This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/bMsWuNjJeP6phBVhg103vHZmDa0.roa File: bMsWuNjJeP6phBVhg103vHZmDa0.roa (raw, json) Hash identifier: s0x48DlOykKpKhvQQl3SddYhoNO1CHyfuX31p3oQ2Xc= Subject key identifier: 6C:CB:16:B8:D8:C9:78:FE:A9:84:15:61:83:5D:37:BC:76:66:0D:AD Certificate issuer: /CN=112ba797577ea60a561af9a4598c45060e3b7088 Certificate serial: 019B7F15E5BD60A924C0281E7F4EC19DC574 Authority key identifier: 11:2B:A7:97:57:7E:A6:0A:56:1A:F9:A4:59:8C:45:06:0E:3B:70:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESunl1d-pgpWGvmkWYxFBg47cIg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/bMsWuNjJeP6phBVhg103vHZmDa0.roa Signing time: Fri 02 Jan 2026 14:21:40 +0000 ROA not before: Fri 02 Jan 2026 14:21:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34779 IP address blocks: 46.248.64.0/19 maxlen: 19 84.255.192.0/18 maxlen: 18 84.255.209.0/24 maxlen: 24 84.255.210.0/24 maxlen: 24 89.212.0.0/18 maxlen: 18 89.212.23.160/27 maxlen: 27 89.212.64.0/18 maxlen: 18 89.212.128.0/18 maxlen: 18 89.212.192.0/18 maxlen: 18 89.233.112.0/20 maxlen: 20 91.246.224.0/19 maxlen: 19 93.103.0.0/19 maxlen: 19 93.103.32.0/19 maxlen: 19 93.103.64.0/19 maxlen: 19 93.103.96.0/19 maxlen: 19 93.103.128.0/19 maxlen: 19 93.103.160.0/19 maxlen: 19 93.103.192.0/19 maxlen: 19 93.103.224.0/19 maxlen: 19 119.12.128.0/20 maxlen: 20 185.49.116.0/22 maxlen: 22 185.179.48.0/22 maxlen: 22 188.159.224.0/19 maxlen: 19 188.230.128.0/19 maxlen: 19 188.230.160.0/19 maxlen: 19 188.230.192.0/19 maxlen: 19 188.230.224.0/19 maxlen: 19 193.138.32.0/19 maxlen: 24 194.28.108.0/22 maxlen: 22 2a01:260::/32 maxlen: 32 2a01:261::/32 maxlen: 32 2a01:262::/32 maxlen: 32 2a01:263::/32 maxlen: 32 2a01:264::/32 maxlen: 32 2a01:265::/32 maxlen: 32 2a01:266::/32 maxlen: 32 2a01:267::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.crl rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.mft rsync://rpki.ripe.net/repository/DEFAULT/ESunl1d-pgpWGvmkWYxFBg47cIg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:e5:bd:60:a9:24:c0:28:1e:7f:4e:c1:9d:c5:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=112ba797577ea60a561af9a4598c45060e3b7088 Validity Not Before: Jan 2 14:21:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ccb16b8d8c978fea9841561835d37bc76660dad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:2f:82:68:70:d8:81:10:cd:1d:8b:7b:b2:c6: 2e:88:53:8e:8e:a1:09:c2:77:81:e0:d8:86:0d:63: d9:66:0f:b9:b2:e8:9f:07:c9:af:46:5e:a9:5b:1a: 27:ae:d3:6d:32:68:62:fe:d2:9b:8f:7b:3b:c0:a3: 9c:1e:d8:5c:1b:a5:4b:88:c8:65:11:22:fa:c1:34: 19:c0:f1:10:7d:65:d6:ef:df:43:d3:d4:cc:fb:74: 7e:59:f7:df:4d:b9:fc:93:e7:dd:e8:7d:bd:f2:ac: b1:28:4f:f5:c9:34:8a:3a:c4:44:8a:42:4f:d4:2a: 50:3b:07:0c:5b:64:20:54:b8:d6:2e:5a:92:74:12: 39:67:c1:e7:ac:63:1c:0f:e5:de:d2:89:e3:d8:a9: fa:52:fd:7d:7d:a2:c0:da:8d:22:ea:42:9b:6c:a5: 03:12:e5:bc:b8:d1:ff:0b:ea:02:f9:6c:bb:b0:84: 24:52:a0:de:06:54:bd:ed:2d:fe:07:ed:bb:1c:3b: c1:a7:87:fb:1f:82:37:da:b5:c2:54:c1:9e:a1:9c: 14:b8:dc:19:cc:1b:3b:a0:26:79:6b:5f:ea:0d:31: c0:6e:b5:69:5f:42:d9:6f:18:24:3f:65:5d:56:2c: 81:2a:ed:b7:87:34:4f:c4:81:55:31:b3:44:ab:2c: e4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:CB:16:B8:D8:C9:78:FE:A9:84:15:61:83:5D:37:BC:76:66:0D:AD X509v3 Authority Key Identifier: