This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/dAtJXk54QeNvdrIj2y9sPVigo4Y.roa File: dAtJXk54QeNvdrIj2y9sPVigo4Y.roa (raw, json) Hash identifier: VR9GSCDMRB0j9JdvpO5E9iyI6YnfCrylbELLiWuyElY= Subject key identifier: 74:0B:49:5E:4E:78:41:E3:6F:76:B2:23:DB:2F:6C:3D:58:A0:A3:86 Certificate issuer: /CN=6f10d8e1564e40312c9ddf21ba2aa03ba559ead6 Certificate serial: 019B7E3907718A5B3B13224A5DF2C48CF4FE Authority key identifier: 6F:10:D8:E1:56:4E:40:31:2C:9D:DF:21:BA:2A:A0:3B:A5:59:EA:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/dAtJXk54QeNvdrIj2y9sPVigo4Y.roa Signing time: Fri 02 Jan 2026 10:20:25 +0000 ROA not before: Fri 02 Jan 2026 10:20:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64476 IP address blocks: 46.247.136.0/23 maxlen: 23 46.247.138.0/23 maxlen: 23 46.247.140.0/24 maxlen: 24 46.247.141.0/24 maxlen: 24 85.190.64.0/24 maxlen: 24 85.190.65.0/24 maxlen: 24 85.190.67.0/24 maxlen: 24 85.190.68.0/24 maxlen: 24 85.190.71.0/24 maxlen: 24 85.190.72.0/24 maxlen: 24 85.190.74.0/24 maxlen: 24 85.190.84.0/24 maxlen: 24 85.190.85.0/24 maxlen: 24 85.190.88.0/22 maxlen: 22 87.121.208.0/21 maxlen: 21 185.161.168.0/22 maxlen: 22 185.231.8.0/22 maxlen: 22 185.253.168.0/24 maxlen: 24 185.253.169.0/24 maxlen: 24 185.253.170.0/24 maxlen: 24 185.253.171.0/24 maxlen: 24 2a0a:e805:210::/44 maxlen: 44 2a0a:e805:500::/40 maxlen: 40 2a0a:e805:610::/44 maxlen: 44 2a0a:e805:710::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.mft rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:07:71:8a:5b:3b:13:22:4a:5d:f2:c4:8c:f4:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f10d8e1564e40312c9ddf21ba2aa03ba559ead6 Validity Not Before: Jan 2 10:20:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=740b495e4e7841e36f76b223db2f6c3d58a0a386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:2c:19:c1:5b:c7:a0:8a:1f:f8:35:27:20:23: a4:d2:82:59:87:be:49:62:de:1c:89:82:37:4f:df: b1:9a:c3:9a:13:d8:57:d5:f0:93:d9:30:3f:26:ab: 50:0a:61:8f:e0:9b:57:8d:21:ce:c0:02:17:f7:e0: 12:52:fa:aa:7e:d0:43:c4:0e:70:5a:27:17:ac:67: af:55:09:20:3c:64:54:cb:ff:a5:2b:1d:76:6d:81: 7e:da:45:9b:c6:38:05:ec:3d:72:b1:4d:b3:10:db: a4:82:15:77:d2:da:43:fe:f1:35:87:46:79:e7:54: b4:d2:4b:23:c6:06:86:ad:4f:a2:48:3f:56:63:96: 9f:37:97:34:43:c8:21:da:c6:6a:5e:02:63:82:13: 5b:50:a4:ce:e6:50:c3:59:fe:a5:01:d2:59:b3:91: ae:4e:dd:31:78:5f:c7:94:0a:ee:c4:e5:4c:9e:07: 96:f7:5c:fc:47:f8:d1:35:10:4b:1e:8c:2b:0e:43: 73:a6:11:28:f4:e0:c9:37:34:8c:a0:48:d1:e4:56: 19:03:d8:0c:41:37:b6:a7:9d:c6:c0:d9:e1:87:2e: 04:14:c0:31:1c:9b:64:62:f1:fa:96:a8:3d:43:d6: 1c:7a:93:9b:d9:88:40:81:c4:fa:8c:87:df:ab:a5: a6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:0B:49:5E:4E:78:41:E3:6F:76:B2:23:DB:2F:6C:3D:58:A0:A3:86 X509v3 Authority Key Identifier: keyid:6F:10:D8:E1:56:4E:40:31:2C:9D:DF:21:BA:2A:A0:3B:A5:59:EA:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bxDY4VZOQDEsnd8huiqgO6VZ6tY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/dAtJXk54QeNvdrIj2y9sPVigo4Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfda05-190d-4142-bd4f-b6a8f8e80f7b/1/bxDY4VZOQDEsnd8huiqgO6VZ6tY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.247.136.0-46.247.141.255 