This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/4lw_9PAntET-B5MMVn16dO3Hcls.roa File: 4lw_9PAntET-B5MMVn16dO3Hcls.roa (raw, json) Hash identifier: UDzY7XNVR7aRxZCWElIUyD0jHCPvLTcFxpVSeLZMRg4= Subject key identifier: E2:5C:3F:F4:F0:27:B4:44:FE:07:93:0C:56:7D:7A:74:ED:C7:72:5B Certificate issuer: /CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc Certificate serial: 019BF9669DDE30D4A151ED2002A25C76DF25 Authority key identifier: 4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/4lw_9PAntET-B5MMVn16dO3Hcls.roa Signing time: Mon 26 Jan 2026 08:23:30 +0000 ROA not before: Mon 26 Jan 2026 08:23:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35131 IP address blocks: 45.145.24.0/22 maxlen: 22 45.145.24.0/24 maxlen: 24 45.145.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f9:66:9d:de:30:d4:a1:51:ed:20:02:a2:5c:76:df:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc Validity Not Before: Jan 26 08:23:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e25c3ff4f027b444fe07930c567d7a74edc7725b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:6f:a0:e8:eb:8a:72:77:f5:4b:48:ff:d9:44: 64:4b:b6:62:58:7b:5d:ba:ad:5a:d2:2d:50:c6:1e: 72:77:d3:43:6c:19:00:23:a1:1f:ab:0c:2a:ca:60: 7d:7e:c1:82:9b:00:5e:39:60:e0:e2:6a:0a:2b:80: b8:50:29:5a:b5:e2:ee:22:50:fe:b6:b9:fd:40:f7: f0:e8:35:86:e9:5f:8a:c4:b5:47:48:6d:f6:7c:15: 15:b5:c9:56:0a:c7:43:10:c0:9c:ec:72:15:d5:06: 34:87:88:06:58:c8:50:d1:2f:00:3f:22:dc:26:a4: a9:e9:8a:ce:b9:5c:71:66:54:90:91:de:3b:dc:be: 8a:8d:63:cb:b5:ba:32:b0:d0:07:9c:ff:59:dd:e6: 9a:2c:ab:5a:63:3b:18:9e:90:9d:6d:a0:42:6d:50: 80:2a:58:b7:c7:2b:22:50:45:36:c2:3e:bf:49:75: a5:9b:b2:cf:88:2b:49:a2:93:a9:4e:66:d4:27:a2: 5a:8a:c2:b6:ad:f7:ec:02:d8:92:24:52:1b:e9:2f: 40:63:dd:cf:30:a7:0e:b5:a5:3f:30:20:a3:dd:7c: 4d:ec:48:f5:71:08:8e:1d:db:bb:ff:23:0f:d3:5c: 25:32:5e:ad:77:aa:c6:28:d1:9d:3d:a8:c1:a2:b9: b3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:5C:3F:F4:F0:27:B4:44:FE:07:93:0C:56:7D:7A:74:ED:C7:72:5B X509v3 Authority Key Identifier: keyid:4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/4lw_9PAntET-B5MMVn16dO3Hcls.