This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/KG5zQ0TXgXabdzXTjeqnKaVX6Fw.roa File: KG5zQ0TXgXabdzXTjeqnKaVX6Fw.roa (raw, json) Hash identifier: OsY5aKqFGurM+CWTAFpq3QCNs9jd9GDul/wkb8ng7+Q= Subject key identifier: 28:6E:73:43:44:D7:81:76:9B:77:35:D3:8D:EA:A7:29:A5:57:E8:5C Certificate issuer: /CN=59a9e9f8ea47486d80c9d6dcfd568f654d4f07ee Certificate serial: 019B7C7FE8ED3F462F350434996D6E43556D Authority key identifier: 59:A9:E9:F8:EA:47:48:6D:80:C9:D6:DC:FD:56:8F:65:4D:4F:07:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wanp-OpHSG2Aydbc_VaPZU1PB-4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/KG5zQ0TXgXabdzXTjeqnKaVX6Fw.roa Signing time: Fri 02 Jan 2026 02:18:36 +0000 ROA not before: Fri 02 Jan 2026 02:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51539 IP address blocks: 46.30.224.0/21 maxlen: 21 46.30.226.0/23 maxlen: 23 46.30.228.0/23 maxlen: 23 2a06:d980::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/Wanp-OpHSG2Aydbc_VaPZU1PB-4.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/Wanp-OpHSG2Aydbc_VaPZU1PB-4.mft rsync://rpki.ripe.net/repository/DEFAULT/Wanp-OpHSG2Aydbc_VaPZU1PB-4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:e8:ed:3f:46:2f:35:04:34:99:6d:6e:43:55:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59a9e9f8ea47486d80c9d6dcfd568f654d4f07ee Validity Not Before: Jan 2 02:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=286e734344d781769b7735d38deaa729a557e85c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b8:bc:54:9f:38:98:f7:12:ea:7e:8a:4f:f2: de:7e:47:64:8e:c3:7d:ce:a4:3b:ee:aa:a7:cd:96: fe:3d:7b:75:2d:47:58:45:0e:5e:88:47:8e:ec:f3: 42:a0:3d:3c:3e:bc:42:79:6d:93:67:63:7b:3e:59: 8c:e3:20:3f:b1:b2:42:ad:e8:cf:9b:5a:b5:95:42: 0f:66:b7:fb:6a:9e:ab:4a:20:6e:6b:ea:55:6d:2a: 3a:bf:f9:45:c1:f9:44:6e:ca:61:5d:7a:c2:4f:44: 34:6b:32:44:fc:00:95:30:1c:19:9d:36:ff:ca:20: 64:5f:9d:ee:de:4c:9a:eb:32:a2:e8:80:71:d6:7d: 44:c6:ab:44:10:8b:79:b2:26:cd:84:b4:c0:5b:45: 25:f6:3f:73:7c:75:16:f0:69:bc:f8:0e:da:06:c5: 5e:50:76:95:bc:5a:f5:1c:52:44:12:74:73:72:99: 85:40:f2:79:22:ff:a4:8b:69:de:29:c2:57:07:0a: 14:42:f8:ac:25:b0:e7:3a:08:de:b1:e6:a2:aa:83: 30:b8:4b:0d:71:f6:b0:c3:f2:52:19:4f:97:20:76: f4:87:3b:27:ab:39:05:f4:02:e3:9b:91:87:f2:cd: 7c:24:ca:0f:de:b3:84:9b:db:d1:50:c2:13:b7:15: d2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:6E:73:43:44:D7:81:76:9B:77:35:D3:8D:EA:A7:29:A5:57:E8:5C X509v3 Authority Key Identifier: keyid:59:A9:E9:F8:EA:47:48:6D:80:C9:D6:DC:FD:56:8F:65:4D:4F:07:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wanp-OpHSG2Aydbc_VaPZU1PB-4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/KG5zQ0TXgXabdzXTjeqnKaVX6Fw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/53ad2b-359b-436a-a2eb-afe84e18d56f/1/Wanp-OpHSG2Aydbc_VaPZU1PB-4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.30.224.0/21 