This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/rI-1eY7TtxFeY70hEXPRG9r4SUU.roa File: rI-1eY7TtxFeY70hEXPRG9r4SUU.roa (raw, json) Hash identifier: 3yzUSLFgFbapDsLKTnHWd+eZDAnjuQ4IsvzD3dpVDZk= Subject key identifier: AC:8F:B5:79:8E:D3:B7:11:5E:63:BD:21:11:73:D1:1B:DA:F8:49:45 Certificate issuer: /CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa Certificate serial: 019B77593AB402D044CEAB8FD8AF7B547D09 Authority key identifier: EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/rI-1eY7TtxFeY70hEXPRG9r4SUU.roa Signing time: Thu 01 Jan 2026 02:18:15 +0000 ROA not before: Thu 01 Jan 2026 02:18:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198089 IP address blocks: 46.31.8.0/21 maxlen: 21 46.31.8.0/22 maxlen: 22 46.31.12.0/22 maxlen: 22 2a02:4980::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.mft rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:3a:b4:02:d0:44:ce:ab:8f:d8:af:7b:54:7d:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eed5b3af0064981e96bb5e27d8f04d86e6306cfa Validity Not Before: Jan 1 02:18:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac8fb5798ed3b7115e63bd211173d11bdaf84945 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:89:ee:ab:87:9c:cb:07:f9:b0:52:58:a2:72: 90:42:47:22:8d:44:c8:67:10:25:b9:d4:38:ca:2c: df:8f:64:15:ae:44:99:22:eb:53:38:5f:22:35:b2: ff:06:ed:0d:95:a2:17:b7:4a:02:25:7d:38:39:2d: 27:d5:88:31:2c:06:39:c1:b4:c3:0a:1b:70:b0:18: 4f:e6:e9:14:d7:c3:67:f7:99:3a:15:0f:8c:e1:6d: 03:d7:9a:9f:1c:41:6c:43:79:b1:69:72:30:71:72: 4a:e4:b5:1b:50:a2:46:1d:2a:dd:80:75:b5:d4:a4: 09:1b:cf:4f:b4:95:15:30:14:6a:90:bd:a4:7e:70: ac:8d:47:9e:15:61:3c:4d:e7:e0:c0:ed:6d:f2:b0: fb:c8:06:4e:a9:1d:bb:21:8e:87:0b:47:de:3b:8a: f9:c3:39:f5:8f:a8:e2:b0:e6:0b:a3:b5:68:3b:08: 30:72:15:d1:3f:1e:43:03:49:76:68:db:80:af:3e: f0:6e:67:95:d7:18:09:c8:64:fa:9d:5a:2d:81:e5: 6e:51:7f:36:9e:c3:9b:ae:b9:48:ee:d4:15:e8:34: f5:fd:53:80:1a:13:7b:f0:f7:44:19:ff:b1:20:9f: 96:41:d0:58:3b:28:e7:95:fa:98:6e:e1:09:0c:9b: 1a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:8F:B5:79:8E:D3:B7:11:5E:63:BD:21:11:73:D1:1B:DA:F8:49:45 X509v3 Authority Key Identifier: keyid:EE:D5:B3:AF:00:64:98:1E:96:BB:5E:27:D8:F0:4D:86:E6:30:6C:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7tWzrwBkmB6Wu14n2PBNhuYwbPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/rI-1eY7TtxFeY70hEXPRG9r4SUU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/3aabe0-9e5f-498d-b550-030acd3ae336/1/7tWzrwBkmB6Wu14n2PBNhuYwbPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.31.8.0/21 IPv6: 2a02:4980::/32 