This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/9ogde2DCFGnyeWaJ0qvOZkuIZN4.roa File: 9ogde2DCFGnyeWaJ0qvOZkuIZN4.roa (raw, json) Hash identifier: Bj+Js4UPw1o6feOmkLrkYY/w7t2b1Dyp0TJfYGAVC4Q= Subject key identifier: F6:88:1D:7B:60:C2:14:69:F2:79:66:89:D2:AB:CE:66:4B:88:64:DE Certificate issuer: /CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b Certificate serial: 019B89641AE381AD23E150B3625B162BD686 Authority key identifier: A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/9ogde2DCFGnyeWaJ0qvOZkuIZN4.roa Signing time: Sun 04 Jan 2026 14:23:17 +0000 ROA not before: Sun 04 Jan 2026 14:23:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56595 IP address blocks: 46.226.0.0/21 maxlen: 21 89.32.88.0/21 maxlen: 21 91.239.46.0/24 maxlen: 24 91.240.174.0/24 maxlen: 24 95.215.9.0/24 maxlen: 24 185.7.228.0/22 maxlen: 22 185.7.228.0/23 maxlen: 23 185.7.230.0/23 maxlen: 23 185.8.93.0/24 maxlen: 24 185.34.8.0/22 maxlen: 22 185.73.152.0/22 maxlen: 22 185.100.68.0/22 maxlen: 22 185.122.64.0/22 maxlen: 22 185.240.200.0/22 maxlen: 22 188.241.20.0/22 maxlen: 24 192.124.193.0/24 maxlen: 24 192.124.194.0/23 maxlen: 23 192.124.197.0/24 maxlen: 24 192.124.198.0/24 maxlen: 24 192.124.200.0/24 maxlen: 24 192.124.203.0/24 maxlen: 24 192.124.206.0/23 maxlen: 23 193.33.125.0/24 maxlen: 24 195.230.123.0/24 maxlen: 24 2a00:a600::/32 maxlen: 32 2a00:a600:0:2e::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.mft rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 23:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:89:64:1a:e3:81:ad:23:e1:50:b3:62:5b:16:2b:d6:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a8b5fe67c20797d3941555554f8c988ca2f7c17b Validity Not Before: Jan 4 14:23:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6881d7b60c21469f2796689d2abce664b8864de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:40:b5:11:e4:42:d8:27:09:06:71:e5:a1:d8: ac:dc:0c:d4:09:46:74:af:19:ce:e1:e4:81:5b:14: 49:55:aa:35:66:4b:d3:a5:89:aa:97:95:af:6f:b9: 39:fe:55:ce:41:16:2d:52:64:38:04:41:40:99:96: 47:30:f3:fe:ce:f1:15:53:88:ee:6a:47:7c:b4:73: 28:d6:25:1e:d1:93:27:98:fb:9f:a8:cc:cc:eb:4e: 7f:40:dd:f0:43:75:f9:d6:de:78:13:07:19:57:06: f0:a1:2d:c4:18:e7:2f:2a:ec:11:2d:cf:45:75:96: f4:65:c1:62:e1:e8:13:82:c9:54:00:7d:81:04:17: ae:c2:42:6e:00:cc:e9:f6:d2:c9:31:b7:fd:47:b2: 68:aa:7d:87:f7:8a:25:d9:7a:14:96:09:f5:f9:d8: 8e:5f:96:81:12:b2:69:0d:96:64:78:52:0c:4b:a6: 19:7e:61:9a:bf:12:dc:f2:f7:d3:3d:4f:0b:c2:e9: ae:ae:0e:08:2a:7c:6f:71:77:65:aa:52:43:f4:0d: da:45:2f:60:b6:74:dc:5e:b0:70:c4:95:28:01:9a: 46:e8:b4:fd:35:72:b5:4c:3b:78:63:d8:87:62:0b: af:f7:54:f5:4e:45:61:f7:f2:bb:2c:32:cd:0b:f9: 2c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:88:1D:7B:60:C2:14:69:F2:79:66:89:D2:AB:CE:66:4B:88:64:DE X509v3 Authority Key Identifier: keyid:A8:B5:FE:67:C2:07:97:D3:94:15:55:55:4F:8C:98:8C:A2:F7:C1:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/9ogde2DCFGnyeWaJ0qvOZkuIZN4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e7cbf3-64e6-4023-befd-1cc619197551/1/qLX-Z8IHl9OUFVVVT4yYjKL3wXs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.226.0.0/21 