This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/WPpx-izSeflERwTZTBDMUjusV5s.roa File: WPpx-izSeflERwTZTBDMUjusV5s.roa (raw, json) Hash identifier: cWk+1ANHgFtlvOQuSevrBNEAZRGbynzPPc7h5zNZTe0= Subject key identifier: 58:FA:71:FA:2C:D2:79:F9:44:47:04:D9:4C:10:CC:52:3B:AC:57:9B Certificate issuer: /CN=121a37282dd992d88658160559e048392798c84b Certificate serial: 019B7A5A9F553DA5F6926CCB2E2C281E4D51 Authority key identifier: 12:1A:37:28:2D:D9:92:D8:86:58:16:05:59:E0:48:39:27:98:C8:4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/WPpx-izSeflERwTZTBDMUjusV5s.roa Signing time: Thu 01 Jan 2026 16:18:37 +0000 ROA not before: Thu 01 Jan 2026 16:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44092 IP address blocks: 45.13.128.0/22 maxlen: 22 45.13.128.0/24 maxlen: 24 45.13.129.0/24 maxlen: 24 45.13.130.0/24 maxlen: 24 45.13.131.0/24 maxlen: 24 185.149.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.mft rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:9f:55:3d:a5:f6:92:6c:cb:2e:2c:28:1e:4d:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=121a37282dd992d88658160559e048392798c84b Validity Not Before: Jan 1 16:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58fa71fa2cd279f9444704d94c10cc523bac579b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8c:e7:0c:38:de:7d:cd:4f:7f:15:b4:c4:8c: 16:43:0a:61:2d:e5:c6:5c:43:60:c2:36:5d:f9:6e: fe:4b:32:cc:45:69:46:00:c0:83:91:63:43:7e:42: 1b:c6:ee:8e:0d:79:48:5b:09:52:a1:0e:7e:1e:69: 5a:5e:c7:1f:f0:4b:5b:a6:07:34:28:6a:87:86:77: b2:75:d4:7a:a6:e3:d4:fa:d3:cd:2d:88:e6:e2:a1: 90:ef:47:e9:e1:a0:44:89:cb:ae:cd:b2:60:d6:b1: d7:da:0c:65:97:26:ed:e0:4c:6d:88:e7:9e:95:cd: fe:5a:e1:5e:f7:29:7e:4b:45:72:1c:86:69:2b:ec: b7:77:07:c5:ba:7d:83:3e:9f:c1:f8:77:41:6d:b1: 2e:c8:c5:48:34:64:7d:70:af:c5:74:94:23:fc:50: 9c:9a:59:f8:ad:f8:ed:1a:89:f5:3f:f4:06:ee:18: 1e:1d:e4:38:07:4e:c4:69:d9:af:54:fc:d5:1f:ca: 38:e9:0d:14:19:95:8f:82:d3:20:57:06:69:c8:28: 7a:48:65:bf:20:bc:61:3f:46:12:97:42:8c:f8:67: 95:32:5f:03:cf:07:6b:91:4f:80:1a:46:0e:44:3d: fc:9b:82:fe:ba:d0:c3:29:b0:b4:b4:0f:0e:61:3c: 13:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:FA:71:FA:2C:D2:79:F9:44:47:04:D9:4C:10:CC:52:3B:AC:57:9B X509v3 Authority Key Identifier: keyid:12:1A:37:28:2D:D9:92:D8:86:58:16:05:59:E0:48:39:27:98:C8:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eho3KC3ZktiGWBYFWeBIOSeYyEs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/WPpx-izSeflERwTZTBDMUjusV5s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/fed131-f9d7-41b2-b8bc-082b1f7f0db2/1/Eho3KC3ZktiGWBYFWeBIOSeYyEs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.13.128.0/22 