This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xL3RFgVCSYkC5SVoN-v-4LOaIV0.roa File: xL3RFgVCSYkC5SVoN-v-4LOaIV0.roa (raw, json) Hash identifier: qCzcRwtjUOKAd+dvykGvkNnkTv7HJHG7XD6ZjU3R0R0= Subject key identifier: C4:BD:D1:16:05:42:49:89:02:E5:25:68:37:EB:FE:E0:B3:9A:21:5D Certificate issuer: /CN=c56d2154ed53b629d872b2a38d9cd041bdb4b128 Certificate serial: 019B7EA677330EE5B483D3175A1BD2D61551 Authority key identifier: C5:6D:21:54:ED:53:B6:29:D8:72:B2:A3:8D:9C:D0:41:BD:B4:B1:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xL3RFgVCSYkC5SVoN-v-4LOaIV0.roa Signing time: Fri 02 Jan 2026 12:19:57 +0000 ROA not before: Fri 02 Jan 2026 12:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48326 IP address blocks: 46.228.208.0/20 maxlen: 20 46.228.208.0/21 maxlen: 21 46.228.216.0/21 maxlen: 21 46.228.221.0/24 maxlen: 24 46.228.223.0/24 maxlen: 27 94.229.32.0/20 maxlen: 20 94.229.32.0/21 maxlen: 21 94.229.40.0/21 maxlen: 21 193.8.84.0/23 maxlen: 23 193.8.84.0/24 maxlen: 24 193.8.85.0/24 maxlen: 24 193.8.92.0/23 maxlen: 23 193.8.92.0/24 maxlen: 24 193.8.93.0/24 maxlen: 24 2a00:b000::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.mft rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:77:33:0e:e5:b4:83:d3:17:5a:1b:d2:d6:15:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c56d2154ed53b629d872b2a38d9cd041bdb4b128 Validity Not Before: Jan 2 12:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4bdd1160542498902e5256837ebfee0b39a215d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9d:40:8d:90:16:92:b6:5b:23:45:fd:4b:23: d8:6d:a8:eb:56:6c:f8:2a:ca:d9:d1:03:aa:dc:3d: c4:2a:64:a2:ef:d9:5b:e5:16:e8:dc:a1:7b:03:8d: b2:a6:25:66:a7:1b:7f:c7:87:2e:ff:c6:bb:8a:1b: aa:c6:ac:be:d5:c0:d9:a0:fe:a6:1e:61:f2:bc:3c: 5e:d4:10:46:09:88:fe:4c:4a:93:76:cd:f8:bc:57: 77:7a:89:d1:dd:50:aa:ec:30:00:0e:3b:20:37:52: b7:46:be:d3:75:6a:53:2b:82:95:01:db:18:32:b3: 12:d1:37:6c:54:8f:43:55:be:28:26:04:51:4e:d8: d8:22:b2:2d:6a:4d:a6:53:2e:3d:54:73:84:c6:65: 23:41:41:2d:71:6b:59:a3:4c:6c:8b:04:19:bf:b6: fc:97:6b:8d:4f:4b:7c:18:bf:4a:7b:25:f6:33:40: 85:90:49:3e:a5:c4:5b:e4:ea:f6:fb:84:b6:56:9a: 4c:df:dc:5c:3d:26:eb:7f:1b:f2:48:c7:f9:33:b7: ea:de:57:48:5b:58:f9:41:0d:48:2b:42:23:8d:fe: b6:ad:12:d9:a8:db:64:32:4c:56:8f:73:7d:71:da: e3:9c:24:56:68:a2:42:bc:a9:7f:93:9e:8f:d8:99: 34:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:BD:D1:16:05:42:49:89:02:E5:25:68:37:EB:FE:E0:B3:9A:21:5D X509v3 Authority Key Identifier: keyid:C5:6D:21:54:ED:53:B6:29:D8:72:B2:A3:8D:9C:D0:41:BD:B4:B1:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xW0hVO1TtinYcrKjjZzQQb20sSg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xL3RFgVCSYkC5SVoN-v-4LOaIV0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/b24127-81dd-4fa1-83f0-7b410b781def/1/xW0hVO1TtinYcrKjjZzQQb20sSg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.228.208.0/20 