This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/_TpEXpR390l-2zZdIjknvF0TXis.roa File: _TpEXpR390l-2zZdIjknvF0TXis.roa (raw, json) Hash identifier: zzI1yvFkNgMBwF/wH9+ZIjX5kjZLbJeeCbYHypeGMZI= Subject key identifier: FD:3A:44:5E:94:77:F7:49:7E:DB:36:5D:22:39:27:BC:5D:13:5E:2B Certificate issuer: /CN=0d69e3ee55dd862674d458661ba34908b0617fa1 Certificate serial: 019B76EB06FD06CB9D6A3F3F8F77EB0EAC3F Authority key identifier: 0D:69:E3:EE:55:DD:86:26:74:D4:58:66:1B:A3:49:08:B0:61:7F:A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/_TpEXpR390l-2zZdIjknvF0TXis.roa Signing time: Thu 01 Jan 2026 00:17:52 +0000 ROA not before: Thu 01 Jan 2026 00:17:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60294 IP address blocks: 46.245.216.0/21 maxlen: 21 87.192.128.0/18 maxlen: 24 94.31.64.0/18 maxlen: 18 94.31.67.0/24 maxlen: 24 94.31.68.0/22 maxlen: 22 94.31.72.0/22 maxlen: 22 94.31.80.0/20 maxlen: 20 94.31.92.0/23 maxlen: 23 94.31.94.0/23 maxlen: 23 94.31.96.0/20 maxlen: 20 94.31.108.0/22 maxlen: 22 94.31.112.0/23 maxlen: 23 94.31.114.0/23 maxlen: 23 94.31.116.0/22 maxlen: 22 150.5.0.0/18 maxlen: 24 185.7.196.0/22 maxlen: 22 185.22.44.0/22 maxlen: 22 185.22.44.0/24 maxlen: 24 185.22.45.0/24 maxlen: 24 185.22.140.0/22 maxlen: 22 185.113.120.0/22 maxlen: 22 185.158.40.0/22 maxlen: 22 185.158.41.0/24 maxlen: 24 2a00:1f38::/32 maxlen: 32 2a00:6020::/32 maxlen: 32 2a00:6020:0:21::/64 maxlen: 64 2a00:61e0::/32 maxlen: 32 2a03:fc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.mft rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:06:fd:06:cb:9d:6a:3f:3f:8f:77:eb:0e:ac:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d69e3ee55dd862674d458661ba34908b0617fa1 Validity Not Before: Jan 1 00:17:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fd3a445e9477f7497edb365d223927bc5d135e2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:99:04:8f:7c:8e:cc:ad:57:b8:41:f9:cc:cf: 97:9e:40:51:19:43:bc:5d:3e:8b:23:bc:f4:37:ff: 86:0c:35:65:5e:11:e3:f5:0a:29:56:53:53:73:75: 2d:d9:75:3b:34:bd:a1:06:7a:e4:57:f6:0c:d2:7c: a8:23:1d:ca:31:75:78:9c:fd:38:27:c6:09:b9:e2: 7d:c4:60:3a:79:cd:aa:12:f9:c9:b2:21:e2:49:14: 90:58:a0:a9:d1:af:ff:ad:6e:ad:6e:70:21:c4:8d: 63:ce:49:42:e9:21:be:59:4c:13:89:73:c0:04:f2: 84:b2:d9:61:50:0a:1c:50:36:9e:e2:41:3e:12:de: e0:95:08:11:6f:20:88:da:0e:e9:fc:03:1f:cb:ab: 8b:2f:db:86:4b:aa:3f:94:69:18:22:f3:f2:5d:a9: 4e:98:dd:56:4f:ad:94:c1:e3:95:05:4d:53:2f:11: 5a:31:71:56:e1:ba:9d:c4:36:c1:18:50:e2:f5:47: 76:cf:37:84:eb:94:d2:9e:bd:c8:37:24:21:28:96: ae:08:93:06:61:25:24:6c:61:cc:19:e3:ac:aa:1c: 5e:36:79:a8:ae:2a:16:5d:94:bf:5b:f7:90:ae:95: 75:22:fc:33:c2:0d:0d:80:e6:89:eb:50:c0:60:7b: 9a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:3A:44:5E:94:77:F7:49:7E:DB:36:5D:22:39:27:BC:5D:13:5E:2B X509v3 Authority Key Identifier: keyid:0D:69:E3:EE:55:DD:86:26:74:D4:58:66:1B:A3:49:08:B0:61:7F:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWnj7lXdhiZ01FhmG6NJCLBhf6E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/_TpEXpR390l-2zZdIjknvF0TXis.