This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/W-lf8hwpKZ_Qz4QyYmLJuZ0Q150.roa File: W-lf8hwpKZ_Qz4QyYmLJuZ0Q150.roa (raw, json) Hash identifier: 0CCMus3U6y/Vhpkh6RFJf4seKPVSo2QOmMSt3f+sxgc= Subject key identifier: 5B:E9:5F:F2:1C:29:29:9F:D0:CF:84:32:62:62:C9:B9:9D:10:D7:9D Certificate issuer: /CN=1455ca30592313388925ee1441009ad31d4bb41f Certificate serial: 019B797E4EB10C10B73DF3D94C97D6D1BC1E Authority key identifier: 14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/W-lf8hwpKZ_Qz4QyYmLJuZ0Q150.roa Signing time: Thu 01 Jan 2026 12:17:59 +0000 ROA not before: Thu 01 Jan 2026 12:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198964 IP address blocks: 46.21.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:4e:b1:0c:10:b7:3d:f3:d9:4c:97:d6:d1:bc:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1455ca30592313388925ee1441009ad31d4bb41f Validity Not Before: Jan 1 12:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5be95ff21c29299fd0cf84326262c9b99d10d79d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f3:06:9a:37:f2:c1:46:1b:fa:1d:57:7c:67: ea:42:8c:7f:88:00:87:a7:34:0b:c0:11:88:1c:0c: 98:08:56:6d:4b:01:be:79:b5:8c:0b:c1:fd:7b:13: 29:8e:67:d1:52:bd:a7:f2:67:a6:9d:6f:0e:62:08: 28:eb:25:fa:4d:f1:dd:e9:0c:88:18:de:b4:cc:7c: 81:3a:f3:61:59:4a:84:20:ff:95:a9:f8:a5:cf:8e: 58:ce:be:b0:5c:8f:b4:a9:f7:95:38:f7:cd:27:78: bb:ed:dc:8a:71:a8:98:f7:d8:73:bf:68:35:b0:9c: e0:ce:50:19:07:1a:7a:d0:17:5d:f9:78:ee:a0:ba: b9:7c:d8:9c:c1:10:1a:e4:3a:e4:7a:9c:d8:ae:2c: d2:58:d3:e1:40:05:21:65:a5:e0:44:1e:ad:b8:16: 24:29:a5:84:0c:40:87:eb:89:d5:78:5e:69:fb:e5: fe:30:7c:33:48:af:d4:39:01:cf:b2:8b:47:7c:37: ba:8b:0b:b4:32:5a:b3:98:44:d7:45:cc:ba:a9:fe: 2d:06:c5:b0:90:e2:73:fb:84:7c:4a:aa:f3:4c:01: 30:a9:a3:38:fc:4c:8c:ea:b5:b0:7d:7a:48:e5:24: 8c:d8:30:ae:06:73:ad:48:50:9d:0b:b1:96:45:65: 90:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:E9:5F:F2:1C:29:29:9F:D0:CF:84:32:62:62:C9:B9:9D:10:D7:9D X509v3 Authority Key Identifier: keyid:14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/W-lf8hwpKZ_Qz4QyYmLJuZ0Q150.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.21.31.