This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/wWjX3G1u8VVJrZxUXxszdZPmLOQ.roa File: wWjX3G1u8VVJrZxUXxszdZPmLOQ.roa (raw, json) Hash identifier: r4GR8IEEVmZoiDV/k0vnJZnERNrwiOO08DpOlDa1gSM= Subject key identifier: C1:68:D7:DC:6D:6E:F1:55:49:AD:9C:54:5F:1B:33:75:93:E6:2C:E4 Certificate issuer: /CN=bfff419659f54df378792b602c0092c353988ec8 Certificate serial: 019B77C68E5D6E607E6C436D0EDAC0BBC0B1 Authority key identifier: BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/wWjX3G1u8VVJrZxUXxszdZPmLOQ.roa Signing time: Thu 01 Jan 2026 04:17:39 +0000 ROA not before: Thu 01 Jan 2026 04:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208342 IP address blocks: 45.129.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.crl rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:8e:5d:6e:60:7e:6c:43:6d:0e:da:c0:bb:c0:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfff419659f54df378792b602c0092c353988ec8 Validity Not Before: Jan 1 04:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c168d7dc6d6ef15549ad9c545f1b337593e62ce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d8:85:af:c0:85:37:67:c3:b1:ce:ce:74:a0: 3d:33:33:35:b4:e4:39:af:38:e4:8c:2b:b4:b9:9f: 3a:81:47:ee:f3:c3:e2:6a:ca:44:4a:61:b6:17:d2: 02:6b:51:e1:3c:aa:20:30:be:e5:12:bd:d5:4e:ee: cc:b0:3e:42:4f:12:5b:b0:4b:73:81:6d:c9:70:7c: fc:7b:be:56:2f:f8:14:1b:75:23:56:48:3a:67:28: 37:15:3c:aa:54:2b:96:86:e6:50:89:9f:b5:83:0d: f1:6b:c4:2e:a0:d5:6f:a1:21:b2:7e:07:f1:61:4a: 68:b1:83:e2:f6:da:db:e1:28:68:5e:39:85:c8:69: a4:bd:d2:73:bd:a5:8e:40:dc:03:f4:45:bb:45:b8: 84:00:73:68:ea:d1:8b:f6:ac:f3:f2:5f:83:80:32: 14:e3:77:2b:60:55:7b:ec:e6:6d:f1:3d:c7:69:7a: dc:aa:55:2e:6e:4e:0e:84:4c:57:eb:31:00:ba:24: 82:35:98:bd:97:72:cf:e0:c2:48:95:52:52:01:38: 4b:93:97:5b:83:0b:b8:1f:c4:20:88:e2:c4:b2:a8: 41:d9:2b:63:f0:73:e7:1f:fa:7e:e9:e8:a3:1f:3f: ba:e2:ad:38:e1:5a:5b:69:c4:d3:9c:3e:b0:7e:27: 07:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:68:D7:DC:6D:6E:F1:55:49:AD:9C:54:5F:1B:33:75:93:E6:2C:E4 X509v3 Authority Key Identifier: keyid:BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/wWjX3G1u8VVJrZxUXxszdZPmLOQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.129.244.0/22 Signature Algorithm: sha256WithRSAEncryption 9f:f9:a8:bb:a4:d0:7b:b5:6b:e0:33:33:04:6b:c6:61:81:d3: 0d:92:cc:1f:e6:ee:59:b6:4c:df:1d:42:5b:7b:d3:24:f3:d9: 