This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/wUNwGf3weme7_N7kG1xP9AeAxJE.roa File: wUNwGf3weme7_N7kG1xP9AeAxJE.roa (raw, json) Hash identifier: RTXJNRv1wo+Ygeoep6YXJ3IS+lidvBNwP9G7ge528y0= Subject key identifier: C1:43:70:19:FD:F0:7A:67:BB:FC:DE:E4:1B:5C:4F:F4:07:80:C4:91 Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Certificate serial: 019B7B35E7D8E091137DD1B7F4565853E37E Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/wUNwGf3weme7_N7kG1xP9AeAxJE.roa Signing time: Thu 01 Jan 2026 20:18:08 +0000 ROA not before: Thu 01 Jan 2026 20:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34984 IP address blocks: 45.10.148.0/24 maxlen: 24 185.169.181.0/24 maxlen: 24 185.174.22.0/24 maxlen: 24 185.174.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:e7:d8:e0:91:13:7d:d1:b7:f4:56:58:53:e3:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Validity Not Before: Jan 1 20:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1437019fdf07a67bbfcdee41b5c4ff40780c491 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8c:ea:51:d5:1d:b0:f8:97:6d:35:3d:07:e9: 33:12:86:21:0e:0f:5d:13:52:88:cd:c8:36:cb:cc: 08:49:e4:0a:55:48:32:69:31:87:74:48:a8:dd:9e: 1c:fb:92:55:06:bd:4f:37:ac:5e:62:bf:47:35:e7: 81:60:45:65:02:2c:28:1d:a2:91:d0:fa:c2:43:e2: 68:cf:82:44:07:f0:7b:97:dd:3c:39:d8:ff:b7:92: 7b:23:1b:af:3e:7c:41:9e:95:54:56:d9:85:c4:00: 2a:17:32:7c:ef:31:d8:97:32:b6:68:1d:9d:a6:c5: 95:28:20:cd:3b:c5:b9:8a:24:3d:3b:5c:b0:b1:f5: 49:83:31:22:eb:9b:ed:b3:b9:34:ce:d8:73:26:63: 40:82:28:7c:30:f2:67:e4:99:a6:40:08:26:9b:f0: 93:4e:1b:c4:cc:3b:38:c0:35:f3:a8:54:5e:7f:c8: bd:88:99:b1:54:c9:4b:58:25:67:64:85:fa:47:3d: 39:44:08:b2:b8:ec:2a:af:c9:29:c0:d0:1a:51:5c: 9e:c0:26:e0:0d:4e:99:1f:a1:7f:81:83:7e:6b:8d: 0d:67:37:93:2a:b7:06:5e:44:2a:20:ef:60:25:4a: 7f:16:27:c4:72:24:eb:d8:92:ae:ad:fe:30:da:e3: 7b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:43:70:19:FD:F0:7A:67:BB:FC:DE:E4:1B:5C:4F:F4:07:80:C4:91 X509v3 Authority Key Identifier: keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/wUNwGf3weme7_N7kG1xP9AeAxJE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.10.148.0/24 185.169.181.0/24 185.174.22.0/23 Signature Algorithm: sha256WithRSAEncryption 6f:a2:48:c5:ea:d7:7b:4c:53:48:57:bf:f3:5a:8b:9c:80:a3: d5:27:3f:98:22:4c:1c:95:20:bd:40:31:d7:c2:32:4a:06:76: 02:73:cf:ef:ea:9a:35:47:a1:45:82:50:da:4d:6d:34:97:52: 67:8d:07:75:57:93:33:67:6f:91:43:87:f3:e5:25:dd:8b:9e: a6:fe:7f:3f:5a:53:b9:8e:53:8f:84:c3:c9:dc:01:03:17:dd: 71:10:3a:90:5e:ea:cc:c0:21:9f:8d:ae:2c:20:56:cb:2c:d2: d0:0d:ad:10:8d:92:f2:65:b2:59:66:b8:92:be:5d:48:14:70: ee:4c:18:6e:b6:fe:43:2d:93:51:f2:8e:57:45:20:f2:b4:66: 22:0b:b1:21:f2:b8:93:21:44:33:e3:61:56:17:50:1f:54:50: ba:98:7e:85:04:4b:f9:88:4f:8f:f6:8c:c3:69:fa:e9:c2:f0: eb:69:64:8f:51:6f:10:bb:0b:d8:20:b3:95:ee:87:5b:84:74: 78:ee:2c:ae:ba:aa:7a:ab:52:43:b2:0d:33:d4:c4:0c:b4:70: 11:e4:48:f4:cb:9c:b9:35:9e:15:bf:d5:8b:b2:a4:80:42:3d: 6e:da:ce:61:b7:9b:99:5b:40:0d:1d:bf:78:0d:20:7a:44:88: c1:e9:35:4b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt7NefY4JETfdG39FZYU+N+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMGRhNDNiNGE1ZDNkYjc4YmEzZjc3NGU1YjMxYjc3MDM3 MjAyZDUwHhcNMjYwMTAxMjAxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTQzNzAxOWZkZjA3YTY3YmJmY2RlZTQxYjVjNGZmNDA3ODBjNDkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYzqUdUdsPiXbTU9B+kzEoYhDg9d E1KIzcg2y8wISeQKVUgyaTGHdEio3Z4c+5JVBr1PN6xeYr9HNeeBYEVlAiwoHaKR 0PrCQ+Joz4JEB/B7l908Odj/t5J7IxuvPnxBnpVUVtmFxAAqFzJ87zHYlzK2aB2d psWVKCDNO8W5iiQ9O1ywsfVJgzEi65vts7k0zthzJmNAgih8MPJn5JmmQAgmm/CT ThvEzDs4wDXzqFRef8i9iJmxVMlLWCVnZIX6Rz05RAiyuOwqr8kpwNAaUVyewCbg DU6ZH6F/gYN+a40NZzeTKrcGXkQqIO9gJUp/FifEciTr2JKurf4w2uN7YwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMFDcBn98Hpnu/ze5BtcT/QHgMSRMB8GA1UdIwQY MBaAFK0NpDtKXT23i6P3dOWzG3cDcgLVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTct YzUxNWYzNTRjYzVhLzEvd1VOd0dmM3dlbWU3X043a0cxeFA5QWVBeEpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTctYzUxNWYzNTRjYzVh LzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALQqUAwQA uam1AwQBua4WMA0GCSqGSIb3DQEBCwUAA4IBAQBvokjF6td7TFNIV7/zWoucgKPV Jz+YIkwclSC9QDHXwjJKBnYCc8/v6po1R6FFglDaTW00l1JnjQd1V5MzZ2+RQ4fz 5SXdi56m/n8/WlO5jlOPhMPJ3AEDF91xEDqQXurMwCGfja4sIFbLLNLQDa0QjZLy ZbJZZriSvl1IFHDuTBhutv5DLZNR8o5XRSDytGYiC7Eh8riTIUQz42FWF1AfVFC6 mH6FBEv5iE+P9ozDafrpwvDraWSPUW8QuwvYILOV7odbhHR47iyuuqp6q1JDsg0z 1MQMtHAR5Ej0y5y5NZ4Vv9WLsqSAQj1u2s5ht5uZW0ANHb94DSB6RIjB6TVL -----END CERTIFICATE-----Generated at Sun Jan 25 17:44:43 2026 by rpki-client