This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/nnum7eYXax698Y9cnPBAhFzNiqg.roa File: nnum7eYXax698Y9cnPBAhFzNiqg.roa (raw, json) Hash identifier: EmYj5IWpVJ41RT8+2EZ/sS/gm4FE/uOxW4VF97fOsGU= Subject key identifier: 9E:7B:A6:ED:E6:17:6B:1E:BD:F1:8F:5C:9C:F0:40:84:5C:CD:8A:A8 Certificate issuer: /CN=12a657f3424c8dd55215af853b93307c366c538a Certificate serial: 019B76EB57BE72982BB6F2AFBF14984BD1CA Authority key identifier: 12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/nnum7eYXax698Y9cnPBAhFzNiqg.roa Signing time: Thu 01 Jan 2026 00:18:13 +0000 ROA not before: Thu 01 Jan 2026 00:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211995 IP address blocks: 46.22.225.0/24 maxlen: 24 46.22.226.0/24 maxlen: 24 46.22.227.0/24 maxlen: 24 46.22.228.0/24 maxlen: 24 46.22.229.0/24 maxlen: 24 46.22.230.0/24 maxlen: 24 46.22.231.0/24 maxlen: 24 46.22.232.0/24 maxlen: 24 46.22.233.0/24 maxlen: 24 46.22.234.0/24 maxlen: 24 46.22.235.0/24 maxlen: 24 46.22.236.0/24 maxlen: 24 46.22.237.0/24 maxlen: 24 46.22.238.0/24 maxlen: 24 46.22.239.0/24 maxlen: 24 46.28.237.0/24 maxlen: 24 93.114.130.0/24 maxlen: 24 109.237.112.0/20 maxlen: 20 109.237.112.0/24 maxlen: 24 109.237.113.0/24 maxlen: 24 109.237.114.0/24 maxlen: 24 109.237.115.0/24 maxlen: 24 109.237.116.0/24 maxlen: 24 109.237.117.0/24 maxlen: 24 109.237.118.0/24 maxlen: 24 109.237.119.0/24 maxlen: 24 109.237.120.0/24 maxlen: 24 109.237.121.0/24 maxlen: 24 109.237.122.0/24 maxlen: 24 109.237.123.0/24 maxlen: 24 185.55.36.0/22 maxlen: 22 185.55.36.0/24 maxlen: 24 185.55.37.0/24 maxlen: 24 185.55.38.0/24 maxlen: 24 185.55.39.0/24 maxlen: 24 185.77.3.0/24 maxlen: 24 185.136.207.0/24 maxlen: 24 185.233.35.0/24 maxlen: 24 194.164.222.0/24 maxlen: 24 213.142.158.0/24 maxlen: 24 2a10:d880::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.mft rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:57:be:72:98:2b:b6:f2:af:bf:14:98:4b:d1:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12a657f3424c8dd55215af853b93307c366c538a Validity Not Before: Jan 1 00:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e7ba6ede6176b1ebdf18f5c9cf040845ccd8aa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:08:48:60:d7:bc:e4:2f:45:9f:6c:38:bd:ee: 60:1e:7a:b5:e6:ec:8d:71:b2:e8:6c:4e:81:a9:c4: 6b:47:6d:98:2a:71:75:17:98:f0:b3:24:6a:f9:ff: 07:fd:9d:09:a5:51:7a:9b:7b:25:a0:c9:53:b8:3d: 44:d2:e3:c0:2d:18:da:1e:86:72:fb:af:58:dd:24: 51:0b:78:74:cc:a4:56:e6:4b:9d:67:ea:a8:a5:32: 97:5e:ce:22:41:a8:93:a0:88:1e:1b:30:82:40:b5: 84:dd:3f:3a:dd:fd:b8:1f:93:47:38:99:b5:93:37: 4b:78:11:40:25:63:a1:4b:e0:3b:09:38:96:9d:55: ac:6d:5d:36:a1:dc:6f:70:77:c9:78:44:1e:50:c3: e3:03:9b:df:d2:0f:1d:99:db:c4:7e:e1:4e:7a:e5: ad:3f:55:06:47:b8:de:ab:88:41:46:1e:20:9d:ff: 08:b5:5d:21:35:85:9a:af:e9:04:7a:88:71:5a:93: ba:ee:9c:83:1a:4c:b6:30:94:51:e2:6a:24:ca:7c: b1:6d:04:88:bb:3e:35:52:16:60:61:e0:60:c4:f1: ec:04:f3:79:d2:94:66:cd:87:10:00:af:c6:71:07: 7e:04:2f:33:73:53:81:93:9c:29:cb:32:60:dd:43: 08:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:7B:A6:ED:E6:17:6B:1E:BD:F1:8F:5C:9C:F0:40:84:5C:CD:8A:A8 X509v3 Authority Key Identifier: