This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/WEVqV3-Rp-d0LXAX2D5pD9lVyK4.roa File: WEVqV3-Rp-d0LXAX2D5pD9lVyK4.roa (raw, json) Hash identifier: /YFcmAE3f+SI8C115sE0xgY4yWWtCJhMHzRULYVE/Ig= Subject key identifier: 58:45:6A:57:7F:91:A7:E7:74:2D:70:17:D8:3E:69:0F:D9:55:C8:AE Certificate issuer: /CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac Certificate serial: 019B78343583AA8F2B48B4988D0991393ED5 Authority key identifier: 46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/WEVqV3-Rp-d0LXAX2D5pD9lVyK4.roa Signing time: Thu 01 Jan 2026 06:17:26 +0000 ROA not before: Thu 01 Jan 2026 06:17:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60633 IP address blocks: 45.157.49.0/24 maxlen: 24 45.157.50.0/24 maxlen: 24 45.157.51.0/24 maxlen: 24 185.156.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:35:83:aa:8f:2b:48:b4:98:8d:09:91:39:3e:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac Validity Not Before: Jan 1 06:17:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=58456a577f91a7e7742d7017d83e690fd955c8ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:79:64:cd:9a:db:a5:93:83:4d:ff:b4:0e:ce: 18:0d:6d:16:02:70:c0:b3:21:9f:44:1f:53:e5:2c: 4c:fc:47:c7:c2:e5:ad:88:ff:96:9b:01:94:1e:86: 59:a0:50:80:9d:8c:fa:b0:38:96:f9:bb:a0:6a:6a: 92:cd:5f:94:b9:77:f5:2a:7c:99:12:b8:b5:4c:45: 3a:23:24:63:23:ba:df:7f:d4:ad:2d:d7:f3:c4:0f: be:f5:a8:44:77:18:67:48:d5:62:16:14:27:6f:2d: d0:13:a0:c6:cf:1c:b5:dc:29:a7:b1:67:94:94:24: e6:54:3f:41:67:ee:8f:63:26:6f:0c:1a:34:10:9a: 63:20:40:17:60:6c:25:e7:c5:e8:19:63:a9:df:7f: 68:c0:31:5c:4e:5e:22:90:5c:5d:08:32:87:e0:03: d1:d0:73:9c:88:68:20:ae:32:ba:2a:e9:27:61:77: 15:34:36:6d:dc:2b:bf:49:6c:5d:e5:f6:64:5a:63: c5:5a:e5:77:4f:ad:fb:c8:31:f9:85:e7:51:2c:cd: cf:1b:2a:32:0e:33:94:5a:65:ef:78:4e:7a:c7:6e: ac:9c:a8:ca:55:0c:0c:ca:e4:e1:30:4b:bd:b6:75: 98:ee:25:b4:d2:4f:7f:8b:3d:66:a9:56:d1:63:07: 8b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:45:6A:57:7F:91:A7:E7:74:2D:70:17:D8:3E:69:0F:D9:55:C8:AE X509v3 Authority Key Identifier: keyid:46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/WEVqV3-Rp-d0LXAX2D5pD9lVyK4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.157.49.0-45.157.51.255 185.156.8.0/22 Signature Algorithm: sha256WithRSAEncryption 18:2a:ae:47:fb:c8:2e:ef:75:be:eb:cc:30:e3:c5:64:8e:60: fb:2b:44:f6:c9:13:a3:b2:5f:81:eb:d9:c6:5c:7d:90:11:7e: 