This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/Vl6FMo5wU6v03xk_-33ZrOY3oKg.roa File: Vl6FMo5wU6v03xk_-33ZrOY3oKg.roa (raw, json) Hash identifier: kIWRHZYG1x8ZuZJSnfYu/2Gl4pYaKJvwzf9u/k0+4/Y= Subject key identifier: 56:5E:85:32:8E:70:53:AB:F4:DF:19:3F:FB:7D:D9:AC:E6:37:A0:A8 Certificate issuer: /CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5 Certificate serial: 019B79EC29FC82D318E4882D6CCDE9CDA3EC Authority key identifier: A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/Vl6FMo5wU6v03xk_-33ZrOY3oKg.roa Signing time: Thu 01 Jan 2026 14:17:58 +0000 ROA not before: Thu 01 Jan 2026 14:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43142 IP address blocks: 46.227.16.0/21 maxlen: 21 46.227.16.0/23 maxlen: 23 46.227.16.0/24 maxlen: 24 46.227.17.0/24 maxlen: 24 46.227.18.0/23 maxlen: 23 46.227.18.0/24 maxlen: 24 46.227.19.0/24 maxlen: 24 46.227.20.0/22 maxlen: 22 46.227.20.0/24 maxlen: 24 46.227.21.0/24 maxlen: 24 46.227.22.0/24 maxlen: 24 46.227.23.0/24 maxlen: 24 91.194.96.0/22 maxlen: 22 91.194.96.0/23 maxlen: 23 91.194.96.0/24 maxlen: 24 91.194.97.0/24 maxlen: 24 91.194.98.0/23 maxlen: 23 91.194.98.0/24 maxlen: 24 91.194.100.0/23 maxlen: 23 91.194.100.0/24 maxlen: 24 91.194.101.0/24 maxlen: 24 185.8.64.0/22 maxlen: 22 185.8.64.0/23 maxlen: 23 185.8.64.0/24 maxlen: 24 185.8.65.0/24 maxlen: 24 185.8.66.0/24 maxlen: 24 185.8.67.0/24 maxlen: 24 188.214.102.0/23 maxlen: 24 188.214.102.0/24 maxlen: 24 188.214.103.0/24 maxlen: 24 2a01:6e00::/32 maxlen: 32 2a01:6e00::/33 maxlen: 33 2a01:6e00::/48 maxlen: 48 2a01:6e00:1::/48 maxlen: 48 2a01:6e00:2::/48 maxlen: 48 2a01:6e00:3::/48 maxlen: 48 2a01:6e00:4::/48 maxlen: 48 2a01:6e00:5::/48 maxlen: 48 2a01:6e00:6::/48 maxlen: 48 2a01:6e00:7::/48 maxlen: 48 2a01:6e00:8::/48 maxlen: 48 2a01:6e00:9::/48 maxlen: 48 2a01:6e00:10::/48 maxlen: 48 2a01:6e00:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:29:fc:82:d3:18:e4:88:2d:6c:cd:e9:cd:a3:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5 Validity Not Before: Jan 1 14:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=565e85328e7053abf4df193ffb7dd9ace637a0a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:6c:06:9b:a3:13:26:cf:e4:14:86:40:9c:ca: af:14:88:59:b6:a0:94:1f:e5:a1:48:00:43:8d:9e: 63:17:29:98:5c:63:ff:07:d2:4a:84:24:54:b0:c4: d8:8f:bc:27:d9:0a:b7:89:4a:4d:03:6b:ef:3b:4b: 36:f5:55:f1:3b:a4:80:28:5f:9e:ff:e3:b8:2a:fb: f4:79:5b:35:e1:65:ad:70:c5:14:0a:cb:85:32:b4: dc:6a:53:fe:6d:00:62:06:e6:91:70:e8:69:00:87: 8c:d5:eb:98:80:9a:bc:26:47:5b:c0:e2:53:bc:c5: 88:ca:b1:82:95:7a:7b:99:66:22:69:7e:e2:4f:70: 77:3d:a6:5b:df:50:f9:1a:25:d3:67:8d:49:d9:16: c8:5a:7d:13:89:96:a7:8a:f7:5d:60:47:92:c2:98: 4b:e4:40:4e:36:a0:ac:10:e3:de:5f:52:a6:40:ed: a7:cc:c6:54:5c:ac:13:7f:fe:90:fe:a8:c3:80:5f: 1e:38:50:bb:a5:e5:93:d1:a2:f2:6d:28:31:fe:7f: 71:d2:09:3c:ea:14:9b:c1:0c:b9:c0:e3:65:2a:a5: b8:80:c4:f3:bd:19:81:92:c7:c4:33:2f:15:07:28: 6c:58:43:1e:57:75:7e:94:ca:18:f7:77:55:3c:c3: