This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/BH6ERj2EK1Gwrfo5u9qhco6CgYM.roa File: BH6ERj2EK1Gwrfo5u9qhco6CgYM.roa (raw, json) Hash identifier: HBZO37pz26No65orIL67yFB8MvBngZCIHxDCzlTkjJc= Subject key identifier: 04:7E:84:46:3D:84:2B:51:B0:AD:FA:39:BB:DA:A1:72:8E:82:81:83 Certificate issuer: /CN=a7d78de0234e6f99701592f536e45f5f5594eec3 Certificate serial: 019B7F843947A1C9DA2CFE2B9050715605E0 Authority key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/BH6ERj2EK1Gwrfo5u9qhco6CgYM.roa Signing time: Fri 02 Jan 2026 16:22:10 +0000 ROA not before: Fri 02 Jan 2026 16:22:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44306 IP address blocks: 46.151.128.0/21 maxlen: 24 91.199.77.0/24 maxlen: 24 185.151.132.0/24 maxlen: 24 185.151.133.0/24 maxlen: 24 185.151.134.0/24 maxlen: 24 213.186.0.0/19 maxlen: 19 213.186.0.0/20 maxlen: 20 213.186.0.0/24 maxlen: 24 213.186.1.0/24 maxlen: 24 213.186.4.0/23 maxlen: 23 213.186.9.0/24 maxlen: 24 213.186.16.0/23 maxlen: 23 213.186.18.0/24 maxlen: 24 213.186.19.0/24 maxlen: 24 213.186.21.0/24 maxlen: 24 213.186.22.0/23 maxlen: 23 213.186.22.0/24 maxlen: 24 213.186.23.0/24 maxlen: 24 213.186.25.0/24 maxlen: 24 213.186.26.0/24 maxlen: 24 213.186.27.0/24 maxlen: 24 213.186.28.0/22 maxlen: 24 2a02:2608::/32 maxlen: 48 2a02:2608:1000::/48 maxlen: 48 2a02:2608:2000::/48 maxlen: 48 2a02:2608:3000::/48 maxlen: 48 2a02:2608:fffe::/48 maxlen: 48 2a02:2608:fffe:1::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 07:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:39:47:a1:c9:da:2c:fe:2b:90:50:71:56:05:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d78de0234e6f99701592f536e45f5f5594eec3 Validity Not Before: Jan 2 16:22:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=047e84463d842b51b0adfa39bbdaa1728e828183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:44:ee:10:75:fd:56:13:e6:aa:ea:be:60:75: 82:3b:ca:f3:f3:25:a2:0e:2d:f9:d1:3d:f5:df:07: 1c:6f:bf:53:cd:f8:17:5b:62:f2:8a:1e:f6:7d:92: c1:8d:57:e1:38:59:67:90:2a:76:25:96:9a:90:bf: e0:a6:a9:05:2e:91:1c:33:52:30:e9:f7:df:54:1c: e2:76:e8:99:26:23:06:49:b4:82:d2:0d:d1:0e:d9: 6d:b1:a3:dd:1f:10:f0:34:29:8a:b7:d1:38:15:bc: c5:15:e8:c1:38:76:98:4c:89:da:4e:28:a2:18:49: 04:cc:36:89:ef:c5:6f:04:57:68:55:11:29:52:28: f3:9e:17:31:52:3c:5b:32:e9:8b:dd:51:0f:b2:39: 80:21:be:dd:5c:32:92:43:65:ac:a4:8b:38:4d:a8: 3e:2b:cd:8f:e7:b0:e1:22:90:6a:44:48:42:8c:63: 59:24:4c:5e:19:5e:dc:de:79:c3:f1:2d:bb:50:47: 9a:ba:b2:6e:d4:a3:6c:d7:f7:c5:07:48:15:0f:9a: 09:f4:8e:b6:a0:33:9e:24:7c:76:fd:29:80:5b:0a: 63:f0:6a:80:48:09:d3:dd:03:24:9f:d6:3e:f5:f9: b0:e4:05:33:59:51:41:13:d2:2e:a1:54:d2:f6:0a: 6b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:7E:84:46:3D:84:2B:51:B0:AD:FA:39:BB:DA:A1:72:8E:82:81:83 X509v3 