61:6d:88:ab:dd:dc:1c:20:93:e3:b4:67:ff:7e:38:43:0c:94: 7e:65:92:d6:16:bb:04:7a:ff:82:92:0b:b5:05:11:ca:c5:2d: 52:77:e7:65:15:98:4c:86:e0:8c:72:70:c0:9b:71:83:b2:9a: 9e:58:c3:9a:07:05:27:23:73:ec:df:f0:a3:3d:18:71:8e:05: a3:ba:18:c0:27:67:3b:fa:2b:d4:44:4f:d1:f1:5f:d8:86:e8: 32:2e:73:5d:b8:5b:04:6f:cd:7a:48:51:7e:1e:57:64:68:bd: f0:5f:f6:8d:3a:9e:09:24:c0:ab:25:39:ab:a3:d2:88:7f:cf: 93:18:f6:e6:ee:36:9a:9c:32:4c:71:eb:57:81:cf:f8:2f:3b: 04:bb:0c:8b:5e:53:44:8e:c8:59:8d:d7:27:62:40:da:a1:e5: f1:ef:88:c3:fb:bd:e0:3b:cc:93:2e:b0:69:cf:be:07:5a:78: ad:fe:fa:06:2a:8b:a6:fb:de:f1:a7:da:b7:ee:3b:e7:de:35: c4:ee:ed:8c:7e:69:12:05:1d:75:44:fa:92:62:65:39:53:fa: 06:14:99:ef -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt4NDWDqo8rSLSYjQmROT7VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2MzhiZjY4YjY2NzVlMmE1YTNhNzkyMmY2NDc3ZDJhZmIz NTdmYWMwHhcNMjYwMTAxMDYxNzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODQ1NmE1NzdmOTFhN2U3NzQyZDcwMTdkODNlNjkwZmQ5NTVjOGFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnlkzZrbpZODTf+0Ds4YDW0WAnDA syGfRB9T5SxM/EfHwuWtiP+WmwGUHoZZoFCAnYz6sDiW+bugamqSzV+UuXf1KnyZ Eri1TEU6IyRjI7rff9StLdfzxA++9ahEdxhnSNViFhQnby3QE6DGzxy13CmnsWeU lCTmVD9BZ+6PYyZvDBo0EJpjIEAXYGwl58XoGWOp339owDFcTl4ikFxdCDKH4APR 0HOciGggrjK6KuknYXcVNDZt3Cu/SWxd5fZkWmPFWuV3T637yDH5hedRLM3PGyoy DjOUWmXveE56x26snKjKVQwMyuThMEu9tnWY7iW00k9/iz1mqVbRYweLWwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFFhFald/kafndC1wF9g+aQ/ZVciuMB8GA1UdIwQY MBaAFEY4v2i2Z14qWjp5IvZHfSr7NX+sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmppX2FMWm5YaXBhT25raTlrZDlLdnMxZjZ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9lMmY2MTUtNmNhNC00YmY1LTlmNTMt ODcwNzNmNDM0YjAzLzEvV0VWcVYzLVJwLWQwTFhBWDJENXBEOWxWeUs0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9lMmY2MTUtNmNhNC00YmY1LTlmNTMtODcwNzNmNDM0YjAz LzEvUmppX2FMWm5YaXBhT25raTlrZDlLdnMxZjZ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAAtnTED BAItnTADBAK5nAgwDQYJKoZIhvcNAQELBQADggEBABgqrkf7yC7vdb7rzDDjxWSO YPsrRPbJE6OyX4Hr2cZcfZARfmFtiKvd3Bwgk+O0Z/9+OEMMlH5lktYWuwR6/4KS C7UFEcrFLVJ352UVmEyG4IxycMCbcYOymp5Yw5oHBScjc+zf8KM9GHGOBaO6GMAn Zzv6K9RET9HxX9iG6DIuc124WwRvzXpIUX4eV2RovfBf9o06ngkkwKslOauj0oh/ z5MY9ubuNpqcMkxx61eBz/gvOwS7DIteU0SOyFmN1ydiQNqh5fHviMP7veA7zJMu sGnPvgdaeK3++gYqi6b73vGn2rfuO+feNcTu7Yx+aRIFHXVE+pJiZTlT+gYUme8= -----END CERTIFICATE-----Generated at Mon Jan 26 21:47:55 2026 by rpki-client