keyid:11:2B:A7:97:57:7E:A6:0A:56:1A:F9:A4:59:8C:45:06:0E:3B:70:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESunl1d-pgpWGvmkWYxFBg47cIg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/bMsWuNjJeP6phBVhg103vHZmDa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/de5c5d-5812-4fe8-b3c0-6bc443f35544/1/ESunl1d-pgpWGvmkWYxFBg47cIg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.248.64.0/19 84.255.192.0/18 89.212.0.0/16 89.233.112.0/20 91.246.224.0/19 93.103.0.0/16 119.12.128.0/20 185.49.116.0/22 185.179.48.0/22 188.159.224.0/19 188.230.128.0/17 193.138.32.0/19 194.28.108.0/22 IPv6: 2a01:260::/29 Signature Algorithm: sha256WithRSAEncryption 84:3b:08:52:df:0a:49:bc:5c:3c:d0:b1:c0:eb:14:e3:03:17: 0b:31:81:66:85:e3:94:5f:4a:b6:15:5b:03:56:49:e6:9b:82: 47:98:1b:69:c8:b4:34:74:88:08:13:1d:1a:36:02:5d:94:9c: 3b:f8:b5:18:c8:2d:1b:54:19:83:cb:14:56:c9:c7:95:2f:8d: 97:b6:1d:42:e8:dc:9b:d7:d3:9a:96:b3:0a:2b:62:26:e3:50: 2f:da:f3:85:23:39:2a:5f:46:96:03:e9:eb:34:30:82:fe:25: c6:44:bc:6c:8d:78:ad:2e:11:dd:63:b3:42:ea:22:08:0e:7a: 97:0d:d6:96:8a:fb:77:93:a3:95:bf:10:4b:78:5b:fd:b5:d7: fd:af:8a:e4:79:34:52:b2:7b:86:8c:f4:2f:82:d9:e8:0b:90: 37:69:69:53:3e:2b:32:44:0e:a8:e9:01:57:1c:74:63:e7:2b: 74:d0:c9:bc:38:ea:2d:49:ba:4b:8a:0e:c5:5a:52:7b:b9:f3: d8:af:f2:e6:9f:d4:ac:d8:37:be:11:2f:2f:f7:8d:f2:f6:84: 99:40:1a:30:6a:0f:62:8c:c7:4d:9f:7c:46:db:02:5c:11:33: d4:a0:e4:71:d9:dd:c1:fe:91:06:a4:0a:8c:07:a1:ea:26:62: 7d:1f:8c:25 -----BEGIN CERTIFICATE----- MIIFUjCCBDqgAwIBAgISAZt/FeW9YKkkwCgef07BncV0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMmJhNzk3NTc3ZWE2MGE1NjFhZjlhNDU5OGM0NTA2MGUz YjcwODgwHhcNMjYwMTAyMTQyMTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2NiMTZiOGQ4Yzk3OGZlYTk4NDE1NjE4MzVkMzdiYzc2NjYwZGFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8y+CaHDYgRDNHYt7ssYuiFOOjqEJ wneB4NiGDWPZZg+5suifB8mvRl6pWxonrtNtMmhi/tKbj3s7wKOcHthcG6VLiMhl ESL6wTQZwPEQfWXW799D09TM+3R+WfffTbn8k+fd6H298qyxKE/1yTSKOsREikJP 1CpQOwcMW2QgVLjWLlqSdBI5Z8HnrGMcD+Xe0onj2Kn6Uv19faLA2o0i6kKbbKUD EuW8uNH/C+oC+Wy7sIQkUqDeBlS97S3+B+27HDvBp4f7H4I32rXCVMGeoZwUuNwZ zBs7oCZ5a1/qDTHAbrVpX0LZbxgkP2VdViyBKu23hzRPxIFVMbNEqyzkkQIDAQAB o4ICXjCCAlowHQYDVR0OBBYEFGzLFrjYyXj+qYQVYYNdN7x2Zg2tMB8GA1UdIwQY MBaAFBErp5dXfqYKVhr5pFmMRQYOO3CIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVN1bmwxZC1wZ3BXR3Zta1dZeEZCZzQ3Y0lnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kZTVjNWQtNTgxMi00ZmU4LWIzYzAt NmJjNDQzZjM1NTQ0LzEvYk1zV3VOakplUDZwaEJWaGcxMDN2SFptRGEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS9kZTVjNWQtNTgxMi00ZmU4LWIzYzAtNmJjNDQzZjM1NTQ0 LzEvRVN1bmwxZC1wZ3BXR3Zta1dZeEZCZzQ3Y0lnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHQGCCsGAQUFBwEHAQH/BGUwYzBSBAIAATBMAwQFLvhAAwQG VP/AAwMAWdQDBARZ6XADBAVb9uADAwBdZwMEBHcMgAMEArkxdAMEArmzMAMEBbyf 4AMEB7zmgAMEBcGKIAMEAsIcbDANBAIAAjAHAwUDKgECYDANBgkqhkiG9w0BAQsF AAOCAQEAhDsIUt8KSbxcPNCxwOsU4wMXCzGBZoXjlF9KthVbA1ZJ5puCR5gbaci0 NHSICBMdGjYCXZScO/i1GMgtG1QZg8sUVsnHlS+Nl7YdQujcm9fTmpazCitiJuNQ L9rzhSM5Kl9GlgPp6zQwgv4lxkS8bI14rS4R3WOzQuoiCA56lw3Wlor7d5Ojlb8Q S3hb/bXX/a+K5Hk0UrJ7hoz0L4LZ6AuQN2lpUz4rMkQOqOkBVxx0Y+crdNDJvDjq LUm6S4oOxVpSe7nz2K/y5p/UrNg3vhEvL/eN8vaEmUAaMGoPYozHTZ98RtsCXBEz 1KDkcdndwf6RBqQKjAeh6iZifR+MJQ== -----END CERTIFICATE-----Generated at Mon Feb 9 23:46:44 2026 by rpki-client