This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/wtSW0mdpPXDvDrTPRt1ZsBOC7C8.roa File: wtSW0mdpPXDvDrTPRt1ZsBOC7C8.roa (raw, json) Hash identifier: oQqGpeKyZXjl5Dm+Xl8ln8xs8GXfn3cG1TVN/vo2Um8= Subject key identifier: C2:D4:96:D2:67:69:3D:70:EF:0E:B4:CF:46:DD:59:B0:13:82:EC:2F Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Certificate serial: 019B7D5D012443FF8982DD6631388F62F03F Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/wtSW0mdpPXDvDrTPRt1ZsBOC7C8.roa Signing time: Fri 02 Jan 2026 06:20:05 +0000 ROA not before: Fri 02 Jan 2026 06:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51277 IP address blocks: 78.133.153.0/24 maxlen: 24 78.133.170.0/23 maxlen: 23 94.42.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:01:24:43:ff:89:82:dd:66:31:38:8f:62:f0:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933 Validity Not Before: Jan 2 06:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c2d496d267693d70ef0eb4cf46dd59b01382ec2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:62:e0:42:f6:12:bd:13:99:74:2b:49:23:d3: ad:6d:cf:a3:51:0b:92:aa:1d:e2:bb:18:40:7f:4e: a8:d1:bd:f2:4c:1f:da:45:74:e2:b6:69:73:05:66: 66:c8:cc:0d:65:16:42:3b:75:8c:e2:cb:52:05:f6: 20:ae:f3:3c:23:c4:08:2e:85:5f:a7:19:c9:24:2b: 07:7a:b4:68:92:68:f6:dd:de:f4:37:9e:4e:f8:6e: 79:bb:80:20:55:89:8a:6d:9c:fb:98:0a:63:81:01: 84:71:31:87:74:69:6d:5b:18:d5:b6:26:2d:16:ea: dd:53:a1:bc:6e:e3:27:5d:61:73:14:d1:12:9d:b5: 16:39:73:82:3e:57:c4:3c:44:70:a3:1e:a9:df:83: ef:ac:c4:87:87:df:29:39:fc:84:16:00:55:32:7a: a4:38:68:82:55:fc:8e:4a:ce:d5:5d:02:61:db:bd: a3:f7:5f:8c:a5:b3:a5:42:df:2a:22:c1:d8:f9:4d: 46:56:9c:9a:0b:b1:9e:2b:6f:55:9c:d7:be:e2:05: 6b:63:b9:a7:0c:0b:17:eb:d7:ef:59:86:dc:23:95: f5:31:3a:14:98:3a:00:bb:9b:8e:f0:c5:85:f2:f8: 47:f8:d1:af:48:95:83:b1:36:4f:6d:8b:cf:3d:0d: c8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D4:96:D2:67:69:3D:70:EF:0E:B4:CF:46:DD:59:B0:13:82:EC:2F X509v3 Authority Key Identifier: keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/wtSW0mdpPXDvDrTPRt1ZsBOC7C8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 78.133.153.0/24 78.133.170.0/23 94.42.132.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:36:e6:c1:f2:42:03:a7:3a:08:b3:ef:c4:ce:50:d0:3a:8e: 62:07:36:a6:2d:c8:df:ca:d4:87:3a:72:8c:ab:52:44:dd:4d: 1c:f6:86:20:48:72:0a:ef:9d:94:7d:96:b9:5a:6f:f1:97:b0: 36:39:c6:70:40:91:be:97:53:02:42:79:1c:78:53:75:9b:a3: a1:e4:4d:c5:2c:b2:3d:ce:90:02:9c:e3:f9:eb:3d:16:eb:f3: 99:6a:40:de:83:13:4f:58:ef:00:63:56:8c:be:22:52:ff:84: 46:ce:e5:da:e2:bf:8a:14:69:fe:fb:a7:f3:cd:6a:56:f1:7b: 56:5f:9d:17:18:f2:04:24:43:49:22:65:29:ff:a7:bc:ee:56: f1:a4:38:a4:dd:06:f5:d3:19:2b:f9:54:5e:5d:f2:51:d6:f8: d5:36:32:71:2e:cd:cb:18:03:da:45:6a:e5:59:3c:16:82:1d: 43:f7:35:87:94:a3:4c:bf:e3:a2:86:e7:ff:e8:80:b6:71:67: c2:ac:eb:df:d5:2d:33:c6:dd:a0:aa:57:aa:a5:c1:12:1c:fb: d8:9b:1d:79:8f:27:ca:8a:0f:17:be:89:e8:01:e7:8b:38:27: dd:ce:a5:6d:dd:b5:20:c6:6a:57:46:47:cc:3e:bc:74:86:0b: fa:3b:45:d6 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9XQEkQ/+Jgt1mMTiPYvA/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2E2M2RmMjQ4YjdhZGYzZGRkMDdlOGMyZDNlZWRkMDJj ZWY5MzMwHhcNMjYwMTAyMDYyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMmQ0OTZkMjY3NjkzZDcwZWYwZWI0Y2Y0NmRkNTliMDEzODJlYzJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2LgQvYSvROZdCtJI9Otbc+jUQuS qh3iuxhAf06o0b3yTB/aRXTitmlzBWZmyMwNZRZCO3WM4stSBfYgrvM8I8QILoVf pxnJJCsHerRokmj23d70N55O+G55u4AgVYmKbZz7mApjgQGEcTGHdGltWxjVtiYt FurdU6G8buMnXWFzFNESnbUWOXOCPlfEPERwox6p34PvrMSHh98pOfyEFgBVMnqk OGiCVfyOSs7VXQJh272j91+MpbOlQt8qIsHY+U1GVpyaC7GeK29VnNe+4gVrY7mn DAsX69fvWYbcI5X1MToUmDoAu5uO8MWF8vhH+NGvSJWDsTZPbYvPPQ3IvwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFMLUltJnaT1w7w60z0bdWbATguwvMB8GA1UdIwQY MBaAFBrKY98ki3rfPd0H6MLT7t0CzvkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzIt OTFlMzE4NGJiMGFiLzEvd3RTVzBtZHBQWER2RHJUUFJ0MVpzQk9DN0M4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzItOTFlMzE4NGJiMGFi LzEvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAToWZAwQB ToWqAwQAXiqEMA0GCSqGSIb3DQEBCwUAA4IBAQCbNubB8kIDpzoIs+/EzlDQOo5i BzamLcjfytSHOnKMq1JE3U0c9oYgSHIK752UfZa5Wm/xl7A2OcZwQJG+l1MCQnkc eFN1m6Oh5E3FLLI9zpACnOP56z0W6/OZakDegxNPWO8AY1aMviJS/4RGzuXa4r+K FGn++6fzzWpW8XtWX50XGPIEJENJImUp/6e87lbxpDik3Qb10xkr+VReXfJR1vjV NjJxLs3LGAPaRWrlWTwWgh1D9zWHlKNMv+Oihuf/6IC2cWfCrOvf1S0zxt2gqleq pcESHPvYmx15jyfKig8XvonoAeeLOCfdzqVt3bUgxmpXRkfMPrx0hgv6O0XW -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:15 2026 by rpki-client