a8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:5E:85:32:8E:70:53:AB:F4:DF:19:3F:FB:7D:D9:AC:E6:37:A0:A8 X509v3 Authority Key Identifier: keyid:A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/Vl6FMo5wU6v03xk_-33ZrOY3oKg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.227.16.0/21 91.194.96.0-91.194.101.255 185.8.64.0/22 188.214.102.0/23 IPv6: 2a01:6e00::/32 Signature Algorithm: sha256WithRSAEncryption 22:44:ec:12:0d:7c:4f:b3:c1:99:9d:b3:0e:f8:ed:c7:0b:55: 99:0d:ae:83:af:30:56:79:cc:96:46:68:bb:ee:6d:6c:0f:33: 86:15:04:72:d9:e6:9c:1b:fb:2c:d4:44:d1:de:f0:de:11:b9: 6c:99:f9:89:e4:4d:6a:93:c5:f5:d2:55:02:a3:be:3c:b6:e2: ce:8a:fa:49:2f:8b:3a:7a:39:a4:ef:d0:1b:fd:d9:ee:d7:5a: 12:7f:79:68:8b:92:27:34:a5:dc:57:66:f5:71:7d:33:54:36: 4a:9b:90:d4:ce:57:f2:b8:4b:94:69:93:a1:25:eb:94:6f:99: d3:56:57:6e:1c:12:09:8e:d9:6c:7a:e0:3d:bf:f8:0c:2a:11: 2e:86:9a:9f:ac:bc:bf:dd:4a:56:92:8f:c5:55:34:48:b3:0c: cb:d9:bd:20:ec:f1:54:d1:0b:90:30:6a:2c:60:b5:c5:42:80: af:a3:c4:e7:06:39:fa:b0:b3:b1:90:9b:10:c0:42:78:5f:c5: a6:e7:44:e1:ef:b0:a7:11:73:05:45:8a:ca:7c:a0:76:9b:b1: 40:41:66:52:0f:7e:f3:a7:2c:93:39:cc:8e:e0:3f:65:d8:ef: 11:c6:e0:46:b3:4e:8b:c6:c5:53:31:33:72:f2:b0:98:01:80: 30:24:cd:bc -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt57Cn8gtMY5IgtbM3pzaPsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEwYWZlMWZlZDFmMmI3ZGIyNGEwYzJkMWY2MTAxMDY4NGU5 M2NiZDUwHhcNMjYwMTAxMTQxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjVlODUzMjhlNzA1M2FiZjRkZjE5M2ZmYjdkZDlhY2U2MzdhMGE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmwGm6MTJs/kFIZAnMqvFIhZtqCU H+WhSABDjZ5jFymYXGP/B9JKhCRUsMTYj7wn2Qq3iUpNA2vvO0s29VXxO6SAKF+e /+O4Kvv0eVs14WWtcMUUCsuFMrTcalP+bQBiBuaRcOhpAIeM1euYgJq8JkdbwOJT vMWIyrGClXp7mWYiaX7iT3B3PaZb31D5GiXTZ41J2RbIWn0TiZanivddYEeSwphL 5EBONqCsEOPeX1KmQO2nzMZUXKwTf/6Q/qjDgF8eOFC7peWT0aLybSgx/n9x0gk8 6hSbwQy5wONlKqW4gMTzvRmBksfEMy8VByhsWEMeV3V+lMoY93dVPMOoSwIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFFZehTKOcFOr9N8ZP/t92azmN6CoMB8GA1UdIwQY MBaAFKCv4f7R8rfbJKDC0fYQEGhOk8vVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb0tfaF90SHl0OXNrb01MUjloQVFhRTZUeTlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zMjAyYWQtN2I0Ni00MjJkLWE0ZDIt ZWNhNTNhN2Y3NzYyLzEvVmw2Rk1vNXdVNnYwM3hrXy0zM1pyT1kzb0tnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zMjAyYWQtN2I0Ni00MjJkLWE0ZDItZWNhNTNhN2Y3NzYy LzEvb0tfaF90SHl0OXNrb01MUjloQVFhRTZUeTlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAmBAIAATAgAwQDLuMQMAwD BAVbwmADBAFbwmQDBAK5CEADBAG81mYwDQQCAAIwBwMFACoBbgAwDQYJKoZIhvcN AQELBQADggEBACJE7BINfE+zwZmdsw747ccLVZkNroOvMFZ5zJZGaLvubWwPM4YV BHLZ5pwb+yzURNHe8N4RuWyZ+YnkTWqTxfXSVQKjvjy24s6K+kkvizp6OaTv0Bv9 2e7XWhJ/eWiLkic0pdxXZvVxfTNUNkqbkNTOV/K4S5Rpk6El65RvmdNWV24cEgmO 2Wx64D2/+AwqES6Gmp+svL/dSlaSj8VVNEizDMvZvSDs8VTRC5AwaixgtcVCgK+j xOcGOfqws7GQmxDAQnhfxabnROHvsKcRcwVFisp8oHabsUBBZlIPfvOnLJM5zI7g P2XY7xHG4EazTovGxVMxM3LysJgBgDAkzbw= -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:47 2026 by rpki-client