This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/wGJZUgLVzvKov5HMqc96vMBOKxg.roa File: wGJZUgLVzvKov5HMqc96vMBOKxg.roa (raw, json) Hash identifier: oms0IW+uIReNvkOakQGvTc51/xVxcCwuVQU4GuUxeGY= Subject key identifier: C0:62:59:52:02:D5:CE:F2:A8:BF:91:CC:A9:CF:7A:BC:C0:4E:2B:18 Certificate issuer: /CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e Certificate serial: 019B7A5B3BA47D6DD61562461ECF7510F1DB Authority key identifier: 5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/wGJZUgLVzvKov5HMqc96vMBOKxg.roa Signing time: Thu 01 Jan 2026 16:19:17 +0000 ROA not before: Thu 01 Jan 2026 16:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 45.15.104.0/23 maxlen: 24 45.15.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:3b:a4:7d:6d:d6:15:62:46:1e:cf:75:10:f1:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e Validity Not Before: Jan 1 16:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c062595202d5cef2a8bf91cca9cf7abcc04e2b18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1f:30:92:9d:d9:7b:55:2d:bc:75:5c:f5:26: 41:84:13:0e:8e:96:e2:51:f5:a7:c5:2f:9f:1f:66: b7:85:1a:80:4f:62:d6:d8:f3:36:ea:4b:d7:c6:3d: 8e:e1:98:d2:bd:81:e8:ba:36:29:95:3f:b4:d2:92: 73:82:30:32:9d:5a:e9:b4:d9:c7:bf:4c:cd:22:f9: ca:53:4f:03:3f:94:ea:ec:de:6f:d4:a0:f7:75:ec: a0:98:cd:6f:f4:f2:4a:99:cc:bf:90:fa:8b:56:5a: 04:52:1f:ef:46:1e:25:f7:6b:31:9d:f0:b2:3f:f1: 06:20:c9:38:bf:bd:2a:e2:3f:63:7c:44:89:81:7e: a0:41:62:89:26:3d:ba:dd:cf:1e:07:90:b9:d2:b3: 93:5c:e4:3c:e7:3a:80:95:b4:a5:a4:1a:02:e5:ba: 51:3a:04:98:94:36:55:32:84:33:04:40:b9:41:11: ee:7c:8d:4e:89:d2:98:74:95:a5:21:9a:c7:a7:20: 81:b1:56:ce:37:0a:d1:c7:bb:6a:0d:0e:8d:ff:3d: 28:65:f1:54:89:1d:bd:54:27:67:93:2c:ee:96:20: 32:9d:3f:19:95:7a:52:6c:42:7a:80:2a:33:fb:ec: 22:9a:50:b3:89:91:76:44:c8:64:aa:9e:79:49:bf: f3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:62:59:52:02:D5:CE:F2:A8:BF:91:CC:A9:CF:7A:BC:C0:4E:2B:18 X509v3 Authority Key Identifier: keyid:5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/wGJZUgLVzvKov5HMqc96vMBOKxg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.15.104.0/22 Signature Algorithm: sha256WithRSAEncryption a8:23:98:10:f2:76:76:8c:97:00:ec:6b:58:d9:f0:87:c1:9d: bd:f5:74:07:95:99:5c:80:d4:5e:28:e3:36:f9:87:16:e2:65: fc:c1:ef:bb:ba:64:c8:c9:74:7e:a5:54:54:d3:cf:b0:e5:7e: 48:51:39:bb:8a:e7:a4:a6:01:3e:40:94:75:f2:5f:65:93:bd: 36:19:02:20:f7:e8:96:9b:72:4a:1a:c1:b6:64:a5:14:a9:24: 56:f2:3e:64:8b:9c:9f:ec:33:55:32:0d:7c:25:e5:32:73:a3: d4:61:92:cf:c0:54:45:cd:cf:e8:b9:91:53:5f:d5:18:27:50: 55:31:da:83:ce:9f:2a:43:2b:86:c5:01:27:29:7a:80:3c:19: cf:ca:83:9d:d0:96:53:13:27:f9:b1:25:95:98:ee:d0:f8:73: 80:ec:b9:30:27:e8:ed:05:4e:5f:76:e0:f2:96:5d:a2:3a:ba: 16:52:8c:16:16:97:c6:12:ed:a9:ac:5f:33:35:f2:ac:42:dd: af:50:c2:f7:9a:8f:86:ef:90:bf:8b:99:8c:5f:fc:68:ee:eb: 9c:91:1b:a4:c5:46:1a:ec:bf:ee:c4:26:b6:e0:b8:18:b0:9e: 2a:c0:4c:2c:2f:b1:38:23:86:40:02:f2:58:82:b1:a3:85:77: 95:52:72:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6WzukfW3WFWJGHs91EPHbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlOGQwN2I0NWY3ZDgzMTI0YzlmOGMwZmFjMDNiZWMwMjQ2 OGIzN2UwHhcNMjYwMTAxMTYxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMDYyNTk1MjAyZDVjZWYyYThiZjkxY2NhOWNmN2FiY2MwNGUyYjE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmR8wkp3Ze1UtvHVc9SZBhBMOjpbi UfWnxS+fH2a3hRqAT2LW2PM26kvXxj2O4ZjSvYHoujYplT+00pJzgjAynVrptNnH v0zNIvnKU08DP5Tq7N5v1KD3deygmM1v9PJKmcy/kPqLVloEUh/vRh4l92sxnfCy P/EGIMk4v70q4j9jfESJgX6gQWKJJj263c8eB5C50rOTXOQ85zqAlbSlpBoC5bpR OgSYlDZVMoQzBEC5QRHufI1OidKYdJWlIZrHpyCBsVbONwrRx7tqDQ6N/z0oZfFU iR29VCdnkyzuliAynT8ZlXpSbEJ6gCoz++wimlCziZF2RMhkqp55Sb/zlwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMBiWVIC1c7yqL+RzKnPerzATisYMB8GA1UdIwQY MBaAFF6NB7RffYMSTJ+MD6wDvsAkaLN+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG8wSHRGOTlneEpNbjR3UHJBTy13Q1JvczM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9hMTY4ZTktZDA3MC00NGUwLTk0YTQt NmM4ZmQ4NGJiNWY1LzEvd0dKWlVnTFZ6dktvdjVITXFjOTZ2TUJPS3hnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9hMTY4ZTktZDA3MC00NGUwLTk0YTQtNmM4ZmQ4NGJiNWY1 LzEvWG8wSHRGOTlneEpNbjR3UHJBTy13Q1JvczM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLQ9oMA0G CSqGSIb3DQEBCwUAA4IBAQCoI5gQ8nZ2jJcA7GtY2fCHwZ299XQHlZlcgNReKOM2 +YcW4mX8we+7umTIyXR+pVRU08+w5X5IUTm7iuekpgE+QJR18l9lk702GQIg9+iW m3JKGsG2ZKUUqSRW8j5ki5yf7DNVMg18JeUyc6PUYZLPwFRFzc/ouZFTX9UYJ1BV MdqDzp8qQyuGxQEnKXqAPBnPyoOd0JZTEyf5sSWVmO7Q+HOA7LkwJ+jtBU5fduDy ll2iOroWUowWFpfGEu2prF8zNfKsQt2vUML3mo+G75C/i5mMX/xo7uuckRukxUYa 7L/uxCa24LgYsJ4qwEwsL7E4I4ZAAvJYgrGjhXeVUnIz -----END CERTIFICATE-----Generated at Sun Jan 25 13:54:36 2026 by rpki-client