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.145.24.0/22 Signature Algorithm: sha256WithRSAEncryption 40:aa:ae:82:70:65:3f:f8:59:73:fa:12:c8:e6:0c:46:ff:54: df:1e:07:35:a1:ee:1c:f2:74:28:5a:7c:fc:3f:2f:b5:d7:82: cf:ec:69:30:af:99:54:ae:ea:60:a9:93:cf:1a:01:cb:52:23: af:4b:8c:e3:86:e7:b5:5a:f4:0c:cd:1d:d4:a2:ab:f4:cd:bc: 12:90:25:b8:1d:fc:d8:37:49:6e:69:6f:e3:6d:9d:02:b3:7d: 81:95:56:02:97:a6:2a:bd:c3:ef:a7:fc:44:c4:4c:bf:43:97: 4b:db:2e:f7:a5:f5:56:64:2e:01:42:f7:0e:42:95:aa:eb:d2: d5:6e:68:80:1e:a4:36:bc:36:14:fe:f3:45:8f:48:a4:0c:be: 4c:24:a2:7e:cd:b6:17:ea:43:ad:b2:85:8a:c1:97:12:2a:62: 6f:87:4e:f6:3c:58:27:60:b0:e0:83:2d:f0:d2:b9:a5:bb:52: 52:8b:c4:03:68:d2:1f:26:22:3b:d1:43:0f:1b:b7:30:87:09: a9:0a:ae:6c:65:65:8b:b6:9c:21:51:24:a3:e0:14:76:7b:80: 9b:8e:88:4b:ab:dc:11:26:41:e6:64:17:1d:83:68:d7:c8:7d: e3:ef:72:97:d9:7d:9a:15:2a:9b:4c:13:fc:e5:33:d3:5d:a9: b8:dc:02:db -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZv5Zp3eMNShUe0gAqJcdt8lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmMGU3N2Q5YzZmZjY4ZGNhNjhmMDVkZjhmNDY3NWVlN2Jk Y2IwYmMwHhcNMjYwMTI2MDgyMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjVjM2ZmNGYwMjdiNDQ0ZmUwNzkzMGM1NjdkN2E3NGVkYzc3MjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjG+g6OuKcnf1S0j/2URkS7ZiWHtd uq1a0i1Qxh5yd9NDbBkAI6EfqwwqymB9fsGCmwBeOWDg4moKK4C4UClateLuIlD+ trn9QPfw6DWG6V+KxLVHSG32fBUVtclWCsdDEMCc7HIV1QY0h4gGWMhQ0S8APyLc JqSp6YrOuVxxZlSQkd473L6KjWPLtboysNAHnP9Z3eaaLKtaYzsYnpCdbaBCbVCA Kli3xysiUEU2wj6/SXWlm7LPiCtJopOpTmbUJ6JaisK2rffsAtiSJFIb6S9AY93P MKcOtaU/MCCj3XxN7Ej1cQiOHdu7/yMP01wlMl6td6rGKNGdPajBormzLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOJcP/TwJ7RE/geTDFZ9enTtx3JbMB8GA1UdIwQY MBaAFE8Od9nG/2jcpo8F349Gde573LC8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHc1MzJjYl9hTnltandYZmowWjE3bnZjc0x3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8zZGMyMjItMTIwNi00OTIyLTg4OTAt NDU1YjE5Zjc2NmNjLzEvNGx3XzlQQW50RVQtQjVNTVZuMTZkTzNIY2xzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8zZGMyMjItMTIwNi00OTIyLTg4OTAtNDU1YjE5Zjc2NmNj LzEvVHc1MzJjYl9hTnltandYZmowWjE3bnZjc0x3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZEYMA0G CSqGSIb3DQEBCwUAA4IBAQBAqq6CcGU/+Flz+hLI5gxG/1TfHgc1oe4c8nQoWnz8 Py+114LP7Gkwr5lUrupgqZPPGgHLUiOvS4zjhue1WvQMzR3Uoqv0zbwSkCW4HfzY N0luaW/jbZ0Cs32BlVYCl6YqvcPvp/xExEy/Q5dL2y73pfVWZC4BQvcOQpWq69LV bmiAHqQ2vDYU/vNFj0ikDL5MJKJ+zbYX6kOtsoWKwZcSKmJvh072PFgnYLDggy3w 0rmlu1JSi8QDaNIfJiI70UMPG7cwhwmpCq5sZWWLtpwhUSSj4BR2e4CbjohLq9wR JkHmZBcdg2jXyH3j73KX2X2aFSqbTBP85TPTXam43ALb -----END CERTIFICATE-----Generated at Mon Jan 26 13:46:28 2026 by rpki-client