This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/RrlPj_5PMLmauOZbV-XxFE0jClU.roa File: RrlPj_5PMLmauOZbV-XxFE0jClU.roa (raw, json) Hash identifier: +JGjuqCo+HgEGZGs0mkuqnIL4NPJWqKMaUK/A5KXgqw= Subject key identifier: 46:B9:4F:8F:FE:4F:30:B9:9A:B8:E6:5B:57:E5:F1:14:4D:23:0A:55 Certificate issuer: /CN=5d8a9fd7c51926e22ea8aa33b3b8838e93e8bedd Certificate serial: 019B7B362565C77958635F2A07599E5EA9A0 Authority key identifier: 5D:8A:9F:D7:C5:19:26:E2:2E:A8:AA:33:B3:B8:83:8E:93:E8:BE:DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/RrlPj_5PMLmauOZbV-XxFE0jClU.roa Signing time: Thu 01 Jan 2026 20:18:24 +0000 ROA not before: Thu 01 Jan 2026 20:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15544 IP address blocks: 185.104.144.0/22 maxlen: 22 185.104.144.0/24 maxlen: 24 185.104.145.0/24 maxlen: 24 185.104.146.0/24 maxlen: 24 185.104.147.0/24 maxlen: 24 213.140.128.0/19 maxlen: 19 213.140.128.0/24 maxlen: 24 213.140.129.0/24 maxlen: 24 213.140.130.0/24 maxlen: 24 213.140.131.0/24 maxlen: 24 213.140.132.0/24 maxlen: 24 213.140.133.0/24 maxlen: 24 213.140.134.0/24 maxlen: 24 213.140.135.0/24 maxlen: 24 213.140.136.0/24 maxlen: 24 213.140.137.0/24 maxlen: 24 213.140.138.0/24 maxlen: 24 213.140.139.0/24 maxlen: 24 213.140.143.0/24 maxlen: 24 213.140.146.0/24 maxlen: 24 213.140.148.0/24 maxlen: 24 2a02:2298::/32 maxlen: 32 2a02:2298::/36 maxlen: 36 2a02:2298:4000::/36 maxlen: 36 2a02:2298:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.mft rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:25:65:c7:79:58:63:5f:2a:07:59:9e:5e:a9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d8a9fd7c51926e22ea8aa33b3b8838e93e8bedd Validity Not Before: Jan 1 20:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46b94f8ffe4f30b99ab8e65b57e5f1144d230a55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:24:96:0b:88:c9:e2:65:fc:9a:0b:0f:04:61: 21:0a:87:80:44:e2:4f:de:88:a9:09:11:21:6c:ca: 0a:db:e0:f2:6d:f0:05:f6:6d:4c:11:0e:1c:8b:dc: 72:5a:b1:e5:98:cd:df:c5:20:88:16:2f:f1:64:58: d5:a8:b2:f6:9c:f6:2e:59:69:e4:6b:a1:fd:e3:61: 70:39:2d:d9:7e:cc:7f:c8:e8:c5:bd:38:c6:d7:40: f0:69:10:78:0e:d9:08:03:27:43:38:c5:c4:fb:4c: 6d:8e:2b:e5:86:8b:75:a7:8d:da:5f:6b:0c:e7:4c: 2f:6e:2d:1c:ab:72:5f:bb:b5:09:08:42:d3:e6:5e: 53:c2:b4:24:39:d8:d2:19:ad:b8:d2:ec:2e:aa:05: 58:2f:a1:24:7c:a8:b4:f2:b2:82:30:1f:a5:2e:09: e7:4f:62:32:71:2a:05:74:49:20:ba:67:6b:dc:e2: a3:c1:90:2a:c6:33:ae:63:a1:d1:86:3a:d9:b9:a0: 1c:62:28:ca:6e:00:81:82:cb:f0:19:27:6c:d5:f6: 8e:99:5b:15:01:65:5c:da:de:72:78:73:9b:3e:f2: d5:cc:ac:41:84:4d:91:8f:46:8d:f5:e8:41:2e:29: b5:10:0d:e6:37:21:04:46:38:7a:c1:6c:d3:38:e6: 6b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:B9:4F:8F:FE:4F:30:B9:9A:B8:E6:5B:57:E5:F1:14:4D:23:0A:55 X509v3 Authority Key Identifier: