This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/W0loJf4D68Ef7i-HjeMsi9v8Nk4.roa File: W0loJf4D68Ef7i-HjeMsi9v8Nk4.roa (raw, json) Hash identifier: iMHrQIDdFD1cWCvyB+6q0E771JtwuMCy7hQtEXJMTUI= Subject key identifier: 5B:49:68:25:FE:03:EB:C1:1F:EE:2F:87:8D:E3:2C:8B:DB:FC:36:4E Certificate issuer: /CN=d23f047b06c8b7271ee10c9af5d1443f0139c127 Certificate serial: 019B7EA52C0F61846D0186554FE4B1D5D361 Authority key identifier: D2:3F:04:7B:06:C8:B7:27:1E:E1:0C:9A:F5:D1:44:3F:01:39:C1:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/W0loJf4D68Ef7i-HjeMsi9v8Nk4.roa Signing time: Fri 02 Jan 2026 12:18:32 +0000 ROA not before: Fri 02 Jan 2026 12:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56683 IP address blocks: 45.133.132.0/24 maxlen: 24 45.133.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.mft rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:2c:0f:61:84:6d:01:86:55:4f:e4:b1:d5:d3:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d23f047b06c8b7271ee10c9af5d1443f0139c127 Validity Not Before: Jan 2 12:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b496825fe03ebc11fee2f878de32c8bdbfc364e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:1c:2c:dc:22:b1:83:50:60:f2:3a:82:6d:9e: f8:8d:0a:7d:1f:02:44:65:33:b8:48:0b:21:42:0f: cc:06:28:96:fc:6a:8c:93:ff:c8:f5:f8:0a:2f:c0: 88:a9:53:fc:bc:70:2a:bd:11:7e:59:11:59:f9:cb: aa:ac:bc:71:eb:d9:81:40:5c:6c:f8:9a:90:b2:7b: c8:d0:96:7a:11:12:b0:e8:bd:6a:8e:df:34:9a:c9: 56:9e:ba:7e:f1:70:a3:8e:b7:82:1b:77:4f:32:e9: b8:e9:2d:39:69:9d:ab:b1:c8:b2:73:8c:12:8e:3b: 38:a4:a0:d6:64:e3:52:2d:dc:14:1b:ed:53:b8:ce: c2:53:52:18:54:35:ce:bd:42:d4:9c:44:7d:7a:bd: 46:63:78:33:ac:fd:cb:85:06:2a:ee:fe:05:bc:a3: 1d:f3:ca:88:1d:85:9b:59:c5:ec:39:d2:8c:6d:b3: af:08:43:c6:db:3e:38:c8:c7:01:9b:d0:e5:43:58: 68:68:e5:12:ca:e6:41:9f:fb:d6:51:85:23:cc:b5: d0:2f:cf:23:a1:f0:e1:26:01:ae:12:b7:cf:22:79: d1:59:86:24:c9:94:89:02:34:2d:94:ff:16:7c:b4: a2:14:3a:6c:6f:91:47:46:e3:86:d4:27:46:77:70: 11:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:49:68:25:FE:03:EB:C1:1F:EE:2F:87:8D:E3:2C:8B:DB:FC:36:4E X509v3 Authority Key Identifier: keyid:D2:3F:04:7B:06:C8:B7:27:1E:E1:0C:9A:F5:D1:44:3F:01:39:C1:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0j8EewbItyce4Qya9dFEPwE5wSc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/W0loJf4D68Ef7i-HjeMsi9v8Nk4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/518f11-d8f9-47a0-9600-5b00fbf4a529/1/0j8EewbItyce4Qya9dFEPwE5wSc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.133.132.0/23 