This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/gnoYrT4knURKrt5KKBfShHVozwM.roa File: gnoYrT4knURKrt5KKBfShHVozwM.roa (raw, json) Hash identifier: OjJdSpf+iXwyfGjxwCj90eq75k08MDbax/f+tQriWTM= Subject key identifier: 82:7A:18:AD:3E:24:9D:44:4A:AE:DE:4A:28:17:D2:84:75:68:CF:03 Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Certificate serial: 019B7DC98386F088C9C6C09FFE081D2529B2 Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/gnoYrT4knURKrt5KKBfShHVozwM.roa Signing time: Fri 02 Jan 2026 08:18:37 +0000 ROA not before: Fri 02 Jan 2026 08:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207710 IP address blocks: 158.46.188.0/22 maxlen: 24 158.46.196.0/22 maxlen: 22 178.171.0.0/20 maxlen: 20 178.171.20.0/22 maxlen: 24 178.171.32.0/22 maxlen: 22 178.171.48.0/23 maxlen: 23 178.171.50.0/23 maxlen: 23 178.171.60.0/23 maxlen: 23 178.171.62.0/23 maxlen: 23 178.171.104.0/24 maxlen: 24 178.171.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:83:86:f0:88:c9:c6:c0:9f:fe:08:1d:25:29:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Validity Not Before: Jan 2 08:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=827a18ad3e249d444aaede4a2817d2847568cf03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6a:ed:56:97:df:1b:23:dd:e0:9b:99:0e:4d: 61:34:98:7a:82:b3:47:6c:d7:7f:a7:89:d6:8f:51: 0e:05:3e:be:9b:e8:95:34:b1:41:2e:32:09:12:76: d6:fa:cc:06:30:3b:4a:a8:a4:5f:7d:0c:fb:15:8a: ed:46:4e:c3:4a:08:50:a7:d5:b4:4c:37:98:c8:9b: 18:e9:ce:11:ab:e6:ad:4c:2a:64:93:8b:28:d9:19: 89:91:06:7a:31:fa:8e:e7:34:56:2e:69:1f:72:69: 0f:c2:9d:36:a4:c1:61:83:ff:bd:ed:3b:cc:92:04: 09:70:ad:21:eb:5b:9c:63:04:24:2c:6b:02:1b:6f: 32:b9:3d:15:da:c7:dd:e2:dd:12:e9:e5:aa:1c:ec: 82:c2:58:c3:50:a6:b5:3b:0a:d9:16:7e:dc:f4:99: ec:c2:76:ed:56:0a:13:72:23:4d:ff:53:91:8c:93: 14:5d:b4:c9:20:71:a9:7f:dc:a2:9f:b4:14:60:96: f4:b8:8a:60:e1:2e:08:b6:79:02:4d:b8:ee:fb:b8: e9:29:29:bc:83:87:09:39:59:3a:50:ce:c8:55:b9: 64:63:93:22:4f:94:61:e7:9c:bd:cd:72:d4:bd:03: d6:0a:23:93:02:ca:a0:c6:ce:0c:98:cf:ae:0f:b0: 4f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:7A:18:AD:3E:24:9D:44:4A:AE:DE:4A:28:17:D2:84:75:68:CF:03 X509v3 Authority Key Identifier: keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/gnoYrT4knURKrt5KKBfShHVozwM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 158.46.188.0/22 158.46.196.0/22 178.171.0.0/20 178.171.20.0/22 178.171.32.0/22 178.171.48.0/22 178.171.60.0/22 178.171.104.0/24 