This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/W4qxGEOnhck0eA0os9nmiLaPXEU.roa File: W4qxGEOnhck0eA0os9nmiLaPXEU.roa (raw, json) Hash identifier: QlC0nvvSkC3Gr5lT9KAlzmA+mhP9wXRsj529IDFwxxk= Subject key identifier: 5B:8A:B1:18:43:A7:85:C9:34:78:0D:28:B3:D9:E6:88:B6:8F:5C:45 Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27 Certificate serial: 019B78A2DE9DFAB9759DDCFEEB6D34D293D6 Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/W4qxGEOnhck0eA0os9nmiLaPXEU.roa Signing time: Thu 01 Jan 2026 08:18:18 +0000 ROA not before: Thu 01 Jan 2026 08:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5511 IP address blocks: 45.131.228.0/22 maxlen: 24 45.139.228.0/24 maxlen: 24 45.139.230.0/24 maxlen: 24 62.3.60.0/24 maxlen: 24 62.233.52.0/24 maxlen: 24 146.19.123.0/24 maxlen: 24 176.116.11.0/24 maxlen: 24 194.104.239.0/24 maxlen: 24 212.18.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:de:9d:fa:b9:75:9d:dc:fe:eb:6d:34:d2:93:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27 Validity Not Before: Jan 1 08:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b8ab11843a785c934780d28b3d9e688b68f5c45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bd:cb:f7:bb:4c:2b:2f:2e:1b:7a:c0:c3:ec: 71:71:10:c8:86:6a:5c:b6:cc:e0:e7:bf:c8:b5:cd: 4c:88:2b:ca:25:e6:da:fb:f5:fe:1a:46:d7:98:b4: 91:14:be:86:e6:4f:41:cb:04:f3:71:0e:fa:82:d3: bb:22:5c:6b:00:10:17:8b:74:63:78:ca:1d:ea:b9: 8f:1e:80:3e:ea:f3:2a:88:b0:a4:34:fa:8d:86:c4: 6d:45:f0:ff:59:90:17:26:76:9a:47:1c:27:21:92: 70:eb:6b:4d:ff:a4:78:9d:aa:f7:6f:66:89:96:97: 02:ab:cd:92:78:a1:0e:55:b7:20:c6:b1:0d:4e:2f: 3e:31:b1:a2:83:37:2a:3c:69:ef:31:49:e8:15:e0: e3:d7:de:f6:8b:41:f4:e7:7e:b6:4a:d1:e7:ed:e8: bc:18:4a:a0:eb:f6:68:5e:f0:ed:1f:df:b7:f4:8a: eb:ca:c2:34:08:dd:88:c0:20:8a:4e:3d:85:c6:be: 5f:03:80:eb:ba:bf:9c:eb:12:95:20:dd:9b:b0:a9: 21:37:ef:b3:6c:8a:c8:fd:23:d1:ac:5b:26:71:4c: 7c:f8:51:1a:cd:88:60:f2:98:f0:24:2f:6f:9f:3d: 1d:7b:15:13:f8:5e:04:37:3a:bb:a6:92:2a:a4:c4: 11:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:8A:B1:18:43:A7:85:C9:34:78:0D:28:B3:D9:E6:88:B6:8F:5C:45 X509v3 Authority Key Identifier: keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/W4qxGEOnhck0eA0os9nmiLaPXEU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.131.228.0/22 45.139.228.0/24 45.139.230.0/24 62.3.60.0/24 62.233.52.0/24 146.19.123.0/24 176.116.11.0/24 194.104.239.0/24 212.18.124.0/24 Signature