Signature Algorithm: sha256WithRSAEncryption 42:74:a0:e2:38:c4:aa:08:b6:20:ae:0d:d2:4f:98:65:c4:1e: 5f:c4:2f:ce:e4:3f:3c:50:55:88:ea:9b:79:9a:1e:0b:83:80: 0f:75:1a:a4:64:15:89:6f:59:20:53:3d:03:6b:36:50:cd:df: 9d:3e:e0:94:eb:bf:cb:80:0e:d0:93:fc:c4:1b:bf:aa:8c:4f: 19:16:95:7c:68:17:e0:2d:91:97:c2:f9:f6:65:23:94:3e:3b: a2:56:06:1a:f3:7b:29:c4:f4:e2:f6:16:ff:9f:c6:fd:dd:0d: 15:e2:2c:fd:a1:28:7c:90:32:68:4d:7c:f2:85:7a:ac:03:30: 01:0c:e4:cf:cb:8c:22:e3:20:04:e6:41:33:15:33:26:92:11: ea:6d:4e:7f:42:48:c6:3f:44:21:00:41:94:00:71:95:3b:9f: ea:f6:c9:e7:35:21:b2:f0:21:1c:36:cd:f7:25:af:53:ee:7e: 45:99:65:a0:e6:08:3d:7a:aa:cd:d1:22:b2:3e:cb:a4:37:d2: 20:04:12:f2:6d:15:3d:bc:e1:d3:65:2c:1d:6d:8a:66:f4:a2: 7c:f6:03:72:6d:55:89:0c:16:6f:f0:8a:80:36:d2:23:16:fd: 32:3b:6f:69:b2:21:8b:82:9f:c0:43:12:96:fe:d6:59:d4:67: 62:8a:21:30 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pSwPYYRtAYZVT+Sx1dNhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyM2YwNDdiMDZjOGI3MjcxZWUxMGM5YWY1ZDE0NDNmMDEz OWMxMjcwHhcNMjYwMTAyMTIxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjQ5NjgyNWZlMDNlYmMxMWZlZTJmODc4ZGUzMmM4YmRiZmMzNjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshws3CKxg1Bg8jqCbZ74jQp9HwJE ZTO4SAshQg/MBiiW/GqMk//I9fgKL8CIqVP8vHAqvRF+WRFZ+cuqrLxx69mBQFxs +JqQsnvI0JZ6ERKw6L1qjt80mslWnrp+8XCjjreCG3dPMum46S05aZ2rsciyc4wS jjs4pKDWZONSLdwUG+1TuM7CU1IYVDXOvULUnER9er1GY3gzrP3LhQYq7v4FvKMd 88qIHYWbWcXsOdKMbbOvCEPG2z44yMcBm9DlQ1hoaOUSyuZBn/vWUYUjzLXQL88j ofDhJgGuErfPInnRWYYkyZSJAjQtlP8WfLSiFDpsb5FHRuOG1CdGd3ARjwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFtJaCX+A+vBH+4vh43jLIvb/DZOMB8GA1UdIwQY MBaAFNI/BHsGyLcnHuEMmvXRRD8BOcEnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGo4RWV3Ykl0eWNlNFF5YTlkRkVQd0U1d1NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS81MThmMTEtZDhmOS00N2EwLTk2MDAt NWIwMGZiZjRhNTI5LzEvVzBsb0pmNEQ2OEVmN2ktSGplTXNpOXY4Tms0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS81MThmMTEtZDhmOS00N2EwLTk2MDAtNWIwMGZiZjRhNTI5 LzEvMGo4RWV3Ykl0eWNlNFF5YTlkRkVQd0U1d1NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLYWEMA0G CSqGSIb3DQEBCwUAA4IBAQBCdKDiOMSqCLYgrg3ST5hlxB5fxC/O5D88UFWI6pt5 mh4Lg4APdRqkZBWJb1kgUz0DazZQzd+dPuCU67/LgA7Qk/zEG7+qjE8ZFpV8aBfg LZGXwvn2ZSOUPjuiVgYa83spxPTi9hb/n8b93Q0V4iz9oSh8kDJoTXzyhXqsAzAB DOTPy4wi4yAE5kEzFTMmkhHqbU5/QkjGP0QhAEGUAHGVO5/q9snnNSGy8CEcNs33 Ja9T7n5FmWWg5gg9eqrN0SKyPsukN9IgBBLybRU9vOHTZSwdbYpm9KJ89gNybVWJ DBZv8IqANtIjFv0yO29psiGLgp/AQxKW/tZZ1GdiiiEw -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:48 2026 by rpki-client