178.171.119.0/24 Signature Algorithm: sha256WithRSAEncryption 04:e5:4d:e7:9a:a7:03:21:c3:1d:01:c9:da:f8:09:38:51:27: 7e:ab:64:f7:d0:94:77:7b:02:f0:d2:e8:06:94:f3:ca:de:e8: c7:21:e2:21:22:00:e1:9e:8c:b8:19:54:a5:f3:5e:01:ad:60: 73:14:df:12:15:4d:7d:47:e4:65:06:8b:e6:b1:cb:07:ab:31: 1e:88:6a:3e:4b:bf:30:74:b9:53:b5:30:d9:88:2d:47:49:d5: f6:11:f5:b1:69:5f:82:49:af:55:de:c4:d0:22:b9:5e:01:08: 34:4e:8d:28:62:cd:02:df:d8:51:5b:09:d6:46:71:e1:10:3e: 29:f2:0e:39:49:ff:56:37:88:5b:af:34:e5:e2:b5:89:1d:b7: 20:cc:06:b9:b7:1b:4c:80:13:d1:ff:1c:70:fe:59:ff:d7:3f: 40:90:c4:16:99:6f:94:1d:df:35:c2:91:ba:ab:f7:4d:df:bf: bc:d2:64:2d:76:83:05:57:fb:93:03:fd:3c:b9:2e:d7:d3:3d: 6d:06:0a:7a:d4:54:ca:30:e3:3f:37:9e:fb:5f:71:b4:c1:07: d6:4f:71:79:df:ea:d7:0a:fd:76:f7:04:3b:ed:9b:c7:1c:4b: fd:9f:d7:51:27:8f:08:27:dc:65:da:5f:88:f8:b1:5c:c7:dd: d6:fb:34:5e -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt9yYOG8IjJxsCf/ggdJSmyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMTFjYjAxNWRmOWJhYWI2MTIyOGRiYmNlMTdkZDRlMDBl NjNjMTMwHhcNMjYwMTAyMDgxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MjdhMThhZDNlMjQ5ZDQ0NGFhZWRlNGEyODE3ZDI4NDc1NjhjZjAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGrtVpffGyPd4JuZDk1hNJh6grNH bNd/p4nWj1EOBT6+m+iVNLFBLjIJEnbW+swGMDtKqKRffQz7FYrtRk7DSghQp9W0 TDeYyJsY6c4Rq+atTCpkk4so2RmJkQZ6MfqO5zRWLmkfcmkPwp02pMFhg/+97TvM kgQJcK0h61ucYwQkLGsCG28yuT0V2sfd4t0S6eWqHOyCwljDUKa1OwrZFn7c9Jns wnbtVgoTciNN/1ORjJMUXbTJIHGpf9yin7QUYJb0uIpg4S4ItnkCTbju+7jpKSm8 g4cJOVk6UM7IVblkY5MiT5Rh55y9zXLUvQPWCiOTAsqgxs4MmM+uD7BPbwIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFIJ6GK0+JJ1ESq7eSigX0oR1aM8DMB8GA1UdIwQY MBaAFI0RywFd+bqrYSKNu84X3U4A5jwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEt YmE3NzFmZmQyNjljLzEvZ25vWXJUNGtuVVJLcnQ1S0tCZlNoSFZvendNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEtYmE3NzFmZmQyNjlj LzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQCni68AwQC ni7EAwQEsqsAAwQCsqsUAwQCsqsgAwQCsqswAwQCsqs8AwQAsqtoAwQAsqt3MA0G CSqGSIb3DQEBCwUAA4IBAQAE5U3nmqcDIcMdAcna+Ak4USd+q2T30JR3ewLw0ugG lPPK3ujHIeIhIgDhnoy4GVSl814BrWBzFN8SFU19R+RlBovmscsHqzEeiGo+S78w dLlTtTDZiC1HSdX2EfWxaV+CSa9V3sTQIrleAQg0To0oYs0C39hRWwnWRnHhED4p 8g45Sf9WN4hbrzTl4rWJHbcgzAa5txtMgBPR/xxw/ln/1z9AkMQWmW+UHd81wpG6 q/dN37+80mQtdoMFV/uTA/08uS7X0z1tBgp61FTKMOM/N577X3G0wQfWT3F53+rX Cv129wQ77ZvHHEv9n9dRJ48IJ9xl2l+I+LFcx93W+zRe -----END CERTIFICATE-----Generated at Tue Jan 20 03:36:47 2026 by rpki-client