This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/ww6z6hjsuMEOP6vTR3LMLKMyV6M.roa File: ww6z6hjsuMEOP6vTR3LMLKMyV6M.roa (raw, json) Hash identifier: LaoHrX4huXBTGyoLgvfv7cFh+2fdya3FBkPDLWzF0sg= Subject key identifier: C3:0E:B3:EA:18:EC:B8:C1:0E:3F:AB:D3:47:72:CC:2C:A3:32:57:A3 Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Certificate serial: 019B7910F03A750E76B4960676F8488E3A72 Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/ww6z6hjsuMEOP6vTR3LMLKMyV6M.roa Signing time: Thu 01 Jan 2026 10:18:31 +0000 ROA not before: Thu 01 Jan 2026 10:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212419 IP address blocks: 45.12.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f0:3a:75:0e:76:b4:96:06:76:f8:48:8e:3a:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad Validity Not Before: Jan 1 10:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c30eb3ea18ecb8c10e3fabd34772cc2ca33257a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:eb:17:e7:0e:5c:ee:f1:88:1a:45:4b:0d:aa: 28:c8:80:4a:07:fc:61:d8:5f:22:74:ce:93:de:83: 0b:dc:44:1e:1a:c9:f3:9a:d3:3e:e3:47:ec:8f:d4: 71:64:ea:22:bd:44:0a:24:59:44:25:7d:17:0e:36: 22:14:bd:16:30:74:f8:62:30:b2:79:d7:f0:ab:97: 66:15:74:51:20:3e:ee:18:38:b0:70:56:5a:ad:51: 62:99:3d:eb:75:a0:f4:98:70:07:39:fd:4b:a1:63: 75:66:75:39:37:63:42:f4:53:4a:23:cd:a1:1e:7f: 30:fe:ee:6a:77:65:87:ef:86:c4:42:34:f0:c3:b8: 88:2f:5f:32:26:8e:c9:2a:21:f6:e8:dd:6f:0e:86: 60:93:e6:bc:b4:80:ec:d6:a3:ea:a8:a8:ca:19:f3: cc:85:18:61:35:91:c9:38:d6:77:0c:51:91:ea:08: 05:89:5d:bc:b2:94:99:ed:1a:78:2e:96:91:42:fc: 96:33:76:e8:13:3b:4d:07:c2:64:c6:ba:85:71:54: 6d:7b:f0:71:73:1d:11:e9:18:b0:c8:6d:df:94:03: 29:47:0f:83:52:89:60:d0:f1:ab:ed:87:88:29:fb: 28:f3:25:85:92:c2:1b:79:2c:89:81:1b:d6:00:fa: d7:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:0E:B3:EA:18:EC:B8:C1:0E:3F:AB:D3:47:72:CC:2C:A3:32:57:A3 X509v3 Authority Key Identifier: keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/ww6z6hjsuMEOP6vTR3LMLKMyV6M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.12.29.0/24 Signature Algorithm: sha256WithRSAEncryption 81:a6:88:b6:86:10:98:f4:8f:b9:94:1f:72:7d:34:b3:0c:ff: c9:fb:8f:9a:0b:95:15:99:20:c1:99:16:66:ba:5d:d3:42:94: 38:a5:a0:e6:c9:a7:d2:52:71:98:8c:5e:d4:a1:8c:2e:e3:09: 30:06:39:07:1d:3f:1a:84:31:5c:14:2c:bb:b0:1e:49:3e:b0: ae:88:a5:4b:76:32:1b:c9:26:14:49:b2:e4:53:a1:ee:a2:04: b8:95:fb:53:af:8b:9e:93:42:66:cf:97:d0:ab:d0:25:07:d2: f8:b3:09:4a:d1:c4:53:2f:42:73:58:87:75:73:3f:ff:89:22: 3d:ab:a8:ab:96:1f:46:72:78:82:07:b5:60:e5:e4:02:12:8e: 3e:a3:8b:44:86:34:3c:0a:03:ea:3b:55:e9:bd:15:92:cc:31: e2:08:cc:65:26:ff:b3:d5:52:ed:d9:57:d4:4d:12:58:b6:3f: 37:ba:95:4a:1b:0f:e9:da:c6:fc:c1:fd:e7:aa:6f:55:d9:94: 4f:99:57:17:37:e2:5a:29:3b:19:e1:4f:2f:ff:5b:2c:32:ab: 00:95:9b:2c:27:bb:5b:14:e3:7b:1c:b6:62:4b:de:5e:7e:83: 3b:0d:eb:f6:7d:b7:cf:df:da:95:d4:1e:c3:94:24:9f:f2:c7: 9e:5c:ce:c7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EPA6dQ52tJYGdvhIjjpyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NmQ5ZDUwYjNiODlkNTFjOGFhMjQ5M2U3ZWY0NzAxZDYy NTFkYWQwHhcNMjYwMTAxMTAxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzBlYjNlYTE4ZWNiOGMxMGUzZmFiZDM0NzcyY2MyY2EzMzI1N2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+sX5w5c7vGIGkVLDaooyIBKB/xh 2F8idM6T3oML3EQeGsnzmtM+40fsj9RxZOoivUQKJFlEJX0XDjYiFL0WMHT4YjCy edfwq5dmFXRRID7uGDiwcFZarVFimT3rdaD0mHAHOf1LoWN1ZnU5N2NC9FNKI82h Hn8w/u5qd2WH74bEQjTww7iIL18yJo7JKiH26N1vDoZgk+a8tIDs1qPqqKjKGfPM hRhhNZHJONZ3DFGR6ggFiV28spSZ7Rp4LpaRQvyWM3boEztNB8JkxrqFcVRte/Bx cx0R6RiwyG3flAMpRw+DUolg0PGr7YeIKfso8yWFksIbeSyJgRvWAPrX9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMMOs+oY7LjBDj+r00dyzCyjMlejMB8GA1UdIwQY MBaAFMZtnVCzuJ1RyKokk+fvRwHWJR2tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMt YjdjNTc4Yjc0ZTM1LzEvd3c2ejZoanN1TUVPUDZ2VFIzTE1MS015VjZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS80YmI3NGItOGQ2ZC00NTE0LWEzOWMtYjdjNTc4Yjc0ZTM1 LzEveG0yZFVMTzRuVkhJcWlTVDUtOUhBZFlsSGEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQwdMA0G CSqGSIb3DQEBCwUAA4IBAQCBpoi2hhCY9I+5lB9yfTSzDP/J+4+aC5UVmSDBmRZm ul3TQpQ4paDmyafSUnGYjF7UoYwu4wkwBjkHHT8ahDFcFCy7sB5JPrCuiKVLdjIb ySYUSbLkU6HuogS4lftTr4uek0Jmz5fQq9AlB9L4swlK0cRTL0JzWId1cz//iSI9 q6irlh9GcniCB7Vg5eQCEo4+o4tEhjQ8CgPqO1XpvRWSzDHiCMxlJv+z1VLt2VfU TRJYtj83upVKGw/p2sb8wf3nqm9V2ZRPmVcXN+JaKTsZ4U8v/1ssMqsAlZssJ7tb FON7HLZiS95efoM7Dev2fbfP39qV1B7DlCSf8seeXM7H -----END CERTIFICATE-----Generated at Sun Jan 25 10:31:26 2026 by rpki-client