This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/WToUjwUwqxWGFX7YfgHrsOMgM_8.roa File: WToUjwUwqxWGFX7YfgHrsOMgM_8.roa (raw, json) Hash identifier: kIIRszKRMT6GNaYzUy0dv+/IIIR5RaGl85LSnUgSJ+k= Subject key identifier: 59:3A:14:8F:05:30:AB:15:86:15:7E:D8:7E:01:EB:B0:E3:20:33:FF Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Certificate serial: 019B77C6C702E640FF06CCDA517AA3859318 Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/WToUjwUwqxWGFX7YfgHrsOMgM_8.roa Signing time: Thu 01 Jan 2026 04:17:54 +0000 ROA not before: Thu 01 Jan 2026 04:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49747 IP address blocks: 46.23.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:c7:02:e6:40:ff:06:cc:da:51:7a:a3:85:93:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Validity Not Before: Jan 1 04:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=593a148f0530ab1586157ed87e01ebb0e32033ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fe:ae:0d:8e:60:8b:7a:ee:89:91:7f:6b:81: be:33:ba:80:a9:dc:16:13:e6:30:a7:90:16:ff:42: d0:23:fd:ed:d7:c1:6a:62:c0:3a:bb:51:c5:3f:38: a0:b2:f8:48:e3:1e:87:e5:95:c7:99:7c:cb:bc:67: e3:c1:fd:f8:dd:51:16:54:ed:14:94:f5:6a:a0:70: cc:55:cf:54:f7:7f:34:1c:f9:5e:23:d4:a5:68:fa: 08:35:34:8c:99:f3:53:3a:2d:4a:f8:77:97:4c:2b: d1:00:22:af:df:e9:7b:e9:31:2e:20:82:ba:e9:45: 21:e3:14:fd:ad:37:d6:20:fb:cc:a3:6f:d0:9c:11: 8a:0d:d8:fa:cc:9c:f4:ea:28:68:a2:f4:a4:8e:e2: f0:fb:bb:a0:9d:98:e1:70:c3:fc:2a:1f:9d:2a:07: bc:1e:c8:d9:d7:b8:f7:8b:2e:85:5d:ac:45:c4:d4: 17:40:11:0a:18:b8:80:35:ce:06:74:a2:2c:94:31: 2a:4d:af:05:c9:82:b3:75:90:ac:4a:67:1c:66:65: 8c:5e:cc:c2:4b:67:26:f0:04:9a:da:56:6e:48:00: ec:05:ae:18:d0:02:a9:ec:58:b3:0b:2d:48:0c:55: 4e:cc:21:e7:59:02:d7:17:28:b7:a2:ab:e5:7b:57: 8d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:3A:14:8F:05:30:AB:15:86:15:7E:D8:7E:01:EB:B0:E3:20:33:FF X509v3 Authority Key Identifier: keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/WToUjwUwqxWGFX7YfgHrsOMgM_8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.23.111.0/24 Signature Algorithm: sha256WithRSAEncryption 8a:98:74:d9:4c:e5:ed:02:4b:81:e7:9a:53:60:8b:f2:e6:75: 58:0e:1a:3e:74:ec:fd:5f:8c:fa:09:30:09:42:2a:9b:2b:4d: 1a:47:6d:2c:ab:ec:eb:a3:df:32:3b:af:b2:cb:b6:60:f0:61: c6:da:6b:c3:f4:9e:fd:62:99:ef:ca:72:33:e8:88:4c:35:3d: 6b:94:1a:e7:09:7b:38:93:a3:bb:8f:63:8a:d4:1e:4f:38:14: ef:f8:33:7d:a8:73:16:a8:d1:af:9f:4b:49:27:3e:51:77:52: 79:b1:af:e9:31:9c:d4:48:c2:17:24:d4:ed:b4:8e:8d:03:da: 0a:11:72:02:e3:76:e9:6b:13:0e:10:dc:be:0b:51:c2:c5:56: 5a:f8:84:7f:9d:96:ac:d3:0a:49:82:40:27:03:05:bc:4e:b8: ab:f3:d5:40:3c:ac:13:02:c6:bf:ef:92:95:02:10:50:93:fb: 29:70:77:c8:a0:be:e7:37:35:26:08:7c:4e:a3:fc:3e:f3:d9: 5f:e1:08:f6:20:95:76:fe:b6:8e:23:5a:5e:a0:9d:e2:02:27: bc:7d:e3:a6:a2:e9:dc:6b:46:7e:c3:79:62:8f:b0:9b:0f:33: 4d:96:a9:c9:0f:20:68:38:9d:e8:9c:b8:64:ca:8f:54:ea:27: f9:0e:4a:59 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xscC5kD/BszaUXqjhZMYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1 MWM3N2YwHhcNMjYwMTAxMDQxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OTNhMTQ4ZjA1MzBhYjE1ODYxNTdlZDg3ZTAxZWJiMGUzMjAzM2ZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvP6uDY5gi3ruiZF/a4G+M7qAqdwW E+Ywp5AW/0LQI/3t18FqYsA6u1HFPzigsvhI4x6H5ZXHmXzLvGfjwf343VEWVO0U lPVqoHDMVc9U9380HPleI9SlaPoINTSMmfNTOi1K+HeXTCvRACKv3+l76TEuIIK6 6UUh4xT9rTfWIPvMo2/QnBGKDdj6zJz06ihoovSkjuLw+7ugnZjhcMP8Kh+dKge8 HsjZ17j3iy6FXaxFxNQXQBEKGLiANc4GdKIslDEqTa8FyYKzdZCsSmccZmWMXszC S2cm8ASa2lZuSADsBa4Y0AKp7FizCy1IDFVOzCHnWQLXFyi3oqvle1eNYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFk6FI8FMKsVhhV+2H4B67DjIDP/MB8GA1UdIwQY MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt MmNmODA2YjJkMGYyLzEvV1RvVWp3VXdxeFdHRlg3WWZnSHJzT01nTV84LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALhdvMA0G CSqGSIb3DQEBCwUAA4IBAQCKmHTZTOXtAkuB55pTYIvy5nVYDho+dOz9X4z6CTAJ QiqbK00aR20sq+zro98yO6+yy7Zg8GHG2mvD9J79YpnvynIz6IhMNT1rlBrnCXs4 k6O7j2OK1B5POBTv+DN9qHMWqNGvn0tJJz5Rd1J5sa/pMZzUSMIXJNTttI6NA9oK EXIC43bpaxMOENy+C1HCxVZa+IR/nZas0wpJgkAnAwW8Trir89VAPKwTAsa/75KV AhBQk/spcHfIoL7nNzUmCHxOo/w+89lf4Qj2IJV2/raOI1peoJ3iAie8feOmounc a0Z+w3lij7CbDzNNlqnJDyBoOJ3onLhkyo9U6if5DkpZ -----END CERTIFICATE-----Generated at Wed Jan 21 12:19:03 2026 by rpki-client