This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/wehxXgpfgzalQRxlqvRAJwCWbMQ.roa File: wehxXgpfgzalQRxlqvRAJwCWbMQ.roa (raw, json) Hash identifier: kDdYxSItK7GlFWzV8XEeVDHmfQM6o/WzrJGoU9qv79A= Subject key identifier: C1:E8:71:5E:0A:5F:83:36:A5:41:1C:65:AA:F4:40:27:00:96:6C:C4 Certificate issuer: /CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55 Certificate serial: 019B7AC78AB4EC80F09D3FA2682A394DA62F Authority key identifier: F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/wehxXgpfgzalQRxlqvRAJwCWbMQ.roa Signing time: Thu 01 Jan 2026 18:17:36 +0000 ROA not before: Thu 01 Jan 2026 18:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36007 IP address blocks: 45.147.250.0/24 maxlen: 24 45.147.251.0/24 maxlen: 24 113.30.148.0/24 maxlen: 24 113.30.149.0/24 maxlen: 24 113.30.150.0/24 maxlen: 24 113.30.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:8a:b4:ec:80:f0:9d:3f:a2:68:2a:39:4d:a6:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55 Validity Not Before: Jan 1 18:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c1e8715e0a5f8336a5411c65aaf4402700966cc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:be:3f:7d:1d:12:bd:7d:f8:42:14:88:7c:10: aa:76:13:1a:95:13:8f:56:52:3c:17:ac:3f:af:99: 19:05:c5:c7:18:dd:5f:4d:43:5b:14:3b:a5:58:74: 87:31:30:e9:5d:ac:2c:57:7a:d5:d4:b0:f8:47:29: ad:4e:e8:83:0c:b8:17:81:ce:53:75:d8:f4:52:c2: 57:08:10:4b:39:e5:0f:b8:6b:1b:74:a0:a9:6f:3f: 51:20:cb:b9:3b:e4:cc:7d:9a:d1:bc:39:67:81:24: 53:c8:4b:44:b4:b8:8c:5b:81:1c:0c:47:fc:f0:69: 10:4e:f9:de:1e:6e:8c:88:33:b8:fb:89:18:03:9a: 88:6a:73:a5:a3:0c:09:cb:d1:8c:e0:ee:6d:97:4b: 10:c5:fe:5e:dd:c2:e8:4c:20:c7:ca:8b:3f:ac:b9: 4b:d2:28:28:ff:3a:d3:b5:dc:f6:a5:80:90:38:23: 2e:f8:cf:5a:ab:49:f3:db:e8:3e:57:b0:3a:38:b7: 51:57:83:02:df:ba:93:f1:ab:04:d8:8f:72:0f:0b: 18:10:5c:3c:ec:3d:18:96:f4:cb:09:03:80:c7:e6: b0:f2:a0:bf:a6:5c:df:12:b5:92:11:9c:35:ca:9f: 6d:38:29:73:14:bd:8e:5b:05:ff:85:6c:59:43:b0: 7f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E8:71:5E:0A:5F:83:36:A5:41:1C:65:AA:F4:40:27:00:96:6C:C4 X509v3 Authority Key Identifier: keyid:F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/wehxXgpfgzalQRxlqvRAJwCWbMQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.147.250.0/23 113.30.148.0/22 Signature Algorithm: sha256WithRSAEncryption ea:1c:7c:ba:a7:5c:27:b7:ad:5f:05:cb:3d:e3:70:03:08:81: 