85.190.64.0/23 85.190.67.0-85.190.68.255 85.190.71.0-85.190.72.255 85.190.74.0/24 85.190.84.0/23 85.190.88.0/22 87.121.208.0/21 185.161.168.0/22 185.231.8.0/22 185.253.168.0/22 IPv6: 2a0a:e805:210::/44 2a0a:e805:500::/40 2a0a:e805:610::/44 2a0a:e805:710::/44 Signature Algorithm: sha256WithRSAEncryption 38:ff:6b:fb:72:fc:dd:cc:26:44:6b:98:1b:b6:69:37:99:60: 1b:4a:53:00:c5:46:66:b3:0a:18:f0:86:97:70:82:95:aa:e3: 4f:c1:b9:f0:6c:77:31:d8:6d:43:c2:b2:f0:75:16:c6:20:e2: eb:49:a3:88:7a:a3:e0:b3:40:8d:f8:b5:0b:8f:92:37:c0:9f: 20:81:a1:bb:ad:b1:d9:05:ff:6c:e0:47:39:60:4f:52:9e:54: e6:9a:2a:d2:e8:6c:1f:8f:1c:5a:5b:89:bf:59:1d:2c:e6:9e: 0d:18:3e:98:22:5b:34:c3:60:3e:d8:fe:2b:17:12:61:8a:e2: a6:95:16:1d:2f:d1:f6:a4:93:35:7c:48:90:aa:13:7f:58:1c: 45:9a:1b:c9:0c:fa:cc:4e:36:81:6a:bc:b3:d8:d8:76:c8:29: 4c:7b:db:9f:4f:23:6e:1e:93:23:9c:91:8c:0a:9d:6a:4e:2b: 87:c1:2d:ce:14:fc:a2:ef:69:24:cf:51:6b:4d:0e:48:17:8b: 8e:54:24:74:44:c5:44:f2:3d:7d:88:34:09:56:69:f6:bb:2c: cd:68:2c:d1:dd:6c:ed:c1:2f:9a:d0:65:48:17:dd:43:31:20: 70:6e:c9:7a:42:c3:f5:a8:be:af:54:8d:26:70:95:af:90:44: 6b:7b:24:f0 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgISAZt+OQdxils7EyJKXfLEjPT+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmMTBkOGUxNTY0ZTQwMzEyYzlkZGYyMWJhMmFhMDNiYTU1 OWVhZDYwHhcNMjYwMTAyMTAyMDI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDBiNDk1ZTRlNzg0MWUzNmY3NmIyMjNkYjJmNmMzZDU4YTBhMzg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiwZwVvHoIof+DUnICOk0oJZh75J Yt4ciYI3T9+xmsOaE9hX1fCT2TA/JqtQCmGP4JtXjSHOwAIX9+ASUvqqftBDxA5w WicXrGevVQkgPGRUy/+lKx12bYF+2kWbxjgF7D1ysU2zENukghV30tpD/vE1h0Z5 51S00ksjxgaGrU+iSD9WY5afN5c0Q8gh2sZqXgJjghNbUKTO5lDDWf6lAdJZs5Gu Tt0xeF/HlAruxOVMngeW91z8R/jRNRBLHowrDkNzphEo9ODJNzSMoEjR5FYZA9gM QTe2p53GwNnhhy4EFMAxHJtkYvH6lqg9Q9YcepOb2YhAgcT6jIffq6WmIwIDAQAB o4ICizCCAocwHQYDVR0OBBYEFHQLSV5OeEHjb3ayI9svbD1YoKOGMB8GA1UdIwQY MBaAFG8Q2OFWTkAxLJ3fIboqoDulWerWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYnhEWTRWWk9RREVzbmQ4aHVpcWdPNlZaNnRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9jZmRhMDUtMTkwZC00MTQyLWJkNGYt YjZhOGY4ZTgwZjdiLzEvZEF0SlhrNTRRZU52ZHJJajJ5OXNQVmlnbzRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9jZmRhMDUtMTkwZC00MTQyLWJkNGYtYjZhOGY4ZTgwZjdi LzEvYnhEWTRWWk9RREVzbmQ4aHVpcWdPNlZaNnRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGgBggrBgEFBQcBBwEB/wSBkDCBjTBgBAIAATBaMAwDBAMu 94gDBAEu94wDBAFVvkAwDAMEAFW+QwMEAFW+RDAMAwQAVb5HAwQAVb5IAwQAVb5K AwQBVb5UAwQCVb5YAwQDV3nQAwQCuaGoAwQCuecIAwQCuf2oMCkEAgACMCMDBwQq CugFAhADBgAqCugFBQMHBCoK6AUGEAMHBCoK6AUHEDANBgkqhkiG9w0BAQsFAAOC AQEAOP9r+3L83cwmRGuYG7ZpN5lgG0pTAMVGZrMKGPCGl3CClarjT8G58Gx3Mdht Q8Ky8HUWxiDi60mjiHqj4LNAjfi1C4+SN8CfIIGhu62x2QX/bOBHOWBPUp5U5poq 0uhsH48cWluJv1kdLOaeDRg+mCJbNMNgPtj+KxcSYYrippUWHS/R9qSTNXxIkKoT f1gcRZobyQz6zE42gWq8s9jYdsgpTHvbn08jbh6TI5yRjAqdak4rh8EtzhT8ou9p JM9Ra00OSBeLjlQkdETFRPI9fYg0CVZp9rsszWgs0d1s7cEvmtBlSBfdQzEgcG7J ekLD9ai+r1SNJnCVr5BEa3sk8A== -----END CERTIFICATE-----Generated at Tue Feb 10 03:09:27 2026 by rpki-client