This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/RTa46YjqIB57sl6TXUqs2BxTTOc.roa File: RTa46YjqIB57sl6TXUqs2BxTTOc.roa (raw, json) Hash identifier: KPHNrqroDbFqES68zQrY2KXBJL2CCYvWrdznMKfxk0E= Subject key identifier: 45:36:B8:E9:88:EA:20:1E:7B:B2:5E:93:5D:4A:AC:D8:1C:53:4C:E7 Certificate issuer: /CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b Certificate serial: 019B77C69C0D3D8B92894D42B00000DB389F Authority key identifier: 2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/RTa46YjqIB57sl6TXUqs2BxTTOc.roa Signing time: Thu 01 Jan 2026 04:17:43 +0000 ROA not before: Thu 01 Jan 2026 04:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202113 IP address blocks: 185.52.244.0/22 maxlen: 22 185.52.244.0/24 maxlen: 24 185.52.247.0/24 maxlen: 24 2a04:c9c0::/29 maxlen: 29 2a04:c9c7::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.crl rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:9c:0d:3d:8b:92:89:4d:42:b0:00:00:db:38:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b Validity Not Before: Jan 1 04:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4536b8e988ea201e7bb25e935d4aacd81c534ce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7f:3f:40:15:1b:81:ef:0c:b3:4f:fe:12:13: 1e:0b:3d:38:85:2e:f4:ee:4a:53:a6:88:b9:1d:9f: 07:53:49:63:2c:e8:da:93:cb:5e:aa:36:15:54:d8: 51:8c:83:f8:fb:ab:97:72:50:f5:87:e9:4e:8d:01: 3b:de:a1:6c:b5:c8:2d:6d:c5:a7:db:98:c4:71:01: ee:1b:87:0c:b8:a0:be:0a:4b:7d:d3:44:fb:59:63: 18:ed:1d:63:67:86:55:4b:30:63:93:6d:ad:7a:58: ed:7c:a5:1b:df:8a:e2:84:73:a6:fd:f5:91:7e:b4: e8:37:61:69:bf:c0:a1:05:d2:bb:39:ca:9a:53:1b: 04:ec:94:9f:5a:b0:c2:73:ec:a6:8f:14:33:79:9d: 9d:76:36:ac:52:78:82:29:ed:72:1a:e5:40:28:03: b9:11:41:7a:82:f7:4a:9b:a6:db:2d:c5:ec:55:48: 9f:de:5c:98:1a:17:15:99:82:62:4a:e5:99:5c:b7: aa:03:fd:8c:f9:99:48:40:9f:de:bb:9a:a4:47:e2: 14:4e:ad:2d:26:55:fa:43:36:5e:76:d9:e1:dc:b9: cc:d9:90:54:9c:b8:5d:70:5d:d6:61:e6:4c:2b:29: 88:1a:94:58:9f:3f:50:fc:cf:e6:b8:cc:46:98:d8: c1:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:36:B8:E9:88:EA:20:1E:7B:B2:5E:93:5D:4A:AC:D8:1C:53:4C:E7 X509v3 Authority Key Identifier: keyid:2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/RTa46YjqIB57sl6TXUqs2BxTTOc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.52.244.0/22 IPv6: 2a04:c9c0::/29 Signature Algorithm: sha256WithRSAEncryption 5d:23:ba:68:71:9d:3b:62:96:62:c0:84:29:00:b4:ca:c6:cc: b2:e0:72:36:e4:86:b2:17:4c:b4:74:85:e8:2c:48:6b:a9:35: 