This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/xvzjWZWQsB3A6lco8X1BjK51Rro.roa File: xvzjWZWQsB3A6lco8X1BjK51Rro.roa (raw, json) Hash identifier: R+i0CBWTZwrH14DiftjMYo17Tzx/3SLww5XYhZACozo= Subject key identifier: C6:FC:E3:59:95:90:B0:1D:C0:EA:57:28:F1:7D:41:8C:AE:75:46:BA Certificate issuer: /CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0 Certificate serial: 019B7FF2023DAEB83250D5BF86854BC344DE Authority key identifier: E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/xvzjWZWQsB3A6lco8X1BjK51Rro.roa Signing time: Fri 02 Jan 2026 18:22:05 +0000 ROA not before: Fri 02 Jan 2026 18:22:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12618 IP address blocks: 46.238.192.0/19 maxlen: 24 46.238.224.0/22 maxlen: 22 46.238.228.0/22 maxlen: 22 46.238.232.0/24 maxlen: 24 46.238.234.0/23 maxlen: 23 46.238.239.0/24 maxlen: 24 46.238.248.0/21 maxlen: 21 46.239.144.0/20 maxlen: 20 46.239.160.0/20 maxlen: 20 89.191.144.0/20 maxlen: 24 94.141.128.0/19 maxlen: 19 212.122.216.0/22 maxlen: 22 212.122.220.0/22 maxlen: 22 2001:90c::/30 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.mft rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f2:02:3d:ae:b8:32:50:d5:bf:86:85:4b:c3:44:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2e8f56bc1f5010291681bc2d8c02f9acbf714a0 Validity Not Before: Jan 2 18:22:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c6fce3599590b01dc0ea5728f17d418cae7546ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:40:56:0a:52:28:32:9a:66:8a:b7:bd:68:3d: 82:62:04:3f:f1:f3:4b:35:88:88:42:c4:f9:22:22: a5:ca:2e:00:e1:f4:4c:80:50:58:00:10:4c:c4:3c: b4:f3:31:b7:3b:d0:73:21:d5:18:42:37:0e:f3:30: 0f:4b:d6:30:80:d3:66:6d:26:3f:f5:8d:e4:12:08: b4:75:a5:fb:a6:a7:f9:f3:c5:1a:ae:74:cd:3d:ef: 3e:98:f5:00:b0:47:a2:1f:be:04:19:b2:87:ea:44: 38:f1:5c:e6:0e:93:14:c3:af:4a:50:56:15:36:7f: 7b:45:87:30:d0:84:cd:88:99:69:4c:e8:18:b7:36: d5:51:8b:6b:b9:d4:35:80:0b:a7:1f:5d:a8:f2:3f: 8f:d4:b6:09:23:85:01:e0:b6:bc:08:3e:e3:43:d5: 16:66:b3:da:a6:af:1e:8f:ef:22:f4:4c:1a:e4:89: 87:cf:8e:2b:81:43:5a:88:ad:53:20:4e:22:f9:ac: 17:30:a1:7c:cb:03:a7:25:aa:02:80:4a:bf:f2:ab: e4:15:f1:cf:f4:74:79:7d:8d:b8:74:51:ae:85:a6: 54:37:0e:5b:6e:45:40:46:5c:f5:36:58:ca:f3:8a: fa:13:59:9f:fa:81:bf:91:17:89:4c:e0:df:8d:13: 52:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:FC:E3:59:95:90:B0:1D:C0:EA:57:28:F1:7D:41:8C:AE:75:46:BA X509v3 Authority Key Identifier: keyid:E2:E8:F5:6B:C1:F5:01:02:91:68:1B:C2:D8:C0:2F:9A:CB:F7:14:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uj1a8H1AQKRaBvC2MAvmsv3FKA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/xvzjWZWQsB3A6lco8X1BjK51Rro.