This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/too8MzrLoxWwRK6makJS99rB6yo.roa File: too8MzrLoxWwRK6makJS99rB6yo.roa (raw, json) Hash identifier: z1yewE9kqsod23GpqibQgcZfH3oS6cUzSRIIJbdvj3M= Subject key identifier: B6:8A:3C:33:3A:CB:A3:15:B0:44:AE:A6:6A:42:52:F7:DA:C1:EB:2A Certificate issuer: /CN=331e7784f60ac8d969b81cf5231cd9dc087ced32 Certificate serial: 019B7910FEB0EEB72F4C3A5673C2FFE4EEED Authority key identifier: 33:1E:77:84:F6:0A:C8:D9:69:B8:1C:F5:23:1C:D9:DC:08:7C:ED:32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/too8MzrLoxWwRK6makJS99rB6yo.roa Signing time: Thu 01 Jan 2026 10:18:35 +0000 ROA not before: Thu 01 Jan 2026 10:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39545 IP address blocks: 46.247.0.0/19 maxlen: 19 46.247.110.0/23 maxlen: 23 46.247.112.0/20 maxlen: 20 77.89.128.0/18 maxlen: 18 77.89.145.0/24 maxlen: 24 89.105.96.0/19 maxlen: 19 2a00:f18::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.mft rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:fe:b0:ee:b7:2f:4c:3a:56:73:c2:ff:e4:ee:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=331e7784f60ac8d969b81cf5231cd9dc087ced32 Validity Not Before: Jan 1 10:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b68a3c333acba315b044aea66a4252f7dac1eb2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:fc:c2:18:f7:6c:a4:cf:f0:48:e3:d4:8a:6c: 96:a6:ae:63:74:1a:22:b3:02:ab:e5:e4:63:39:4a: ec:96:67:dd:b5:b0:bf:cf:ad:0b:49:e5:71:55:d6: ce:52:3e:0f:06:de:13:1f:19:39:5f:41:ac:e9:9e: b4:70:0c:1d:d6:b1:aa:1d:b3:e4:98:f8:10:c2:55: d2:62:a8:b2:c2:1d:45:6d:91:ae:5b:6f:30:c7:cc: 9d:12:73:88:ec:83:6c:24:3a:b1:5a:24:7e:be:1d: 0d:d1:ce:f9:67:c0:e3:3e:2c:33:27:a8:c0:83:b6: c6:b8:08:b9:77:bc:03:d2:89:18:f7:64:ba:4f:5a: 7f:e6:6a:23:9f:9d:7a:38:fb:53:00:8e:87:a2:aa: 2c:fb:1d:26:ed:77:b0:05:02:b2:8e:03:9e:95:39: 0f:cb:a9:e6:de:88:61:24:d0:7c:5b:60:80:0c:58: b0:2c:27:a3:00:ed:a4:92:04:b2:0c:1a:b7:9d:d9: 34:19:48:b5:7c:bf:44:1e:9c:4b:40:e1:78:d6:8e: 9b:f2:90:39:13:5a:51:ff:24:df:23:82:6e:cc:a6: b6:b7:8f:5c:65:a8:ae:f4:46:1e:da:e3:fb:6f:ba: a9:55:5e:72:ea:bb:54:27:b2:63:0b:ed:a1:c1:d6: 6d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:8A:3C:33:3A:CB:A3:15:B0:44:AE:A6:6A:42:52:F7:DA:C1:EB:2A X509v3 Authority Key Identifier: keyid:33:1E:77:84:F6:0A:C8:D9:69:B8:1C:F5:23:1C:D9:DC:08:7C:ED:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/too8MzrLoxWwRK6makJS99rB6yo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/e0925e-47bf-4907-bcbc-fd9f36a8ba6e/1/Mx53hPYKyNlpuBz1IxzZ3Ah87TI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.247.0.0/19 46.247.110.0-46.247.127.255 77.89.128.0/18 