: C0:06:39:5E:E0:78:E7:1E:30:25:6E:CF:F2:B7:C1:E2:3E:1E:C7:2C Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Certificate serial: 019B791012FD40E88C2ED2EDE88E9B43406A Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/wAY5XuB45x4wJW7P8rfB4j4exyw.roa Signing time: Thu 01 Jan 2026 10:17:35 +0000 ROA not before: Thu 01 Jan 2026 10:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3320 IP address blocks: 46.37.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 04:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:12:fd:40:e8:8c:2e:d2:ed:e8:8e:9b:43:40:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Validity Not Before: Jan 1 10:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c006395ee078e71e30256ecff2b7c1e23e1ec72c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:80:27:b4:1a:11:50:b9:2e:0a:2b:96:00:a6: 26:60:84:97:a1:c3:2a:a4:27:31:c5:ce:90:9c:67: 36:5f:69:a1:62:4d:11:23:bb:f1:fe:39:6a:2a:92: d6:e3:9b:6c:02:f5:70:04:78:7f:39:85:9a:30:43: f7:5c:5c:8b:fe:34:c2:24:04:9e:61:55:0f:c8:98: 0e:af:3d:42:a8:a7:af:7b:ea:f5:fb:a8:2d:36:bc: 8e:b1:79:ed:da:5e:e3:db:d8:42:02:c9:1b:0d:9c: d4:45:6b:40:73:e8:88:50:77:45:1e:82:8f:6e:94: bc:02:be:4d:56:27:73:7e:b4:14:eb:43:07:d7:29: 56:0d:6e:6b:d3:6f:85:b6:46:95:64:ab:24:a0:05: 17:17:d2:52:87:59:27:12:13:0d:1f:dc:35:2c:76: df:9e:5b:b6:e0:8d:b9:d0:7d:c0:a2:09:1a:f1:09: 4e:57:52:c7:14:30:e8:9a:5d:2e:26:a2:86:0b:bd: 4c:42:92:1f:4e:d9:89:f8:15:ab:a1:30:c9:29:e0: 60:5e:d4:f0:0e:0a:d1:99:f2:ac:c1:1d:64:7b:5f: ad:8a:fa:41:3b:a2:96:63:09:ef:5f:25:b4:9c:e7: b9:de:ba:0b:d6:5d:e7:60:e2:c2:43:ec:0b:d1:f4: ac:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:06:39:5E:E0:78:E7:1E:30:25:6E:CF:F2:B7:C1:E2:3E:1E:C7:2C X509v3 Authority Key Identifier: keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/wAY5XuB45x4wJW7P8rfB4j4exyw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.37.107.0/24 Signature Algorithm: sha256WithRSAEncryption 5a:65:e1:5e:cf:45:76:d2:97:5e:61:ad:b2:d6:00:04:ac:52: 99:1a:fd:f3:19:f3:8b:84:ff:ab:fa:83:17:d8:3f:03:08:6d: 3d:ff:26:07:97:b1:b4:4e:6d:d8:06:4f:78:ef:a9:e6:03:8b: a2:1e:ac:a5:53:9b:17:74:99:bb:77:ee:41:e0:8d:a6:49:b7: c7:c5:4b:10:a7:57:5f:9d:90:3d:56:dd:79:ea:cb:57:0c:9a: c5:c3:d7:59:16:06:cf:eb:6b:3e:1a:f6:d9:77:b8:5f:f7:5b: 0f:b2:72:f1:3a:8b:64:8a:8d:da:8b:60:ec:e7:c3:f1:b9:ac: b2:e8:1d:1c:bd:6f:97:ce:38:4c:b2:36:56:26:44:24:f0:2e: e2:6a:4a:75:ab:6d:bb:9d:5a:0b:b7:45:54:af:30:10:eb:19: 98:71:bf:46:7b:fc:44:3f:ac:7a:25:20:65:11:90:76:75:f6: 2f:26:ff:c9:ea:6a:bf:a7:10:fa:cf:f5:0e:a4:0c:04:3b:20: 17:89:a3:76:c9:fa:37:eb:6a:f6:79:62:8d:37:ae:44:b3:94: d2:09:6b:4a:98:05:5a:b0:9c:d9:0f:55:86:24:70:f4:af:01: de:ae:35:cd:ba:a1:17:f4:44:b1:96:b4:04:94:37:0b:70:1a: d7:bc:2c:6a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EBL9QOiMLtLt6I6bQ0BqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh ZTE5MjkwHhcNMjYwMTAxMTAxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDA2Mzk1ZWUwNzhlNzFlMzAyNTZlY2ZmMmI3YzFlMjNlMWVjNzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloAntBoRULkuCiuWAKYmYISXocMq pCcxxc6QnGc2X2mhYk0RI7vx/jlqKpLW45tsAvVwBHh/OYWaMEP3XFyL/jTCJASe YVUPyJgOrz1CqKeve+r1+6gtNryOsXnt2l7j29hCAskbDZzURWtAc+iIUHdFHoKP bpS8Ar5NVidzfrQU60MH1ylWDW5r02+FtkaVZKskoAUXF9JSh1knEhMNH9w1LHbf nlu24I250H3Aogka8QlOV1LHFDDoml0uJqKGC71MQpIfTtmJ+BWroTDJKeBgXtTw DgrRmfKswR1ke1+tivpBO6KWYwnvXyW0nOe53roL1l3nYOLCQ+wL0fSsbQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMAGOV7geOceMCVuz/K3weI+HscsMB8GA1UdIwQY MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt MjMxNTQ5NDA5NzIwLzEvd0FZNVh1QjQ1eDR3Slc3UDhyZkI0ajRleHl3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiVrMA0G CSqGSIb3DQEBCwUAA4IBAQBaZeFez0V20pdeYa2y1gAErFKZGv3zGfOLhP+r+oMX 2D8DCG09/yYHl7G0Tm3YBk9476nmA4uiHqylU5sXdJm7d+5B4I2mSbfHxUsQp1df nZA9Vt156stXDJrFw9dZFgbP62s+GvbZd7hf91sPsnLxOotkio3ai2Ds58Pxuayy 6B0cvW+XzjhMsjZWJkQk8C7iakp1q227nVoLt0VUrzAQ6xmYcb9Ge/xEP6x6JSBl EZB2dfYvJv/J6mq/pxD6z/UOpAwEOyAXiaN2yfo362r2eWKNN65Es5TSCWtKmAVa sJzZD1WGJHD0rwHerjXNuqEX9ESxlrQElDcLcBrXvCxq -----END CERTIFICATE-----Generated at Mon Jan 19 11:50:34 2026 by rpki-client