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/1d2ef8-a86e-446f-8c35-b833bd9e0b3a/1/DWnj7lXdhiZ01FhmG6NJCLBhf6E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.245.216.0/21 87.192.128.0/18 94.31.64.0/18 150.5.0.0/18 185.7.196.0/22 185.22.44.0/22 185.22.140.0/22 185.113.120.0/22 185.158.40.0/22 IPv6: 2a00:1f38::/32 2a00:6020::/32 2a00:61e0::/32 2a03:fc0::/32 Signature Algorithm: sha256WithRSAEncryption aa:c7:80:99:3e:1e:e5:2e:f3:a7:d3:77:c7:d1:22:0e:58:cb: 28:8d:33:ad:19:32:f2:5e:a0:54:a6:ed:69:d2:51:50:75:e1: 96:69:2e:a5:cc:71:a6:cd:c8:1e:13:ff:fe:85:b9:8e:68:be: 54:c4:87:b2:d7:bb:b2:56:5c:be:1a:c6:dd:d8:31:21:31:e0: 90:19:26:34:31:e4:9f:5c:98:d8:00:87:60:f5:74:0f:75:ce: 0e:70:d8:ee:de:a5:16:94:71:c9:65:03:ba:d5:55:93:97:f2: 55:11:dc:c4:e6:f1:22:04:dc:b1:4e:1b:19:d3:68:04:4f:8e: 29:4c:69:25:6f:ba:e8:06:b6:ea:08:2b:44:11:82:b1:71:25: ed:e0:71:9e:ac:f8:5c:bf:da:2c:04:47:0b:e1:99:a2:0c:6c: 38:cc:74:30:7c:42:5f:38:3f:67:4d:f3:44:9d:35:04:64:67: 2d:0f:b9:d9:90:cf:be:06:8d:e2:00:6d:e3:cc:33:c6:9f:90: e2:c1:cc:bd:45:7a:b5:51:8f:df:2b:e5:2b:8d:a0:05:fb:6d: fb:44:95:13:09:0f:8c:6d:a3:7f:5c:89:69:2d:98:50:fc:9c: a2:9c:72:34:ae:d3:83:1f:cd:0c:94:a3:14:a4:69:0a:14:2d: 8d:5d:0a:0c -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgISAZt26wb9Bsudaj8/j3frDqw/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNjllM2VlNTVkZDg2MjY3NGQ0NTg2NjFiYTM0OTA4YjA2 MTdmYTEwHhcNMjYwMTAxMDAxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZDNhNDQ1ZTk0NzdmNzQ5N2VkYjM2NWQyMjM5MjdiYzVkMTM1ZTJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5kEj3yOzK1XuEH5zM+XnkBRGUO8 XT6LI7z0N/+GDDVlXhHj9QopVlNTc3Ut2XU7NL2hBnrkV/YM0nyoIx3KMXV4nP04 J8YJueJ9xGA6ec2qEvnJsiHiSRSQWKCp0a//rW6tbnAhxI1jzklC6SG+WUwTiXPA BPKEstlhUAocUDae4kE+Et7glQgRbyCI2g7p/AMfy6uLL9uGS6o/lGkYIvPyXalO mN1WT62UweOVBU1TLxFaMXFW4bqdxDbBGFDi9Ud2zzeE65TSnr3INyQhKJauCJMG YSUkbGHMGeOsqhxeNnmorioWXZS/W/eQrpV1Ivwzwg0NgOaJ61DAYHuafQIDAQAB o4ICXTCCAlkwHQYDVR0OBBYEFP06RF6Ud/dJfts2XSI5J7xdE14rMB8GA1UdIwQY MBaAFA1p4+5V3YYmdNRYZhujSQiwYX+hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFduajdsWGRoaVowMUZobUc2TkpDTEJoZjZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8xZDJlZjgtYTg2ZS00NDZmLThjMzUt YjgzM2JkOWUwYjNhLzEvX1RwRVhwUjM5MGwtMnpaZElqa252RjBUWGlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8xZDJlZjgtYTg2ZS00NDZmLThjMzUtYjgzM2JkOWUwYjNh LzEvRFduajdsWGRoaVowMUZobUc2TkpDTEJoZjZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjA8BAIAATA2AwQDLvXYAwQG V8CAAwQGXh9AAwQGlgUAAwQCuQfEAwQCuRYsAwQCuRaMAwQCuXF4AwQCuZ4oMCIE AgACMBwDBQAqAB84AwUAKgBgIAMFACoAYeADBQAqAw/AMA0GCSqGSIb3DQEBCwUA A4IBAQCqx4CZPh7lLvOn03fH0SIOWMsojTOtGTLyXqBUpu1p0lFQdeGWaS6lzHGm zcgeE//+hbmOaL5UxIey17uyVly+Gsbd2DEhMeCQGSY0MeSfXJjYAIdg9XQPdc4O cNju3qUWlHHJZQO61VWTl/JVEdzE5vEiBNyxThsZ02gET44pTGklb7roBrbqCCtE EYKxcSXt4HGerPhcv9osBEcL4ZmiDGw4zHQwfEJfOD9nTfNEnTUEZGctD7nZkM++ Bo3iAG3jzDPGn5Diwcy9RXq1UY/fK+UrjaAF+237RJUTCQ+MbaN/XIlpLZhQ/Jyi nHI0rtODH80MlKMUpGkKFC2NXQoM -----END CERTIFICATE-----Generated at Mon Feb 9 18:22:24 2026 by rpki-client