This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/wtka4z7ztds-k3iO7wp9y0osEUY.roa File: wtka4z7ztds-k3iO7wp9y0osEUY.roa (raw, json) Hash identifier: 7Vs2oBterma76wN+0B4LZEwE0nOwCbvncK5XltWq/qI= Subject key identifier: C2:D9:1A:E3:3E:F3:B5:DB:3E:93:78:8E:EF:0A:7D:CB:4A:2C:11:46 Certificate issuer: /CN=0562d5a67b7a20f865e753163a6ed0e5f347e839 Certificate serial: 019B77589E9E156A9D0501273AB70AE9B63E Authority key identifier: 05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/wtka4z7ztds-k3iO7wp9y0osEUY.roa Signing time: Thu 01 Jan 2026 02:17:35 +0000 ROA not before: Thu 01 Jan 2026 02:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12905 IP address blocks: 195.146.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.mft rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:9e:9e:15:6a:9d:05:01:27:3a:b7:0a:e9:b6:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0562d5a67b7a20f865e753163a6ed0e5f347e839 Validity Not Before: Jan 1 02:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2d91ae33ef3b5db3e93788eef0a7dcb4a2c1146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:77:5d:5b:d7:8c:46:88:0e:d2:b3:8d:9a:96: b3:c9:40:ae:7a:ec:df:b6:dc:07:c6:f1:c4:a5:63: c3:cd:54:14:d5:db:2d:64:2e:af:38:4a:db:d7:ba: 08:a3:a5:ce:9c:b4:37:40:79:f3:7a:cd:41:da:d4: 8d:f0:93:f6:9e:ed:e3:b1:1a:62:a2:96:0d:08:02: 7e:0b:81:b8:ed:ed:0b:48:4b:fa:25:51:07:b1:77: 39:9b:f4:c6:80:db:e7:ba:a5:c7:5d:b9:37:95:77: f8:37:04:84:3f:7d:ab:9c:cf:04:8c:31:bb:41:e9: 1e:41:37:5d:59:e2:e2:cf:7f:df:28:b5:54:c9:15: a1:58:f7:b6:45:de:c2:6f:d2:f4:04:3f:92:29:bf: 29:7b:7d:99:d2:44:36:68:00:81:6e:ce:74:3b:0c: 60:a2:f9:6d:61:0b:de:6f:8f:c5:48:cf:f7:d7:99: 7e:cd:45:b0:2d:1d:64:38:78:86:a4:71:f6:ae:08: 6a:4a:73:82:7c:cc:11:9b:ea:d1:57:1d:56:54:bc: 17:ce:02:9e:72:d9:6d:9b:b2:b1:e2:4d:bd:7c:39: a3:6e:f7:20:1c:c6:62:4f:76:82:0c:8f:a5:a7:d5: 21:45:33:a7:1b:8c:c5:e2:e7:18:de:0b:26:79:0e: 4c:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D9:1A:E3:3E:F3:B5:DB:3E:93:78:8E:EF:0A:7D:CB:4A:2C:11:46 X509v3 Authority Key Identifier: keyid:05:62:D5:A6:7B:7A:20:F8:65:E7:53:16:3A:6E:D0:E5:F3:47:E8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/wtka4z7ztds-k3iO7wp9y0osEUY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/8b01c2-ecbe-4f88-ae37-504c8fc220ea/1/BWLVpnt6IPhl51MWOm7Q5fNH6Dk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.146.13.0/24 Signature Algorithm: sha256WithRSAEncryption 81:4d:10:f8:1c:24:11:07:f9:2a:fc:91:55:3a:e7:d1:d1:9e: 