2d:70:a8:c8:bb:11:52:6c:d0:ad:d7:d8:78:5e:26:ed:35:e8: bf:68:c3:54:0f:93:84:86:c2:ca:98:7c:d5:78:3b:70:d5:dd: c4:a9:0f:13:7d:99:89:4d:e2:27:93:f0:a0:33:11:75:74:4b: fe:f7:9b:46:c4:98:db:f1:2c:44:fe:27:8a:58:17:05:15:dd: e7:0d:48:8a:0b:2d:5b:8e:7a:ff:95:fd:1b:c4:9b:92:e5:b4: 27:87:c3:e5:a2:40:4c:97:ac:aa:f2:e3:d1:56:3f:c0:3c:5c: 87:27:e4:79:e3:33:79:db:66:8d:c6:57:90:cf:aa:69:75:d5: 27:f6:e4:ae:13:2d:21:c6:b2:88:36:fa:78:a6:6c:6d:36:25: e2:2f:2e:c7:62:17:76:2e:9f:c1:04:04:81:12:7f:b0:66:d8: cb:d2:28:56:e4:13:26:ac:f2:9e:1f:d7:5f:ce:8d:1a:e8:82: c0:1c:7e:b5:64:8f:b8:bf:1f:86:51:0c:b3:10:7a:77:79:1d: 8a:1c:06:1d:a5:b0:72:65:c8:2b:04:66:02:1b:c6:ca:8b:6b: 21:9a:f4:4b -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3xpwNPYuSiU1CsAAA2zifMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiYTcwODhlMzllN2FkODgxN2I3ZDEwZWEyYTViOGEwOThh NDdhMGIwHhcNMjYwMTAxMDQxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTM2YjhlOTg4ZWEyMDFlN2JiMjVlOTM1ZDRhYWNkODFjNTM0Y2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw38/QBUbge8Ms0/+EhMeCz04hS70 7kpTpoi5HZ8HU0ljLOjak8teqjYVVNhRjIP4+6uXclD1h+lOjQE73qFstcgtbcWn 25jEcQHuG4cMuKC+Ckt900T7WWMY7R1jZ4ZVSzBjk22teljtfKUb34rihHOm/fWR frToN2Fpv8ChBdK7OcqaUxsE7JSfWrDCc+ymjxQzeZ2ddjasUniCKe1yGuVAKAO5 EUF6gvdKm6bbLcXsVUif3lyYGhcVmYJiSuWZXLeqA/2M+ZlIQJ/eu5qkR+IUTq0t JlX6QzZedtnh3LnM2ZBUnLhdcF3WYeZMKymIGpRYnz9Q/M/muMxGmNjBRwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEU2uOmI6iAee7Jek11KrNgcU0znMB8GA1UdIwQY MBaAFCunCI45562IF7fRDqKluKCYpHoLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzZjSWpqbm5yWWdYdDlFT29xVzRvSmlrZWdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9iZjU4YzUtZjNlMi00MWFjLWEyMTYt NGE2N2U0ZDA1NmFiLzEvUlRhNDZZanFJQjU3c2w2VFhVcXMyQnhUVE9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9iZjU4YzUtZjNlMi00MWFjLWEyMTYtNGE2N2U0ZDA1NmFi LzEvSzZjSWpqbm5yWWdYdDlFT29xVzRvSmlrZWdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuTT0MA0E AgACMAcDBQMqBMnAMA0GCSqGSIb3DQEBCwUAA4IBAQBdI7pocZ07YpZiwIQpALTK xsyy4HI25IayF0y0dIXoLEhrqTUtcKjIuxFSbNCt19h4XibtNei/aMNUD5OEhsLK mHzVeDtw1d3EqQ8TfZmJTeInk/CgMxF1dEv+95tGxJjb8SxE/ieKWBcFFd3nDUiK Cy1bjnr/lf0bxJuS5bQnh8PlokBMl6yq8uPRVj/APFyHJ+R54zN522aNxleQz6pp ddUn9uSuEy0hxrKINvp4pmxtNiXiLy7HYhd2Lp/BBASBEn+wZtjL0ihW5BMmrPKe H9dfzo0a6ILAHH61ZI+4vx+GUQyzEHp3eR2KHAYdpbByZcgrBGYCG8bKi2shmvRL -----END CERTIFICATE-----Generated at Mon Feb 2 08:07:39 2026 by rpki-client