This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/Ig_WgszMhVHZYvhX0AKKIeaHqO4.roa File: Ig_WgszMhVHZYvhX0AKKIeaHqO4.roa (raw, json) Hash identifier: 31Kwv0BFF15OinZPzQ5WYpqKoqx/spvM+71+hOhfBu8= Subject key identifier: 22:0F:D6:82:CC:CC:85:51:D9:62:F8:57:D0:02:8A:21:E6:87:A8:EE Certificate issuer: /CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb Certificate serial: 019B7EA7306F26B84FC24B9F8AD2DAABD0E7 Authority key identifier: 5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/Ig_WgszMhVHZYvhX0AKKIeaHqO4.roa Signing time: Fri 02 Jan 2026 12:20:44 +0000 ROA not before: Fri 02 Jan 2026 12:20:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216419 IP address blocks: 46.49.160.0/24 maxlen: 24 134.239.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.mft rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:30:6f:26:b8:4f:c2:4b:9f:8a:d2:da:ab:d0:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a43e9e267956e7f262c17f0089f0f60ba7abefb Validity Not Before: Jan 2 12:20:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=220fd682cccc8551d962f857d0028a21e687a8ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8d:05:da:12:41:ce:7c:a1:14:74:a6:6b:43: ed:83:63:e3:65:6e:c6:ba:60:10:d2:dd:0c:26:65: cb:ec:0c:0f:da:5d:25:3a:89:1e:70:23:8d:8d:37: 9a:9a:d4:b4:7d:92:1e:ec:e6:0d:00:2e:99:50:39: 32:70:a6:48:da:bb:4b:ad:0c:a5:98:ff:01:9e:1e: 4d:fa:d1:8d:31:25:2d:0e:22:21:f4:0e:2a:80:a7: 87:7d:83:1d:5f:0a:9a:9e:4f:37:e4:be:04:fe:55: b0:72:c6:ce:c4:76:25:54:fe:4f:72:10:4f:3f:7e: ca:2b:45:05:43:09:83:1e:04:61:86:65:2e:72:97: 70:18:d9:cc:9d:d1:fd:f2:25:7b:5b:74:bf:e9:2a: ad:91:9a:8c:8c:9b:28:35:f6:a5:3f:46:1a:47:45: 4f:e1:e3:0a:f8:a8:f8:13:2a:39:85:c5:39:14:09: ce:b5:08:76:58:9f:5f:9c:70:33:92:ae:16:a3:d6: ee:b0:84:43:fd:b4:66:cb:b6:39:00:be:04:aa:60: fd:f0:7a:e7:d2:e9:84:12:01:85:f4:04:16:df:ec: 6f:9e:4d:f3:79:da:9b:9b:66:51:9a:a8:e2:d7:52: 1f:9c:b5:c6:53:82:49:92:f1:37:a7:66:e9:50:44: 68:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:0F:D6:82:CC:CC:85:51:D9:62:F8:57:D0:02:8A:21:E6:87:A8:EE X509v3 Authority Key Identifier: keyid:5A:43:E9:E2:67:95:6E:7F:26:2C:17:F0:08:9F:0F:60:BA:7A:BE:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WkPp4meVbn8mLBfwCJ8PYLp6vvs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/Ig_WgszMhVHZYvhX0AKKIeaHqO4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06444c-9d9b-4c6b-950b-79c8987a8b1c/1/WkPp4meVbn8mLBfwCJ8PYLp6vvs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.49.160.0/24 134.239.64.0/19 Signature Algorithm: