This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/WFDBbvRDi-eiY4Z7SoKbpPKiU3c.roa File: WFDBbvRDi-eiY4Z7SoKbpPKiU3c.roa (raw, json) Hash identifier: BnsEIW4rKKjSae4ZFuOrsK7zlfaSefyGTIAaHnaM8ZU= Subject key identifier: 58:50:C1:6E:F4:43:8B:E7:A2:63:86:7B:4A:82:9B:A4:F2:A2:53:77 Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc Certificate serial: 019B7C11849B24FCEEE2ADA25067E118E02E Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/WFDBbvRDi-eiY4Z7SoKbpPKiU3c.roa Signing time: Fri 02 Jan 2026 00:18:01 +0000 ROA not before: Fri 02 Jan 2026 00:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209946 IP address blocks: 46.151.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:84:9b:24:fc:ee:e2:ad:a2:50:67:e1:18:e0:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc Validity Not Before: Jan 2 00:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5850c16ef4438be7a263867b4a829ba4f2a25377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:36:03:3c:12:5f:36:75:de:0a:ea:e4:c3:cb: f2:cb:a6:d0:4a:19:81:d5:8d:97:6b:52:62:2f:30: 10:7e:0f:2a:5d:05:5e:5d:24:08:35:7a:b4:d9:71: b5:48:51:58:a8:11:0e:2f:3f:83:6d:17:30:17:a4: 29:a9:27:15:36:19:18:01:1f:16:21:7d:6f:00:8f: 01:3b:b7:48:3b:bf:ec:86:2e:17:5f:e0:a1:c6:31: 40:ea:ac:66:a0:97:e7:92:15:6e:52:ff:b9:37:32: 5b:20:29:e6:4f:ea:b7:31:45:fa:1a:cd:9e:8f:c1: 81:c3:94:7f:67:18:91:09:1a:d1:7b:8c:83:9c:c3: 52:ce:d0:b9:0d:36:55:34:0c:06:88:bc:7f:f0:37: 68:ef:36:93:fc:26:98:ca:6f:c7:d1:f2:24:4b:d6: 3f:9e:4f:4c:2d:1c:ed:a6:e3:78:6b:12:49:8a:30: aa:1c:69:59:7c:c4:05:9b:12:23:1d:08:49:49:07: 34:f4:f2:99:51:06:9b:f1:1f:42:82:c7:41:8f:81: 79:46:06:94:09:27:22:f6:08:5b:f7:fd:19:66:1a: ed:b5:70:fd:51:d3:e2:a7:cc:7c:0e:8a:a2:88:89: 3d:57:11:5a:d6:8e:1d:2f:d4:d6:81:81:60:ea:cf: 7e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:50:C1:6E:F4:43:8B:E7:A2:63:86:7B:4A:82:9B:A4:F2:A2:53:77 X509v3 Authority Key Identifier: keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/WFDBbvRDi-eiY4Z7SoKbpPKiU3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.151.177.0/24 Signature Algorithm: sha256WithRSAEncryption 69:01:24:dd:dc:87:ea:fa:fb:77:f6:35:d0:57:c6:d8:ff:a3: 6f:d6:2d:80:ae:d5:68:94:f4:14:f3:58:45:8b:64:52:64:c5: 3a:a6:bc:45:7b:37:a1:6e:c7:f2:22:51:78:1c:7c:11:7e:f9: 6b:8a:00:b8:88:8a:26:ba:53:94:5c:2b:67:1f:5d:cd:be:dd: 94:4c:22:67:f9:63:a8:6d:1d:d3:8f:cb:33:eb:2b:96:91:6d: 2c:2a:ef:6e:4f:d1:a9:73:1b:a8:7a:f2:d9:20:ae:05:39:de: e5:72:a1:6b:3a:ea:7e:ac:3c:25:6e:eb:8a:8d:26:39:51:ad: 2d:5a:ce:f6:75:31:00:c6:e0:aa:bc:c5:c6:ed:00:d0:cf:37: a5:8f:81:5f:90:ef:f4:0e:9a:00:63:d2:16:18:c6:de:d5:9b: 02:d6:0e:a9:86:04:31:c4:50:a5:30:35:1e:ea:f9:f6:d8:77: 46:b9:31:ee:bb:f1:6d:11:a3:8f:4e:fd:12:8c:3c:9d:06:88: 9d:73:33:7d:b8:60:fe:4c:56:15:1c:d6:ca:31:01:99:b2:f8: dc:82:ec:ae:0f:00:8c:51:ab:ba:b8:a3:00:3c:c7:e2:64:e2: 7e:5f:7e:55:58:d0:00:83:84:a7:9c:f4:aa:8f:c0:eb:23:75: 65:47:7f:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EYSbJPzu4q2iUGfhGOAuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYjQ0MWRhZGJiZWNiNjk2NWQ0ZWExZjA0NmNjNWM4ZTI4 ODE3ZmMwHhcNMjYwMTAyMDAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODUwYzE2ZWY0NDM4YmU3YTI2Mzg2N2I0YTgyOWJhNGYyYTI1Mzc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TYDPBJfNnXeCurkw8vyy6bQShmB 1Y2Xa1JiLzAQfg8qXQVeXSQINXq02XG1SFFYqBEOLz+DbRcwF6QpqScVNhkYAR8W IX1vAI8BO7dIO7/shi4XX+ChxjFA6qxmoJfnkhVuUv+5NzJbICnmT+q3MUX6Gs2e j8GBw5R/ZxiRCRrRe4yDnMNSztC5DTZVNAwGiLx/8Ddo7zaT/CaYym/H0fIkS9Y/ nk9MLRztpuN4axJJijCqHGlZfMQFmxIjHQhJSQc09PKZUQab8R9CgsdBj4F5RgaU CSci9ghb9/0ZZhrttXD9UdPip8x8DoqiiIk9VxFa1o4dL9TWgYFg6s9+vwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFhQwW70Q4vnomOGe0qCm6TyolN3MB8GA1UdIwQY MBaAFI60QdrbvstpZdTqHwRsxcjiiBf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmIt NDZiOTQ5MDkyY2JlLzEvV0ZEQmJ2UkRpLWVpWTRaN1NvS2JwUEtpVTNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmItNDZiOTQ5MDkyY2Jl LzEvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALpexMA0G CSqGSIb3DQEBCwUAA4IBAQBpASTd3Ifq+vt39jXQV8bY/6Nv1i2ArtVolPQU81hF i2RSZMU6prxFezehbsfyIlF4HHwRfvlrigC4iIomulOUXCtnH13Nvt2UTCJn+WOo bR3Tj8sz6yuWkW0sKu9uT9GpcxuoevLZIK4FOd7lcqFrOup+rDwlbuuKjSY5Ua0t Ws72dTEAxuCqvMXG7QDQzzelj4FfkO/0DpoAY9IWGMbe1ZsC1g6phgQxxFClMDUe 6vn22HdGuTHuu/FtEaOPTv0SjDydBoidczN9uGD+TFYVHNbKMQGZsvjcguyuDwCM Uau6uKMAPMfiZOJ+X35VWNAAg4SnnPSqj8DrI3VlR38B -----END CERTIFICATE-----Generated at Sun Jan 25 07:17:21 2026 by rpki-client