This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/iwnASaLaQw8Qdn5cYtkYv6MG2gQ.roa File: iwnASaLaQw8Qdn5cYtkYv6MG2gQ.roa (raw, json) Hash identifier: KCxw+NktIcx6tj5s7jZ1g6kWygCH78tSuPcXjTkGaIE= Subject key identifier: 8B:09:C0:49:A2:DA:43:0F:10:76:7E:5C:62:D9:18:BF:A3:06:DA:04 Certificate issuer: /CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0 Certificate serial: 019B7C132F867A00398CAED2FBE5519EC889 Authority key identifier: C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/iwnASaLaQw8Qdn5cYtkYv6MG2gQ.roa Signing time: Fri 02 Jan 2026 00:19:50 +0000 ROA not before: Fri 02 Jan 2026 00:19:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31593 IP address blocks: 46.33.32.0/21 maxlen: 21 46.33.40.0/22 maxlen: 22 46.33.56.0/22 maxlen: 22 2a03:1240:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:2f:86:7a:00:39:8c:ae:d2:fb:e5:51:9e:c8:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0 Validity Not Before: Jan 2 00:19:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b09c049a2da430f10767e5c62d918bfa306da04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:21:ae:8c:fd:5a:a0:0e:1b:af:65:62:d6:a5: f9:ab:97:89:3c:6d:4a:dc:5c:91:3a:0f:12:05:41: 4f:9d:39:96:1f:82:8a:04:75:cb:0b:e5:67:60:7e: da:09:46:23:f8:48:ae:43:4c:1e:35:5c:bc:e0:a0: fd:39:70:8c:6a:2b:97:e1:a5:05:e2:e3:ac:ea:21: 56:32:de:af:c5:45:81:a9:0f:cb:68:20:2c:83:b9: 90:bf:fc:39:24:0c:34:59:6e:52:5b:db:b0:20:d6: a1:19:33:f6:04:30:d2:91:3b:8b:f1:f0:e5:2e:5e: 5e:93:d6:04:2c:16:b9:74:f7:7e:c9:15:f2:0d:cc: ba:d7:8a:79:7d:16:20:2c:58:b9:28:4e:ea:dd:7b: bd:19:e8:3e:5d:59:97:84:ec:26:a0:24:c7:f4:a3: 22:b5:10:44:7c:c8:89:e2:97:e5:bb:4e:60:d5:e9: 07:d3:23:c0:1a:e4:64:fd:d3:b3:f8:dc:e6:5a:70: 6e:6b:ca:83:bf:62:d6:ab:5d:f1:0d:02:63:91:78: b0:b8:12:5e:1c:d4:76:a2:05:fe:87:10:91:6c:41: 74:81:3b:9d:36:32:79:2f:b2:41:e4:62:71:b9:e0: 69:74:85:8b:c2:55:a8:72:26:f2:ac:99:0b:09:c4: 65:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:09:C0:49:A2:DA:43:0F:10:76:7E:5C:62:D9:18:BF:A3:06:DA:04 X509v3 Authority Key Identifier: keyid:C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/iwnASaLaQw8Qdn5cYtkYv6MG2gQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.33.32.0-46.33.43.255 46.33.56.0/22 IPv6: 2a03:1240:2::/48 Signature Algorithm: sha256WithRSAEncryption 45:7a:b4:56:9a:02:66:0e:58:fb:01:04:be:03:74:1d:23:9d: e4:fc:6e:a7:89:20:70:97:a0:31:68:40:02:c8:7f:67:40:49: 