This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/Wb-eIX174GxnlVMtEdcBMyAEjYk.roa File: Wb-eIX174GxnlVMtEdcBMyAEjYk.roa (raw, json) Hash identifier: vjfUFILfHJdIuCmy+aSMtbfQ5wvTaw5GbFYeLNP+51o= Subject key identifier: 59:BF:9E:21:7D:7B:E0:6C:67:95:53:2D:11:D7:01:33:20:04:8D:89 Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Certificate serial: 019B7BA538AF63E0C2AFD9931D004164C02F Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/Wb-eIX174GxnlVMtEdcBMyAEjYk.roa Signing time: Thu 01 Jan 2026 22:19:44 +0000 ROA not before: Thu 01 Jan 2026 22:19:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44851 IP address blocks: 46.10.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:38:af:63:e0:c2:af:d9:93:1d:00:41:64:c0:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Validity Not Before: Jan 1 22:19:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59bf9e217d7be06c6795532d11d7013320048d89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:e3:bd:0d:6e:ce:43:4b:c2:91:ed:6d:65:d9: 54:6c:69:e2:de:53:b1:2f:98:72:54:d6:af:de:c5: 03:90:69:da:cd:55:fa:1c:8f:7e:76:d7:77:e8:fc: 24:82:73:35:d2:1f:68:8c:05:54:12:aa:6e:a7:c2: 82:99:3f:cd:f4:4f:e1:01:76:96:d9:50:e2:8a:13: 05:4f:30:90:c3:1e:1f:de:97:fb:bc:50:f5:6f:66: 78:d5:32:4b:bc:0f:90:b6:fa:38:f3:e2:af:fd:29: 06:fc:1c:41:69:80:aa:40:ad:7b:a9:9e:f4:7b:6c: 34:e3:0a:20:01:e7:f5:e4:0c:39:b4:8f:99:a7:14: 3c:dd:5b:85:e0:88:c8:82:e9:10:de:6c:56:a1:63: 87:c3:b4:68:89:0a:ee:93:83:b0:8a:a3:52:19:1d: 86:df:c1:63:a1:e3:85:a6:57:30:8b:83:d5:83:c0: c1:fc:9e:7f:e3:01:7c:11:0f:48:a4:54:4f:c4:e4: 24:9e:c4:54:47:26:7e:d1:ed:95:05:01:ed:78:1d: fb:41:b5:4b:cd:5f:6d:a2:d4:cf:5d:cb:ef:e8:14: 49:49:22:7a:a5:25:de:53:bc:92:96:3d:39:9e:aa: 60:1b:65:eb:b2:d6:77:39:5e:8f:52:fa:71:fb:b9: 79:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:BF:9E:21:7D:7B:E0:6C:67:95:53:2D:11:D7:01:33:20:04:8D:89 X509v3 Authority Key Identifier: keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/Wb-eIX174GxnlVMtEdcBMyAEjYk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.10.197.0/24 Signature Algorithm: sha256WithRSAEncryption 22:6d:0f:c2:3c:12:5e:0d:45:78:ca:ca:35:d1:7c:6f:f1:42: a9:4a:b8:9e:1e:6f:fe:d2:0f:92:cc:bd:cc:53:45:f4:8a:36: 12:2a:37:5d:86:15:46:cd:7d:43:b0:4f:c5:45:ba:b4:06:04: c1:1b:44:51:fd:31:16:c5:3f:27:eb:76:f8:e5:a1:9f:66:f7: 11:ca:34:6e:32:b0:64:e3:4e:84:9a:1e:7d:f0:0c:20:ba:b2: c5:89:43:40:3e:7d:06:64:9c:07:84:a4:65:18:df:f5:30:50: 55:13:80:24:78:f2:1d:f9:59:54:4a:78:4b:56:a4:c1:a4:fd: 0f:fc:76:e4:3d:89:5a:0d:32:85:72:5b:40:f2:da:c2:ef:e3: d2:24:19:be:90:56:5f:c1:94:b4:11:80:61:50:10:75:be:f5: cc:3a:41:fc:40:06:a3:a1:e2:8c:b6:53:ad:2f:a0:47:4b:35: 06:f5:e2:ce:c1:da:33:f9:ba:35:e2:66:78:32:d3:9b:06:f2: 34:80:61:ba:91:f3:1b:d6:f5:62:bd:fa:37:35:9d:b0:5b:99: 50:20:ac:65:ea:6e:01:11:9a:7c:3f:d1:08:fb:f8:7e:1a:3e: 05:9e:09:91:0a:b5:69:28:b4:62:51:c0:2d:2c:43:2a:70:ce: 3f:8a:48:cc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pTivY+DCr9mTHQBBZMAvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4 ZmI0YzQwHhcNMjYwMTAxMjIxOTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OWJmOWUyMTdkN2JlMDZjNjc5NTUzMmQxMWQ3MDEzMzIwMDQ4ZDg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOO9DW7OQ0vCke1tZdlUbGni3lOx L5hyVNav3sUDkGnazVX6HI9+dtd36PwkgnM10h9ojAVUEqpup8KCmT/N9E/hAXaW 2VDiihMFTzCQwx4f3pf7vFD1b2Z41TJLvA+Qtvo48+Kv/SkG/BxBaYCqQK17qZ70 e2w04wogAef15Aw5tI+ZpxQ83VuF4IjIgukQ3mxWoWOHw7RoiQruk4OwiqNSGR2G 38FjoeOFplcwi4PVg8DB/J5/4wF8EQ9IpFRPxOQknsRURyZ+0e2VBQHteB37QbVL zV9totTPXcvv6BRJSSJ6pSXeU7ySlj05nqpgG2XrstZ3OV6PUvpx+7l5ewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFm/niF9e+BsZ5VTLRHXATMgBI2JMB8GA1UdIwQY MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct ODcyYmEyZDlmNDRjLzEvV2ItZUlYMTc0R3hubFZNdEVkY0JNeUFFallrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALgrFMA0G CSqGSIb3DQEBCwUAA4IBAQAibQ/CPBJeDUV4yso10Xxv8UKpSrieHm/+0g+SzL3M U0X0ijYSKjddhhVGzX1DsE/FRbq0BgTBG0RR/TEWxT8n63b45aGfZvcRyjRuMrBk 406Emh598AwgurLFiUNAPn0GZJwHhKRlGN/1MFBVE4AkePId+VlUSnhLVqTBpP0P /HbkPYlaDTKFcltA8trC7+PSJBm+kFZfwZS0EYBhUBB1vvXMOkH8QAajoeKMtlOt L6BHSzUG9eLOwdoz+bo14mZ4MtObBvI0gGG6kfMb1vVivfo3NZ2wW5lQIKxl6m4B EZp8P9EI+/h+Gj4FngmRCrVpKLRiUcAtLEMqcM4/ikjM -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:46 2026 by rpki-client