This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/zOmGYauNnRfV_5QaNrYyOSSrwQ0.roa File: zOmGYauNnRfV_5QaNrYyOSSrwQ0.roa (raw, json) Hash identifier: QJz+FfKfespU5hmZuz01TmSY2wjv9AwO7tZKjrvrO1o= Subject key identifier: CC:E9:86:61:AB:8D:9D:17:D5:FF:94:1A:36:B6:32:39:24:AB:C1:0D Certificate issuer: /CN=ee4381ce03baa625019980f378fe41bb2b6621b9 Certificate serial: 019B79102DFFEB320DF2AEFC76C1CB9635BF Authority key identifier: EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/zOmGYauNnRfV_5QaNrYyOSSrwQ0.roa Signing time: Thu 01 Jan 2026 10:17:42 +0000 ROA not before: Thu 01 Jan 2026 10:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44558 IP address blocks: 46.106.192.0/24 maxlen: 24 46.106.193.0/24 maxlen: 24 46.106.194.0/24 maxlen: 24 46.106.195.0/24 maxlen: 24 46.106.196.0/24 maxlen: 24 46.106.197.0/24 maxlen: 24 46.106.198.0/24 maxlen: 24 46.106.199.0/24 maxlen: 24 46.106.200.0/24 maxlen: 24 46.106.201.0/24 maxlen: 24 46.106.202.0/24 maxlen: 24 46.106.203.0/24 maxlen: 24 46.106.208.0/24 maxlen: 24 46.106.209.0/24 maxlen: 24 46.106.210.0/24 maxlen: 24 46.106.211.0/24 maxlen: 24 46.106.212.0/24 maxlen: 24 46.106.213.0/24 maxlen: 24 46.106.214.0/24 maxlen: 24 46.106.215.0/24 maxlen: 24 46.106.216.0/24 maxlen: 24 46.106.217.0/24 maxlen: 24 46.106.218.0/24 maxlen: 24 46.106.219.0/24 maxlen: 24 46.106.220.0/24 maxlen: 24 46.106.221.0/24 maxlen: 24 46.106.222.0/24 maxlen: 24 46.106.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.mft rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 05:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:2d:ff:eb:32:0d:f2:ae:fc:76:c1:cb:96:35:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ee4381ce03baa625019980f378fe41bb2b6621b9 Validity Not Before: Jan 1 10:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cce98661ab8d9d17d5ff941a36b6323924abc10d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0b:5b:e9:da:ed:e8:54:55:bd:11:af:46:27: dc:3d:e2:79:cd:e0:d5:08:0a:32:5b:71:04:96:bd: c6:8c:18:66:ed:a2:f5:d0:d9:00:23:d9:20:bd:7b: 60:f2:99:ff:96:14:e2:a5:ea:ba:72:1f:63:cf:15: ab:88:a4:5b:4f:54:21:59:c7:e4:77:7a:48:be:0f: b9:d3:ef:3b:b8:71:d8:ee:55:27:e2:14:d7:92:4f: 72:f3:3c:58:4d:fe:8f:68:41:33:5e:dc:bc:3c:96: d7:7f:8d:0f:4e:1e:de:f0:e9:b5:0e:37:70:0f:09: e0:4b:96:b0:9b:a6:03:ad:fb:2e:79:cc:82:1f:07: 36:92:12:af:30:62:ff:81:a1:3a:08:f6:1f:d8:0d: e9:b3:19:5e:c3:56:da:11:35:c6:19:12:38:2e:4f: 4a:ce:7f:50:9d:63:07:15:4c:bf:96:03:92:cd:38: 49:16:db:f7:69:88:c1:a7:56:a5:9b:9d:18:43:fe: fe:f1:e4:b1:cd:56:ae:a6:1e:82:db:d7:f9:63:72: d3:81:9c:6b:2d:b4:0a:54:29:19:ce:07:33:10:6d: 87:22:54:21:87:04:fe:0b:a3:a5:f1:f2:1a:74:cc: 4c:b0:04:0b:2c:55:43:ff:e4:f4:9d:8c:71:bf:55: e7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E9:86:61:AB:8D:9D:17:D5:FF:94:1A:36:B6:32:39:24:AB:C1:0D