74:11:35:ac:e1:87:a1:72:e9:65:25:e9:de:80:e4:2e:d5:98: 62:d9:16:7c:fa:93:da:1e:c7:60:70:d0:5a:b2:a7:9b:0c:ce: e1:60:b8:80:46:f8:60:ad:34:67:b3:fc:0e:c2:4f:76:4a:2b: d3:75:8f:43:0e:de:8e:7a:eb:b2:20:46:38:7a:53:f3:56:c3: 86:8e:31:61:34:94:82:a1:f6:c8:f5:c9:12:9a:93:ec:42:b7: fa:23:7b:d9:70:ff:2d:c3:2a:b3:8d:d4:52:ce:2a:7d:8b:82: 8e:e5:c8:da:06:0e:43:df:ac:3e:dc:5c:82:aa:72:36:ce:38: aa:4e:10:e3:f7:c8:3c:eb:de:61:6c:de:23:e3:b3:3f:a0:68: 76:e5:bd:46:bb:d6:55:c6:1d:0f:ca:ce:7f:15:a0:78:77:a8: c0:45:35:ff:1d:cd:b3:c5:68:2c:59:ee:3d:15:6b:ba:6f:03: b3:08:1e:31:bc:f9:24:04:77:7b:92:44:10:91:d8:fe:63:a4: 7f:72:2a:79:12:71:04:2f:a7:07:68:f9:c7:0e:fd:54:eb:9e: 33:3c:c4:ef -----BEGIN CERTIFICATE----- MIIFHDCCBASgAwIBAgISAZt8Ey+GegA5jK7S++VRnsiJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYmY4ZjNlNjA5MDcyODg5ZTc0ZGQwZmI0ZTI3ZjliYWM0 N2IzYjAwHhcNMjYwMTAyMDAxOTUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjA5YzA0OWEyZGE0MzBmMTA3NjdlNWM2MmQ5MThiZmEzMDZkYTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyGujP1aoA4br2Vi1qX5q5eJPG1K 3FyROg8SBUFPnTmWH4KKBHXLC+VnYH7aCUYj+EiuQ0weNVy84KD9OXCMaiuX4aUF 4uOs6iFWMt6vxUWBqQ/LaCAsg7mQv/w5JAw0WW5SW9uwINahGTP2BDDSkTuL8fDl Ll5ek9YELBa5dPd+yRXyDcy614p5fRYgLFi5KE7q3Xu9Geg+XVmXhOwmoCTH9KMi tRBEfMiJ4pflu05g1ekH0yPAGuRk/dOz+NzmWnBua8qDv2LWq13xDQJjkXiwuBJe HNR2ogX+hxCRbEF0gTudNjJ5L7JB5GJxueBpdIWLwlWocibyrJkLCcRlewIDAQAB o4ICKDCCAiQwHQYDVR0OBBYEFIsJwEmi2kMPEHZ+XGLZGL+jBtoEMB8GA1UdIwQY MBaAFMG/jz5gkHKInnTdD7Tif5usR7OwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2ItUFBtQ1Fjb2llZE4wUHRPSl9tNnhIczdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9hMWM2YzAtZTc1NC00NzllLTg1MWQt MGQwZGEwZDEwNDMyLzEvaXduQVNhTGFRdzhRZG41Y1l0a1l2Nk1HMmdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9hMWM2YzAtZTc1NC00NzllLTg1MWQtMGQwZGEwZDEwNDMy LzEvd2ItUFBtQ1Fjb2llZE4wUHRPSl9tNnhIczdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTAaBAIAATAUMAwDBAUuISAD BAIuISgDBAIuITgwDwQCAAIwCQMHACoDEkAAAjANBgkqhkiG9w0BAQsFAAOCAQEA RXq0VpoCZg5Y+wEEvgN0HSOd5Pxup4kgcJegMWhAAsh/Z0BJdBE1rOGHoXLpZSXp 3oDkLtWYYtkWfPqT2h7HYHDQWrKnmwzO4WC4gEb4YK00Z7P8DsJPdkor03WPQw7e jnrrsiBGOHpT81bDho4xYTSUgqH2yPXJEpqT7EK3+iN72XD/LcMqs43UUs4qfYuC juXI2gYOQ9+sPtxcgqpyNs44qk4Q4/fIPOveYWzeI+OzP6BoduW9RrvWVcYdD8rO fxWgeHeowEU1/x3Ns8VoLFnuPRVrum8DswgeMbz5JAR3e5JEEJHY/mOkf3IqeRJx BC+nB2j5xw79VOueMzzE7w== -----END CERTIFICATE-----Generated at Mon Jan 26 00:24:27 2026 by rpki-client