This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/wfQmPdI-vmy_WQj32p1pdNv8LjM.roa File: wfQmPdI-vmy_WQj32p1pdNv8LjM.roa (raw, json) Hash identifier: Wlbgs7E1UKGfQEo0Wy61nxhp0A6dAzQWLbqDaTK1Nbc= Subject key identifier: C1:F4:26:3D:D2:3E:BE:6C:BF:59:08:F7:DA:9D:69:74:DB:FC:2E:33 Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e Certificate serial: 019B775976A9E5E51FA4C7704CA5DA71D7D3 Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/wfQmPdI-vmy_WQj32p1pdNv8LjM.roa Signing time: Thu 01 Jan 2026 02:18:30 +0000 ROA not before: Thu 01 Jan 2026 02:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201119 IP address blocks: 45.132.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:76:a9:e5:e5:1f:a4:c7:70:4c:a5:da:71:d7:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e Validity Not Before: Jan 1 02:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1f4263dd23ebe6cbf5908f7da9d6974dbfc2e33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5b:96:5f:34:eb:46:e1:8e:4d:f9:08:ae:ad: e2:23:2f:89:06:3d:7c:4d:9a:ac:53:36:71:01:a9: 6d:a7:ee:27:21:36:10:62:61:2e:6f:bc:8f:c3:09: 35:19:1b:0b:c1:c2:62:77:f8:2b:0b:04:e9:d4:4c: c3:99:d5:ec:28:e4:9e:28:7f:7f:a2:04:a9:33:ff: 20:a4:04:fe:7e:7a:0c:ac:3a:d3:3d:8a:4e:d3:cf: a9:f6:ba:70:ae:37:04:a6:ab:e5:6a:7b:f9:79:6b: e1:b5:e0:b0:8e:ac:df:30:83:61:2c:5b:96:fb:1f: 63:85:f4:ee:ab:6e:c1:9b:6a:81:98:07:bb:f7:31: 3e:cf:b3:e6:34:bd:3d:e5:38:1e:18:b1:88:0a:07: b3:3c:c6:92:b4:91:f9:c3:c3:20:61:4a:6e:1f:b1: ea:44:0e:16:f1:26:18:47:f4:ba:a4:02:33:ad:48: 24:1b:d2:d5:38:c2:e8:3f:eb:41:a5:be:5e:1a:70: 03:9b:34:57:6d:19:b3:d9:7a:a7:40:63:60:d4:f6: 6a:65:65:93:2d:fa:dd:84:65:86:df:1c:b0:28:4f: df:ae:48:06:56:f8:68:f8:a7:dd:10:d4:a7:0e:7e: ce:00:98:5d:3a:da:ae:b8:f5:be:8e:0d:bd:aa:b4: 41:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F4:26:3D:D2:3E:BE:6C:BF:59:08:F7:DA:9D:69:74:DB:FC:2E:33 X509v3 Authority Key Identifier: keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/wfQmPdI-vmy_WQj32p1pdNv8LjM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.132.151.0/24 Signature Algorithm: sha256WithRSAEncryption 03:15:06:ff:ba:2e:71:b3:f4:a6:89:6d:9a:4f:96:37:72:13: 14:49:81:37:44:4f:f4:4e:37:c5:66:f2:57:d4:4f:a0:f0:e7: 62:4c:69:42:26:c2:bc:ba:eb:68:3c:96:76:e5:49:e2:4e:5f: a6:f5:fc:1d:0c:3b:8c:f4:1f:fe:84:00:1a:54:10:cf:cd:e4: 28:2d:fd:d3:6d:c9:b5:01:04:a7:c0:f1:75:b4:07:6e:59:f8: 4a:e5:b4:58:a7:4c:3e:3a:38:18:1e:f9:f2:de:6f:e8:7f:1d: a4:40:c0:11:35:22:2d:15:cf:a5:49:30:89:ec:9d:91:f0:ce: ec:9c:fe:72:7f:ae:ee:76:02:f3:e6:ed:36:58:11:6e:42:52: a1:3a:6a:bc:45:4f:95:eb:bf:ec:25:c4:fe:4d:95:4b:f7:16: 2c:1c:3b:82:15:dd:b3:4a:9d:87:87:4f:13:90:31:29:23:77: c7:e5:1b:c0:bf:6d:c1:52:cf:05:fb:8e:72:7d:ad:1e:93:1d: e7:c6:72:c3:2a:f6:42:a0:38:74:5d:a1:5d:31:9c:74:f6:ef: 60:46:c0:e4:1e:02:44:e7:aa:ce:be:08:4c:c9:e7:78:4a:7f: 4b:9e:be:3c:f8:65:72:b4:a0:11:a3:3b:8e:61:7e:22:99:58: 75:6e:e6:62 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WXap5eUfpMdwTKXacdfTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZjU0M2UyM2UyOWZiMDM3NDhkMDkzOTcyNmYzMGZlOWFm ZmExOWUwHhcNMjYwMTAxMDIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWY0MjYzZGQyM2ViZTZjYmY1OTA4ZjdkYTlkNjk3NGRiZmMyZTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1uWXzTrRuGOTfkIrq3iIy+JBj18 TZqsUzZxAaltp+4nITYQYmEub7yPwwk1GRsLwcJid/grCwTp1EzDmdXsKOSeKH9/ ogSpM/8gpAT+fnoMrDrTPYpO08+p9rpwrjcEpqvlanv5eWvhteCwjqzfMINhLFuW +x9jhfTuq27Bm2qBmAe79zE+z7PmNL095TgeGLGICgezPMaStJH5w8MgYUpuH7Hq RA4W8SYYR/S6pAIzrUgkG9LVOMLoP+tBpb5eGnADmzRXbRmz2XqnQGNg1PZqZWWT LfrdhGWG3xywKE/frkgGVvho+KfdENSnDn7OAJhdOtquuPW+jg29qrRBOQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMH0Jj3SPr5sv1kI99qdaXTb/C4zMB8GA1UdIwQY MBaAFAv1Q+I+KfsDdI0JOXJvMP6a/6GeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ19WRDRqNHAtd04walFrNWNtOHdfcHJfb1o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9hZmEzNGMtZjNmMC00MDVjLWIwODMt YTM1ZmM0MzhkNGNhLzEvd2ZRbVBkSS12bXlfV1FqMzJwMXBkTnY4TGpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9hZmEzNGMtZjNmMC00MDVjLWIwODMtYTM1ZmM0MzhkNGNh LzEvQ19WRDRqNHAtd04walFrNWNtOHdfcHJfb1o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYSXMA0G CSqGSIb3DQEBCwUAA4IBAQADFQb/ui5xs/SmiW2aT5Y3chMUSYE3RE/0TjfFZvJX 1E+g8OdiTGlCJsK8uutoPJZ25UniTl+m9fwdDDuM9B/+hAAaVBDPzeQoLf3Tbcm1 AQSnwPF1tAduWfhK5bRYp0w+OjgYHvny3m/ofx2kQMARNSItFc+lSTCJ7J2R8M7s nP5yf67udgLz5u02WBFuQlKhOmq8RU+V67/sJcT+TZVL9xYsHDuCFd2zSp2Hh08T kDEpI3fH5RvAv23BUs8F+45yfa0ekx3nxnLDKvZCoDh0XaFdMZx09u9gRsDkHgJE 56rOvghMyed4Sn9Lnr48+GVytKARozuOYX4imVh1buZi -----END CERTIFICATE-----Generated at Sun Jan 25 21:39:41 2026 by rpki-client