89.32.88.0/21 91.239.46.0/24 91.240.174.0/24 95.215.9.0/24 185.7.228.0/22 185.8.93.0/24 185.34.8.0/22 185.73.152.0/22 185.100.68.0/22 185.122.64.0/22 185.240.200.0/22 188.241.20.0/22 192.124.193.0-192.124.195.255 192.124.197.0-192.124.198.255 192.124.200.0/24 192.124.203.0/24 192.124.206.0/23 193.33.125.0/24 195.230.123.0/24 IPv6: 2a00:a600::/32 Signature Algorithm: sha256WithRSAEncryption 8a:c4:e5:89:38:a6:22:0e:c7:0a:61:3c:46:e7:92:f2:93:d1: ac:84:a2:1f:92:5a:41:72:94:b9:5e:ea:75:39:b1:4e:6e:a7: e9:fe:d8:df:64:ce:46:46:be:cc:f8:29:05:c3:74:ca:25:23: 6b:20:44:bd:57:98:7e:1c:63:a7:d0:14:e4:a0:92:3e:26:02: 2a:52:58:b6:1e:34:35:20:f9:bb:c4:7b:ba:af:9e:37:15:31: 1a:36:54:ff:cb:89:ef:e3:4b:fa:94:84:b8:02:ef:e6:d9:7a: 14:e2:6f:03:14:6e:21:08:aa:b4:ed:ee:e5:b3:5e:c9:90:76: 8a:2b:5f:28:f7:1b:3a:6c:44:1e:3a:9c:68:cf:dd:fe:96:58: e3:c4:2c:16:69:09:40:5c:7d:77:ad:b3:77:4a:8b:c3:b9:9f: b7:2f:09:1e:da:9c:ec:44:cc:8c:ef:e2:e6:c6:70:53:96:78: ca:9a:79:b6:bd:3a:3c:d3:d5:f3:39:45:11:62:7b:f4:62:57: a3:79:bd:6e:cb:34:f7:8a:43:86:a2:7a:0d:91:85:ee:52:2c: df:4e:88:cd:4e:f4:c5:48:94:5f:b0:81:5a:0d:d3:24:cc:67: b5:03:99:e8:10:90:ba:11:22:bf:d0:84:e2:06:66:0a:12:bf: af:4b:8b:56 -----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgISAZuJZBrjga0j4VCzYlsWK9aGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4YjVmZTY3YzIwNzk3ZDM5NDE1NTU1NTRmOGM5ODhjYTJm N2MxN2IwHhcNMjYwMTA0MTQyMzE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjg4MWQ3YjYwYzIxNDY5ZjI3OTY2ODlkMmFiY2U2NjRiODg2NGRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskC1EeRC2CcJBnHlodis3AzUCUZ0 rxnO4eSBWxRJVao1ZkvTpYmql5Wvb7k5/lXOQRYtUmQ4BEFAmZZHMPP+zvEVU4ju akd8tHMo1iUe0ZMnmPufqMzM605/QN3wQ3X51t54EwcZVwbwoS3EGOcvKuwRLc9F dZb0ZcFi4egTgslUAH2BBBeuwkJuAMzp9tLJMbf9R7Joqn2H94ol2XoUlgn1+diO X5aBErJpDZZkeFIMS6YZfmGavxLc8vfTPU8Lwumurg4IKnxvcXdlqlJD9A3aRS9g tnTcXrBwxJUoAZpG6LT9NXK1TDt4Y9iHYguv91T1TkVh9/K7LDLNC/ksOwIDAQAB o4ICnzCCApswHQYDVR0OBBYEFPaIHXtgwhRp8nlmidKrzmZLiGTeMB8GA1UdIwQY MBaAFKi1/mfCB5fTlBVVVU+MmIyi98F7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUxYLVo4SUhsOU9VRlZWVlQ0eVlqS0wzd1hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9lN2NiZjMtNjRlNi00MDIzLWJlZmQt MWNjNjE5MTk3NTUxLzEvOW9nZGUyRENGR255ZVdhSjBxdk9aa3VJWk40LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9lN2NiZjMtNjRlNi00MDIzLWJlZmQtMWNjNjE5MTk3NTUx LzEvcUxYLVo4SUhsOU9VRlZWVlQ0eVlqS0wzd1hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIG0BggrBgEFBQcBBwEB/wSBpDCBoTCBjwQCAAEwgYgDBAMu 4gADBANZIFgDBABb7y4DBABb8K4DBABf1wkDBAK5B+QDBAC5CF0DBAK5IggDBAK5 SZgDBAK5ZEQDBAK5ekADBAK58MgDBAK88RQwDAMEAMB8wQMEAsB8wDAMAwQAwHzF AwQAwHzGAwQAwHzIAwQAwHzLAwQBwHzOAwQAwSF9AwQAw+Z7MA0EAgACMAcDBQAq AKYAMA0GCSqGSIb3DQEBCwUAA4IBAQCKxOWJOKYiDscKYTxG55Lyk9GshKIfklpB cpS5Xup1ObFObqfp/tjfZM5GRr7M+CkFw3TKJSNrIES9V5h+HGOn0BTkoJI+JgIq Uli2HjQ1IPm7xHu6r543FTEaNlT/y4nv40v6lIS4Au/m2XoU4m8DFG4hCKq07e7l s17JkHaKK18o9xs6bEQeOpxoz93+lljjxCwWaQlAXH13rbN3SovDuZ+3Lwke2pzs RMyM7+LmxnBTlnjKmnm2vTo809XzOUURYnv0Ylejeb1uyzT3ikOGonoNkYXuUizf TojNTvTFSJRfsIFaDdMkzGe1A5noEJC6ESK/0ITiBmYKEr+vS4tW -----END CERTIFICATE-----Generated at Mon Jan 26 09:23:01 2026 by rpki-client