sha256WithRSAEncryption 8c:7b:a4:65:5e:d6:ab:0e:a3:d1:e6:3e:3f:8d:92:3e:d8:c0: 75:2d:b2:fc:2b:ad:26:b0:c5:45:93:4b:93:46:da:42:a8:f9: fe:e4:29:36:81:85:32:a0:af:26:14:a3:5a:ba:46:88:b7:88: 90:48:86:55:ff:75:e9:e3:ac:72:a9:b6:77:8d:99:07:7a:03: d5:26:01:22:44:73:02:87:d6:a6:98:fe:64:a8:39:38:e9:cc: a9:89:df:f0:dd:38:14:62:c3:76:b9:3b:37:20:a0:76:96:c6: b9:0d:fa:48:ca:f3:c1:1a:8c:33:38:2f:aa:71:66:c6:0c:b0: dd:d7:99:dd:f0:27:76:70:0c:fc:a0:8a:bf:df:b7:7e:fa:fb: e8:2d:52:1d:88:b9:39:d9:23:3b:03:d1:9b:f1:45:19:f3:3a: ca:be:aa:18:8e:1a:87:9a:00:0c:74:ec:9c:6f:7d:11:d2:a8: f0:ab:fa:b5:b8:c0:76:67:4c:f8:82:8d:ff:04:71:b3:38:68: ee:38:00:4b:c8:e2:a9:68:5e:a2:9b:53:12:f7:36:fd:cc:0c: e3:b5:cb:35:bb:ab:6f:8d:52:8c:53:26:36:c7:54:44:0b:9f: 4b:ac:4a:40:64:e2:ca:2c:7e:44:82:db:64:f5:e8:c2:47:01: 1d:f7:90:7c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pzBvJrhPwkufitLaq9DnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVhNDNlOWUyNjc5NTZlN2YyNjJjMTdmMDA4OWYwZjYwYmE3 YWJlZmIwHhcNMjYwMTAyMTIyMDQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMjBmZDY4MmNjY2M4NTUxZDk2MmY4NTdkMDAyOGEyMWU2ODdhOGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsY0F2hJBznyhFHSma0Ptg2PjZW7G umAQ0t0MJmXL7AwP2l0lOokecCONjTeamtS0fZIe7OYNAC6ZUDkycKZI2rtLrQyl mP8Bnh5N+tGNMSUtDiIh9A4qgKeHfYMdXwqank835L4E/lWwcsbOxHYlVP5PchBP P37KK0UFQwmDHgRhhmUucpdwGNnMndH98iV7W3S/6SqtkZqMjJsoNfalP0YaR0VP 4eMK+Kj4Eyo5hcU5FAnOtQh2WJ9fnHAzkq4Wo9busIRD/bRmy7Y5AL4EqmD98Hrn 0umEEgGF9AQW3+xvnk3zedqbm2ZRmqji11IfnLXGU4JJkvE3p2bpUERoLQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCIP1oLMzIVR2WL4V9ACiiHmh6juMB8GA1UdIwQY MBaAFFpD6eJnlW5/JiwX8AifD2C6er77MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2tQcDRtZVZibjhtTEJmd0NKOFBZTHA2dnZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wNjQ0NGMtOWQ5Yi00YzZiLTk1MGIt NzljODk4N2E4YjFjLzEvSWdfV2dzek1oVkhaWXZoWDBBS0tJZWFIcU80LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMC8wNjQ0NGMtOWQ5Yi00YzZiLTk1MGItNzljODk4N2E4YjFj LzEvV2tQcDRtZVZibjhtTEJmd0NKOFBZTHA2dnZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALjGgAwQF hu9AMA0GCSqGSIb3DQEBCwUAA4IBAQCMe6RlXtarDqPR5j4/jZI+2MB1LbL8K60m sMVFk0uTRtpCqPn+5Ck2gYUyoK8mFKNaukaIt4iQSIZV/3Xp46xyqbZ3jZkHegPV JgEiRHMCh9ammP5kqDk46cypid/w3TgUYsN2uTs3IKB2lsa5DfpIyvPBGowzOC+q cWbGDLDd15nd8Cd2cAz8oIq/37d++vvoLVIdiLk52SM7A9Gb8UUZ8zrKvqoYjhqH mgAMdOycb30R0qjwq/q1uMB2Z0z4go3/BHGzOGjuOABLyOKpaF6im1MS9zb9zAzj tcs1u6tvjVKMUyY2x1REC59LrEpAZOLKLH5Egttk9ejCRwEd95B8 -----END CERTIFICATE-----Generated at Mon Jan 26 00:38:53 2026 by rpki-client