This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/W-3X8u9-OrvUeLo8xLv1uaz-auc.roa File: W-3X8u9-OrvUeLo8xLv1uaz-auc.roa (raw, json) Hash identifier: tbkSD6s1DOahdkzjFQfsMElUjxoxSG8eBWUM4PX1okg= Subject key identifier: 5B:ED:D7:F2:EF:7E:3A:BB:D4:78:BA:3C:C4:BB:F5:B9:AC:FE:6A:E7 Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Certificate serial: 019B783458315C30C15C8230F08A2A2CCA42 Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/W-3X8u9-OrvUeLo8xLv1uaz-auc.roa Signing time: Thu 01 Jan 2026 06:17:34 +0000 ROA not before: Thu 01 Jan 2026 06:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206499 IP address blocks: 45.14.68.0/24 maxlen: 32 45.14.69.0/24 maxlen: 24 193.177.223.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:58:31:5c:30:c1:5c:82:30:f0:8a:2a:2c:ca:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2 Validity Not Before: Jan 1 06:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5bedd7f2ef7e3abbd478ba3cc4bbf5b9acfe6ae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:11:7e:03:e0:f0:bd:d3:89:41:1c:bf:95:95: 40:3c:fe:4e:ea:b5:18:e6:d9:17:fc:be:c6:ca:f5: f3:36:62:ec:28:71:1c:4f:c8:31:d5:7c:10:4b:d7: da:e4:b1:dc:7a:cf:e9:17:a7:71:2e:17:83:d2:5c: 53:a8:b8:8a:5d:ac:b7:ee:36:cb:3d:8e:26:7f:29: 53:f7:09:01:9f:ce:67:93:59:dd:4b:68:8d:82:52: 78:7d:d3:c4:ab:9f:cc:bb:e9:00:e9:06:21:67:f7: 76:65:8d:3d:c0:a1:df:8e:91:4c:ba:fe:d4:cc:de: 59:c4:e3:c9:74:d6:1e:e0:d8:ae:80:1f:ab:82:5a: 70:5f:2b:12:17:70:4e:6c:49:66:ea:33:38:c0:1a: b8:de:bd:6a:4d:c7:92:cd:dd:32:dd:b7:75:c3:0b: f4:ef:6e:c6:62:80:44:9d:c4:ee:19:c8:7f:9f:07: 28:bc:00:a7:9e:11:ab:82:f0:95:ec:44:b4:fb:a8: 49:43:82:0f:72:e7:d8:57:ec:2e:bb:b3:a1:96:ec: bf:c3:5f:a4:9d:57:06:ee:fc:01:34:a5:64:fc:7f: cd:d9:59:0f:b3:db:e9:e6:ff:42:6f:f3:d3:c4:07: 5b:af:66:3f:9a:73:fe:fd:cc:44:ea:68:38:59:8c: bf:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:ED:D7:F2:EF:7E:3A:BB:D4:78:BA:3C:C4:BB:F5:B9:AC:FE:6A:E7 X509v3 Authority Key Identifier: keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/W-3X8u9-OrvUeLo8xLv1uaz-auc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.14.68.0/23 193.177.223.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:fc:c6:5e:0e:d0:58:8d:7a:55:4a:33:2c:39:b3:21:43:d6: 95:77:d6:a6:29:cf:5c:81:ed:ca:9a:ce:4d:93:b9:93:3b:e7: 81:45:ae:db:98:68:5c:00:64:c5:d2:9c:5e:4f:e7:67:32:9a: 3e:39:72:10:aa:c6:b4:0d:45:a9:16:3b:d6:64:60:34:9a:7a: cd:94:24:f9:da:6d:3e:c0:7a:19:b4:1a:78:3e:55:ab:fe:74: c6:8e:c2:40:0d:c9:6c:70:50:5f:b1:49:7f:f1:a9:36:de:25: f4:6b:3f:9e:bb:62:19:89:b9:0f:9e:11:9d:46:f6:0d:86:40: 53:bd:db:cb:14:30:a1:82:27:5c:52:c8:dc:16:bc:1f:d3:f3: 72:6f:5b:b2:00:3a:d7:b9:6f:0c:83:49:d3:fa:31:0b:28:1c: 7c:9a:fb:b6:e8:66:ad:92:70:fe:08:a0:23:52:b0:7d:57:c3: 9e:be:94:05:62:42:f2:40:8b:9f:b8:9e:68:e9:f1:1a:1c:e6: 3c:66:c4:0a:62:bc:1e:e1:41:f1:37:ae:1d:0a:b1:30:f0:fe: 0a:32:ad:1f:80:45:b9:d2:5e:3b:c6:33:31:f6:fd:77:b0:bc: 3f:56:d2:38:39:f0:3b:5a:1b:42:73:a8:5b:ab:44:2e:4f:9d: 3a:a2:62:7e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4NFgxXDDBXIIw8IoqLMpCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1NzZlYjJjYzQ2MmU2ZTRiZjBkZTY5YjlmNjM0ODc1ZGVi YmFhZTIwHhcNMjYwMTAxMDYxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YmVkZDdmMmVmN2UzYWJiZDQ3OGJhM2NjNGJiZjViOWFjZmU2YWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxF+A+DwvdOJQRy/lZVAPP5O6rUY 5tkX/L7GyvXzNmLsKHEcT8gx1XwQS9fa5LHces/pF6dxLheD0lxTqLiKXay37jbL PY4mfylT9wkBn85nk1ndS2iNglJ4fdPEq5/Mu+kA6QYhZ/d2ZY09wKHfjpFMuv7U zN5ZxOPJdNYe4NiugB+rglpwXysSF3BObElm6jM4wBq43r1qTceSzd0y3bd1wwv0 727GYoBEncTuGch/nwcovACnnhGrgvCV7ES0+6hJQ4IPcufYV+wuu7Ohluy/w1+k nVcG7vwBNKVk/H/N2VkPs9vp5v9Cb/PTxAdbr2Y/mnP+/cxE6mg4WYy/cwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFvt1/Lvfjq71Hi6PMS79bms/mrnMB8GA1UdIwQY MBaAFKV26yzEYubkvw3mm59jSHXeu6riMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEt MjU0YWNkOTJiNGUxLzEvVy0zWDh1OS1PcnZVZUxvOHhMdjF1YXotYXVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny85MzE5MjctOWYzOC00MWI2LTg3ZmEtMjU0YWNkOTJiNGUx LzEvcFhickxNUmk1dVNfRGVhYm4yTklkZDY3cXVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLQ5EAwQA wbHfMA0GCSqGSIb3DQEBCwUAA4IBAQBv/MZeDtBYjXpVSjMsObMhQ9aVd9amKc9c ge3Kms5Nk7mTO+eBRa7bmGhcAGTF0pxeT+dnMpo+OXIQqsa0DUWpFjvWZGA0mnrN lCT52m0+wHoZtBp4PlWr/nTGjsJADclscFBfsUl/8ak23iX0az+eu2IZibkPnhGd RvYNhkBTvdvLFDChgidcUsjcFrwf0/Nyb1uyADrXuW8Mg0nT+jELKBx8mvu26Gat knD+CKAjUrB9V8OevpQFYkLyQIufuJ5o6fEaHOY8ZsQKYrwe4UHxN64dCrEw8P4K Mq0fgEW50l47xjMx9v13sLw/VtI4OfA7WhtCc6hbq0QuT506omJ+ -----END CERTIFICATE-----Generated at Sun Jan 25 22:30:08 2026 by rpki-client