IPv6: 2a06:d980::/29 Signature Algorithm: sha256WithRSAEncryption 1f:b3:54:fd:ab:0e:43:bc:03:39:2c:e3:f4:66:d5:5d:06:39: e4:57:fd:7d:b9:9c:4b:f8:6a:b3:2b:9b:e6:62:df:99:fa:b4: 08:81:bc:23:92:7d:9f:95:3a:e6:c2:a7:06:a1:c5:39:3c:07: b0:e6:a0:5e:11:2d:21:be:26:d6:bb:51:19:88:34:39:be:9d: 35:3e:92:57:95:a5:26:2b:c7:56:90:bc:d2:e8:41:36:73:5c: 67:8b:41:08:35:54:74:53:e0:ac:77:a0:15:1c:6e:58:d7:31: e9:11:d2:64:1e:72:61:9b:1c:1c:c1:6a:f4:3c:e1:d5:ab:8f: ab:69:8e:6b:84:98:cc:ce:71:07:dc:05:fb:98:2b:bf:17:14: 80:04:06:f1:02:db:ea:01:b4:23:12:52:48:ef:d5:5d:51:a7: 5d:f9:56:c4:7b:65:fa:f6:65:7f:fb:ec:0c:01:5f:f5:30:1c: 0c:8f:18:c8:70:f3:11:2e:0e:55:b6:1a:2d:61:28:7c:5c:f0: 92:60:04:77:51:37:58:89:7c:76:bb:d6:11:7e:9b:1f:bb:10: 17:55:c7:68:47:b9:45:e5:84:ac:ab:8b:5d:e2:59:09:d3:e4: 1d:4d:51:03:db:25:04:0a:64:1c:17:41:68:84:0a:4d:ef:4b: b7:4f:76:39 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8f+jtP0YvNQQ0mW1uQ1VtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5YTllOWY4ZWE0NzQ4NmQ4MGM5ZDZkY2ZkNTY4ZjY1NGQ0 ZjA3ZWUwHhcNMjYwMTAyMDIxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyODZlNzM0MzQ0ZDc4MTc2OWI3NzM1ZDM4ZGVhYTcyOWE1NTdlODVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7i8VJ84mPcS6n6KT/LefkdkjsN9 zqQ77qqnzZb+PXt1LUdYRQ5eiEeO7PNCoD08PrxCeW2TZ2N7PlmM4yA/sbJCrejP m1q1lUIPZrf7ap6rSiBua+pVbSo6v/lFwflEbsphXXrCT0Q0azJE/ACVMBwZnTb/ yiBkX53u3kya6zKi6IBx1n1ExqtEEIt5sibNhLTAW0Ul9j9zfHUW8Gm8+A7aBsVe UHaVvFr1HFJEEnRzcpmFQPJ5Iv+ki2neKcJXBwoUQvisJbDnOgjeseaiqoMwuEsN cfaww/JSGU+XIHb0hzsnqzkF9ALjm5GH8s18JMoP3rOEm9vRUMITtxXSGwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFChuc0NE14F2m3c1043qpymlV+hcMB8GA1UdIwQY MBaAFFmp6fjqR0htgMnW3P1Wj2VNTwfuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2FucC1PcEhTRzJBeWRiY19WYVBaVTFQQi00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81M2FkMmItMzU5Yi00MzZhLWEyZWIt YWZlODRlMThkNTZmLzEvS0c1elEwVFhnWGFiZHpYVGplcW5LYVZYNkZ3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81M2FkMmItMzU5Yi00MzZhLWEyZWItYWZlODRlMThkNTZm LzEvV2FucC1PcEhTRzJBeWRiY19WYVBaVTFQQi00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDLh7gMA0E AgACMAcDBQMqBtmAMA0GCSqGSIb3DQEBCwUAA4IBAQAfs1T9qw5DvAM5LOP0ZtVd BjnkV/19uZxL+GqzK5vmYt+Z+rQIgbwjkn2flTrmwqcGocU5PAew5qBeES0hvibW u1EZiDQ5vp01PpJXlaUmK8dWkLzS6EE2c1xni0EINVR0U+Csd6AVHG5Y1zHpEdJk HnJhmxwcwWr0POHVq4+raY5rhJjMznEH3AX7mCu/FxSABAbxAtvqAbQjElJI79Vd Uadd+VbEe2X69mV/++wMAV/1MBwMjxjIcPMRLg5VthotYSh8XPCSYAR3UTdYiXx2 u9YRfpsfuxAXVcdoR7lF5YSsq4td4lkJ0+QdTVED2yUECmQcF0FohApN70u3T3Y5 -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:03 2026 by rpki-client