Signature Algorithm: sha256WithRSAEncryption 0b:e9:5b:68:9d:c8:36:91:64:47:f4:ae:2e:9c:45:64:af:7e: 64:eb:ed:50:87:59:1a:d6:fd:25:a4:35:21:b0:18:d8:44:ea: 95:41:d2:9e:e8:25:d1:c6:92:2b:1a:98:75:26:ae:e3:4e:8c: 58:61:ff:77:22:df:14:9a:58:7c:f9:dd:8e:0f:42:bb:60:02: 0d:2b:2e:ea:a1:68:fe:9f:f3:f3:41:17:d6:93:26:d6:c3:52: f3:0b:83:dd:1b:d1:af:51:8b:b1:82:06:72:d5:76:00:b4:f3: 8b:8c:3b:e6:69:31:27:63:df:fa:db:a3:b9:93:71:bf:ad:62: 02:9c:da:24:fd:7d:a1:41:cf:dc:b7:13:b8:54:a5:7b:42:ab: 30:f3:43:f0:96:b5:b2:da:56:ad:dc:32:47:07:04:17:0b:5b: 23:1e:14:c9:47:68:a7:20:ce:49:e0:02:96:af:86:9b:45:c9: 76:82:90:6d:16:cf:49:83:50:78:61:61:58:f5:e9:06:4d:8a: 7a:76:a7:9e:0a:81:72:f5:4b:50:26:a2:57:d2:9a:71:ef:15: 3a:fa:c4:b0:9d:ab:8d:e7:93:43:e9:10:76:b2:6e:65:a4:f9: ec:d8:4f:69:b3:5e:29:6f:43:38:d6:02:b8:35:38:f2:b3:cf: cb:b2:c3:27 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WTq0AtBEzquP2K97VH0JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlZDViM2FmMDA2NDk4MWU5NmJiNWUyN2Q4ZjA0ZDg2ZTYz MDZjZmEwHhcNMjYwMTAxMDIxODE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzhmYjU3OThlZDNiNzExNWU2M2JkMjExMTczZDExYmRhZjg0OTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvonuq4ecywf5sFJYonKQQkcijUTI ZxAludQ4yizfj2QVrkSZIutTOF8iNbL/Bu0NlaIXt0oCJX04OS0n1YgxLAY5wbTD ChtwsBhP5ukU18Nn95k6FQ+M4W0D15qfHEFsQ3mxaXIwcXJK5LUbUKJGHSrdgHW1 1KQJG89PtJUVMBRqkL2kfnCsjUeeFWE8TefgwO1t8rD7yAZOqR27IY6HC0feO4r5 wzn1j6jisOYLo7VoOwgwchXRPx5DA0l2aNuArz7wbmeV1xgJyGT6nVotgeVuUX82 nsObrrlI7tQV6DT1/VOAGhN78PdEGf+xIJ+WQdBYOyjnlfqYbuEJDJsaeQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFKyPtXmO07cRXmO9IRFz0Rva+ElFMB8GA1UdIwQY MBaAFO7Vs68AZJgelrteJ9jwTYbmMGz6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3RXenJ3QmttQjZXdTE0bjJQQk5odVl3YlBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8zYWFiZTAtOWU1Zi00OThkLWI1NTAt MDMwYWNkM2FlMzM2LzEvckktMWVZN1R0eEZlWTcwaEVYUFJHOXI0U1VVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS8zYWFiZTAtOWU1Zi00OThkLWI1NTAtMDMwYWNkM2FlMzM2 LzEvN3RXenJ3QmttQjZXdTE0bjJQQk5odVl3YlBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDLh8IMA0E AgACMAcDBQAqAkmAMA0GCSqGSIb3DQEBCwUAA4IBAQAL6Vtoncg2kWRH9K4unEVk r35k6+1Qh1ka1v0lpDUhsBjYROqVQdKe6CXRxpIrGph1Jq7jToxYYf93It8Umlh8 +d2OD0K7YAINKy7qoWj+n/PzQRfWkybWw1LzC4PdG9GvUYuxggZy1XYAtPOLjDvm aTEnY9/626O5k3G/rWICnNok/X2hQc/ctxO4VKV7Qqsw80PwlrWy2lat3DJHBwQX C1sjHhTJR2inIM5J4AKWr4abRcl2gpBtFs9Jg1B4YWFY9ekGTYp6dqeeCoFy9UtQ JqJX0ppx7xU6+sSwnauN55ND6RB2sm5lpPns2E9ps14pb0M41gK4NTjys8/LssMn -----END CERTIFICATE-----Generated at Mon Feb 9 20:10:25 2026 by rpki-client