Authority Key Identifier: keyid:A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/BH6ERj2EK1Gwrfo5u9qhco6CgYM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.151.128.0/21 91.199.77.0/24 185.151.132.0-185.151.134.255 213.186.0.0/19 IPv6: 2a02:2608::/32 Signature Algorithm: sha256WithRSAEncryption 24:59:cf:95:91:8e:6a:9a:29:91:e8:7c:d9:e6:8c:a0:ea:75: fb:43:59:de:4c:1f:6d:91:88:28:51:a9:c0:38:b4:82:85:33: 06:c8:96:bb:15:66:94:6c:7d:4e:6f:a6:5a:e0:34:3a:65:26: f3:b1:aa:be:a8:c5:19:17:bf:e9:c6:d1:14:b1:b1:3d:c1:65: b1:dd:b6:9c:7b:50:40:c4:2f:f5:50:ac:9e:80:5f:1c:12:8c: 9d:0e:c4:54:3b:a2:be:cc:1d:3b:ff:cd:5f:fd:7c:8b:75:4b: f9:bd:5c:5f:a5:32:fc:5d:71:fb:85:6d:cb:1d:5e:bd:6e:f0: d1:60:ef:80:b1:23:6a:1e:b6:9c:c6:63:6c:23:d8:fc:14:fd: f8:d5:71:73:29:17:bf:de:c6:ef:dc:b9:c2:46:02:22:50:ca: 7e:d1:03:1e:4b:3e:e9:3c:32:eb:51:84:98:aa:ff:da:d1:a9: e2:5d:d8:a0:cd:23:ce:cd:17:58:9f:d4:9d:c0:70:4d:d5:31: 00:b4:f6:24:64:96:26:5a:eb:b9:2a:cb:69:3a:23:70:5b:38: 24:c6:f9:52:80:84:16:10:76:65:97:03:a1:cc:20:99:26:05: 3f:1b:4b:33:51:87:88:6c:5f:e1:e8:96:5e:ed:bd:53:97:77: e1:43:9f:12 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt/hDlHocnaLP4rkFBxVgXgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZDc4ZGUwMjM0ZTZmOTk3MDE1OTJmNTM2ZTQ1ZjVmNTU5 NGVlYzMwHhcNMjYwMTAyMTYyMjEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNDdlODQ0NjNkODQyYjUxYjBhZGZhMzliYmRhYTE3MjhlODI4MTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0TuEHX9VhPmquq+YHWCO8rz8yWi Di350T313wccb79TzfgXW2Lyih72fZLBjVfhOFlnkCp2JZaakL/gpqkFLpEcM1Iw 6fffVBziduiZJiMGSbSC0g3RDtltsaPdHxDwNCmKt9E4FbzFFejBOHaYTInaTiii GEkEzDaJ78VvBFdoVREpUijznhcxUjxbMumL3VEPsjmAIb7dXDKSQ2WspIs4Tag+ K82P57DhIpBqREhCjGNZJExeGV7c3nnD8S27UEeaurJu1KNs1/fFB0gVD5oJ9I62 oDOeJHx2/SmAWwpj8GqASAnT3QMkn9Y+9fmw5AUzWVFBE9IuoVTS9gpr5wIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFAR+hEY9hCtRsK36ObvaoXKOgoGDMB8GA1UdIwQY MBaAFKfXjeAjTm+ZcBWS9TbkX19VlO7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8zMWFhYmEtYWM3ZS00ODlmLTg3N2Mt MjhkNWI2MDdhNDdmLzEvQkg2RVJqMkVLMUd3cmZvNXU5cWhjbzZDZ1lNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8zMWFhYmEtYWM3ZS00ODlmLTg3N2MtMjhkNWI2MDdhNDdm LzEvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAmBAIAATAgAwQDLpeAAwQA W8dNMAwDBAK5l4QDBAC5l4YDBAXVugAwDQQCAAIwBwMFACoCJggwDQYJKoZIhvcN AQELBQADggEBACRZz5WRjmqaKZHofNnmjKDqdftDWd5MH22RiChRqcA4tIKFMwbI lrsVZpRsfU5vplrgNDplJvOxqr6oxRkXv+nG0RSxsT3BZbHdtpx7UEDEL/VQrJ6A XxwSjJ0OxFQ7or7MHTv/zV/9fIt1S/m9XF+lMvxdcfuFbcsdXr1u8NFg74CxI2oe tpzGY2wj2PwU/fjVcXMpF7/exu/cucJGAiJQyn7RAx5LPuk8MutRhJiq/9rRqeJd 2KDNI87NF1if1J3AcE3VMQC09iRkliZa67kqy2k6I3BbOCTG+VKAhBYQdmWXA6HM IJkmBT8bSzNRh4hsX+Holl7tvVOXd+FDnxI= -----END CERTIFICATE-----Generated at Mon Jan 26 18:16:35 2026 by rpki-client