This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/wlfAjyXsYKp15jqqzQ-Ioke0fLM.roa File: wlfAjyXsYKp15jqqzQ-Ioke0fLM.roa (raw, json) Hash identifier: TOLDOGeG1BHxIIUOQRbJPrQi7BzTRh2+u1aTgxMmeOw= Subject key identifier: C2:57:C0:8F:25:EC:60:AA:75:E6:3A:AA:CD:0F:88:A2:47:B4:7C:B3 Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Certificate serial: 019B7D5CCC6DC1B8368CC34BE1D68779F9B4 Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/wlfAjyXsYKp15jqqzQ-Ioke0fLM.roa Signing time: Fri 02 Jan 2026 06:19:52 +0000 ROA not before: Fri 02 Jan 2026 06:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51248 IP address blocks: 192.145.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:cc:6d:c1:b8:36:8c:c3:4b:e1:d6:87:79:f9:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2 Validity Not Before: Jan 2 06:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c257c08f25ec60aa75e63aaacd0f88a247b47cb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9c:18:f7:d4:87:ff:97:e2:7e:86:3c:11:3b: 64:4e:7d:b8:eb:2a:1b:ec:e4:a8:9f:16:25:ff:c2: 08:b2:86:6c:c7:84:e8:1d:38:a8:d8:31:da:ca:9b: 4e:15:fd:19:18:c3:ef:81:e9:1a:a3:09:88:48:4e: 98:94:73:9a:56:1c:c2:78:83:39:ec:47:64:7e:99: ca:e1:45:70:54:7f:78:aa:68:0e:31:b8:b4:54:69: 5a:d2:5e:ab:c0:35:85:f8:20:0c:78:dd:db:29:29: 7c:e8:9c:7b:c4:a9:23:80:8c:3f:ba:dc:eb:b8:eb: a3:5c:59:db:ce:33:b0:65:fa:3e:04:4e:2f:cc:a4: 0e:90:e1:cf:29:f3:dd:49:05:b6:05:92:6f:3b:f6: 44:9e:75:34:15:42:80:a5:e9:96:29:f9:93:6e:e6: c5:5b:85:bd:b9:7b:6d:ff:79:3b:4a:91:d6:0d:c1: 41:40:6e:4f:1c:67:a1:8e:e3:06:d7:8c:71:f9:c5: 16:2f:94:a2:d7:60:59:e8:bf:0f:90:b3:3f:64:ed: d1:d3:75:38:09:43:0c:15:2e:eb:75:a3:13:0f:2a: ed:cb:0e:0b:f1:d8:98:e3:d2:3b:43:aa:3f:68:55: 73:7d:e1:fb:6a:9d:df:f0:69:bc:b8:0b:e5:41:a2: 40:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:57:C0:8F:25:EC:60:AA:75:E6:3A:AA:CD:0F:88:A2:47:B4:7C:B3 X509v3 Authority Key Identifier: keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/wlfAjyXsYKp15jqqzQ-Ioke0fLM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.145.98.0/24 Signature Algorithm: sha256WithRSAEncryption 88:82:38:b7:57:54:f5:02:16:a4:ba:95:4a:5e:4e:72:04:d0: 6f:7f:e2:0c:66:bb:ff:93:6e:9a:92:43:d0:b1:85:fd:20:a0: 8d:0f:34:15:c7:1e:08:e6:ea:a6:8d:8d:bf:80:e4:8a:ea:bd: 9b:1d:98:d6:d1:cc:7c:d4:2c:47:5c:cc:93:eb:7d:0b:1d:35: fa:91:05:94:6c:f4:ad:0b:bc:1b:ca:8c:97:a9:52:50:10:af: cd:b4:d2:a6:c4:92:22:b7:7b:ca:a7:22:a9:9f:00:dc:e6:60: 8a:c2:e6:32:00:5d:f2:9e:f0:5c:ff:09:d4:62:30:74:6a:0e: f0:81:7e:e8:a3:78:b0:41:dd:d5:29:45:fd:1e:1f:86:4b:b8: 0f:ef:54:20:2d:51:8e:dc:72:41:67:b2:3b:f1:de:9e:c6:f8: b7:6c:34:1b:c5:b5:4e:59:0c:b1:0a:fe:e7:97:cd:1a:da:3a: 78:12:2b:3e:66:81:ab:ae:23:03:7b:9c:c8:97:84:ed:73:4c: a6:53:c7:6e:95:6f:ba:c5:48:44:83:cc:4a:36:06:8d:e2:49: 53:0c:db:e6:49:84:21:26:10:53:72:5e:bc:f8:0d:01:dc:63: d2:7f:1d:a5:87:25:76:ff:3d:8c:f9:3b:4b:36:b5:cc:9b:df: ce:da:69:e3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XMxtwbg2jMNL4daHefm0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl NWVjZjIwHhcNMjYwMTAyMDYxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMjU3YzA4ZjI1ZWM2MGFhNzVlNjNhYWFjZDBmODhhMjQ3YjQ3Y2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpwY99SH/5fifoY8ETtkTn246yob 7OSonxYl/8IIsoZsx4ToHTio2DHayptOFf0ZGMPvgekaowmISE6YlHOaVhzCeIM5 7EdkfpnK4UVwVH94qmgOMbi0VGla0l6rwDWF+CAMeN3bKSl86Jx7xKkjgIw/utzr uOujXFnbzjOwZfo+BE4vzKQOkOHPKfPdSQW2BZJvO/ZEnnU0FUKApemWKfmTbubF W4W9uXtt/3k7SpHWDcFBQG5PHGehjuMG14xx+cUWL5Si12BZ6L8PkLM/ZO3R03U4 CUMMFS7rdaMTDyrtyw4L8diY49I7Q6o/aFVzfeH7ap3f8Gm8uAvlQaJAtQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMJXwI8l7GCqdeY6qs0PiKJHtHyzMB8GA1UdIwQY MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt MTcxYzM2N2JlNzgyLzEvd2xmQWp5WHNZS3AxNWpxcXpRLUlva2UwZkxNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJFiMA0G CSqGSIb3DQEBCwUAA4IBAQCIgji3V1T1AhakupVKXk5yBNBvf+IMZrv/k26akkPQ sYX9IKCNDzQVxx4I5uqmjY2/gOSK6r2bHZjW0cx81CxHXMyT630LHTX6kQWUbPSt C7wbyoyXqVJQEK/NtNKmxJIit3vKpyKpnwDc5mCKwuYyAF3ynvBc/wnUYjB0ag7w gX7oo3iwQd3VKUX9Hh+GS7gP71QgLVGO3HJBZ7I78d6exvi3bDQbxbVOWQyxCv7n l80a2jp4Eis+ZoGrriMDe5zIl4Ttc0ymU8dulW+6xUhEg8xKNgaN4klTDNvmSYQh JhBTcl68+A0B3GPSfx2lhyV2/z2M+TtLNrXMm9/O2mnj -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:52 2026 by rpki-client