94.229.32.0/20 193.8.84.0/23 193.8.92.0/23 IPv6: 2a00:b000::/32 Signature Algorithm: sha256WithRSAEncryption 1a:7b:9d:0d:e7:b1:18:d2:28:cd:9c:9e:a3:c0:b9:71:dd:6c: 36:e2:19:77:56:e6:2d:b7:c1:be:aa:8c:eb:b4:fd:22:f7:47: 6b:54:06:e2:20:26:16:28:0c:2a:4e:cb:eb:eb:bd:19:7e:17: 1b:47:23:38:71:a0:73:8d:03:32:c0:27:67:58:75:32:ae:fe: 02:0b:1c:60:13:ca:f5:d7:90:72:26:28:67:ec:ba:65:3d:15: af:e1:3a:40:ad:7c:3e:cb:73:61:a6:43:0a:4d:9b:3c:77:f6: 6b:20:73:84:30:75:b8:0b:f2:82:de:a1:c4:04:50:90:05:3f: f9:22:37:e8:d2:37:1d:5b:c2:6b:80:3a:32:41:4e:8c:7b:fb: 60:16:6b:ae:a9:67:fd:07:00:c5:1a:49:09:71:f4:e9:76:a3: 7d:27:c0:62:87:7b:9d:a7:c3:28:af:19:08:24:b0:b1:95:31: 1d:d7:95:b8:a7:b9:b0:62:2b:3b:4f:46:61:59:3e:a8:e6:83: bc:5a:30:f4:56:9e:e2:46:e5:5e:be:da:38:55:9e:eb:dd:a6: d2:c0:cf:16:96:56:06:b7:cc:54:1e:24:55:20:97:10:03:ab: bd:df:7b:09:fb:57:9f:36:67:7f:6c:8d:76:0d:32:7d:4e:ad: 5b:9f:55:fb -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt+pnczDuW0g9MXWhvS1hVRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1NmQyMTU0ZWQ1M2I2MjlkODcyYjJhMzhkOWNkMDQxYmRi NGIxMjgwHhcNMjYwMTAyMTIxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGJkZDExNjA1NDI0OTg5MDJlNTI1NjgzN2ViZmVlMGIzOWEyMTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo51AjZAWkrZbI0X9SyPYbajrVmz4 KsrZ0QOq3D3EKmSi79lb5Rbo3KF7A42ypiVmpxt/x4cu/8a7ihuqxqy+1cDZoP6m HmHyvDxe1BBGCYj+TEqTds34vFd3eonR3VCq7DAADjsgN1K3Rr7TdWpTK4KVAdsY MrMS0TdsVI9DVb4oJgRRTtjYIrItak2mUy49VHOExmUjQUEtcWtZo0xsiwQZv7b8 l2uNT0t8GL9KeyX2M0CFkEk+pcRb5Or2+4S2VppM39xcPSbrfxvySMf5M7fq3ldI W1j5QQ1IK0Ijjf62rRLZqNtkMkxWj3N9cdrjnCRWaKJCvKl/k56P2Jk0hQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFMS90RYFQkmJAuUlaDfr/uCzmiFdMB8GA1UdIwQY MBaAFMVtIVTtU7Yp2HKyo42c0EG9tLEoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFcwaFZPMVR0aW5ZY3JLampaelFRYjIwc1NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9iMjQxMjctODFkZC00ZmExLTgzZjAt N2I0MTBiNzgxZGVmLzEveEwzUkZnVkNTWWtDNVNWb04tdi00TE9hSVYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9iMjQxMjctODFkZC00ZmExLTgzZjAtN2I0MTBiNzgxZGVm LzEveFcwaFZPMVR0aW5ZY3JLampaelFRYjIwc1NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQELuTQAwQE XuUgAwQBwQhUAwQBwQhcMA0EAgACMAcDBQAqALAAMA0GCSqGSIb3DQEBCwUAA4IB AQAae50N57EY0ijNnJ6jwLlx3Ww24hl3VuYtt8G+qozrtP0i90drVAbiICYWKAwq Tsvr670ZfhcbRyM4caBzjQMywCdnWHUyrv4CCxxgE8r115ByJihn7LplPRWv4TpA rXw+y3NhpkMKTZs8d/ZrIHOEMHW4C/KC3qHEBFCQBT/5Ijfo0jcdW8JrgDoyQU6M e/tgFmuuqWf9BwDFGkkJcfTpdqN9J8Bih3udp8MorxkIJLCxlTEd15W4p7mwYis7 T0ZhWT6o5oO8WjD0Vp7iRuVevto4VZ7r3abSwM8WllYGt8xUHiRVIJcQA6u933sJ +1efNmd/bI12DTJ9Tq1bn1X7 -----END CERTIFICATE-----Generated at Mon Feb 9 22:14:59 2026 by rpki-client