This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/W1K4BULbO2S6d1dBbrhnUa5rsZc.roa File: W1K4BULbO2S6d1dBbrhnUa5rsZc.roa (raw, json) Hash identifier: etCHZn/KTTLewWLJtVE8dVh2RZR6CliQzpqIzdYsBYc= Subject key identifier: 5B:52:B8:05:42:DB:3B:64:BA:77:57:41:6E:B8:67:51:AE:6B:B1:97 Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd Certificate serial: 019BD47D488C3EFEFB4F25B70280F7D090D3 Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/W1K4BULbO2S6d1dBbrhnUa5rsZc.roa Signing time: Mon 19 Jan 2026 04:22:18 +0000 ROA not before: Mon 19 Jan 2026 04:22:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205960 IP address blocks: 2.59.152.0/22 maxlen: 22 2.59.152.0/24 maxlen: 24 2.59.153.0/24 maxlen: 24 2.59.154.0/24 maxlen: 24 45.91.224.0/22 maxlen: 22 45.91.225.0/24 maxlen: 24 45.142.152.0/22 maxlen: 22 91.204.224.0/22 maxlen: 22 91.204.224.0/24 maxlen: 24 91.204.225.0/24 maxlen: 24 91.204.226.0/24 maxlen: 24 91.204.227.0/24 maxlen: 24 185.202.100.0/22 maxlen: 22 185.202.101.0/24 maxlen: 24 185.202.103.0/24 maxlen: 24 193.239.150.0/23 maxlen: 23 193.239.151.0/24 maxlen: 24 193.239.154.0/23 maxlen: 23 194.126.215.0/24 maxlen: 24 194.126.219.0/24 maxlen: 24 194.126.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d4:7d:48:8c:3e:fe:fb:4f:25:b7:02:80:f7:d0:90:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd Validity Not Before: Jan 19 04:22:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5b52b80542db3b64ba7757416eb86751ae6bb197 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ed:20:1e:b0:5c:32:28:64:f8:39:08:96:cb: fb:96:ac:58:44:05:99:fc:14:ac:57:8d:b8:4d:76: 5a:c1:e2:93:48:fc:1d:74:e8:03:76:60:ed:ef:3d: c3:fd:2d:2a:b0:51:1f:57:8b:98:f2:bd:c3:0a:db: 89:da:40:28:ee:1d:36:33:e4:8e:30:db:8c:df:8c: f2:94:ec:8f:09:61:6b:05:ae:9c:94:18:2e:3c:84: 90:55:31:cc:ec:75:99:30:a6:32:02:55:1a:b6:b0: 5f:3a:24:b5:4a:67:a7:5f:ad:77:aa:47:14:44:8e: d8:ec:52:62:62:f5:4c:7b:6d:f8:d2:a6:68:43:5a: 83:86:bb:0c:95:ba:c9:f0:81:a6:71:8d:97:e9:7a: 9d:59:df:d5:a3:79:2c:39:de:e0:e8:aa:c3:39:7f: 62:6e:55:70:f9:e1:35:6b:b7:5d:74:03:f2:90:80: 1f:51:a0:9d:91:9a:db:69:5b:f4:47:86:39:f0:0d: b9:2d:57:b7:d8:3c:e0:42:8f:55:5b:3b:98:62:06: f1:66:d5:c8:e6:eb:0f:cf:bc:b5:22:f4:d3:b9:84: f2:bf:cc:02:f6:db:3c:86:44:bf:e7:c0:17:6a:87: bf:3f:d0:f2:af:1a:ca:e0:c7:db:be:e2:6e:57:85: 59:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:52:B8:05:42:DB:3B:64:BA:77:57:41:6E:B8:67:51:AE:6B:B1:97 X509v3 Authority Key Identifier: keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/W1K4BULbO2S6d1dBbrhnUa5rsZc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.59.152.0/22 45.91.224.0/22 45.142.152.0/22 91.204.224.0/22 185.202.100.0/22 193.239.150.0/23 193.239.154.0/23 194.126.215.0/24 194.126.219.0/24 194.126.227.