6b:ef:3e:7a:3f:ee:3b:90:ec:ae:90:6a:d5:7b:cc:8e:3f:8d: 9c:81:52:f5:d6:c5:ef:89:32:98:67:41:b0:c5:61:9a:95:42: 25:6c:95:63:84:1a:2b:e7:a7:4f:92:89:c2:03:1e:6d:61:4a: 0c:0a:75:e9:ff:c2:0d:2a:1d:a7:0d:23:8d:78:a0:d6:f6:34: 8a:7c:9a:ab:05:62:de:f5:a0:a8:7e:90:7a:ac:d4:82:ff:3f: 43:c4:d0:3e:62:70:ed:3d:a6:60:2f:5a:61:b1:0f:82:cb:48: 63:93:a9:50:15:b3:ce:d0:95:20:e7:f7:c5:b2:fa:79:fb:b1: f0:57:35:77:2c:4d:30:c9:6d:99:e8:84:4e:8a:c7:51:98:eb: 1d:71:d9:f9:ca:22:01:04:89:d7:94:d6:7e:9f:3d:ad:c4:dc: e3:11:7e:f8:d3:09:58:78:db:f0:fe:8e:7e:10:fd:d7:46:fb: a8:e9:9f:8d:5a:b4:6c:98:2b:ca:54:c4:bd:15:f2:e5:47:1a: 52:f9:86:48:7e:db:a0:35:7a:96:63:79:ca:94:4b:64:ac:73: 10:ce:af:92:8f:01:eb:94:52:4e:77:48:9e:9b:c8:82:06:72: 1e:86:d6:89 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6x4q07IDwnT+iaCo5TaYvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxYmQwMmVhNDRhOWJlZTM1YjYzZDFhYjNlMjViMTRmMTlh MzVhNTUwHhcNMjYwMTAxMTgxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMWU4NzE1ZTBhNWY4MzM2YTU0MTFjNjVhYWY0NDAyNzAwOTY2Y2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxL4/fR0SvX34QhSIfBCqdhMalROP VlI8F6w/r5kZBcXHGN1fTUNbFDulWHSHMTDpXawsV3rV1LD4RymtTuiDDLgXgc5T ddj0UsJXCBBLOeUPuGsbdKCpbz9RIMu5O+TMfZrRvDlngSRTyEtEtLiMW4EcDEf8 8GkQTvneHm6MiDO4+4kYA5qIanOlowwJy9GM4O5tl0sQxf5e3cLoTCDHyos/rLlL 0igo/zrTtdz2pYCQOCMu+M9aq0nz2+g+V7A6OLdRV4MC37qT8asE2I9yDwsYEFw8 7D0YlvTLCQOAx+aw8qC/plzfErWSEZw1yp9tOClzFL2OWwX/hWxZQ7B/iwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMHocV4KX4M2pUEcZar0QCcAlmzEMB8GA1UdIwQY MBaAFPG9AupEqb7jW2PRqz4lsU8Zo1pVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9iNjliYmEtNzIwMC00ZjUyLWI2MzEt ZmUwYTY1OGQ5ZGVkLzEvd2VoeFhncGZnemFsUVJ4bHF2UkFKd0NXYk1RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy9iNjliYmEtNzIwMC00ZjUyLWI2MzEtZmUwYTY1OGQ5ZGVk LzEvOGIwQzZrU3B2dU5iWTlHclBpV3hUeG1qV2xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLZP6AwQC cR6UMA0GCSqGSIb3DQEBCwUAA4IBAQDqHHy6p1wnt61fBcs943ADCIFr7z56P+47 kOyukGrVe8yOP42cgVL11sXviTKYZ0GwxWGalUIlbJVjhBor56dPkonCAx5tYUoM CnXp/8INKh2nDSONeKDW9jSKfJqrBWLe9aCofpB6rNSC/z9DxNA+YnDtPaZgL1ph sQ+Cy0hjk6lQFbPO0JUg5/fFsvp5+7HwVzV3LE0wyW2Z6IROisdRmOsdcdn5yiIB BInXlNZ+nz2txNzjEX740wlYeNvw/o5+EP3XRvuo6Z+NWrRsmCvKVMS9FfLlRxpS +YZIftugNXqWY3nKlEtkrHMQzq+SjwHrlFJOd0iem8iCBnIehtaJ -----END CERTIFICATE-----Generated at Sun Jan 25 21:27:27 2026 by rpki-client