keyid:12:A6:57:F3:42:4C:8D:D5:52:15:AF:85:3B:93:30:7C:36:6C:53:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EqZX80JMjdVSFa-FO5MwfDZsU4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/nnum7eYXax698Y9cnPBAhFzNiqg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/465aae-2a2c-4200-8e5c-05f093385ac8/1/EqZX80JMjdVSFa-FO5MwfDZsU4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.22.225.0-46.22.239.255 46.28.237.0/24 93.114.130.0/24 109.237.112.0/20 185.55.36.0/22 185.77.3.0/24 185.136.207.0/24 185.233.35.0/24 194.164.222.0/24 213.142.158.0/24 IPv6: 2a10:d880::/29 Signature Algorithm: sha256WithRSAEncryption bf:d5:e0:4a:e5:b3:16:86:de:11:64:5e:b8:f4:ba:83:d7:5d: bb:2e:7e:e2:91:02:57:33:37:15:2c:63:fe:7f:be:26:fa:66: 44:4a:74:52:ec:f9:d6:bb:15:09:20:e6:b8:91:0a:19:18:15: fb:fd:81:a4:78:64:f1:ad:f3:de:d2:13:c3:f9:a7:a1:e3:31: fa:88:5c:9a:ae:14:ea:65:81:33:1a:a4:8a:8c:0c:54:92:08: e2:11:1e:82:65:17:d0:46:c6:42:ff:94:cc:d3:86:72:89:40: 79:73:69:f8:fa:f9:44:b4:d4:d1:36:74:a6:65:58:d5:e3:28: dc:ba:73:ff:29:3d:08:0b:90:19:4d:43:79:43:b5:7d:10:b7: 4c:6d:f3:b2:60:aa:a6:08:27:d7:a1:a3:14:0c:a9:74:89:72: 14:5e:0d:fe:a6:19:f2:1b:dd:9e:3d:76:36:bd:97:0b:00:21: 76:ef:33:4e:03:3f:b6:bd:ee:97:7e:ca:69:55:44:33:b2:97: 76:e3:74:44:b1:a3:ef:18:f8:af:3c:e4:de:ff:9c:c9:78:77: 0b:31:41:04:8a:1b:73:7b:0b:2c:40:82:d2:4d:7f:d1:d2:20: 4b:90:83:7d:de:81:81:9c:b6:e8:3b:10:b5:24:40:aa:cf:89: 58:aa:8d:d6 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgISAZt261e+cpgrtvKvvxSYS9HKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYTY1N2YzNDI0YzhkZDU1MjE1YWY4NTNiOTMzMDdjMzY2 YzUzOGEwHhcNMjYwMTAxMDAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTdiYTZlZGU2MTc2YjFlYmRmMThmNWM5Y2YwNDA4NDVjY2Q4YWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQhIYNe85C9Fn2w4ve5gHnq15uyN cbLobE6BqcRrR22YKnF1F5jwsyRq+f8H/Z0JpVF6m3sloMlTuD1E0uPALRjaHoZy +69Y3SRRC3h0zKRW5kudZ+qopTKXXs4iQaiToIgeGzCCQLWE3T863f24H5NHOJm1 kzdLeBFAJWOhS+A7CTiWnVWsbV02odxvcHfJeEQeUMPjA5vf0g8dmdvEfuFOeuWt P1UGR7jeq4hBRh4gnf8ItV0hNYWar+kEeohxWpO67pyDGky2MJRR4mokynyxbQSI uz41UhZgYeBgxPHsBPN50pRmzYcQAK/GcQd+BC8zc1OBk5wpyzJg3UMInQIDAQAB o4ICVjCCAlIwHQYDVR0OBBYEFJ57pu3mF2sevfGPXJzwQIRczYqoMB8GA1UdIwQY MBaAFBKmV/NCTI3VUhWvhTuTMHw2bFOKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXFaWDgwSk1qZFZTRmEtRk81TXdmRFpzVTRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS80NjVhYWUtMmEyYy00MjAwLThlNWMt MDVmMDkzMzg1YWM4LzEvbm51bTdlWVhheDY5OFk5Y25QQkFoRnpOaXFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS80NjVhYWUtMmEyYy00MjAwLThlNWMtMDVmMDkzMzg1YWM4 LzEvRXFaWDgwSk1qZFZTRmEtRk81TXdmRFpzVTRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGwGCCsGAQUFBwEHAQH/BF0wWzBKBAIAATBEMAwDBAAuFuED BAQuFuADBAAuHO0DBABdcoIDBARt7XADBAK5NyQDBAC5TQMDBAC5iM8DBAC56SMD BADCpN4DBADVjp4wDQQCAAIwBwMFAyoQ2IAwDQYJKoZIhvcNAQELBQADggEBAL/V 4ErlsxaG3hFkXrj0uoPXXbsufuKRAlczNxUsY/5/vib6ZkRKdFLs+da7FQkg5riR ChkYFfv9gaR4ZPGt897SE8P5p6HjMfqIXJquFOplgTMapIqMDFSSCOIRHoJlF9BG xkL/lMzThnKJQHlzafj6+US01NE2dKZlWNXjKNy6c/8pPQgLkBlNQ3lDtX0Qt0xt 87JgqqYIJ9ehoxQMqXSJchReDf6mGfIb3Z49dja9lwsAIXbvM04DP7a97pd+ymlV RDOyl3bjdESxo+8Y+K885N7/nMl4dwsxQQSKG3N7CyxAgtJNf9HSIEuQg33egYGc tug7ELUkQKrPiViqjdY= -----END CERTIFICATE-----Generated at Tue Feb 10 01:29:02 2026 by rpki-client