This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/wwateRuj040-ENpDYQ6qLA2XVl0.roa File: wwateRuj040-ENpDYQ6qLA2XVl0.roa (raw, json) Hash identifier: NH6PZI4atftudx1FEvFD8kdIjwc++XEY3pey7kw2zFs= Subject key identifier: C3:06:AD:79:1B:A3:D3:8D:3E:10:DA:43:61:0E:AA:2C:0D:97:56:5D Certificate issuer: /CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a Certificate serial: 019B7B36D9295EA83AC7BF7E8C816AC22891 Authority key identifier: AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/wwateRuj040-ENpDYQ6qLA2XVl0.roa Signing time: Thu 01 Jan 2026 20:19:10 +0000 ROA not before: Thu 01 Jan 2026 20:19:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57588 IP address blocks: 5.149.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:d9:29:5e:a8:3a:c7:bf:7e:8c:81:6a:c2:28:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a Validity Not Before: Jan 1 20:19:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c306ad791ba3d38d3e10da43610eaa2c0d97565d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:fc:30:8e:16:f2:82:dd:6b:c7:a0:e3:2c:16: 5f:fa:ba:87:4d:43:09:f5:ed:5c:7a:9f:9a:a0:da: 5a:79:58:d1:0e:72:0f:45:bc:d4:2c:94:5d:48:4b: d1:59:db:71:b7:2b:d3:67:9b:9c:a8:ff:f6:7b:e1: 09:fa:73:06:42:c3:27:69:c8:a5:1e:2c:83:c9:72: 1b:ef:27:23:00:a7:06:1d:c3:08:7b:e2:76:74:38: 02:62:11:87:0f:3c:5b:29:99:ba:df:39:f8:dc:19: dd:9e:15:dc:09:38:24:69:44:5d:7e:52:60:2d:66: 0a:d6:b2:6c:2f:60:3c:95:fb:81:c7:6a:29:af:12: 0f:98:9c:6a:c7:37:5c:27:c6:09:22:bc:cd:ce:fc: e0:e7:fb:14:ac:8d:a0:9b:d3:5e:23:e7:a2:0a:a8: 00:eb:28:92:c1:e1:ca:38:1b:a1:90:d2:d3:22:ce: b1:de:d9:aa:5d:2d:a6:5c:58:e1:a8:d4:cc:8d:bc: b1:08:95:95:48:c8:ed:b0:8d:2d:2e:67:86:19:eb: 58:96:24:ce:ed:fe:5f:90:69:85:ed:ca:fb:30:fa: ae:a9:f1:43:23:e7:f3:21:5d:e0:ab:bb:24:c4:f2: ce:b8:22:54:c9:8f:11:51:ae:99:04:50:25:7e:9d: 9d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:06:AD:79:1B:A3:D3:8D:3E:10:DA:43:61:0E:AA:2C:0D:97:56:5D X509v3 Authority Key Identifier: keyid:AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/wwateRuj040-ENpDYQ6qLA2XVl0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.149.102.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:b3:bc:28:1e:b2:a7:79:81:b6:d3:bb:b7:64:d0:1a:95:2a: 54:7e:2a:2c:e4:6f:57:a0:ea:d1:96:12:d6:01:66:a3:c9:65: 19:30:e7:9f:e4:a9:39:b4:d4:91:2c:2a:5f:31:27:94:db:b2: 62:5e:90:5b:0f:09:c7:fc:d7:af:58:a2:02:bf:a0:c0:23:83: 6d:01:31:c9:6b:8f:b6:dc:d5:a9:3a:6a:a0:50:c9:89:01:35: 82:fe:5e:23:a8:69:56:f1:45:0d:87:6e:3e:6a:e3:62:d3:74: 06:8d:67:45:a3:1f:bb:3c:69:e3:75:82:1d:f8:70:e9:4c:5f: 2e:8d:8f:63:39:a3:cf:22:d0:aa:a6:20:cc:cf:f3:9d:23:fc: e1:69:6f:1a:a6:d3:e5:63:b6:98:65:52:51:57:bb:fa:bd:43: e5:9b:af:6a:03:07:ca:c4:16:cf:6d:01:df:63:92:41:91:57: 9e:72:9d:6c:da:15:10:9d:f9:87:f6:84:12:1f:dc:eb:d7:9f: 78:d8:a8:2d:e2:73:5e:7e:35:32:5b:d5:92:b3:ba:2c:03:29: 2a:28:8c:42:e1:f3:54:46:52:b2:ff:d9:75:46:e9:76:06:f1: 2c:3d:bf:1f:43:10:7e:97:ff:77:a4:7e:1b:24:67:51:8d:f7: 59:bd:9e:81 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NtkpXqg6x79+jIFqwiiRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZTA4ZDkzMzZmMmU2Y2QxNjVlYjczMDI5N2ZlNmQyMGM4 M2MzOWEwHhcNMjYwMTAxMjAxOTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzA2YWQ3OTFiYTNkMzhkM2UxMGRhNDM2MTBlYWEyYzBkOTc1NjVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fwwjhbygt1rx6DjLBZf+rqHTUMJ 9e1cep+aoNpaeVjRDnIPRbzULJRdSEvRWdtxtyvTZ5ucqP/2e+EJ+nMGQsMnacil HiyDyXIb7ycjAKcGHcMIe+J2dDgCYhGHDzxbKZm63zn43BndnhXcCTgkaURdflJg LWYK1rJsL2A8lfuBx2oprxIPmJxqxzdcJ8YJIrzNzvzg5/sUrI2gm9NeI+eiCqgA 6yiSweHKOBuhkNLTIs6x3tmqXS2mXFjhqNTMjbyxCJWVSMjtsI0tLmeGGetYliTO 7f5fkGmF7cr7MPquqfFDI+fzIV3gq7skxPLOuCJUyY8RUa6ZBFAlfp2daQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMMGrXkbo9ONPhDaQ2EOqiwNl1ZdMB8GA1UdIwQY MBaAFK7gjZM28ubNFl63MCl/5tIMg8OaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnVDTmt6Ynk1czBXWHJjd0tYX20wZ3lEdzVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9mODUzZjgtMjA3MS00OWRlLWI2YTAt NDk3YmVkZDcxZWI5LzEvd3dhdGVSdWowNDAtRU5wRFlRNnFMQTJYVmwwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9mODUzZjgtMjA3MS00OWRlLWI2YTAtNDk3YmVkZDcxZWI5 LzEvcnVDTmt6Ynk1czBXWHJjd0tYX20wZ3lEdzVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABZVmMA0G CSqGSIb3DQEBCwUAA4IBAQCbs7woHrKneYG207u3ZNAalSpUfios5G9XoOrRlhLW AWajyWUZMOef5Kk5tNSRLCpfMSeU27JiXpBbDwnH/NevWKICv6DAI4NtATHJa4+2 3NWpOmqgUMmJATWC/l4jqGlW8UUNh24+auNi03QGjWdFox+7PGnjdYId+HDpTF8u jY9jOaPPItCqpiDMz/OdI/zhaW8aptPlY7aYZVJRV7v6vUPlm69qAwfKxBbPbQHf Y5JBkVeecp1s2hUQnfmH9oQSH9zr15942Kgt4nNefjUyW9WSs7osAykqKIxC4fNU RlKy/9l1Rul2BvEsPb8fQxB+l/93pH4bJGdRjfdZvZ6B -----END CERTIFICATE-----Generated at Mon Jan 26 02:24:41 2026 by rpki-client