This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/40MEQ_c5MiDjeIZ7q43bI9wM90k.roa File: 40MEQ_c5MiDjeIZ7q43bI9wM90k.roa (raw, json) Hash identifier: ELdX8WZ/ccLW8SSZjkL2cwPjtp0f+jq2mrorQX0hzwQ= Subject key identifier: E3:43:04:43:F7:39:32:20:E3:78:86:7B:AB:8D:DB:23:DC:0C:F7:49 Certificate issuer: /CN=46815ca15d72a5a696f8bcdf486f5801966772bb Certificate serial: 019B7F14DB65F9778CFF4290E740E0A73467 Authority key identifier: 46:81:5C:A1:5D:72:A5:A6:96:F8:BC:DF:48:6F:58:01:96:67:72:BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/40MEQ_c5MiDjeIZ7q43bI9wM90k.roa Signing time: Fri 02 Jan 2026 14:20:31 +0000 ROA not before: Fri 02 Jan 2026 14:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207213 IP address blocks: 185.160.196.0/24 maxlen: 24 185.160.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.crl rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.mft rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:db:65:f9:77:8c:ff:42:90:e7:40:e0:a7:34:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46815ca15d72a5a696f8bcdf486f5801966772bb Validity Not Before: Jan 2 14:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3430443f7393220e378867bab8ddb23dc0cf749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:af:7c:25:8d:ab:01:aa:c6:6c:f0:fa:bc:be: fa:da:d6:ba:36:25:23:20:5a:92:70:4d:17:83:a1: 4e:cb:49:65:28:a8:f8:c7:2d:b4:c7:01:e8:f6:8d: 47:93:cb:12:06:b9:ab:6d:aa:b9:9c:ef:26:3a:68: 28:7f:2d:c8:71:e3:23:9c:ee:81:bb:b3:9f:f9:fb: b8:5c:d0:5f:a6:e6:14:ff:31:6a:42:80:a0:07:f9: ed:46:94:9f:ad:bf:b3:44:ec:b7:a5:40:1e:c8:b5: b6:bc:87:4b:d2:c8:32:84:f2:82:a4:9d:49:aa:94: 8e:d1:0e:d1:8f:ab:62:1b:2d:61:1d:34:b4:f1:67: cc:9a:44:ae:e7:55:ba:a2:cd:c9:b2:5e:80:f6:c5: 2e:b3:bc:ca:48:7e:77:18:2d:7a:64:ff:66:cd:71: 43:27:59:24:5b:ab:cf:24:53:7d:dc:59:dc:e9:92: 4f:9d:ad:e8:06:65:25:83:5b:1c:2d:e1:2b:44:62: a6:fc:67:46:74:1e:8f:6e:b2:e2:8b:c7:48:5a:bd: d1:ca:3b:52:3f:21:e4:ea:21:95:5a:2a:c6:b8:29: 73:1d:7c:43:78:47:6b:70:de:76:25:b7:9b:37:5a: 45:0d:4a:35:2d:25:0b:15:ee:28:82:43:57:94:9b: 0c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:43:04:43:F7:39:32:20:E3:78:86:7B:AB:8D:DB:23:DC:0C:F7:49 X509v3 Authority Key Identifier: keyid:46:81:5C:A1:5D:72:A5:A6:96:F8:BC:DF:48:6F:58:01:96:67:72:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RoFcoV1ypaaW-LzfSG9YAZZncrs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/40MEQ_c5MiDjeIZ7q43bI9wM90k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/66bd4b-1e56-4b46-8bab-d38a7660b51e/1/RoFcoV1ypaaW-LzfSG9YAZZncrs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.160.196.0/23 