This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/WdQ6he_P5F-cOEeRR1TiPU-zU-s.roa File: WdQ6he_P5F-cOEeRR1TiPU-zU-s.roa (raw, json) Hash identifier: vQjmo6B5bhn28fdIrHICw7DprEul1mU/rEs6H7jrIrc= Subject key identifier: 59:D4:3A:85:EF:CF:E4:5F:9C:38:47:91:47:54:E2:3D:4F:B3:53:EB Certificate issuer: /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Certificate serial: 019B7AC9331AD18D2023EDB07D4935D517DD Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/WdQ6he_P5F-cOEeRR1TiPU-zU-s.roa Signing time: Thu 01 Jan 2026 18:19:24 +0000 ROA not before: Thu 01 Jan 2026 18:19:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 32787 IP address blocks: 46.240.122.0/24 maxlen: 24 46.240.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:33:1a:d1:8d:20:23:ed:b0:7d:49:35:d5:17:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212 Validity Not Before: Jan 1 18:19:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=59d43a85efcfe45f9c3847914754e23d4fb353eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:2c:ee:5a:64:2f:09:1e:22:0a:c1:ae:93:79: a4:61:69:74:18:a0:b9:d5:44:39:e0:36:2e:be:81: d1:d9:39:41:1c:d8:34:43:65:d9:44:cd:db:ea:94: 8c:e9:62:7e:1c:a3:a6:12:46:31:fb:61:07:bd:5e: 20:b4:14:f6:cf:74:83:f7:49:e0:7f:1e:5b:50:8a: 9e:f3:51:40:3c:95:65:27:09:d6:0f:e8:5c:4a:01: a9:c5:16:cd:1b:0b:99:d9:1d:48:5f:dd:1f:11:4c: df:bb:62:81:83:db:85:20:57:2d:6c:66:f0:57:f9: c2:18:e1:f6:39:49:3b:89:65:93:48:dd:d8:30:f5: 5f:96:a0:5f:8f:f3:04:9c:c9:21:2e:af:d3:06:66: 22:36:d2:d4:aa:46:e3:b8:4d:7b:c8:e2:fb:cb:50: 2e:50:44:db:79:75:61:c1:de:a8:27:35:b5:47:d8: c2:4c:48:2f:ea:75:48:5d:96:9d:7c:55:9f:b6:15: dd:a9:66:21:cf:dc:08:99:f4:07:37:09:ab:ad:f0: dd:cc:b8:43:71:9a:e2:e5:ff:51:b3:16:3c:5a:fa: e0:32:ef:8d:34:cb:52:65:6c:ca:43:5b:f0:91:5f: c3:de:f7:a7:b1:43:74:37:c2:c1:68:eb:79:20:37: 1b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:D4:3A:85:EF:CF:E4:5F:9C:38:47:91:47:54:E2:3D:4F:B3:53:EB X509v3 Authority Key Identifier: keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/WdQ6he_P5F-cOEeRR1TiPU-zU-s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.240.122.0/24 46.240.124.0/24 Signature Algorithm: sha256WithRSAEncryption 04:ad:eb:7f:53:e1:f7:44:e1:cb:fc:cc:47:27:ae:b2:51:3c: ab:44:12:af:cd:03:0c:9a:0e:ae:85:71:dc:31:ad:f2:7a:86: a2:fb:c6:b0:1f:e0:46:63:d5:09:ba:50:a8:0b:7c:44:c0:60: 80:e9:54:df:74:a5:4e:ba:80:b9:a3:93:34:10:cb:8a:49:60: 5f:15:11:16:89:73:70:cc:ee:40:84:60:f7:9c:e9:c8:0a:f9: bf:79:c0:87:ae:a6:c7:ea:94:6c:00:64:03:5a:bc:2c:dc:b8: fe:12:49:fd:1f:17:e8:d6:3e:7d:4a:aa:bc:9e:8a:ba:b4:b6: a4:7b:8f:b5:0e:4e:18:6f:cd:5f:18:c3:54:f9:e1:00:1d:7d: 5c:0d:4f:73:47:8d:4c:4e:ac:22:c2:ce:d2:4e:07:b4:ad:d1: 11:9a:67:48:dc:df:a9:f1:c7:88:7f:be:80:b8:ab:0b:37:88: 69:d7:8f:4c:1a:f8:2c:40:92:bb:ce:c6:e8:db:69:35:7d:79: 93:6f:f3:4b:67:0d:b0:95:65:81:55:cc:ce:14:3e:8d:33:1d: 98:13:72:f0:11:df:c1:fe:76:d6:0d:6d:8b:a4:ac:b0:0a:c2: 17:97:28:d7:86:42:3b:5f:fb:d4:a7:ed:8d:f7:8e:43:0e:5c: c0:02:37:93 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6yTMa0Y0gI+2wfUk11RfdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2M2JjYzZkMjVmNzQ3NmZiYjNlYzMzZjZkYmMzZTllZWFk OTIyMTIwHhcNMjYwMTAxMTgxOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1OWQ0M2E4NWVmY2ZlNDVmOWMzODQ3OTE0NzU0ZTIzZDRmYjM1M2ViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3yzuWmQvCR4iCsGuk3mkYWl0GKC5 1UQ54DYuvoHR2TlBHNg0Q2XZRM3b6pSM6WJ+HKOmEkYx+2EHvV4gtBT2z3SD90ng fx5bUIqe81FAPJVlJwnWD+hcSgGpxRbNGwuZ2R1IX90fEUzfu2KBg9uFIFctbGbw V/nCGOH2OUk7iWWTSN3YMPVflqBfj/MEnMkhLq/TBmYiNtLUqkbjuE17yOL7y1Au UETbeXVhwd6oJzW1R9jCTEgv6nVIXZadfFWfthXdqWYhz9wImfQHNwmrrfDdzLhD cZri5f9RsxY8WvrgMu+NNMtSZWzKQ1vwkV/D3vensUN0N8LBaOt5IDcb7QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFFnUOoXvz+RfnDhHkUdU4j1Ps1PrMB8GA1UdIwQY MBaAFKY7zG0l90dvuz7DP228Pp7q2SISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQt NDkyNGZhMDAwYjdjLzEvV2RRNmhlX1A1Ri1jT0VlUlIxVGlQVS16VS1zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQtNDkyNGZhMDAwYjdj LzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALvB6AwQA LvB8MA0GCSqGSIb3DQEBCwUAA4IBAQAEret/U+H3ROHL/MxHJ66yUTyrRBKvzQMM mg6uhXHcMa3yeoai+8awH+BGY9UJulCoC3xEwGCA6VTfdKVOuoC5o5M0EMuKSWBf FREWiXNwzO5AhGD3nOnICvm/ecCHrqbH6pRsAGQDWrws3Lj+Ekn9Hxfo1j59Sqq8 noq6tLake4+1Dk4Yb81fGMNU+eEAHX1cDU9zR41MTqwiws7STge0rdERmmdI3N+p 8ceIf76AuKsLN4hp149MGvgsQJK7zsbo22k1fXmTb/NLZw2wlWWBVczOFD6NMx2Y E3LwEd/B/nbWDW2LpKywCsIXlyjXhkI7X/vUp+2N945DDlzAAjeT -----END CERTIFICATE-----Generated at Tue Jan 20 07:56:31 2026 by rpki-client