Algorithm: sha256WithRSAEncryption c7:57:e5:ab:4d:77:d7:34:14:3d:74:88:bb:ac:f3:3b:13:09: 2f:3a:3f:c7:7b:4b:13:b3:f5:00:34:9a:a5:a2:4a:0b:c0:3f: 3d:34:aa:5f:1e:d1:63:76:e6:e4:96:2c:bb:7c:73:28:84:6e: 24:f1:37:48:65:43:b1:0f:14:12:71:c8:9b:07:77:3f:c0:36: 50:d3:96:4e:57:49:dd:75:97:52:37:ab:1a:0b:2c:15:a1:81: a3:dd:96:43:03:5e:74:c1:3b:73:b0:a4:7e:75:13:b2:7d:25: e7:4e:df:52:34:5a:3c:bd:df:32:db:c1:09:02:91:8e:ca:46: 93:78:4a:08:81:54:c6:38:03:91:7f:29:0f:8f:ff:40:9d:8c: a6:05:72:c2:bd:d9:c9:5b:fa:ca:a5:f3:74:8e:ad:4a:41:f5: fc:77:55:b5:97:a5:c4:a1:71:cc:46:b6:bc:83:a5:60:0a:90: 47:5b:5f:7f:a6:22:c0:4e:34:6a:ec:66:45:09:13:df:8f:41: 39:00:4a:41:c3:8a:88:75:0b:65:40:bb:a9:cf:c9:9a:10:70: 9c:33:5d:a3:c3:ab:c1:b6:9a:19:cf:fa:b5:a7:dc:d7:c7:c7: f3:63:99:ec:af:92:92:4f:d8:75:e7:93:c4:c6:ef:7c:65:1c: ce:5d:a1:62 -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt4ot6d+rl1ndz+62000pPWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NjhhMTk5MmJiODAzN2RkZTgxZDBjOGNkYzA2OTVmY2Vl MTdjMjcwHhcNMjYwMTAxMDgxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjhhYjExODQzYTc4NWM5MzQ3ODBkMjhiM2Q5ZTY4OGI2OGY1YzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzr3L97tMKy8uG3rAw+xxcRDIhmpc tszg57/Itc1MiCvKJeba+/X+GkbXmLSRFL6G5k9BywTzcQ76gtO7IlxrABAXi3Rj eMod6rmPHoA+6vMqiLCkNPqNhsRtRfD/WZAXJnaaRxwnIZJw62tN/6R4nar3b2aJ lpcCq82SeKEOVbcgxrENTi8+MbGigzcqPGnvMUnoFeDj1972i0H05362StHn7ei8 GEqg6/ZoXvDtH9+39IrrysI0CN2IwCCKTj2Fxr5fA4Drur+c6xKVIN2bsKkhN++z bIrI/SPRrFsmcUx8+FEazYhg8pjwJC9vnz0dexUT+F4ENzq7ppIqpMQRuwIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFFuKsRhDp4XJNHgNKLPZ5oi2j1xFMB8GA1UdIwQY MBaAFJhooZkruAN93oHQyM3AaV/O4XwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2It ZDc4ZDU2MzFkN2Y2LzEvVzRxeEdFT25oY2swZUEwb3M5bm1pTGFQWEVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2ItZDc4ZDU2MzFkN2Y2 LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQCLYPkAwQA LYvkAwQALYvmAwQAPgM8AwQAPuk0AwQAkhN7AwQAsHQLAwQAwmjvAwQA1BJ8MA0G CSqGSIb3DQEBCwUAA4IBAQDHV+WrTXfXNBQ9dIi7rPM7EwkvOj/He0sTs/UANJql okoLwD89NKpfHtFjdubkliy7fHMohG4k8TdIZUOxDxQSccibB3c/wDZQ05ZOV0nd dZdSN6saCywVoYGj3ZZDA150wTtzsKR+dROyfSXnTt9SNFo8vd8y28EJApGOykaT eEoIgVTGOAORfykPj/9AnYymBXLCvdnJW/rKpfN0jq1KQfX8d1W1l6XEoXHMRra8 g6VgCpBHW19/piLATjRq7GZFCRPfj0E5AEpBw4qIdQtlQLupz8maEHCcM12jw6vB tpoZz/q1p9zXx8fzY5nsr5KST9h155PExu98ZRzOXaFi -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:36 2026 by rpki-client