This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/WNwct_JeSUw9EGnGt5EMmHO1qnA.roa File: WNwct_JeSUw9EGnGt5EMmHO1qnA.roa (raw, json) Hash identifier: 8JESbBJVZwKNLtuuBYLAyN1yjWX+0RJfMcx4iiDnUQ0= Subject key identifier: 58:DC:1C:B7:F2:5E:49:4C:3D:10:69:C6:B7:91:0C:98:73:B5:AA:70 Certificate issuer: /CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530 Certificate serial: 019B77C6EE95793462B43C328BEBAF3D1282 Authority key identifier: 91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/WNwct_JeSUw9EGnGt5EMmHO1qnA.roa Signing time: Thu 01 Jan 2026 04:18:04 +0000 ROA not before: Thu 01 Jan 2026 04:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207350 IP address blocks: 45.135.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.mft rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ee:95:79:34:62:b4:3c:32:8b:eb:af:3d:12:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530 Validity Not Before: Jan 1 04:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58dc1cb7f25e494c3d1069c6b7910c9873b5aa70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8e:b4:cb:7b:db:44:08:64:4c:db:f8:72:f3: 56:2f:c1:9f:ac:93:bf:e0:63:81:24:6d:12:df:17: 5d:a9:10:cc:c1:84:00:93:25:12:67:08:d9:ec:c8: e2:19:43:91:b4:a6:7f:25:c0:bb:31:59:a0:30:44: 43:20:fc:a8:39:41:f5:c0:dc:ed:1b:4d:a2:f5:4f: e3:9a:a8:99:67:36:ad:a5:d8:7e:ee:4a:09:b4:b9: 68:60:b1:76:78:d4:01:61:3f:cf:a3:49:e7:be:53: bd:da:37:6e:b3:0d:c6:1c:22:9f:94:25:d2:e8:f2: 71:42:22:66:a0:74:91:c7:1f:8d:ce:5b:5e:70:6f: 79:8a:36:30:ea:96:7c:ae:d9:44:d7:0a:49:b6:09: d8:36:70:86:36:ac:2c:36:2b:e8:df:a8:25:1d:2c: f6:e9:ef:65:00:16:b3:f4:cc:d6:f3:03:c8:d6:8c: 82:1f:cd:ad:cd:31:ac:df:26:bf:03:45:4e:f2:a6: 7e:e6:26:6d:51:ef:03:a7:3d:56:7f:e6:fa:96:ff: 49:ce:a2:a8:0d:a4:d3:2d:5e:03:bf:5e:58:14:42: cf:f4:51:95:f7:95:6e:6d:76:d0:39:1a:2d:ff:a6: b8:76:4e:ed:bd:10:36:da:94:9e:dc:56:61:d9:b8: a0:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:DC:1C:B7:F2:5E:49:4C:3D:10:69:C6:B7:91:0C:98:73:B5:AA:70 X509v3 Authority Key Identifier: keyid:91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/WNwct_JeSUw9EGnGt5EMmHO1qnA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.135.195.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:73:70:24:14:70:d7:93:8a:02:65:db:e3:7c:d4:5b:ea:d1: 24:e1:62:0a:f9:26:ec:6e:78:d3:9e:56:2c:2d:93:60:63:e3: 84:30:f2:2b:c6:ba:fe:ad:2b:74:a3:94:26:64:49:cb:b5:ca: 90:ad:08:87:32:14:59:1a:d8:3f:24:7e:c0:0b:a3:89:8d:78: 5d:10:fe:e0:e4:58:38:fa:cb:da:a7:80:de:54:b3:ab:75:5a: 4b:f5:1b:ca:28:9b:e7:bc:dc:d3:fe:50:81:93:74:ff:a3:d7: 09:65:52:0b:fe:67:4f:95:a9:0f:91:5a:c6:88:e7:67:18:c5: 12:66:3c:c9:40:c8:b5:c1:8f:b0:98:90:a8:6c:e9:ef:48:10: 98:4b:a8:ee:44:64:d6:84:71:18:12:8b:d2:83:8a:e7:55:30: d5:bf:9b:a8:fb:d2:09:8d:23:36:6d:9d:8a:5f:f9:8f:f2:b5: c9:ab:d1:ec:71:3d:0d:7a:f2:8f:18:98:38:d2:74:7e:43:90: 28:57:9b:62:55:e6:74:52:a8:7d:69:31:15:4f:3b:32:0e:29: 0f:45:72:27:24:c7:08:9e:f3:15:b5:f7:ee:97:7a:48:62:9d: e9:e4:17:ca:91:fe:27:b8:af:f3:e1:87:f3:12:31:c3:5e:c1: 6b:60:21:1b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xu6VeTRitDwyi+uvPRKCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxZDBjNzhjMzA5YTNlOTlkYzlhYjc0ZjJjZGMwNDg0ODU5 ZTc1MzAwHhcNMjYwMTAxMDQxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGRjMWNiN2YyNWU0OTRjM2QxMDY5YzZiNzkxMGM5ODczYjVhYTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0I60y3vbRAhkTNv4cvNWL8GfrJO/ 4GOBJG0S3xddqRDMwYQAkyUSZwjZ7MjiGUORtKZ/JcC7MVmgMERDIPyoOUH1wNzt G02i9U/jmqiZZzatpdh+7koJtLloYLF2eNQBYT/Po0nnvlO92jdusw3GHCKflCXS 6PJxQiJmoHSRxx+NzltecG95ijYw6pZ8rtlE1wpJtgnYNnCGNqwsNivo36glHSz2 6e9lABaz9MzW8wPI1oyCH82tzTGs3ya/A0VO8qZ+5iZtUe8Dpz1Wf+b6lv9JzqKo DaTTLV4Dv15YFELP9FGV95VubXbQORot/6a4dk7tvRA22pSe3FZh2bigjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFjcHLfyXklMPRBpxreRDJhztapwMB8GA1UdIwQY MBaAFJHQx4wwmj6Z3Jq3TyzcBISFnnUwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2RESGpEQ2FQcG5jbXJkUExOd0VoSVdlZFRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8yOTNhMmYtMzk5Ny00OTdmLTllZjEt NDg1MmM4ZmY4YWYyLzEvV053Y3RfSmVTVXc5RUduR3Q1RU1tSE8xcW5BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS8yOTNhMmYtMzk5Ny00OTdmLTllZjEtNDg1MmM4ZmY4YWYy LzEva2RESGpEQ2FQcG5jbXJkUExOd0VoSVdlZFRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYfDMA0G CSqGSIb3DQEBCwUAA4IBAQBtc3AkFHDXk4oCZdvjfNRb6tEk4WIK+SbsbnjTnlYs LZNgY+OEMPIrxrr+rSt0o5QmZEnLtcqQrQiHMhRZGtg/JH7AC6OJjXhdEP7g5Fg4 +svap4DeVLOrdVpL9RvKKJvnvNzT/lCBk3T/o9cJZVIL/mdPlakPkVrGiOdnGMUS ZjzJQMi1wY+wmJCobOnvSBCYS6juRGTWhHEYEovSg4rnVTDVv5uo+9IJjSM2bZ2K X/mP8rXJq9HscT0NevKPGJg40nR+Q5AoV5tiVeZ0Uqh9aTEVTzsyDikPRXInJMcI nvMVtfful3pIYp3p5BfKkf4nuK/z4YfzEjHDXsFrYCEb -----END CERTIFICATE-----Generated at Sun Jan 25 17:41:33 2026 by rpki-client