This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/Wt9ypheec9GpOk_86DTL3w6D2tk.roa File: Wt9ypheec9GpOk_86DTL3w6D2tk.roa (raw, json) Hash identifier: aRWLUqX5vTU61VSd9AOD3yJeqO5wgKqFkxtzxw3VLKA= Subject key identifier: 5A:DF:72:A6:17:9E:73:D1:A9:3A:4F:FC:E8:34:CB:DF:0E:83:DA:D9 Certificate issuer: /CN=b27261d715348bfd73ce9dbb72488656993ba2f1 Certificate serial: 019B7B3554591AD51DBCDD9BBE4D6D4BCCB2 Authority key identifier: B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/Wt9ypheec9GpOk_86DTL3w6D2tk.roa Signing time: Thu 01 Jan 2026 20:17:31 +0000 ROA not before: Thu 01 Jan 2026 20:17:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199785 IP address blocks: 45.132.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.mft rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:54:59:1a:d5:1d:bc:dd:9b:be:4d:6d:4b:cc:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b27261d715348bfd73ce9dbb72488656993ba2f1 Validity Not Before: Jan 1 20:17:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5adf72a6179e73d1a93a4ffce834cbdf0e83dad9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:19:94:06:28:7c:8a:d4:e2:73:38:79:9a:33: 34:3d:c5:b6:56:a5:5b:a4:9c:f8:1a:4b:b8:49:b2: 83:90:29:e2:72:0f:13:40:e1:90:78:f4:0b:94:24: 7e:8c:b9:ef:62:70:52:e0:6d:0b:ad:4f:1d:a5:c6: 81:9d:6f:62:72:a8:5d:3a:b0:7e:06:66:ff:1a:a7: 4b:4d:70:06:73:59:e5:9f:57:08:4c:82:4c:27:97: f7:60:70:b0:8b:28:75:32:be:de:0d:4f:ca:85:5c: 97:13:dc:17:79:80:6b:90:3d:1b:99:22:01:48:1b: 2c:db:84:03:7c:9c:aa:27:f6:cd:17:ea:d9:f1:8b: 7e:d4:9d:ee:b4:6f:75:4b:50:30:54:76:c3:df:b2: a6:26:d5:b1:ad:83:32:b3:98:c1:63:e9:4c:77:28: 98:e7:21:a7:99:a3:c7:1a:8b:ee:ab:d9:bb:69:0b: 67:a1:81:43:03:7b:da:26:7d:04:26:94:7e:39:89: 69:4f:fe:1c:30:6e:37:8a:c3:b9:67:cc:7e:f4:7c: ca:85:f0:35:7f:12:eb:8e:7c:74:f7:e6:34:cd:f5: cc:5f:27:5c:af:cf:89:b1:7e:96:a7:df:15:e6:98: de:6f:a9:69:81:e2:78:5a:94:b1:fd:b9:62:6b:7a: d8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:DF:72:A6:17:9E:73:D1:A9:3A:4F:FC:E8:34:CB:DF:0E:83:DA:D9 X509v3 Authority Key Identifier: keyid:B2:72:61:D7:15:34:8B:FD:73:CE:9D:BB:72:48:86:56:99:3B:A2:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/snJh1xU0i_1zzp27ckiGVpk7ovE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/Wt9ypheec9GpOk_86DTL3w6D2tk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aba502-d191-4fd7-a7cf-504f2766760f/1/snJh1xU0i_1zzp27ckiGVpk7ovE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.132.1.0/24 