5b:a6:2b:9e:ad:d8:2a:3b:78:f4:fe:3d:e4:4a:45:a3:6a:84: 48:c9:4e:9e:c8:d0:03:7a:83:3c:a7:fb:09:d6:f5:e9:de:55: d4:6d:28:43:2d:5a:b5:74:8b:e2:d7:2f:2d:19:29:dc:1b:86: 59:80:7b:11:31:75:b4:f1:59:7d:90:b5:64:0d:de:41:a3:6a: 0f:22:74:07:f1:52:47:8c:bb:5d:b5:22:66:9d:10:b2:8b:58: 40:a3:59:80:64:21:42:70:f1:1d:e4:42:b0:06:5e:69:19:6b: fa:9f:98:9b:0d:6f:49:db:5c:02:e3:92:62:3d:29:06:23:f0: f8:ac:22:04:65:9f:a0:d3:3e:74:00:85:6c:47:21:04:74:75: fc:8b:5f:00:a1:62:31:20:b3:f9:11:b8:3a:e7:00:92:99:ce: 2a:ea:5e:f5:c6:5a:6e:df:4f:98:dc:22:3c:b3:10:c1:b6:e7: 37:da:7b:ba:a4:bc:ff:c3:d0:a8:81:46:96:ae:ac:a1:89:e3: 23:0b:70:27:31:09:8e:1c:8a:ac:1f:45:5a:7a:ce:f6:76:1b: 48:40:40:6c:6f:0f:2a:09:86:cb:6a:21:fc:c9:3b:f8:97:e7: 8f:d0:ac:7d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WJ6eFWqdBQEnOrcK6bY+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NjJkNWE2N2I3YTIwZjg2NWU3NTMxNjNhNmVkMGU1ZjM0 N2U4MzkwHhcNMjYwMTAxMDIxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMmQ5MWFlMzNlZjNiNWRiM2U5Mzc4OGVlZjBhN2RjYjRhMmMxMTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3ddW9eMRogO0rONmpazyUCueuzf ttwHxvHEpWPDzVQU1dstZC6vOErb17oIo6XOnLQ3QHnzes1B2tSN8JP2nu3jsRpi opYNCAJ+C4G47e0LSEv6JVEHsXc5m/TGgNvnuqXHXbk3lXf4NwSEP32rnM8EjDG7 QekeQTddWeLiz3/fKLVUyRWhWPe2Rd7Cb9L0BD+SKb8pe32Z0kQ2aACBbs50Owxg ovltYQveb4/FSM/315l+zUWwLR1kOHiGpHH2rghqSnOCfMwRm+rRVx1WVLwXzgKe ctltm7Kx4k29fDmjbvcgHMZiT3aCDI+lp9UhRTOnG4zF4ucY3gsmeQ5MYwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMLZGuM+87XbPpN4ju8KfctKLBFGMB8GA1UdIwQY MBaAFAVi1aZ7eiD4ZedTFjpu0OXzR+g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQldMVnBudDZJUGhsNTFNV09tN1E1Zk5INkRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi84YjAxYzItZWNiZS00Zjg4LWFlMzct NTA0YzhmYzIyMGVhLzEvd3RrYTR6N3p0ZHMtazNpTzd3cDl5MG9zRVVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi84YjAxYzItZWNiZS00Zjg4LWFlMzctNTA0YzhmYzIyMGVh LzEvQldMVnBudDZJUGhsNTFNV09tN1E1Zk5INkRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw5INMA0G CSqGSIb3DQEBCwUAA4IBAQCBTRD4HCQRB/kq/JFVOufR0Z5bpiuerdgqO3j0/j3k SkWjaoRIyU6eyNADeoM8p/sJ1vXp3lXUbShDLVq1dIvi1y8tGSncG4ZZgHsRMXW0 8Vl9kLVkDd5Bo2oPInQH8VJHjLtdtSJmnRCyi1hAo1mAZCFCcPEd5EKwBl5pGWv6 n5ibDW9J21wC45JiPSkGI/D4rCIEZZ+g0z50AIVsRyEEdHX8i18AoWIxILP5Ebg6 5wCSmc4q6l71xlpu30+Y3CI8sxDBtuc32nu6pLz/w9CogUaWrqyhieMjC3AnMQmO HIqsH0Vaes72dhtIQEBsbw8qCYbLaiH8yTv4l+eP0Kx9 -----END CERTIFICATE-----Generated at Mon Jan 26 10:14:06 2026 by rpki-client