This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/w0kSKyu8NrNNw9wsJnURBEC2tpA.roa File: w0kSKyu8NrNNw9wsJnURBEC2tpA.roa (raw, json) Hash identifier: uL2/TSka3Z1TenIHsGzdy+wf4+zU9JGTU4j8TUu9bNI= Subject key identifier: C3:49:12:2B:2B:BC:36:B3:4D:C3:DC:2C:26:75:11:04:40:B6:B6:90 Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7D0842C0D5141F5BB0B02F2016E25 Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/w0kSKyu8NrNNw9wsJnURBEC2tpA.roa Signing time: Thu 01 Jan 2026 18:17:53 +0000 ROA not before: Thu 01 Jan 2026 18:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47814 IP address blocks: 46.19.204.251/32 maxlen: 32 46.19.205.0/24 maxlen: 24 46.19.206.0/24 maxlen: 24 80.81.44.0/24 maxlen: 24 83.223.139.0/24 maxlen: 24 83.223.149.0/24 maxlen: 24 94.101.224.0/24 maxlen: 24 94.101.228.0/24 maxlen: 24 94.101.233.206/32 maxlen: 32 94.101.234.0/24 maxlen: 24 94.101.238.0/24 maxlen: 24 217.69.115.0/24 maxlen: 24 217.69.117.0/24 maxlen: 24 217.69.118.0/24 maxlen: 24 2001:1bf8::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:d0:84:2c:0d:51:41:f5:bb:0b:02:f2:01:6e:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c349122b2bbc36b34dc3dc2c2675110440b6b690 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:44:54:9e:0c:0d:35:bf:94:dc:fd:c8:89:46: a1:ef:e2:d7:32:bb:44:bf:fa:5d:3e:90:25:63:97: d7:9b:6b:74:74:9e:11:90:eb:e7:2c:1a:4d:3e:75: f3:1d:1f:3f:01:db:d0:87:00:fc:84:51:e6:03:76: 2e:c8:6b:da:62:33:5b:ef:a0:81:36:f9:7c:86:b0: 46:e3:7b:8f:3f:cc:6c:b1:0f:a0:9a:48:8e:74:95: cd:c3:ae:1b:fa:c0:10:3f:60:9e:43:41:ba:7d:c9: 2a:c6:bc:81:6f:70:2d:d8:5d:1a:26:30:81:ea:95: 0e:47:b6:e8:e0:08:d7:e6:95:45:92:94:71:5e:41: ad:75:b3:1b:86:aa:78:18:1c:96:95:32:65:1d:e7: ea:e0:1c:4a:7f:1e:41:3d:00:b5:52:31:cd:77:21: c2:6c:92:84:f5:e9:26:37:1f:0e:e4:a7:b6:93:9e: 63:b9:2c:d2:bb:48:4a:fa:f8:08:2d:2b:ee:dd:a8: 8e:0b:6a:4c:13:8b:49:bf:d9:a1:44:b4:4f:59:89: 3c:64:5a:1f:c1:4a:10:f3:b5:90:b4:ee:66:8c:77: 9d:d2:a5:2a:2a:d4:dc:c3:57:94:3d:9b:50:3e:3c: 9e:b5:77:87:a3:ad:04:9e:6b:05:c4:0c:dc:de:33: a5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:49:12:2B:2B:BC:36:B3:4D:C3:DC:2C:26:75:11:04:40:B6:B6:90 X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/w0kSKyu8NrNNw9wsJnURBEC2tpA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.19.204.251/32 46.19.205.0-46.19.206.255 80.81.44.0/24 83.223.139.0/24 83.223.149.0/24 94.101.224.0/24 