Signature Algorithm: sha256WithRSAEncryption 21:91:98:a2:d4:1a:9f:0b:8a:6e:4f:ee:16:30:30:1d:6b:ef: 46:8e:f2:e1:09:f0:b5:21:33:1e:bd:4d:57:69:3c:0e:00:84: 7d:5f:a9:32:5e:52:3b:45:71:09:6c:3e:2e:82:58:21:08:cf: 6b:fe:6a:1c:e5:a8:6f:b0:5a:10:66:ed:eb:ab:d9:3c:81:71: d5:6e:78:5a:10:47:df:74:61:40:bc:24:c2:ab:97:b0:db:0b: eb:62:d6:bf:9c:cd:c7:1a:71:99:c2:d9:16:d0:7f:5d:8e:7b: 36:89:41:2d:42:a5:be:51:5b:5a:bf:71:b5:6c:fb:82:56:b1: a9:a4:58:94:95:97:68:89:ba:68:d8:53:47:1d:80:c9:f2:83: c7:fc:1f:ea:84:f4:82:da:98:0a:3c:5c:14:d2:26:88:32:ed: e3:70:5b:be:6d:c0:01:2e:e4:68:58:e0:f0:f7:6d:02:fb:70: 8f:0c:1f:e1:2f:f8:d4:a2:6b:34:b8:d4:cc:96:cc:ae:21:1a: 3e:26:52:8b:c3:02:08:3e:de:47:ad:dc:d9:91:4e:6d:a6:e5: c8:1f:c8:84:dc:c9:58:7d:04:1b:0f:a0:3f:64:69:62:ab:d9: 9a:bb:c5:67:50:47:1c:cf:89:de:a3:25:0f:65:e7:f6:a9:f9: 8b:bb:3d:5b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FNtl+XeM/0KQ50DgpzRnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2ODE1Y2ExNWQ3MmE1YTY5NmY4YmNkZjQ4NmY1ODAxOTY2 NzcyYmIwHhcNMjYwMTAyMTQyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzQzMDQ0M2Y3MzkzMjIwZTM3ODg2N2JhYjhkZGIyM2RjMGNmNzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK98JY2rAarGbPD6vL762ta6NiUj IFqScE0Xg6FOy0llKKj4xy20xwHo9o1Hk8sSBrmrbaq5nO8mOmgofy3IceMjnO6B u7Of+fu4XNBfpuYU/zFqQoCgB/ntRpSfrb+zROy3pUAeyLW2vIdL0sgyhPKCpJ1J qpSO0Q7Rj6tiGy1hHTS08WfMmkSu51W6os3Jsl6A9sUus7zKSH53GC16ZP9mzXFD J1kkW6vPJFN93Fnc6ZJPna3oBmUlg1scLeErRGKm/GdGdB6PbrLii8dIWr3RyjtS PyHk6iGVWirGuClzHXxDeEdrcN52JbebN1pFDUo1LSULFe4ogkNXlJsMsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFONDBEP3OTIg43iGe6uN2yPcDPdJMB8GA1UdIwQY MBaAFEaBXKFdcqWmlvi830hvWAGWZ3K7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm9GY29WMXlwYWFXLUx6ZlNHOVlBWlpuY3JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82NmJkNGItMWU1Ni00YjQ2LThiYWIt ZDM4YTc2NjBiNTFlLzEvNDBNRVFfYzVNaURqZUlaN3E0M2JJOXdNOTBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC82NmJkNGItMWU1Ni00YjQ2LThiYWItZDM4YTc2NjBiNTFl LzEvUm9GY29WMXlwYWFXLUx6ZlNHOVlBWlpuY3JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuaDEMA0G CSqGSIb3DQEBCwUAA4IBAQAhkZii1BqfC4puT+4WMDAda+9GjvLhCfC1ITMevU1X aTwOAIR9X6kyXlI7RXEJbD4uglghCM9r/moc5ahvsFoQZu3rq9k8gXHVbnhaEEff dGFAvCTCq5ew2wvrYta/nM3HGnGZwtkW0H9djns2iUEtQqW+UVtav3G1bPuCVrGp pFiUlZdoibpo2FNHHYDJ8oPH/B/qhPSC2pgKPFwU0iaIMu3jcFu+bcABLuRoWODw 920C+3CPDB/hL/jUoms0uNTMlsyuIRo+JlKLwwIIPt5HrdzZkU5tpuXIH8iE3MlY fQQbD6A/ZGliq9mau8VnUEccz4neoyUPZef2qfmLuz1b -----END CERTIFICATE-----Generated at Tue Feb 10 00:14:32 2026 by rpki-client