This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/W0pmMBs9ZqABpCyD-qWKr0hKJLs.roa File: W0pmMBs9ZqABpCyD-qWKr0hKJLs.roa (raw, json) Hash identifier: CJlkveTThvnvE0ZrZ0pFkYMjMY9upUSTXnaQzDta6v0= Subject key identifier: 5B:4A:66:30:1B:3D:66:A0:01:A4:2C:83:FA:A5:8A:AF:48:4A:24:BB Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603 Certificate serial: 019B791117F8B23FCCB577B61B0A37111279 Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/W0pmMBs9ZqABpCyD-qWKr0hKJLs.roa Signing time: Thu 01 Jan 2026 10:18:41 +0000 ROA not before: Thu 01 Jan 2026 10:18:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42831 IP address blocks: 45.43.64.0/23 maxlen: 24 45.43.67.0/24 maxlen: 24 45.43.68.0/22 maxlen: 24 45.43.80.0/22 maxlen: 24 45.43.84.0/23 maxlen: 24 45.43.86.0/24 maxlen: 24 45.43.87.0/24 maxlen: 24 45.43.93.0/24 maxlen: 24 45.43.94.0/24 maxlen: 24 45.43.95.0/24 maxlen: 24 87.239.253.0/24 maxlen: 24 89.33.6.0/23 maxlen: 24 94.177.5.0/24 maxlen: 24 107.181.128.0/22 maxlen: 24 107.181.132.0/23 maxlen: 24 107.181.140.0/22 maxlen: 24 107.181.148.0/23 maxlen: 24 107.181.150.0/24 maxlen: 24 107.181.152.0/24 maxlen: 24 107.181.153.0/24 maxlen: 24 107.181.154.0/24 maxlen: 24 113.20.157.0/24 maxlen: 24 113.20.158.0/24 maxlen: 24 155.254.32.0/24 maxlen: 24 155.254.33.0/24 maxlen: 24 155.254.34.0/24 maxlen: 24 155.254.36.0/22 maxlen: 24 155.254.48.0/23 maxlen: 24 155.254.61.0/24 maxlen: 24 162.220.246.0/23 maxlen: 24 198.105.100.0/22 maxlen: 24 198.105.108.0/24 maxlen: 24 198.105.109.0/24 maxlen: 24 198.105.110.0/24 maxlen: 24 198.105.111.0/24 maxlen: 24 198.105.119.0/24 maxlen: 24 198.105.121.0/24 maxlen: 24 198.105.122.0/24 maxlen: 24 2a05:9f40:1f::/48 maxlen: 48 2a05:9f44:2a05::/48 maxlen: 48 2a05:9f46::/32 maxlen: 48 2a05:9f47::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:04:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:17:f8:b2:3f:cc:b5:77:b6:1b:0a:37:11:12:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603 Validity Not Before: Jan 1 10:18:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b4a66301b3d66a001a42c83faa58aaf484a24bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e4:b5:d5:d0:93:ed:3e:71:76:25:37:36:af: 20:32:33:a9:ea:d0:f2:66:0d:b9:f3:43:73:3a:c4: 58:94:c7:df:f0:f9:f6:98:b3:04:28:a5:2b:f3:58: 27:f8:8d:01:68:5b:f3:93:f3:c3:2c:4e:af:7f:43: d4:d0:4c:b3:88:f9:99:12:d5:a7:04:ec:59:f7:69: 73:bb:89:0d:3e:96:3d:2e:68:5d:ea:2e:a8:86:01: df:89:a2:fa:6f:52:2a:9b:b5:4f:ce:61:19:cb:0a: d7:e5:8e:05:81:f8:e4:fc:d4:14:02:b4:67:8e:46: 59:28:67:10:e0:30:16:4e:f3:b9:3c:ce:7b:17:34: 2e:29:74:dd:68:bb:0f:a4:89:f1:1f:06:8b:5a:e5: 77:2d:30:1e:bb:73:cd:ba:09:95:6f:e1:c1:e2:ff: 93:78:65:55:87:d4:61:63:c4:b5:35:df:65:57:fb: 1d:66:b8:bf:ea:ae:ad:f6:81:12:c3:c3:25:6f:22: 50:15:03:35:40:6a:bf:b3:fc:84:85:c3:ea:5f:35: 6f:7c:c8:1b:d8:a5:8a:eb:07:2d:4b:e1:17:d4:c8: b7:54:9a:a8:86:c8:6f:7f:55:f0:63:c6:12:95:ee: 9b:ea:86:c8:24:31:ba:ea:7e:e0:06:90:3e:b3:b3: 05:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:4A:66:30:1B:3D:66:A0:01:A4:2C:83:FA:A5:8A:AF:48:4A:24:BB X509v3 Authority Key Identifier: keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/W0pmMBs9ZqABpCyD-qWKr0hKJLs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.43.64.0/23 