This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/wzj54BWK2fArQd8Cr0Tg-CzY58Q.roa File: wzj54BWK2fArQd8Cr0Tg-CzY58Q.roa (raw, json) Hash identifier: pHwE9EF5WSb/okpT+KJOe267iEIu6WQ/yBZSCdHJ8fs= Subject key identifier: C3:38:F9:E0:15:8A:D9:F0:2B:41:DF:02:AF:44:E0:F8:2C:D8:E7:C4 Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Certificate serial: 019BEB0808282BFDAAB958F92E853B6BEE78 Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/wzj54BWK2fArQd8Cr0Tg-CzY58Q.roa Signing time: Fri 23 Jan 2026 13:25:30 +0000 ROA not before: Fri 23 Jan 2026 13:25:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202084 IP address blocks: 45.134.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 01:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:eb:08:08:28:2b:fd:aa:b9:58:f9:2e:85:3b:6b:ee:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926 Validity Not Before: Jan 23 13:25:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c338f9e0158ad9f02b41df02af44e0f82cd8e7c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2b:28:b9:a5:17:77:2a:a3:96:cc:be:be:26: 89:9c:00:5c:3b:71:29:23:d9:7d:85:ac:c7:44:9f: 86:63:f1:df:61:d3:aa:2f:fd:98:e3:fd:7c:cd:6e: 9c:b6:d0:98:27:8c:37:5e:18:a2:dc:82:a4:cd:40: e4:f7:1d:b2:58:bf:37:39:1b:f7:75:ca:f0:b6:b2: 84:51:26:ba:e6:89:e5:da:0a:0e:6b:e1:1b:51:0b: 60:64:ca:e7:54:76:09:6f:e9:8e:ee:b5:3e:30:71: ee:a4:3c:b6:03:85:36:ed:e7:ed:38:49:58:d1:71: cb:ee:0f:97:72:d7:94:9f:1b:93:97:9c:a2:0c:4e: 30:d8:25:91:e0:74:7e:3b:ea:03:9d:2f:13:06:48: 01:d2:a8:e2:ef:9b:37:3e:ca:b1:a6:8e:fd:f4:36: 50:79:cb:28:e2:0f:e5:7f:2d:78:ab:6d:dc:8e:b0: 87:3f:dc:65:98:47:31:21:11:08:64:a2:ca:ff:b4: 6f:8f:51:64:19:e7:75:d1:73:03:29:f7:47:62:ba: ee:0b:ca:63:c6:41:de:c6:c4:76:9a:a7:e0:fb:d0: 85:14:45:f3:6f:29:d5:da:07:5a:56:21:3b:5d:63: 82:e9:05:4d:05:ff:72:f3:14:b7:c8:aa:02:c6:86: c9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:38:F9:E0:15:8A:D9:F0:2B:41:DF:02:AF:44:E0:F8:2C:D8:E7:C4 X509v3 Authority Key Identifier: keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/wzj54BWK2fArQd8Cr0Tg-CzY58Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.134.222.0/24 Signature Algorithm: sha256WithRSAEncryption 99:6e:d5:49:a9:89:b7:53:30:11:43:00:76:71:e3:03:f2:60: 73:71:94:74:cc:60:af:0f:1e:82:15:85:24:99:00:38:9f:77: ba:66:f2:66:9d:d9:b0:8f:b2:c3:77:f2:2f:f3:ec:bd:99:2c: ca:3c:63:a0:4a:a8:35:3c:ae:fa:df:6e:0a:d1:3d:a9:56:fb: f3:d9:59:e5:d5:0e:f7:18:c0:e7:82:c1:01:fa:b6:ef:f1:aa: be:c3:8c:dd:99:b6:07:ef:89:96:ff:ee:8f:e7:5d:6b:92:7c: aa:4c:39:92:5f:ff:ef:a7:6f:b6:d3:c4:7d:18:47:78:5e:59: 8e:a6:47:09:34:e7:c6:64:c2:c2:fc:22:7b:6d:8c:1b:59:bc: 35:a4:79:ed:89:f3:a0:72:a4:6e:fb:1f:24:ff:08:e8:8f:21: db:1d:c9:e7:48:6b:51:11:3c:32:33:57:35:4d:a4:1c:44:4e: c5:8d:95:01:a1:6c:b7:33:3a:f7:0b:f5:be:50:2d:fe:38:d3: fc:8a:95:df:d1:35:5a:cf:4d:95:60:63:e3:30:41:91:36:f7: 28:88:8b:fe:f1:0f:b9:4c:43:c2:b0:4f:4d:a2:06:0c:80:05: 46:b3:4a:2c:25:1c:28:2e:21:82:46:e2:50:38:f4:80:3c:1d: e6:40:57:53 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvrCAgoK/2quVj5LoU7a+54MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl MGI5MjYwHhcNMjYwMTIzMTMyNTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzM4ZjllMDE1OGFkOWYwMmI0MWRmMDJhZjQ0ZTBmODJjZDhlN2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCsouaUXdyqjlsy+viaJnABcO3Ep I9l9hazHRJ+GY/HfYdOqL/2Y4/18zW6cttCYJ4w3Xhii3IKkzUDk9x2yWL83ORv3 dcrwtrKEUSa65onl2goOa+EbUQtgZMrnVHYJb+mO7rU+MHHupDy2A4U27eftOElY 0XHL7g+XcteUnxuTl5yiDE4w2CWR4HR+O+oDnS8TBkgB0qji75s3Psqxpo799DZQ ecso4g/lfy14q23cjrCHP9xlmEcxIREIZKLK/7Rvj1FkGed10XMDKfdHYrruC8pj xkHexsR2mqfg+9CFFEXzbynV2gdaViE7XWOC6QVNBf9y8xS3yKoCxobJTQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMM4+eAVitnwK0HfAq9E4Pgs2OfEMB8GA1UdIwQY MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt NzM4NTZhZjQ5ZjNlLzEvd3pqNTRCV0syZkFyUWQ4Q3IwVGctQ3pZNThRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYbeMA0G CSqGSIb3DQEBCwUAA4IBAQCZbtVJqYm3UzARQwB2ceMD8mBzcZR0zGCvDx6CFYUk mQA4n3e6ZvJmndmwj7LDd/Iv8+y9mSzKPGOgSqg1PK76324K0T2pVvvz2Vnl1Q73 GMDngsEB+rbv8aq+w4zdmbYH74mW/+6P511rknyqTDmSX//vp2+208R9GEd4XlmO pkcJNOfGZMLC/CJ7bYwbWbw1pHntifOgcqRu+x8k/wjojyHbHcnnSGtRETwyM1c1 TaQcRE7FjZUBoWy3Mzr3C/W+UC3+ONP8ipXf0TVaz02VYGPjMEGRNvcoiIv+8Q+5 TEPCsE9NogYMgAVGs0osJRwoLiGCRuJQOPSAPB3mQFdT -----END CERTIFICATE-----Generated at Sun Jan 25 12:05:25 2026 by rpki-client