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8042bf-71ba-4fbd-9e17-447edc4f9af6/1/4uj1a8H1AQKRaBvC2MAvmsv3FKA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.238.192.0-46.238.232.255 46.238.234.0/23 46.238.239.0/24 46.238.248.0/21 46.239.144.0-46.239.175.255 89.191.144.0/20 94.141.128.0/19 212.122.216.0/21 IPv6: 2001:90c::/30 Signature Algorithm: sha256WithRSAEncryption ab:92:ec:12:7d:d0:4a:2c:6e:da:89:2d:e6:b7:8b:4b:c1:0e: 5d:50:14:12:59:d8:d9:80:c0:66:26:e9:7d:14:98:56:14:b2: a4:62:a1:84:5f:38:40:de:a3:d0:05:2b:e8:69:5d:83:94:cb: 30:2f:82:9d:2e:90:1d:33:7c:79:4b:73:53:62:67:f0:d4:6f: 2b:6a:f1:a2:59:3d:3b:af:1a:af:82:24:31:d1:cb:80:c1:81: 60:9c:6b:25:4a:07:9a:d1:14:69:d1:56:12:0a:1c:cf:62:fa: 0e:3b:5c:a5:63:59:02:73:38:bf:a1:88:12:d7:94:3a:8f:05: 92:df:53:d0:03:4a:78:f7:74:87:42:e4:b3:d5:17:39:94:42: a7:ec:07:50:df:28:98:e1:95:75:45:b2:29:26:76:bf:2d:d3: 4a:b6:f2:9a:4b:60:09:74:ed:f9:6b:80:b0:cf:de:ea:f4:36: 5f:1c:e2:a5:29:44:1a:d9:9f:4f:aa:51:27:8e:56:76:00:86: 09:34:0d:5c:29:59:bf:7f:78:ee:27:4d:46:b8:21:f5:5a:d8: f0:89:f8:cb:f3:e5:dd:e9:8c:e0:eb:a7:38:d9:db:1b:27:c7: 50:5b:d0:06:e0:4f:6e:a2:f5:97:3e:fa:94:a7:f2:03:31:98: 07:d5:64:d5 -----BEGIN CERTIFICATE----- MIIFRjCCBC6gAwIBAgISAZt/8gI9rrgyUNW/hoVLw0TeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyZThmNTZiYzFmNTAxMDI5MTY4MWJjMmQ4YzAyZjlhY2Jm NzE0YTAwHhcNMjYwMTAyMTgyMjA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNmZjZTM1OTk1OTBiMDFkYzBlYTU3MjhmMTdkNDE4Y2FlNzU0NmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEBWClIoMppmire9aD2CYgQ/8fNL NYiIQsT5IiKlyi4A4fRMgFBYABBMxDy08zG3O9BzIdUYQjcO8zAPS9YwgNNmbSY/ 9Y3kEgi0daX7pqf588UarnTNPe8+mPUAsEeiH74EGbKH6kQ48VzmDpMUw69KUFYV Nn97RYcw0ITNiJlpTOgYtzbVUYtrudQ1gAunH12o8j+P1LYJI4UB4La8CD7jQ9UW ZrPapq8ej+8i9Ewa5ImHz44rgUNaiK1TIE4i+awXMKF8ywOnJaoCgEq/8qvkFfHP 9HR5fY24dFGuhaZUNw5bbkVARlz1NljK84r6E1mf+oG/kReJTODfjRNSAwIDAQAB o4ICUjCCAk4wHQYDVR0OBBYEFMb841mVkLAdwOpXKPF9QYyudUa6MB8GA1UdIwQY MBaAFOLo9WvB9QECkWgbwtjAL5rL9xSgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHVqMWE4SDFBUUtSYUJ2QzJNQXZtc3YzRktBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC84MDQyYmYtNzFiYS00ZmJkLTllMTct NDQ3ZWRjNGY5YWY2LzEveHZ6aldaV1FzQjNBNmxjbzhYMUJqSzUxUnJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC84MDQyYmYtNzFiYS00ZmJkLTllMTctNDQ3ZWRjNGY5YWY2 LzEvNHVqMWE4SDFBUUtSYUJ2QzJNQXZtc3YzRktBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGgGCCsGAQUFBwEHAQH/BFkwVzBGBAIAATBAMAwDBAYu7sAD BAAu7ugDBAEu7uoDBAAu7u8DBAMu7vgwDAMEBC7vkAMEBC7voAMEBFm/kAMEBV6N gAMEA9R62DANBAIAAjAHAwUCIAEJDDANBgkqhkiG9w0BAQsFAAOCAQEAq5LsEn3Q Sixu2okt5reLS8EOXVAUElnY2YDAZibpfRSYVhSypGKhhF84QN6j0AUr6Gldg5TL MC+CnS6QHTN8eUtzU2Jn8NRvK2rxolk9O68ar4IkMdHLgMGBYJxrJUoHmtEUadFW Egocz2L6DjtcpWNZAnM4v6GIEteUOo8Fkt9T0ANKePd0h0Lks9UXOZRCp+wHUN8o mOGVdUWyKSZ2vy3TSrbymktgCXTt+WuAsM/e6vQ2XxzipSlEGtmfT6pRJ45WdgCG CTQNXClZv3947idNRrgh9VrY8In4y/Pl3emM4OunONnbGyfHUFvQBuBPbqL1lz76 lKfyAzGYB9Vk1Q== -----END CERTIFICATE-----Generated at Tue Feb 10 00:08:27 2026 by rpki-client