45.43.67.0-45.43.71.255 45.43.80.0/21 45.43.93.0-45.43.95.255 87.239.253.0/24 89.33.6.0/23 94.177.5.0/24 107.181.128.0-107.181.133.255 107.181.140.0/22 107.181.148.0-107.181.150.255 107.181.152.0-107.181.154.255 113.20.157.0-113.20.158.255 155.254.32.0-155.254.34.255 155.254.36.0/22 155.254.48.0/23 155.254.61.0/24 162.220.246.0/23 198.105.100.0/22 198.105.108.0/22 198.105.119.0/24 198.105.121.0-198.105.122.255 IPv6: 2a05:9f40:1f::/48 2a05:9f44:2a05::/48 2a05:9f46::/31 Signature Algorithm: sha256WithRSAEncryption 54:2a:5b:4d:d5:08:1f:51:54:1f:a0:06:1b:c2:92:06:3b:d4: b3:79:48:d8:aa:22:f2:53:4e:52:57:67:21:7d:7d:92:ca:18: 8b:5d:35:e5:1e:24:14:84:4d:7c:f1:24:4a:bd:da:40:53:9b: 4c:4d:9b:f2:91:23:b7:a3:28:c6:e9:12:11:48:2b:6c:ab:00: e7:e8:f9:29:69:7b:49:15:b7:58:9b:d8:e7:cc:91:de:a1:e3: 2e:3e:49:34:ec:77:c3:d2:f1:a6:8f:4d:3e:81:30:a1:e9:00: d7:41:ff:d5:a2:0a:8f:65:85:6a:6f:eb:9f:79:53:c5:c7:ea: d7:f6:fb:5c:5f:0e:94:61:62:42:9b:92:d9:bb:62:93:72:17: a3:43:84:55:80:69:2d:30:5e:07:c9:8e:c8:be:f2:c5:fe:fb: db:d1:b0:c3:af:90:2e:dd:6b:bf:c6:d5:90:f3:9f:77:fd:3b: 60:c0:56:53:c4:b2:e3:15:68:e2:55:73:b3:17:3d:64:e9:66: a3:01:19:70:3f:4e:bc:c9:20:db:fe:f3:f2:74:30:bd:31:82: f1:94:c6:cd:d4:1a:89:f8:8d:ea:41:75:f5:5e:6d:42:ff:37: d4:79:94:f1:62:77:73:47:eb:96:28:b4:83:7b:8e:f1:48:53: a4:10:5a:ff -----BEGIN CERTIFICATE----- MIIF2zCCBMOgAwIBAgISAZt5ERf4sj/MtXe2Gwo3ERJ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NTRjMzQ3ZDY4ZDE1NDkzZGU3MWJiOTYyZjBhNTY3ZTEz NGQ2MDMwHhcNMjYwMTAxMTAxODQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjRhNjYzMDFiM2Q2NmEwMDFhNDJjODNmYWE1OGFhZjQ4NGEyNGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuS11dCT7T5xdiU3Nq8gMjOp6tDy Zg2580NzOsRYlMff8Pn2mLMEKKUr81gn+I0BaFvzk/PDLE6vf0PU0EyziPmZEtWn BOxZ92lzu4kNPpY9Lmhd6i6ohgHfiaL6b1Iqm7VPzmEZywrX5Y4Fgfjk/NQUArRn jkZZKGcQ4DAWTvO5PM57FzQuKXTdaLsPpInxHwaLWuV3LTAeu3PNugmVb+HB4v+T eGVVh9RhY8S1Nd9lV/sdZri/6q6t9oESw8MlbyJQFQM1QGq/s/yEhcPqXzVvfMgb 2KWK6wctS+EX1Mi3VJqohshvf1XwY8YSle6b6obIJDG66n7gBpA+s7MFRQIDAQAB o4IC5zCCAuMwHQYDVR0OBBYEFFtKZjAbPWagAaQsg/qliq9ISiS7MB8GA1UdIwQY MBaAFOdUw0fWjRVJPecbuWLwpWfhNNYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2It MzdiNjJkMjIzOTI0LzEvVzBwbU1CczlacUFCcEN5RC1xV0tyMGhLSkxzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2ItMzdiNjJkMjIzOTI0 LzEvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIH8BggrBgEFBQcBBwEB/wSB7DCB6TCBxQQCAAEwgb4DBAEt K0AwDAMEAC0rQwMEAy0rQAMEAy0rUDAMAwQALStdAwQFLStAAwQAV+/9AwQBWSEG AwQAXrEFMAwDBAdrtYADBAFrtYQDBAJrtYwwDAMEAmu1lAMEAGu1ljAMAwQDa7WY AwQAa7WaMAwDBABxFJ0DBABxFJ4wDAMEBZv+IAMEAJv+IgMEApv+JAMEAZv+MAME AJv+PQMEAaLc9gMEAsZpZAMEAsZpbAMEAMZpdzAMAwQAxml5AwQAxml6MB8EAgAC MBkDBwAqBZ9AAB8DBwAqBZ9EKgUDBQEqBZ9GMA0GCSqGSIb3DQEBCwUAA4IBAQBU KltN1QgfUVQfoAYbwpIGO9SzeUjYqiLyU05SV2chfX2SyhiLXTXlHiQUhE188SRK vdpAU5tMTZvykSO3oyjG6RIRSCtsqwDn6PkpaXtJFbdYm9jnzJHeoeMuPkk07HfD 0vGmj00+gTCh6QDXQf/VogqPZYVqb+ufeVPFx+rX9vtcXw6UYWJCm5LZu2KTchej Q4RVgGktMF4HyY7IvvLF/vvb0bDDr5Au3Wu/xtWQ8593/TtgwFZTxLLjFWjiVXOz Fz1k6WajARlwP068ySDb/vPydDC9MYLxlMbN1BqJ+I3qQXX1Xm1C/zfUeZTxYndz R+uWKLSDe47xSFOkEFr/ -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:02 2026 by rpki-client