keyid:5D:8A:9F:D7:C5:19:26:E2:2E:A8:AA:33:B3:B8:83:8E:93:E8:BE:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/RrlPj_5PMLmauOZbV-XxFE0jClU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.104.144.0/22 213.140.128.0/19 IPv6: 2a02:2298::/32 Signature Algorithm: sha256WithRSAEncryption 85:e1:8c:a4:3f:32:00:ae:9b:94:eb:58:19:3b:33:dd:48:57: 9b:46:aa:19:ce:32:c5:a5:41:84:76:9e:cb:7f:70:a8:d2:bb: 94:34:4e:b2:1a:d8:f0:23:9f:0a:da:de:59:cb:5d:d4:9f:ae: 5d:bf:05:34:4f:c8:4e:ef:4e:f4:00:dc:50:ba:5b:be:50:6f: 26:b2:2c:fa:ac:bd:23:db:fb:eb:80:4a:11:0a:26:60:5e:73: b4:cb:df:3d:97:d6:ee:14:b4:74:a7:62:ba:6a:88:f8:41:12: 1a:28:13:98:3c:72:a4:ce:d4:4b:e3:1c:65:09:05:15:78:6e: 76:4b:77:c7:42:f6:d8:67:ec:04:13:6a:fe:24:6c:d4:e6:66: c8:71:49:90:2d:bf:6a:d5:7d:2f:68:8b:f1:22:bb:db:35:f1: 8d:f0:af:1c:6d:b3:a1:00:89:04:f4:2f:4f:9f:48:de:93:c6: be:ed:34:ab:90:01:c6:42:ff:f4:f8:84:2f:69:03:d7:62:9d: f5:d0:0f:6f:a5:1c:8c:85:f9:70:54:42:96:7e:1b:72:0f:fa: 0f:be:a3:22:61:b9:24:f6:75:8e:bc:c0:0e:54:02:b7:3b:66: 4c:3c:e3:4f:e8:7e:47:25:d3:49:fa:d7:df:e5:21:fb:7e:4c: 47:cd:0b:7a -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt7NiVlx3lYY18qB1meXqmgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkOGE5ZmQ3YzUxOTI2ZTIyZWE4YWEzM2IzYjg4MzhlOTNl OGJlZGQwHhcNMjYwMTAxMjAxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmI5NGY4ZmZlNGYzMGI5OWFiOGU2NWI1N2U1ZjExNDRkMjMwYTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCSWC4jJ4mX8mgsPBGEhCoeAROJP 3oipCREhbMoK2+DybfAF9m1MEQ4ci9xyWrHlmM3fxSCIFi/xZFjVqLL2nPYuWWnk a6H942FwOS3Zfsx/yOjFvTjG10DwaRB4DtkIAydDOMXE+0xtjivlhot1p43aX2sM 50wvbi0cq3Jfu7UJCELT5l5TwrQkOdjSGa240uwuqgVYL6EkfKi08rKCMB+lLgnn T2IycSoFdEkgumdr3OKjwZAqxjOuY6HRhjrZuaAcYijKbgCBgsvwGSds1faOmVsV AWVc2t5yeHObPvLVzKxBhE2Rj0aN9ehBLim1EA3mNyEERjh6wWzTOOZrWwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFEa5T4/+TzC5mrjmW1fl8RRNIwpVMB8GA1UdIwQY MBaAFF2Kn9fFGSbiLqiqM7O4g46T6L7dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWFlxZjE4VVpKdUl1cUtvenM3aURqcFBvdnQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9iYjg2MWQtMzMwZi00YTk3LTlmOWMt NjZjNTNmMmIxZjAyLzEvUnJsUGpfNVBNTG1hdU9aYlYtWHhGRTBqQ2xVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9iYjg2MWQtMzMwZi00YTk3LTlmOWMtNjZjNTNmMmIxZjAy LzEvWFlxZjE4VVpKdUl1cUtvenM3aURqcFBvdnQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuWiQAwQF 1YyAMA0EAgACMAcDBQAqAiKYMA0GCSqGSIb3DQEBCwUAA4IBAQCF4YykPzIArpuU 61gZOzPdSFebRqoZzjLFpUGEdp7Lf3Co0ruUNE6yGtjwI58K2t5Zy13Un65dvwU0 T8hO7070ANxQulu+UG8msiz6rL0j2/vrgEoRCiZgXnO0y989l9buFLR0p2K6aoj4 QRIaKBOYPHKkztRL4xxlCQUVeG52S3fHQvbYZ+wEE2r+JGzU5mbIcUmQLb9q1X0v aIvxIrvbNfGN8K8cbbOhAIkE9C9Pn0jek8a+7TSrkAHGQv/0+IQvaQPXYp310A9v pRyMhflwVEKWfhtyD/oPvqMiYbkk9nWOvMAOVAK3O2ZMPONP6H5HJdNJ+tff5SH7 fkxHzQt6 -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:31 2026 by rpki-client