This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/rKtJGVxfqraAmT6HHUQgk-6ZYls.roa File: rKtJGVxfqraAmT6HHUQgk-6ZYls.roa (raw, json) Hash identifier: tfqK4JoN3XUTlLzJPjKH8fXCE/nPd/Ywy0gcF7QvSMA= Subject key identifier: AC:AB:49:19:5C:5F:AA:B6:80:99:3E:87:1D:44:20:93:EE:99:62:5B Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430 Certificate serial: 019B7FF1924BF1AD580BF248744A929EEBB4 Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/rKtJGVxfqraAmT6HHUQgk-6ZYls.roa Signing time: Fri 02 Jan 2026 18:21:36 +0000 ROA not before: Fri 02 Jan 2026 18:21:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48678 IP address blocks: 46.38.141.0/24 maxlen: 24 185.143.74.0/24 maxlen: 24 185.143.75.0/24 maxlen: 24 212.16.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:92:4b:f1:ad:58:0b:f2:48:74:4a:92:9e:eb:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430 Validity Not Before: Jan 2 18:21:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=acab49195c5faab680993e871d442093ee99625b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:f3:51:6d:64:1c:67:5c:a0:12:00:8e:f9:64: 61:73:c8:a4:af:51:2d:c3:d7:35:01:b2:04:21:c4: cf:29:93:34:20:63:da:35:a1:88:f2:44:34:62:85: 1a:f4:2f:e8:70:2f:a9:ab:d7:79:8c:6a:36:35:f6: a5:eb:17:12:fd:f0:7d:25:fe:6f:8f:0c:33:23:d8: 05:cc:61:13:ec:48:7c:6e:70:6c:df:7d:e9:77:4e: b5:24:75:1d:1b:db:b9:8d:4a:a2:9d:56:72:e3:21: 04:d7:77:67:e9:a0:6b:a9:19:8a:32:ff:cb:45:a6: 30:12:0f:65:7b:d3:2e:0e:6c:23:3e:de:4c:aa:12: 62:70:19:af:bd:49:8b:c3:3a:4f:f9:94:55:ea:05: 85:5c:41:d1:5c:5f:cf:b7:11:a1:db:dd:5a:53:2e: 56:48:90:1e:e3:5e:c0:56:f9:56:cd:fe:35:b5:54: 96:7a:0d:92:f5:8b:38:63:3f:7f:b9:c8:72:6d:f2: ba:dc:8c:18:1b:32:63:d6:f3:8f:f1:56:02:ca:8b: 66:ba:68:0a:c6:2a:77:e8:a7:0c:2d:40:ad:9c:e7: 54:7a:3f:a7:68:f2:ba:d4:9b:49:5e:75:e0:28:69: b7:13:ef:a2:de:78:0e:5b:e3:e3:4f:81:1d:45:6e: 48:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:AB:49:19:5C:5F:AA:B6:80:99:3E:87:1D:44:20:93:EE:99:62:5B X509v3 Authority Key Identifier: keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/rKtJGVxfqraAmT6HHUQgk-6ZYls.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.38.141.0/24 185.143.74.0/23 212.16.85.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:fa:8e:32:58:6d:56:08:68:49:32:b4:05:b0:ae:c8:cb:da: fb:5f:70:9e:d8:23:d0:b6:e4:b9:cc:5a:2a:87:64:8b:79:99: a8:4e:c9:8a:a3:cc:b9:74:30:03:1e:7f:71:61:67:0b:fa:0a: 04:88:7f:66:ab:de:cb:6e:e8:45:26:34:dc:ff:65:41:40:d0: 7f:01:97:93:05:b1:11:71:5d:88:4c:38:73:c0:44:45:d1:de: 28:64:e3:ce:96:0d:e4:88:a6:0c:79:7e:80:3b:f9:2c:f9:56: 25:e2:00:9a:91:1c:8f:cf:db:0b:3b:13:fe:da:ad:11:70:63: ce:50:83:3d:16:82:1c:d4:5d:94:fa:2d:56:14:4d:4c:c9:e8: df:58:86:fa:99:2d:b2:66:e2:6e:c6:3f:00:ad:92:8d:dc:1b: bd:36:60:8b:bf:28:7f:13:43:da:fb:ac:89:0e:af:9f:f3:44: 47:aa:55:5d:5f:3a:4c:21:62:57:d8:a6:a3:ae:e8:bc:52:53: af:20:90:c0:61:21:e6:82:26:f3:28:c7:47:7b:d7:f6:63:6a: 29:32:a0:df:aa:aa:f7:53:38:95:86:a4:9d:bb:07:52:73:cb: a4:c0:d4:bc:b9:90:d0:65:22:70:a0:dc:0a:25:e8:51:9c:c7: 31:70:0c:5f -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/8ZJL8a1YC/JIdEqSnuu0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3Mjk0NWY1NzEwMzE1M2EwNzg1NGU3NGUyMjdmMmFlYzFj NWY0MzAwHhcNMjYwMTAyMTgyMTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2FiNDkxOTVjNWZhYWI2ODA5OTNlODcxZDQ0MjA5M2VlOTk2MjViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PNRbWQcZ1ygEgCO+WRhc8ikr1Et w9c1AbIEIcTPKZM0IGPaNaGI8kQ0YoUa9C/ocC+pq9d5jGo2Nfal6xcS/fB9Jf5v jwwzI9gFzGET7Eh8bnBs333pd061JHUdG9u5jUqinVZy4yEE13dn6aBrqRmKMv/L RaYwEg9le9MuDmwjPt5MqhJicBmvvUmLwzpP+ZRV6gWFXEHRXF/PtxGh291aUy5W SJAe417AVvlWzf41tVSWeg2S9Ys4Yz9/uchybfK63IwYGzJj1vOP8VYCyotmumgK xip36KcMLUCtnOdUej+naPK61JtJXnXgKGm3E++i3ngOW+PjT4EdRW5I+wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFKyrSRlcX6q2gJk+hx1EIJPumWJbMB8GA1UdIwQY MBaAFLcpRfVxAxU6B4VOdOIn8q7BxfQwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEt MmEwOWNjNTNhODA1LzEvckt0SkdWeGZxcmFBbVQ2SEhVUWdrLTZaWWxzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81ZjY5MDYtM2ZiMC00ZGZmLThkMDEtMmEwOWNjNTNhODA1 LzEvdHlsRjlYRURGVG9IaFU1MDRpZnlyc0hGOURBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALiaNAwQB uY9KAwQA1BBVMA0GCSqGSIb3DQEBCwUAA4IBAQBO+o4yWG1WCGhJMrQFsK7Iy9r7 X3Ce2CPQtuS5zFoqh2SLeZmoTsmKo8y5dDADHn9xYWcL+goEiH9mq97LbuhFJjTc /2VBQNB/AZeTBbERcV2ITDhzwERF0d4oZOPOlg3kiKYMeX6AO/ks+VYl4gCakRyP z9sLOxP+2q0RcGPOUIM9FoIc1F2U+i1WFE1MyejfWIb6mS2yZuJuxj8ArZKN3Bu9 NmCLvyh/E0Pa+6yJDq+f80RHqlVdXzpMIWJX2Kajrui8UlOvIJDAYSHmgibzKMdH e9f2Y2opMqDfqqr3UziVhqSduwdSc8ukwNS8uZDQZSJwoNwKJehRnMcxcAxf -----END CERTIFICATE-----Generated at Mon Jan 19 16:54:19 2026 by rpki-client