This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/wUgkHiQ86rCh1plfV-1fhX-AaMg.roa File: wUgkHiQ86rCh1plfV-1fhX-AaMg.roa (raw, json) Hash identifier: 86ia7TUjUS+IoQf3wQbTT6jWw8UWMBIHEfrKwtfOipM= Subject key identifier: C1:48:24:1E:24:3C:EA:B0:A1:D6:99:5F:57:ED:5F:85:7F:80:68:C8 Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Certificate serial: 019B7758E91622543419CE267DC1925B792B Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/wUgkHiQ86rCh1plfV-1fhX-AaMg.roa Signing time: Thu 01 Jan 2026 02:17:54 +0000 ROA not before: Thu 01 Jan 2026 02:17:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142594 IP address blocks: 45.139.225.0/24 maxlen: 24 45.139.226.0/24 maxlen: 24 45.139.227.0/24 maxlen: 24 2a04:ff00:800::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:e9:16:22:54:34:19:ce:26:7d:c1:92:5b:79:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Validity Not Before: Jan 1 02:17:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c148241e243ceab0a1d6995f57ed5f857f8068c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:42:d9:5c:6a:1b:e2:0f:a0:ff:af:ca:a5:de: 4e:a2:f2:15:9a:74:5c:24:3b:48:cb:f2:bd:d7:da: 6a:16:c0:63:c0:7e:3a:93:a9:90:b6:2c:fb:67:7b: 84:54:c5:b9:55:e8:d0:1a:94:3f:36:d7:c6:b0:db: 6d:74:d2:13:c2:83:8b:40:23:a4:96:07:b9:0a:25: 74:3a:df:90:48:f8:a0:bd:9f:b1:8f:00:fc:f3:e1: 1c:d9:0a:af:9e:4b:25:7f:1b:42:04:0a:7c:2d:fd: 67:c0:a0:3a:e5:9d:65:e6:e7:4e:2d:d0:91:ab:21: 98:84:84:36:bc:fd:2a:b7:db:56:87:7e:f2:6d:3b: ac:ee:4e:83:21:b6:32:45:8c:1e:e7:be:b9:65:fb: 59:49:58:4a:ae:36:f3:0b:30:2b:7b:a4:1a:0d:a6: ae:ce:a0:10:69:69:3d:c9:7d:86:29:15:11:64:df: fd:77:d6:ca:5f:e4:61:d7:4a:af:63:c1:95:b4:33: b9:64:12:a9:b8:3d:4e:63:1d:43:13:d7:60:ea:ff: 9c:2a:13:39:1e:8d:9b:74:66:4b:d3:0c:8f:f9:8c: d5:4f:1d:be:54:fe:ed:a9:c4:5f:f0:38:fc:ba:9e: dc:15:f9:70:50:0d:cc:cd:38:fb:56:d3:50:bb:5b: 1c:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:48:24:1E:24:3C:EA:B0:A1:D6:99:5F:57:ED:5F:85:7F:80:68:C8 X509v3 Authority Key Identifier: keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/wUgkHiQ86rCh1plfV-1fhX-AaMg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.139.225.0-45.139.227.255 IPv6: 2a04:ff00:800::/40 Signature Algorithm: sha256WithRSAEncryption 7e:7c:e5:2a:27:f9:a7:39:e3:a0:52:fc:8d:89:7a:d9:f2:c2: 8a:01:f5:0f:49:ae:e1:24:51:5a:3c:bf:ba:98:68:29:1f:8c: c3:77:6b:be:37:91:69:9c:1f:72:44:d6:f0:28:22:85:cd:bd: e2:40:41:d1:c2:0d:88:ce:a3:89:ee:3b:f3:0d:94:38:bc:7d: 44:37:77:89:6d:5b:bc:20:f1:f5:b2:1d:65:08:1a:a2:92:55: 1e:16:dc:12:b7:4e:1b:83:50:63:cc:ae:3b:2e:99:49:d5:12: 7c:ee:fb:01:b0:d0:ee:21:d6:4e:92:48:42:9c:64:1c:03:4a: 06:14:63:b2:a9:3c:82:11:26:5a:15:95:0a:90:dd:8c:ad:c0: 65:27:58:04:b5:92:77:38:a2:c3:fa:f2:54:f1:51:09:db:43: 53:37:1d:bd:d5:37:64:83:d8:14:5d:c0:3b:69:a9:6e:9f:b5: be:37:62:d9:4f:bb:16:4a:2f:2f:0a:85:87:34:a8:f5:4e:6d: 38:36:82:05:76:18:f6:66:1b:54:10:c9:f5:af:ea:1c:f5:35: 76:65:b3:c8:2d:f0:20:a9:e9:1a:93:21:04:8b:4f:db:0f:2e: e5:c1:76:9d:9e:b0:4c:12:3c:8d:7a:35:c9:3a:18:de:37:34: 25:7a:d9:93 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt3WOkWIlQ0Gc4mfcGSW3krMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDRjMjVjMmY4YjQ3ZTVkYWY1MmQxYzRjNWE1MDk5OWRk MGEwYTkwHhcNMjYwMTAxMDIxNzU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTQ4MjQxZTI0M2NlYWIwYTFkNjk5NWY1N2VkNWY4NTdmODA2OGM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ULZXGob4g+g/6/Kpd5OovIVmnRc JDtIy/K919pqFsBjwH46k6mQtiz7Z3uEVMW5VejQGpQ/NtfGsNttdNITwoOLQCOk lge5CiV0Ot+QSPigvZ+xjwD88+Ec2QqvnkslfxtCBAp8Lf1nwKA65Z1l5udOLdCR qyGYhIQ2vP0qt9tWh37ybTus7k6DIbYyRYwe5765ZftZSVhKrjbzCzAre6QaDaau zqAQaWk9yX2GKRURZN/9d9bKX+Rh10qvY8GVtDO5ZBKpuD1OYx1DE9dg6v+cKhM5 Ho2bdGZL0wyP+YzVTx2+VP7tqcRf8Dj8up7cFflwUA3MzTj7VtNQu1sc0wIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFMFIJB4kPOqwodaZX1ftX4V/gGjIMB8GA1UdIwQY MBaAFH0Ewlwvi0fl2vUtHExaUJmd0KCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMt ZTYzZTk0Y2JhMDlmLzEvd1Vna0hpUTg2ckNoMXBsZlYtMWZoWC1BYU1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMtZTYzZTk0Y2JhMDlm LzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAUBAIAATAOMAwDBAAti+ED BAIti+AwDgQCAAIwCAMGACoE/wAIMA0GCSqGSIb3DQEBCwUAA4IBAQB+fOUqJ/mn OeOgUvyNiXrZ8sKKAfUPSa7hJFFaPL+6mGgpH4zDd2u+N5FpnB9yRNbwKCKFzb3i QEHRwg2IzqOJ7jvzDZQ4vH1EN3eJbVu8IPH1sh1lCBqiklUeFtwSt04bg1BjzK47 LplJ1RJ87vsBsNDuIdZOkkhCnGQcA0oGFGOyqTyCESZaFZUKkN2MrcBlJ1gEtZJ3 OKLD+vJU8VEJ20NTNx291Tdkg9gUXcA7aalun7W+N2LZT7sWSi8vCoWHNKj1Tm04 NoIFdhj2ZhtUEMn1r+oc9TV2ZbPILfAgqekakyEEi0/bDy7lwXadnrBMEjyNejXJ OhjeNzQletmT -----END CERTIFICATE-----Generated at Sun Jan 25 20:00:09 2026 by rpki-client