Signature Algorithm: sha256WithRSAEncryption 09:fc:f0:0c:f2:c4:10:19:9b:39:17:14:77:d8:8a:e2:4a:6c: 35:ac:7c:08:5a:97:e2:9f:f5:dd:5a:b1:2e:95:76:3f:af:a2: 80:2d:a0:20:f4:ef:5a:ad:7d:08:64:41:a5:39:90:0a:dd:a3: b5:55:15:9d:72:7b:9c:7a:ab:29:25:e4:cc:89:f5:8c:79:a1: 0a:ad:bf:6c:61:d9:53:3d:aa:66:ea:c1:a0:0a:c7:d8:63:e5: f1:75:a1:9a:08:b6:16:47:13:15:4a:4e:57:6d:1f:8e:aa:6c: ea:5a:29:be:e0:e6:71:67:d4:bc:bf:66:5e:9e:43:6a:c4:f1: ba:14:69:82:35:0e:18:bf:d0:c7:53:ac:9f:c4:c7:71:84:bd: 6c:c5:52:db:8e:15:f9:63:bc:d0:ff:00:99:e3:10:42:5e:8c: c8:16:ee:fd:87:47:5c:3e:24:3a:54:63:54:62:96:8a:a7:10: 4a:69:89:5e:8c:9a:6e:fd:b1:63:97:fe:26:1e:4b:90:49:a3: 89:52:11:9c:89:e8:f6:67:69:45:43:57:1b:de:78:4d:75:2b: d9:5a:a0:11:64:90:a9:7c:02:90:eb:45:09:5a:50:6d:28:61: 92:08:a2:29:8e:08:88:ea:35:21:b2:1c:ed:60:d3:26:09:7c: 9f:d1:19:75 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NVRZGtUdvN2bvk1tS8yyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIyNzI2MWQ3MTUzNDhiZmQ3M2NlOWRiYjcyNDg4NjU2OTkz YmEyZjEwHhcNMjYwMTAxMjAxNzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YWRmNzJhNjE3OWU3M2QxYTkzYTRmZmNlODM0Y2JkZjBlODNkYWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhmUBih8itTiczh5mjM0PcW2VqVb pJz4Gku4SbKDkCnicg8TQOGQePQLlCR+jLnvYnBS4G0LrU8dpcaBnW9icqhdOrB+ Bmb/GqdLTXAGc1nln1cITIJMJ5f3YHCwiyh1Mr7eDU/KhVyXE9wXeYBrkD0bmSIB SBss24QDfJyqJ/bNF+rZ8Yt+1J3utG91S1AwVHbD37KmJtWxrYMys5jBY+lMdyiY 5yGnmaPHGovuq9m7aQtnoYFDA3vaJn0EJpR+OYlpT/4cMG43isO5Z8x+9HzKhfA1 fxLrjnx09+Y0zfXMXydcr8+JsX6Wp98V5pjeb6lpgeJ4WpSx/blia3rYpwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFrfcqYXnnPRqTpP/Og0y98Og9rZMB8GA1UdIwQY MBaAFLJyYdcVNIv9c86du3JIhlaZO6LxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2Yt NTA0ZjI3NjY3NjBmLzEvV3Q5eXBoZWVjOUdwT2tfODZEVEwzdzZEMnRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9hYmE1MDItZDE5MS00ZmQ3LWE3Y2YtNTA0ZjI3NjY3NjBm LzEvc25KaDF4VTBpXzF6enAyN2NraUdWcGs3b3ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYQBMA0G CSqGSIb3DQEBCwUAA4IBAQAJ/PAM8sQQGZs5FxR32IriSmw1rHwIWpfin/XdWrEu lXY/r6KALaAg9O9arX0IZEGlOZAK3aO1VRWdcnuceqspJeTMifWMeaEKrb9sYdlT Papm6sGgCsfYY+XxdaGaCLYWRxMVSk5XbR+OqmzqWim+4OZxZ9S8v2ZenkNqxPG6 FGmCNQ4Yv9DHU6yfxMdxhL1sxVLbjhX5Y7zQ/wCZ4xBCXozIFu79h0dcPiQ6VGNU YpaKpxBKaYlejJpu/bFjl/4mHkuQSaOJUhGciej2Z2lFQ1cb3nhNdSvZWqARZJCp fAKQ60UJWlBtKGGSCKIpjgiI6jUhshztYNMmCXyf0Rl1 -----END CERTIFICATE-----Generated at Sun Jan 25 17:33:47 2026 by rpki-client