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:bc:c7:be:61:2c:9d:94:9f:c1:14:fc:c2:4b:49:b1:12:5d: 9f:82:17:72:2a:5e:02:d6:9f:b9:2d:e9:78:41:19:74:da:45: ec:e5:01:ed:16:fc:6d:26:68:f8:80:9d:71:61:5c:2d:49:5d: f7:98:58:a0:37:fd:c9:cf:12:eb:0f:fe:37:ca:90:e7:f1:39: c6:8d:8a:53:38:81:3b:e0:f9:36:7e:04:c0:eb:f2:a8:02:9b: 98:a7:67:d2:ad:d8:e9:1d:65:31:0a:f3:37:25:11:3f:35:e0: f2:d1:f1:9b:06:7f:cb:bb:ae:cc:e8:88:db:e1:59:e6:70:df: c8:1f:7b:e1:3e:e7:23:5c:6a:f4:38:d7:61:bb:00:9b:53:64: 91:c9:71:96:c6:e8:57:55:1d:2f:32:3f:bd:33:60:e0:ab:6b: 57:6d:b0:04:c5:6c:ea:54:bb:a5:d6:ba:0b:ab:e7:97:6a:f4: 8c:7c:b6:f6:8e:89:95:95:82:a2:f3:f0:e8:d8:12:40:e9:bc: 7c:89:38:ea:71:ed:54:4e:71:e0:4d:f8:9a:da:8e:2c:a1:73: ef:bb:bf:a7:5f:df:a4:e0:7c:39:31:1f:1c:82:9a:b2:3d:c5: 31:47:1f:6b:4a:60:d0:d0:69:52:a8:b8:43:bd:15:e2:3b:7f: e8:f7:87:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fk6xDBC3PfPZTJfW0bweMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0NTVjYTMwNTkyMzEzMzg4OTI1ZWUxNDQxMDA5YWQzMWQ0 YmI0MWYwHhcNMjYwMTAxMTIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmU5NWZmMjFjMjkyOTlmZDBjZjg0MzI2MjYyYzliOTlkMTBkNzlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPMGmjfywUYb+h1XfGfqQox/iACH pzQLwBGIHAyYCFZtSwG+ebWMC8H9exMpjmfRUr2n8memnW8OYggo6yX6TfHd6QyI GN60zHyBOvNhWUqEIP+Vqfilz45Yzr6wXI+0qfeVOPfNJ3i77dyKcaiY99hzv2g1 sJzgzlAZBxp60Bdd+XjuoLq5fNicwRAa5DrkepzYrizSWNPhQAUhZaXgRB6tuBYk KaWEDECH64nVeF5p++X+MHwzSK/UOQHPsotHfDe6iwu0MlqzmETXRcy6qf4tBsWw kOJz+4R8SqrzTAEwqaM4/EyM6rWwfXpI5SSM2DCuBnOtSFCdC7GWRWWQZwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFvpX/IcKSmf0M+EMmJiybmdENedMB8GA1UdIwQY MBaAFBRVyjBZIxM4iSXuFEEAmtMdS7QfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkZYS01Ga2pFemlKSmU0VVFRQ2EweDFMdEI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mMDgzMmUtNjc1Yi00ZWMyLWE4MDIt OWIyNmNhYjc5NDUxLzEvVy1sZjhod3BLWl9RejRReVltTEp1WjBRMTUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9mMDgzMmUtNjc1Yi00ZWMyLWE4MDItOWIyNmNhYjc5NDUx LzEvRkZYS01Ga2pFemlKSmU0VVFRQ2EweDFMdEI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALhUfMA0G CSqGSIb3DQEBCwUAA4IBAQCNvMe+YSydlJ/BFPzCS0mxEl2fghdyKl4C1p+5Lel4 QRl02kXs5QHtFvxtJmj4gJ1xYVwtSV33mFigN/3JzxLrD/43ypDn8TnGjYpTOIE7 4Pk2fgTA6/KoApuYp2fSrdjpHWUxCvM3JRE/NeDy0fGbBn/Lu67M6Ijb4VnmcN/I H3vhPucjXGr0ONdhuwCbU2SRyXGWxuhXVR0vMj+9M2Dgq2tXbbAExWzqVLul1roL q+eXavSMfLb2jomVlYKi8/Do2BJA6bx8iTjqce1UTnHgTfia2o4soXPvu7+nX9+k 4Hw5MR8cgpqyPcUxRx9rSmDQ0GlSqLhDvRXiO3/o94fO -----END CERTIFICATE-----Generated at Mon Jan 26 14:44:25 2026 by rpki-client