This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/WMiYfXfaecilSx0Cw11AX6GHoD0.roa File: WMiYfXfaecilSx0Cw11AX6GHoD0.roa (raw, json) Hash identifier: tfANuqYEsqBC9djOQlOpVgZbpkAcWNv/SHctNZh0ths= Subject key identifier: 58:C8:98:7D:77:DA:79:C8:A5:4B:1D:02:C3:5D:40:5F:A1:87:A0:3D Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Certificate serial: 019B7C804FD20775F12FDE1C4572E04DBF01 Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/WMiYfXfaecilSx0Cw11AX6GHoD0.roa Signing time: Fri 02 Jan 2026 02:19:02 +0000 ROA not before: Fri 02 Jan 2026 02:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208149 IP address blocks: 45.140.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:4f:d2:07:75:f1:2f:de:1c:45:72:e0:4d:bf:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Validity Not Before: Jan 2 02:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58c8987d77da79c8a54b1d02c35d405fa187a03d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1a:ec:17:30:fd:91:03:5f:bd:5e:61:6b:fa: df:ce:5e:81:44:f9:d5:22:d6:77:69:2f:44:35:9c: 87:12:c3:58:3f:37:2e:36:84:5c:ac:58:9d:d0:4b: 1f:b8:6a:5f:39:10:05:5e:6b:82:f3:7e:88:bb:64: e5:ab:59:fd:91:ec:e8:e7:53:d2:12:f2:50:6b:9a: d2:72:1a:b9:e6:25:fa:10:8e:8c:f3:0b:47:f5:d5: 02:e3:39:ff:2c:9c:89:33:ad:22:91:ae:67:e2:33: f1:18:7f:09:10:00:02:ec:bf:4d:84:ab:ec:1e:1e: 3a:38:2c:d6:ee:93:f9:6b:a8:fd:08:cf:52:23:68: f3:d9:d4:38:46:fa:1c:72:03:ff:d0:b5:56:2b:1e: 6a:a1:d6:17:26:8f:55:35:7d:86:31:a6:ab:da:b6: cc:b0:03:41:5f:be:8f:b4:06:ae:46:81:e4:48:c2: 01:50:6a:56:26:73:28:b8:2d:8b:b2:98:30:68:1b: 7e:d5:40:b9:4c:b3:15:a5:06:64:e7:64:cc:98:0e: 04:e4:44:c6:f1:eb:40:2e:8c:03:30:bc:c3:65:2e: b7:48:5a:fa:cc:f2:5b:8e:ca:6c:ab:20:b4:73:d1: 29:fb:57:ff:38:4c:d4:31:4a:3b:01:a3:ca:ce:72: 1c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C8:98:7D:77:DA:79:C8:A5:4B:1D:02:C3:5D:40:5F:A1:87:A0:3D X509v3 Authority Key Identifier: keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/WMiYfXfaecilSx0Cw11AX6GHoD0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.140.41.0/24 Signature Algorithm: sha256WithRSAEncryption 87:a5:b2:ec:49:b2:73:b2:fe:e5:bc:6b:d1:7d:97:00:82:be: cd:3b:83:be:a8:99:dd:ab:ac:be:1c:17:a8:16:f4:f7:ca:5d: aa:33:b3:81:eb:ec:09:a4:b3:34:4d:48:8d:60:04:ff:4d:53: e1:52:1a:c7:f8:7d:01:82:75:5c:d1:28:3b:5f:bb:6a:24:d1: 83:27:a3:c9:1d:cf:b1:97:82:ac:e8:68:74:1d:f4:88:3c:78: ca:52:bb:23:24:a4:eb:8b:4b:34:37:02:22:18:fb:60:68:67: fd:7b:e3:d3:15:4c:fd:4f:c4:de:72:b3:64:d9:29:bd:94:bb: 7f:55:6f:c1:4d:b4:8a:4e:ad:22:55:59:7a:08:ae:e2:98:ac: 41:76:35:47:d6:7c:81:f2:f1:6e:07:03:39:fb:12:94:11:f1: 6d:08:f7:22:02:35:20:6d:d8:61:49:13:2b:dc:5a:05:3f:f0: ac:d1:2d:eb:f0:09:10:f8:b8:fc:74:14:e4:85:16:b3:55:69: df:ff:87:b3:7c:3d:a1:47:03:8f:cb:84:58:4f:0a:5d:23:00: 41:26:08:19:cf:e3:b3:83:c6:0f:c9:88:91:2f:85:7f:39:6d: dd:87:ef:01:3e:bd:94:29:50:b1:25:51:34:8b:f6:b9:89:49: f4:ce:9b:95 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gE/SB3XxL94cRXLgTb8BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNWU5M2Y5MDIzNTRjZTQ4MDRiNGNiMDQ5Y2Y2OGIyMGY3 NmFlYjIwHhcNMjYwMTAyMDIxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OGM4OTg3ZDc3ZGE3OWM4YTU0YjFkMDJjMzVkNDA1ZmExODdhMDNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxrsFzD9kQNfvV5ha/rfzl6BRPnV ItZ3aS9ENZyHEsNYPzcuNoRcrFid0EsfuGpfORAFXmuC836Iu2Tlq1n9kezo51PS EvJQa5rSchq55iX6EI6M8wtH9dUC4zn/LJyJM60ika5n4jPxGH8JEAAC7L9NhKvs Hh46OCzW7pP5a6j9CM9SI2jz2dQ4RvoccgP/0LVWKx5qodYXJo9VNX2GMaar2rbM sANBX76PtAauRoHkSMIBUGpWJnMouC2LspgwaBt+1UC5TLMVpQZk52TMmA4E5ETG 8etALowDMLzDZS63SFr6zPJbjspsqyC0c9Ep+1f/OEzUMUo7AaPKznIcoQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFjImH132nnIpUsdAsNdQF+hh6A9MB8GA1UdIwQY MBaAFK9ek/kCNUzkgEtMsEnPaLIPdq6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWIt N2UwNWFkMDE5MGNlLzEvV01pWWZYZmFlY2lsU3gwQ3cxMUFYNkdIb0QwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWItN2UwNWFkMDE5MGNl LzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYwpMA0G CSqGSIb3DQEBCwUAA4IBAQCHpbLsSbJzsv7lvGvRfZcAgr7NO4O+qJndq6y+HBeo FvT3yl2qM7OB6+wJpLM0TUiNYAT/TVPhUhrH+H0BgnVc0Sg7X7tqJNGDJ6PJHc+x l4Ks6Gh0HfSIPHjKUrsjJKTri0s0NwIiGPtgaGf9e+PTFUz9T8TecrNk2Sm9lLt/ VW/BTbSKTq0iVVl6CK7imKxBdjVH1nyB8vFuBwM5+xKUEfFtCPciAjUgbdhhSRMr 3FoFP/Cs0S3r8AkQ+Lj8dBTkhRazVWnf/4ezfD2hRwOPy4RYTwpdIwBBJggZz+Oz g8YPyYiRL4V/OW3dh+8BPr2UKVCxJVE0i/a5iUn0zpuV -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:06 2026 by rpki-client