X509v3 Authority Key Identifier: keyid:EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/zOmGYauNnRfV_5QaNrYyOSSrwQ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.106.192.0-46.106.203.255 46.106.208.0/20 Signature Algorithm: sha256WithRSAEncryption aa:66:a1:c6:d8:21:fd:5e:35:4a:59:95:06:28:7a:f8:1e:33: a1:c9:34:e5:5d:73:ac:14:ac:c8:a2:f4:39:96:3c:b0:0f:c3: 0c:9d:41:1f:5c:af:68:88:49:fd:20:94:27:4a:f4:f3:68:00: 74:90:91:ed:3c:a7:1f:87:07:45:55:a1:c9:7b:89:cc:aa:03: 39:5d:3a:1e:71:dd:9c:bf:72:59:35:d2:c0:d3:f4:dc:aa:05: 98:9d:46:b4:49:35:2f:93:c3:38:c5:2f:55:e0:46:46:da:24: 18:d3:ef:9b:7f:47:b5:39:41:e3:58:12:d9:c9:9c:0d:dc:cc: 13:d0:43:52:dc:0e:b5:8d:71:ed:b6:8d:62:1a:a0:51:b2:13: e8:68:d2:04:eb:fc:94:66:48:8c:7f:17:af:63:f9:24:b3:f5: 1f:d1:d9:12:80:8c:af:de:6c:9d:55:43:e9:01:a4:a9:1b:0f: 02:1a:c0:cc:2a:1b:a9:80:2c:9f:89:60:7b:a1:e5:b6:ae:49: 5b:da:fe:af:70:58:83:5b:46:4a:a2:b8:9d:4d:f7:d2:c3:79: 22:9d:bf:41:2d:35:be:f4:03:ce:f6:c1:b9:05:60:d1:ab:56: 8c:e4:1a:36:bd:b4:37:d5:c0:92:dc:0c:d1:17:d3:d2:d6:bc: bb:82:b5:3d -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt5EC3/6zIN8q78dsHLljW/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlNDM4MWNlMDNiYWE2MjUwMTk5ODBmMzc4ZmU0MWJiMmI2 NjIxYjkwHhcNMjYwMTAxMTAxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2U5ODY2MWFiOGQ5ZDE3ZDVmZjk0MWEzNmI2MzIzOTI0YWJjMTBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwtb6drt6FRVvRGvRifcPeJ5zeDV CAoyW3EElr3GjBhm7aL10NkAI9kgvXtg8pn/lhTipeq6ch9jzxWriKRbT1QhWcfk d3pIvg+50+87uHHY7lUn4hTXkk9y8zxYTf6PaEEzXty8PJbXf40PTh7e8Om1Djdw DwngS5awm6YDrfsuecyCHwc2khKvMGL/gaE6CPYf2A3psxlew1baETXGGRI4Lk9K zn9QnWMHFUy/lgOSzThJFtv3aYjBp1alm50YQ/7+8eSxzVauph6C29f5Y3LTgZxr LbQKVCkZzgczEG2HIlQhhwT+C6Ol8fIadMxMsAQLLFVD/+T0nYxxv1XnTQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFMzphmGrjZ0X1f+UGja2Mjkkq8ENMB8GA1UdIwQY MBaAFO5Dgc4DuqYlAZmA83j+QbsrZiG5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN2tPQnpnTzZwaVVCbVlEemVQNUJ1eXRtSWJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ZWExMmItNTFjNi00MTk1LWFlYjYt YzFhZGRkN2RlYmFhLzEvek9tR1lhdU5uUmZWXzVRYU5yWXlPU1Nyd1EwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS81ZWExMmItNTFjNi00MTk1LWFlYjYtYzFhZGRkN2RlYmFh LzEvN2tPQnpnTzZwaVVCbVlEemVQNUJ1eXRtSWJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAYuasAD BAIuasgDBAQuatAwDQYJKoZIhvcNAQELBQADggEBAKpmocbYIf1eNUpZlQYoevge M6HJNOVdc6wUrMii9DmWPLAPwwydQR9cr2iISf0glCdK9PNoAHSQke08px+HB0VV ocl7icyqAzldOh5x3Zy/clk10sDT9NyqBZidRrRJNS+TwzjFL1XgRkbaJBjT75t/ R7U5QeNYEtnJnA3czBPQQ1LcDrWNce22jWIaoFGyE+ho0gTr/JRmSIx/F69j+SSz 9R/R2RKAjK/ebJ1VQ+kBpKkbDwIawMwqG6mALJ+JYHuh5bauSVva/q9wWINbRkqi uJ1N99LDeSKdv0EtNb70A872wbkFYNGrVozkGja9tDfVwJLcDNEX09LWvLuCtT0= -----END CERTIFICATE-----Generated at Mon Jan 26 13:44:22 2026 by rpki-client