84:04:06:c2:2b:7c:e0:8c:f2:35:1b:b0:e3:59:f6:9f:b6:26: 68:bd:30:55:79:68:fc:a7:be:20:31:36:6d:c7:1e:21:2c:b5: 79:9f:29:6a:03:8e:46:28:47:ea:e9:11:2c:ff:d7:57:6b:7c: a9:81:c8:6f:52:cc:29:2f:59:2a:82:c7:f7:cc:53:95:60:3a: fd:c9:e5:86:1c:db:47:51:ed:75:3c:3e:a6:af:29:6b:0b:f9: 90:e0:cb:5c:b3:72:47:f0:7e:db:47:ff:81:76:28:eb:e6:fe: 38:63:e4:e3:8f:d5:b5:eb:7a:eb:e7:b4:9a:19:48:d7:12:30: 43:36:5c:2e:e9:d9:3e:be:d0:e2:61:26:42:25:69:35:10:77: e9:07:a8:07:90:b8:f0:24:77:53:e6:55:03:d0:77:60:d3:88: f7:75:22:ac:40:16:67:1e:1c:7b:78:95:ef:c4:36:c9:fe:9e: 7c:f7:49:fe:45:8a:ce:7c:38:f4:94:b8:e2:ec:9c:5b:98:a5: c0:73:37:d2:22:5c:83:84:44:be:bf:9d:8f:be:3a:81:2d:af: 71:8d:65:90 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xo5dbmB+bENtDtrAu8CxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmZmY0MTk2NTlmNTRkZjM3ODc5MmI2MDJjMDA5MmMzNTM5 ODhlYzgwHhcNMjYwMTAxMDQxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTY4ZDdkYzZkNmVmMTU1NDlhZDljNTQ1ZjFiMzM3NTkzZTYyY2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdiFr8CFN2fDsc7OdKA9MzM1tOQ5 rzjkjCu0uZ86gUfu88PiaspESmG2F9ICa1HhPKogML7lEr3VTu7MsD5CTxJbsEtz gW3JcHz8e75WL/gUG3UjVkg6Zyg3FTyqVCuWhuZQiZ+1gw3xa8QuoNVvoSGyfgfx YUposYPi9trb4ShoXjmFyGmkvdJzvaWOQNwD9EW7RbiEAHNo6tGL9qzz8l+DgDIU 43crYFV77OZt8T3HaXrcqlUubk4OhExX6zEAuiSCNZi9l3LP4MJIlVJSAThLk5db gwu4H8QgiOLEsqhB2Stj8HPnH/p+6eijHz+64q044VpbacTTnD6wficHNQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMFo19xtbvFVSa2cVF8bM3WT5izkMB8GA1UdIwQY MBaAFL//QZZZ9U3zeHkrYCwAksNTmI7IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdl85QmxsbjFUZk40ZVN0Z0xBQ1N3MU9ZanNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8yYmExMzgtMTczNy00NzE0LTk2MGEt NzBiZGYxNWRkNjE5LzEvd1dqWDNHMXU4VlZKclp4VVh4c3pkWlBtTE9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8yYmExMzgtMTczNy00NzE0LTk2MGEtNzBiZGYxNWRkNjE5 LzEvdl85QmxsbjFUZk40ZVN0Z0xBQ1N3MU9ZanNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYH0MA0G CSqGSIb3DQEBCwUAA4IBAQCf+ai7pNB7tWvgMzMEa8ZhgdMNkswf5u5ZtkzfHUJb e9Mk89mEBAbCK3zgjPI1G7DjWfaftiZovTBVeWj8p74gMTZtxx4hLLV5nylqA45G KEfq6REs/9dXa3ypgchvUswpL1kqgsf3zFOVYDr9yeWGHNtHUe11PD6mrylrC/mQ 4Mtcs3JH8H7bR/+Bdijr5v44Y+Tjj9W163rr57SaGUjXEjBDNlwu6dk+vtDiYSZC JWk1EHfpB6gHkLjwJHdT5lUD0Hdg04j3dSKsQBZnHhx7eJXvxDbJ/p5890n+RYrO fDj0lLji7JxbmKXAczfSIlyDhES+v52PvjqBLa9xjWWQ -----END CERTIFICATE-----Generated at Mon Jan 26 07:23:35 2026 by rpki-client