185.149.35.0/24 Signature Algorithm: sha256WithRSAEncryption 9f:15:4c:0a:16:dd:ec:da:72:b7:59:12:63:28:6d:3b:3e:21: 5a:4e:ca:32:10:20:48:d6:96:1e:73:8e:f0:66:8a:9c:23:37: a0:b5:69:54:26:b8:22:93:c7:bd:f5:9e:24:b0:40:13:d2:68: 7a:0c:d6:93:d6:f4:aa:d8:8c:68:f1:28:4c:f0:a4:25:7c:6a: e4:16:2c:73:ba:42:71:d4:6b:00:eb:b8:ca:c4:1d:d3:e0:8b: 86:54:f0:ea:d3:92:bc:f2:9f:40:55:34:a1:82:c8:b5:63:63: cf:21:c7:c0:b9:aa:64:52:db:6f:b5:fe:e1:f1:71:dd:49:03: e7:c1:4f:11:00:0b:bc:6b:20:8a:79:0e:6e:82:77:34:9e:97: f9:81:71:85:25:92:e1:69:ef:0d:2f:7b:04:35:6a:d7:ab:33: bb:55:73:51:3f:70:35:b7:ab:20:7f:e8:10:ad:46:fd:05:05: 10:99:d8:25:49:25:1e:35:18:29:2d:57:ea:57:b4:dd:bb:02: 1b:d8:53:06:6f:01:e2:e5:39:4d:95:6c:73:3e:11:db:c0:da: 4b:37:00:d8:44:99:a5:91:3a:68:68:77:3a:38:ec:bb:5a:ef: 39:07:35:14:a7:89:4f:9d:e9:2e:07:b8:bf:82:2d:8e:90:69: 6c:91:1a:9b -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6Wp9VPaX2kmzLLiwoHk1RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyMWEzNzI4MmRkOTkyZDg4NjU4MTYwNTU5ZTA0ODM5Mjc5 OGM4NGIwHhcNMjYwMTAxMTYxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGZhNzFmYTJjZDI3OWY5NDQ0NzA0ZDk0YzEwY2M1MjNiYWM1NzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoznDDjefc1PfxW0xIwWQwphLeXG XENgwjZd+W7+SzLMRWlGAMCDkWNDfkIbxu6ODXlIWwlSoQ5+HmlaXscf8Etbpgc0 KGqHhneyddR6puPU+tPNLYjm4qGQ70fp4aBEicuuzbJg1rHX2gxllybt4ExtiOee lc3+WuFe9yl+S0VyHIZpK+y3dwfFun2DPp/B+HdBbbEuyMVINGR9cK/FdJQj/FCc mln4rfjtGon1P/QG7hgeHeQ4B07EadmvVPzVH8o46Q0UGZWPgtMgVwZpyCh6SGW/ ILxhP0YSl0KM+GeVMl8DzwdrkU+AGkYORD38m4L+utDDKbC0tA8OYTwTcQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFj6cfos0nn5REcE2UwQzFI7rFebMB8GA1UdIwQY MBaAFBIaNygt2ZLYhlgWBVngSDknmMhLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWhvM0tDM1prdGlHV0JZRldlQklPU2VZeUVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mZWQxMzEtZjlkNy00MWIyLWI4YmMt MDgyYjFmN2YwZGIyLzEvV1BweC1pelNlZmxFUndUWlRCRE1VanVzVjVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mZWQxMzEtZjlkNy00MWIyLWI4YmMtMDgyYjFmN2YwZGIy LzEvRWhvM0tDM1prdGlHV0JZRldlQklPU2VZeUVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLQ2AAwQA uZUjMA0GCSqGSIb3DQEBCwUAA4IBAQCfFUwKFt3s2nK3WRJjKG07PiFaTsoyECBI 1pYec47wZoqcIzegtWlUJrgik8e99Z4ksEAT0mh6DNaT1vSq2Ixo8ShM8KQlfGrk FixzukJx1GsA67jKxB3T4IuGVPDq05K88p9AVTShgsi1Y2PPIcfAuapkUttvtf7h 8XHdSQPnwU8RAAu8ayCKeQ5ugnc0npf5gXGFJZLhae8NL3sENWrXqzO7VXNRP3A1 t6sgf+gQrUb9BQUQmdglSSUeNRgpLVfqV7TduwIb2FMGbwHi5TlNlWxzPhHbwNpL NwDYRJmlkTpoaHc6OOy7Wu85BzUUp4lPnekuB7i/gi2OkGlskRqb -----END CERTIFICATE-----Generated at Sun Jan 25 22:16:47 2026 by rpki-client