This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/WnX7Q-WL84YNBDaiptSGuaLyB3A.roa File: WnX7Q-WL84YNBDaiptSGuaLyB3A.roa (raw, json) Hash identifier: 1fvWPA1ziVXzTNenQQnTKW3jvgyAp2Rkil/iJ/8pd1I= Subject key identifier: 5A:75:FB:43:E5:8B:F3:86:0D:04:36:A2:A6:D4:86:B9:A2:F2:07:70 Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Certificate serial: 019B7C13465667C3A30A797EAEB0D69891CF Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/WnX7Q-WL84YNBDaiptSGuaLyB3A.roa Signing time: Fri 02 Jan 2026 00:19:56 +0000 ROA not before: Fri 02 Jan 2026 00:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 273208 IP address blocks: 45.89.80.0/24 maxlen: 24 185.229.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:46:56:67:c3:a3:0a:79:7e:ae:b0:d6:98:91:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467 Validity Not Before: Jan 2 00:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5a75fb43e58bf3860d0436a2a6d486b9a2f20770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:35:f4:ab:97:d4:10:36:02:9c:75:1d:6e:77: 83:43:e5:36:51:a3:0b:14:23:79:67:d2:4a:09:30: d2:8e:5f:99:00:c4:a4:22:49:89:9e:d1:3a:af:96: 02:92:28:22:0c:2e:3e:02:b2:f4:97:84:c3:59:6f: e5:38:d6:8e:db:02:dd:fa:65:44:9c:44:ee:90:4f: 52:8f:30:0a:ea:e4:7b:fb:bb:53:28:3b:99:95:cb: 17:35:8b:50:7a:fc:2c:01:d5:a6:5b:1d:20:69:10: 20:b3:05:59:52:20:b7:ac:ec:5e:58:29:68:89:24: 46:22:17:ec:11:8e:97:ee:44:58:d9:fb:93:c3:a7: 47:1b:a0:4a:95:73:67:71:c2:3d:8d:e3:e0:1f:19: 0c:0f:b6:bc:ed:72:60:de:e7:3b:16:e7:28:a1:08: 5e:07:cf:3f:f5:f3:ef:e2:9a:e8:28:b6:56:3e:69: b2:52:8f:99:de:0d:a1:a4:0f:42:b3:9c:14:e4:91: 43:c1:7b:43:64:4d:7c:87:ef:da:c2:71:d5:7e:41: 30:62:16:d8:29:10:37:1f:21:2c:00:a4:64:b2:6d: cd:5f:b5:88:52:ab:cd:8a:73:ce:89:dd:bc:95:07: 4d:8a:35:36:a5:3b:66:f3:72:a1:f2:e0:77:61:ca: 47:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:75:FB:43:E5:8B:F3:86:0D:04:36:A2:A6:D4:86:B9:A2:F2:07:70 X509v3 Authority Key Identifier: keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/WnX7Q-WL84YNBDaiptSGuaLyB3A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.89.80.0/24 185.229.219.0/24 Signature Algorithm: sha256WithRSAEncryption bc:92:25:08:83:07:b6:c3:ea:19:08:11:8b:53:92:8b:2f:4e: 6c:57:1c:dd:aa:8d:39:77:6b:ca:5e:82:61:51:0c:63:01:06: 73:de:0c:56:65:11:09:96:fa:68:8f:f9:c5:f6:3a:87:20:70: 36:53:c0:06:9b:bf:d7:c3:7e:15:f8:09:f5:e3:f6:8b:90:84: 9b:c0:57:e1:aa:1e:74:23:41:41:42:62:83:b8:47:7d:13:d4: 7c:5e:82:e8:66:2a:7b:e6:4d:cf:ca:55:ac:b8:7c:fd:aa:b7: db:e6:61:43:ce:c9:a2:17:c0:0d:b8:bf:73:77:74:14:5d:ac: de:b0:80:13:a7:2a:c0:eb:ea:59:85:65:c4:52:d9:80:da:eb: ac:7b:23:c4:46:a4:3c:31:39:26:4d:33:89:32:13:9c:d1:be: cd:c2:43:3a:73:a5:61:7e:54:11:ac:22:65:50:ee:1d:9d:c7: 67:b1:20:ec:e1:ab:ba:eb:80:b0:cb:d0:5a:f6:8a:8f:68:ae: c1:a6:83:2c:0a:95:c6:6c:34:48:7c:72:5f:25:ff:c9:cd:ac: 7c:01:66:4a:54:34:ab:32:ee:52:83:42:b1:84:f6:39:19:b8: bc:45:94:55:d5:5d:c5:8c:24:02:b8:47:29:92:9d:c6:45:f9: 94:4d:c2:81 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8E0ZWZ8OjCnl+rrDWmJHPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1MzRjNDlmY2ZhOGE0NTA0MWQ5NWVkNGQ4ZDRmYzY5Yzcy N2E0NjcwHhcNMjYwMTAyMDAxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YTc1ZmI0M2U1OGJmMzg2MGQwNDM2YTJhNmQ0ODZiOWEyZjIwNzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjX0q5fUEDYCnHUdbneDQ+U2UaML FCN5Z9JKCTDSjl+ZAMSkIkmJntE6r5YCkigiDC4+ArL0l4TDWW/lONaO2wLd+mVE nETukE9SjzAK6uR7+7tTKDuZlcsXNYtQevwsAdWmWx0gaRAgswVZUiC3rOxeWClo iSRGIhfsEY6X7kRY2fuTw6dHG6BKlXNnccI9jePgHxkMD7a87XJg3uc7FucooQhe B88/9fPv4proKLZWPmmyUo+Z3g2hpA9Cs5wU5JFDwXtDZE18h+/awnHVfkEwYhbY KRA3HyEsAKRksm3NX7WIUqvNinPOid28lQdNijU2pTtm83Kh8uB3YcpHkQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFp1+0Pli/OGDQQ2oqbUhrmi8gdwMB8GA1UdIwQY MBaAFAU0xJ/PqKRQQdle1NjU/GnHJ6RnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYt Y2Q3ZTA2Y2JiNTMxLzEvV25YN1EtV0w4NFlOQkRhaXB0U0d1YUx5QjNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8wY2NiZGEtZDZmMS00NTI3LTgxMDYtY2Q3ZTA2Y2JiNTMx LzEvQlRURW44LW9wRkJCMlY3VTJOVDhhY2NucEdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALVlQAwQA ueXbMA0GCSqGSIb3DQEBCwUAA4IBAQC8kiUIgwe2w+oZCBGLU5KLL05sVxzdqo05 d2vKXoJhUQxjAQZz3gxWZREJlvpoj/nF9jqHIHA2U8AGm7/Xw34V+An14/aLkISb wFfhqh50I0FBQmKDuEd9E9R8XoLoZip75k3PylWsuHz9qrfb5mFDzsmiF8ANuL9z d3QUXazesIATpyrA6+pZhWXEUtmA2uuseyPERqQ8MTkmTTOJMhOc0b7NwkM6c6Vh flQRrCJlUO4dncdnsSDs4au664Cwy9Ba9oqPaK7BpoMsCpXGbDRIfHJfJf/Jzax8 AWZKVDSrMu5Sg0KxhPY5Gbi8RZRV1V3FjCQCuEcpkp3GRfmUTcKB -----END CERTIFICATE-----Generated at Mon Jan 12 01:57:34 2026 by rpki-client