94.101.228.0/24 94.101.233.206/32 94.101.234.0/24 94.101.238.0/24 217.69.115.0/24 217.69.117.0-217.69.118.255 IPv6: 2001:1bf8::/29 Signature Algorithm: sha256WithRSAEncryption 32:66:5b:cd:8c:0e:01:46:8a:21:69:d8:71:3d:f9:fc:ec:48: f5:7e:11:6e:1e:d9:22:83:fc:46:ce:8d:d6:93:fe:e3:17:99: 7b:e6:2b:2b:75:14:e2:54:9e:8c:c4:78:d4:56:4f:00:ce:27: f0:cb:b1:64:27:02:16:7b:03:00:82:27:f3:b6:f2:b1:e6:d0: d7:38:d1:b0:b9:6e:ec:26:c2:04:70:a3:ec:96:23:8f:15:16: 9f:5d:61:62:d8:7c:85:b3:8a:cc:6a:ad:90:35:ed:dc:c9:a5: ab:ab:db:41:7b:70:ce:5f:81:8f:4f:68:03:78:eb:5c:13:37: 00:93:f5:45:86:f2:e4:a8:4b:dd:fe:b8:16:b2:41:d5:07:88: 1d:80:60:58:08:4b:bb:60:c2:4b:71:32:f2:a1:ec:09:f9:3d: ac:a7:1b:33:c8:62:2a:0f:2e:c9:0e:85:c9:a4:c3:40:fd:2c: 4e:1c:6c:dd:95:02:0d:a8:59:90:4d:1f:06:7c:38:c4:8b:f7: ec:70:1e:18:ca:2e:45:63:42:40:7a:e2:41:27:fe:e7:02:f3: 7b:72:41:5e:b4:06:55:9e:1d:c8:31:8a:dd:eb:41:d2:d3:24: cb:8c:df:d0:71:77:18:da:35:3a:37:7d:7e:ee:8e:66:4c:e0: 7e:99:81:c3 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgISAZt6x9CELA1RQfW7CwLyAW4lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMzQ5MTIyYjJiYmMzNmIzNGRjM2RjMmMyNjc1MTEwNDQwYjZiNjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskRUngwNNb+U3P3IiUah7+LXMrtE v/pdPpAlY5fXm2t0dJ4RkOvnLBpNPnXzHR8/AdvQhwD8hFHmA3YuyGvaYjNb76CB Nvl8hrBG43uPP8xssQ+gmkiOdJXNw64b+sAQP2CeQ0G6fckqxryBb3At2F0aJjCB 6pUOR7bo4AjX5pVFkpRxXkGtdbMbhqp4GByWlTJlHefq4BxKfx5BPQC1UjHNdyHC bJKE9ekmNx8O5Ke2k55juSzSu0hK+vgILSvu3aiOC2pME4tJv9mhRLRPWYk8ZFof wUoQ87WQtO5mjHed0qUqKtTcw1eUPZtQPjyetXeHo60EnmsFxAzc3jOlSwIDAQAB o4ICbTCCAmkwHQYDVR0OBBYEFMNJEisrvDazTcPcLCZ1EQRAtraQMB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEvdzBrU0t5dThOck5Odzl3c0puVVJCRUMydHBBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGCBggrBgEFBQcBBwEB/wRzMHEwYAQCAAEwWgMFAC4TzPsw DAMEAC4TzQMEAC4TzgMEAFBRLAMEAFPfiwMEAFPflQMEAF5l4AMEAF5l5AMFAF5l 6c4DBABeZeoDBABeZe4DBADZRXMwDAMEANlFdQMEANlFdjANBAIAAjAHAwUDIAEb +DANBgkqhkiG9w0BAQsFAAOCAQEAMmZbzYwOAUaKIWnYcT35/OxI9X4Rbh7ZIoP8 Rs6N1pP+4xeZe+YrK3UU4lSejMR41FZPAM4n8MuxZCcCFnsDAIIn87bysebQ1zjR sLlu7CbCBHCj7JYjjxUWn11hYth8hbOKzGqtkDXt3Mmlq6vbQXtwzl+Bj09oA3jr XBM3AJP1RYby5KhL3f64FrJB1QeIHYBgWAhLu2DCS3Ey8qHsCfk9rKcbM8hiKg8u yQ6FyaTDQP0sThxs3ZUCDahZkE0fBnw4xIv37HAeGMouRWNCQHriQSf+5wLze3JB XrQGVZ4dyDGK3etB0tMky4zf0HF3GNo1Ojd9fu6OZkzgfpmBww== -----END CERTIFICATE-----Generated at Mon Jan 19 20:01:06 2026 by rpki-client