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:0c:c9:42:f3:2a:1a:f5:66:12:ea:a3:42:4b:c2:ce:32:1a: 4f:ed:f8:ef:6a:66:fa:25:01:88:bc:a0:23:e7:ef:9b:be:64: 26:8c:9c:a4:4a:f6:71:ec:fd:e1:e0:5c:93:3f:42:6e:2c:a0: a6:86:d8:15:ef:94:84:46:27:38:d9:d6:35:4d:21:d2:b7:81: e5:11:7c:80:f9:9e:3d:09:07:67:ed:eb:1c:01:cb:7e:4c:cb: 4b:41:6e:09:d0:fe:ad:f5:2d:bf:9d:7f:ae:1c:02:41:c6:34: 71:60:a5:e9:c4:3b:1d:e6:73:e9:75:75:d2:54:80:3a:88:2d: 6f:7c:3f:ce:d2:fc:44:48:ef:8a:38:22:ab:d6:65:ff:ef:1f: 78:b5:70:2c:aa:c6:d3:77:c3:db:89:3b:68:c2:9d:7e:00:2b: 62:07:ca:9b:0a:75:5f:3e:bb:87:d6:77:19:f0:ef:53:df:70: ed:ff:8c:3b:23:96:79:f0:aa:98:a7:ba:aa:d8:42:9c:b5:62: 4b:b5:60:04:33:6b:42:8a:9e:33:31:db:00:14:a5:a2:60:88: 44:8d:63:f5:71:97:cc:ec:2c:54:08:6d:e2:1c:e7:d2:07:6f: c5:e2:12:06:cf:f9:cd:5f:79:83:bf:7b:06:d7:8b:73:9b:1d: 54:ba:c1:ab -----BEGIN CERTIFICATE----- MIIFMzCCBBugAwIBAgISAZvUfUiMPv77TyW3AoD30JDTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTA4YzIyNWYyNDc4Y2Q0MjMwMTc5ODkwZDA3Mjg0YmUx NjM2Y2QwHhcNMjYwMTE5MDQyMjE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1YjUyYjgwNTQyZGIzYjY0YmE3NzU3NDE2ZWI4Njc1MWFlNmJiMTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsO0gHrBcMihk+DkIlsv7lqxYRAWZ /BSsV424TXZaweKTSPwddOgDdmDt7z3D/S0qsFEfV4uY8r3DCtuJ2kAo7h02M+SO MNuM34zylOyPCWFrBa6clBguPISQVTHM7HWZMKYyAlUatrBfOiS1SmenX613qkcU RI7Y7FJiYvVMe2340qZoQ1qDhrsMlbrJ8IGmcY2X6XqdWd/Vo3ksOd7g6KrDOX9i blVw+eE1a7dddAPykIAfUaCdkZrbaVv0R4Y58A25LVe32DzgQo9VWzuYYgbxZtXI 5usPz7y1IvTTuYTyv8wC9ts8hkS/58AXaoe/P9DyrxrK4MfbvuJuV4VZAwIDAQAB o4ICPzCCAjswHQYDVR0OBBYEFFtSuAVC2ztkundXQW64Z1Gua7GXMB8GA1UdIwQY MBaAFM0QjCJfJHjNQjAXmJDQcoS+FjbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt YWU1MDI3MzY4MWE3LzEvVzFLNEJVTGJPMlM2ZDFkQmJyaG5VYTVyc1pjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3 LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQCAjuYAwQC LVvgAwQCLY6YAwQCW8zgAwQCucpkAwQBwe+WAwQBwe+aAwQAwn7XAwQAwn7bAwQA wn7jMA0GCSqGSIb3DQEBCwUAA4IBAQBLDMlC8yoa9WYS6qNCS8LOMhpP7fjvamb6 JQGIvKAj5++bvmQmjJykSvZx7P3h4FyTP0JuLKCmhtgV75SERic42dY1TSHSt4Hl EXyA+Z49CQdn7escAct+TMtLQW4J0P6t9S2/nX+uHAJBxjRxYKXpxDsd5nPpdXXS VIA6iC1vfD/O0vxESO+KOCKr1mX/7x94tXAsqsbTd8PbiTtowp1+ACtiB8qbCnVf PruH1ncZ8O9T33Dt/4w7I5Z58KqYp7qq2EKctWJLtWAEM2tCip4zMdsAFKWiYIhE jWP1cZfM7CxUCG3iHOfSB2/F4hIGz/nNX3mDv3sG14tzmx1UusGr -----END CERTIFICATE-----Generated at Sun Jan 25 14:36:14 2026 by rpki-client