89.105.96.0/19 IPv6: 2a00:f18::/32 Signature Algorithm: sha256WithRSAEncryption 48:39:30:b1:af:50:89:8f:d6:8b:59:13:8b:13:a4:44:38:c0: 32:84:51:0f:81:c1:a0:e9:44:35:f1:fc:e9:9f:6e:35:27:f9: 01:2c:07:b9:df:98:f5:24:27:3c:17:9c:e9:ca:ca:d8:ca:f7: ac:46:c1:15:7e:a4:30:78:37:7e:49:ac:ac:59:61:e7:71:f0: 57:95:3e:b7:d7:46:45:52:b8:93:13:b1:4f:6a:00:ce:15:8e: 7a:87:7f:6b:4b:7c:c6:c4:28:fc:ea:a4:e4:5f:d1:f4:99:90: 3d:a4:4c:af:79:57:4e:5b:7d:23:98:ae:65:2b:d1:1d:01:70: ae:33:7c:94:05:be:21:c8:47:38:da:63:ce:89:c3:38:94:52: fe:61:5b:68:ff:2d:ce:f3:3d:63:b6:a1:51:e8:5f:fe:b8:07: e8:89:f0:0e:8f:4f:c8:e5:98:24:dd:90:92:16:5a:fd:49:67: 86:c4:fb:32:ca:8b:36:48:1c:5d:b3:7a:6e:74:ec:b8:6e:a6: d0:dc:c6:ce:c0:fa:02:de:2e:0b:24:e3:04:89:d0:2b:b0:f9: 98:60:03:9d:f3:7e:f3:ea:e3:59:c7:fc:d5:66:bf:bd:e8:97: 96:ec:1a:40:8f:94:4d:bb:11:20:a5:98:5e:1e:90:7b:e7:ed: 2c:f8:81:e1 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt5EP6w7rcvTDpWc8L/5O7tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMWU3Nzg0ZjYwYWM4ZDk2OWI4MWNmNTIzMWNkOWRjMDg3 Y2VkMzIwHhcNMjYwMTAxMTAxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjhhM2MzMzNhY2JhMzE1YjA0NGFlYTY2YTQyNTJmN2RhYzFlYjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfzCGPdspM/wSOPUimyWpq5jdBoi swKr5eRjOUrslmfdtbC/z60LSeVxVdbOUj4PBt4THxk5X0Gs6Z60cAwd1rGqHbPk mPgQwlXSYqiywh1FbZGuW28wx8ydEnOI7INsJDqxWiR+vh0N0c75Z8DjPiwzJ6jA g7bGuAi5d7wD0okY92S6T1p/5mojn516OPtTAI6Hoqos+x0m7XewBQKyjgOelTkP y6nm3ohhJNB8W2CADFiwLCejAO2kkgSyDBq3ndk0GUi1fL9EHpxLQOF41o6b8pA5 E1pR/yTfI4JuzKa2t49cZaiu9EYe2uP7b7qpVV5y6rtUJ7JjC+2hwdZt4QIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFLaKPDM6y6MVsESupmpCUvfawesqMB8GA1UdIwQY MBaAFDMed4T2CsjZabgc9SMc2dwIfO0yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXg1M2hQWUt5TmxwdUJ6MUl4elozQWg4N1RJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9lMDkyNWUtNDdiZi00OTA3LWJjYmMt ZmQ5ZjM2YThiYTZlLzEvdG9vOE16ckxveFd3Uks2bWFrSlM5OXJCNnlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9lMDkyNWUtNDdiZi00OTA3LWJjYmMtZmQ5ZjM2YThiYTZl LzEvTXg1M2hQWUt5TmxwdUJ6MUl4elozQWg4N1RJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAmBAIAATAgAwQFLvcAMAwD BAEu924DBAcu9wADBAZNWYADBAVZaWAwDQQCAAIwBwMFACoADxgwDQYJKoZIhvcN AQELBQADggEBAEg5MLGvUImP1otZE4sTpEQ4wDKEUQ+BwaDpRDXx/OmfbjUn+QEs B7nfmPUkJzwXnOnKytjK96xGwRV+pDB4N35JrKxZYedx8FeVPrfXRkVSuJMTsU9q AM4VjnqHf2tLfMbEKPzqpORf0fSZkD2kTK95V05bfSOYrmUr0R0BcK4zfJQFviHI RzjaY86JwziUUv5hW2j/Lc7zPWO2oVHoX/64B+iJ8A6PT8jlmCTdkJIWWv1JZ4bE +zLKizZIHF2zem507LhuptDcxs7A+gLeLgsk4wSJ0Cuw+ZhgA53zfvPq41nH/NVm v73ol5bsGkCPlE27ESClmF4ekHvn7Sz4geE= -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:37 2026 by rpki-client