This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/o2sA9VQBCh98jD7kTLpD4PtsBkg.roa File: o2sA9VQBCh98jD7kTLpD4PtsBkg.roa (raw, json) Hash identifier: KS1RAcviacOoeOngLBb734zDvYnb8VX13fkxf0rGhys= Subject key identifier: A3:6B:00:F5:54:01:0A:1F:7C:8C:3E:E4:4C:BA:43:E0:FB:6C:06:48 Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430 Certificate serial: 019B7FF1902D6563691EF2334132A9E6B118 Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/o2sA9VQBCh98jD7kTLpD4PtsBkg.roa Signing time: Fri 02 Jan 2026 18:21:36 +0000 ROA not before: Fri 02 Jan 2026 18:21:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42337 IP address blocks: 46.38.140.0/24 maxlen: 24 46.38.145.0/24 maxlen: 24 46.38.146.0/24 maxlen: 24 46.38.147.0/24 maxlen: 24 46.38.148.0/24 maxlen: 24 46.38.149.0/24 maxlen: 24 46.38.150.0/24 maxlen: 24 46.38.151.0/24 maxlen: 24 185.29.223.0/24 maxlen: 24 212.80.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 23:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:90:2d:65:63:69:1e:f2:33:41:32:a9:e6:b1:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430 Validity Not Before: Jan 2 18:21:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a36b00f554010a1f7c8c3ee44cba43e0fb6c0648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:03:21:df:ac:ff:0e:02:09:73:bf:b4:ae:f0: cc:ef:58:c5:ed:40:d5:18:09:fa:00:fb:71:3d:e9: 75:c3:8a:74:cc:22:d5:e7:83:e0:fb:23:7b:93:ec: db:47:59:70:ac:c8:d3:1a:9b:f7:00:4c:9f:15:08: eb:3f:72:75:b9:f3:06:fa:59:81:94:44:70:a2:6c: 0e:70:9b:46:46:39:43:4e:ed:83:24:39:cf:10:05: aa:3c:95:55:52:53:cf:c6:6a:29:20:cc:6d:42:b1: 19:55:f4:28:4f:93:5a:8f:1a:97:c2:a0:b5:d4:38: 55:fd:75:e7:a7:8a:33:be:b6:b4:91:cd:fb:e6:c2: 20:72:79:8a:1c:56:52:38:4a:1d:5d:76:56:95:3f: 31:17:f7:3d:8b:f1:0d:73:f8:b0:8c:0f:af:7f:d4: 19:b2:d9:42:36:61:cb:ac:81:7c:69:a0:cd:0a:48: 67:af:8b:d6:86:92:41:99:cf:29:bc:94:51:53:37: c3:08:88:34:33:91:4d:ef:56:22:27:09:54:06:dd: 09:84:5e:55:5e:70:bd:e2:06:d0:05:d6:20:db:e3: 01:75:4b:9a:7c:15:48:be:2b:d7:71:1e:3f:7f:af: 7e:5c:0f:a8:22:35:08:28:4e:6a:16:80:23:79:c5: 04:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:6B:00:F5:54:01:0A:1F:7C:8C:3E:E4:4C:BA:43:E0:FB:6C:06:48 X509v3 Authority Key Identifier: keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/o2sA9VQBCh98jD7kTLpD4PtsBkg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.38.140.0/24 46.38.145.0-46.38.151.255 185.29.223.0/24 212.80.29.0/24 Signature Algorithm: sha256WithRSAEncryption 9d:69:08:b7:f9:f1:d3:f7:aa:18:51:ca:20:a2:6b:eb:de:f9: 9f:65:00:a9:b0:bb:b7:32:87:e0:89:64:2a:69:52:9b:a8:9c: 39:37:48:6e:26:d5:ee:3e:70:1f:e2:89:e1:2b:2d:0e:d4:40: cd:c2:9f:30:c1:74:75:0f:cf:9a:f3:82:18:70:67:63:d9:9c: 08:1a:a7:b9:14:e9:12:68:f8:cc:0d:fd:8a:c3:3d:c2:07:52: 5f:9a:63:77:4c:c6:99:44:d8:84:ec:24:2d:be:9b:ca:2b:7c: d1:b6:97:36:5e:f1:df:0a:6c:0d:bb:bd:a6:9d:61:ac:dc:ee: 95:b5:e2:77:3c:6e:69:81:db:27:af:7b:49:71:ee:39:fc:1b: 6a:6e:16:24:17:b9:fe:3a:24:ea:7b:9a:a1:87:ed:b7:93:50: 98:4b:19:96:7b:34:0c:cb:d0:a1:40:21:57:12:49:59:dd:17: 4b:d4:f0:42:2e:d8:4b:1f:ae:9a:76:a2:c5:3a:53:91:42:1a: bb:f4:c0:f5:57:2b:25:32:db:89:b6:9e:97:d7:9e:fd:75:94: d8:e8:af:dd:05:66:72:f5:0e:97:77:83:c4:2f:2b:9e:16:8b: 75:a3:15:10:93:fe:8b:5f:1a:ea:fb:a2:c4:d8:15:d4:70:6c: 98:40:30:ad -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt/8ZAtZWNpHvIzQTKp5rEYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj NWY0MzAwHhcNMjYwMTAyMTgyMTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMzZiMDBmNTU0MDEwYTFmN2M4YzNlZTQ0Y2JhNDNlMGZiNmMwNjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AMh36z/DgIJc7+0rvDM71jF7UDV GAn6APtxPel1w4p0zCLV54Pg+yN7k+zbR1lwrMjTGpv3AEyfFQjrP3J1ufMG+lmB lERwomwOcJtGRjlDTu2DJDnPEAWqPJVVUlPPxmopIMxtQrEZVfQoT5NajxqXwqC1 1DhV/XXnp4ozvra0kc375sIgcnmKHFZSOEodXXZWlT8xF/c9i/ENc/iwjA+vf9QZ stlCNmHLrIF8aaDNCkhnr4vWhpJBmc8pvJRRUzfDCIg0M5FN71YiJwlUBt0JhF5V XnC94gbQBdYg2+MBdUuafBVIvivXcR4/f69+XA+oIjUIKE5qFoAjecUEaQIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFKNrAPVUAQoffIw+5Ey6Q+D7bAZIMB8GA1UdIwQY MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt MmEwOWNjNTNhODA1LzEvbzJzQTlWUUJDaDk4akQ3a1RMcEQ0UHRzQmtnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1 LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQALiaMMAwD BAAuJpEDBAMuJpADBAC5Hd8DBADUUB0wDQYJKoZIhvcNAQELBQADggEBAJ1pCLf5 8dP3qhhRyiCia+ve+Z9lAKmwu7cyh+CJZCppUpuonDk3SG4m1e4+cB/iieErLQ7U QM3CnzDBdHUPz5rzghhwZ2PZnAgap7kU6RJo+MwN/YrDPcIHUl+aY3dMxplE2ITs JC2+m8orfNG2lzZe8d8KbA27vaadYazc7pW14nc8bmmB2yeve0lx7jn8G2puFiQX uf46JOp7mqGH7beTUJhLGZZ7NAzL0KFAIVcSSVndF0vU8EIu2Esfrpp2osU6U5FC Grv0wPVXKyUy24m2npfXnv11lNjor90FZnL1Dpd3g8QvK54Wi3WjFRCT/otfGur7 osTYFdRwbJhAMK0= -----END CERTIFICATE-----Generated at Wed Jan 21 04:03:39 2026 by rpki-client