This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/WAFGlC69-0ob11MbBQG2gcGKWnk.roa File: WAFGlC69-0ob11MbBQG2gcGKWnk.roa (raw, json) Hash identifier: fs3/LEyDskuqCQv30OKbL6do/sufFAX29xlb3wrGuaA= Subject key identifier: 58:01:46:94:2E:BD:FB:4A:1B:D7:53:1B:05:01:B6:81:C1:8A:5A:79 Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Certificate serial: 019B7F83098111B90D93EA473B774F774F74 Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/WAFGlC69-0ob11MbBQG2gcGKWnk.roa Signing time: Fri 02 Jan 2026 16:20:52 +0000 ROA not before: Fri 02 Jan 2026 16:20:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44077 IP address blocks: 46.233.40.0/23 maxlen: 24 46.233.46.0/24 maxlen: 24 46.233.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:09:81:11:b9:0d:93:ea:47:3b:77:4f:77:4f:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Validity Not Before: Jan 2 16:20:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=580146942ebdfb4a1bd7531b0501b681c18a5a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d7:73:40:4c:76:19:4d:53:ca:8d:f3:b0:d5: 8d:fe:f2:28:ee:c8:4d:b2:3f:8c:80:85:8a:5a:3c: 78:f4:2d:d4:28:d4:08:e9:47:f0:bb:23:cd:22:23: 57:1c:b4:a0:d0:c7:f0:73:db:5d:e8:ce:33:fe:45: 26:e8:0e:cf:94:af:a4:92:1f:f2:98:b6:e2:6b:3f: 91:72:2a:aa:0a:80:39:08:50:07:ec:17:93:d1:a2: 81:fd:49:a8:75:da:c0:4c:4f:43:08:96:55:30:7c: ba:e6:15:34:58:62:ba:50:af:00:9b:fa:ce:b8:c8: a1:5c:37:b0:c0:e9:50:bc:99:e6:cc:4e:52:ba:ab: 7d:32:fd:c9:ed:d4:1e:af:7c:c7:87:00:96:2b:fa: f6:96:27:fc:38:82:0d:cb:64:44:d8:be:af:23:47: 43:bf:f7:02:e7:49:67:25:5d:6b:46:a0:05:e1:7b: d6:43:7c:b8:e2:75:fa:fa:ef:32:e4:19:da:ca:e4: 0d:6c:18:b9:e8:4d:6a:30:98:74:f2:89:f9:10:7d: 1d:33:f6:8b:b8:bf:eb:6c:1e:a3:8f:a5:c0:fe:22: d8:8f:ec:20:cb:d0:0a:42:c8:79:f9:b8:7e:49:f7: 0f:47:79:71:ed:37:0d:7b:3e:76:e7:0d:ab:cb:49: 7b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:01:46:94:2E:BD:FB:4A:1B:D7:53:1B:05:01:B6:81:C1:8A:5A:79 X509v3 Authority Key Identifier: keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/WAFGlC69-0ob11MbBQG2gcGKWnk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.233.40.0/23 46.233.46.0/23 Signature Algorithm: sha256WithRSAEncryption 03:51:56:e8:b7:d1:63:a2:f7:80:e3:5c:b7:49:42:3d:23:19: 3b:0f:95:88:d8:08:b2:37:98:ff:8d:3e:1e:b2:4f:5d:53:80: 38:e7:ac:7c:91:83:1f:35:2c:cf:f0:e7:47:9d:ad:b2:b2:81: 98:ba:49:06:b3:73:6a:5c:23:bb:f6:7e:04:9f:df:9c:65:1e: 08:7d:14:a1:f4:16:80:79:b5:03:74:36:c3:45:f6:f6:32:3f: 3b:06:23:94:12:61:76:30:3e:d9:e8:9f:e8:07:61:b0:09:1d: f2:6c:88:ae:e0:49:5e:54:4f:3a:18:c7:9e:75:9f:3f:6b:b5: 3a:a8:5a:bd:f6:f7:26:86:19:81:3d:59:97:c4:93:7b:82:0d: d8:3a:b4:00:60:da:3a:61:22:fd:c5:e0:39:1e:d7:26:a1:05: e3:d2:e3:5c:45:5e:46:b6:76:6c:54:f2:1d:b7:3c:3b:52:9d: e9:eb:5d:d8:11:6e:10:30:8b:40:67:d8:ad:05:93:04:a2:2e: 7d:8c:9a:7f:94:5b:21:c2:52:14:18:b7:0e:64:ae:e0:91:a7: 11:2d:27:89:f7:67:40:7a:59:7d:c2:53:ee:c0:ce:65:ce:20: c0:4b:70:c6:19:4c:c7:0e:9f:61:fe:46:84:38:56:ae:cb:e6: 49:8d:2a:94 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/gwmBEbkNk+pHO3dPd090MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1 ZDU2ZjUwHhcNMjYwMTAyMTYyMDUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODAxNDY5NDJlYmRmYjRhMWJkNzUzMWIwNTAxYjY4MWMxOGE1YTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNdzQEx2GU1Tyo3zsNWN/vIo7shN sj+MgIWKWjx49C3UKNQI6UfwuyPNIiNXHLSg0Mfwc9td6M4z/kUm6A7PlK+kkh/y mLbiaz+RciqqCoA5CFAH7BeT0aKB/UmoddrATE9DCJZVMHy65hU0WGK6UK8Am/rO uMihXDewwOlQvJnmzE5Suqt9Mv3J7dQer3zHhwCWK/r2lif8OIINy2RE2L6vI0dD v/cC50lnJV1rRqAF4XvWQ3y44nX6+u8y5BnayuQNbBi56E1qMJh08on5EH0dM/aL uL/rbB6jj6XA/iLYj+wgy9AKQsh5+bh+SfcPR3lx7TcNez525w2ry0l7qQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFgBRpQuvftKG9dTGwUBtoHBilp5MB8GA1UdIwQY MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt M2MxNmZmODQxYWIyLzEvV0FGR2xDNjktMG9iMTFNYkJRRzJnY0dLV25rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLukoAwQB LukuMA0GCSqGSIb3DQEBCwUAA4IBAQADUVbot9FjoveA41y3SUI9Ixk7D5WI2Aiy N5j/jT4esk9dU4A456x8kYMfNSzP8OdHna2ysoGYukkGs3NqXCO79n4En9+cZR4I fRSh9BaAebUDdDbDRfb2Mj87BiOUEmF2MD7Z6J/oB2GwCR3ybIiu4EleVE86GMee dZ8/a7U6qFq99vcmhhmBPVmXxJN7gg3YOrQAYNo6YSL9xeA5HtcmoQXj0uNcRV5G tnZsVPIdtzw7Up3p613YEW4QMItAZ9itBZMEoi59jJp/lFshwlIUGLcOZK7gkacR LSeJ92dAell9wlPuwM5lziDAS3DGGUzHDp9h/kaEOFauy+ZJjSqU -----END CERTIFICATE-----Generated at Sun Jan 25 15:28:42 2026 by rpki-client