This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/mI_mfOa16c9i2aB5y-5RdFkoQzs.roa File: mI_mfOa16c9i2aB5y-5RdFkoQzs.roa (raw, json) Hash identifier: CYTfnzdl53VUc2uYy5eOC2P2ZEG/Uh5nTjGXOTog/QE= Subject key identifier: 98:8F:E6:7C:E6:B5:E9:CF:62:D9:A0:79:CB:EE:51:74:59:28:43:3B Certificate issuer: /CN=42560fc1cf6b97466737c3027123fa120b1954d5 Certificate serial: 019B79112A240BDCAD9C0015FB21D485FCCB Authority key identifier: 42:56:0F:C1:CF:6B:97:46:67:37:C3:02:71:23:FA:12:0B:19:54:D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/mI_mfOa16c9i2aB5y-5RdFkoQzs.roa Signing time: Thu 01 Jan 2026 10:18:46 +0000 ROA not before: Thu 01 Jan 2026 10:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203148 IP address blocks: 46.18.32.0/24 maxlen: 24 185.59.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.mft rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:2a:24:0b:dc:ad:9c:00:15:fb:21:d4:85:fc:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42560fc1cf6b97466737c3027123fa120b1954d5 Validity Not Before: Jan 1 10:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=988fe67ce6b5e9cf62d9a079cbee51745928433b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:e8:54:08:94:89:29:5f:cf:df:7c:11:d1:11: cf:9c:f9:6b:3b:85:4c:fd:f0:fb:9e:18:70:c1:6c: c8:40:f2:32:c8:30:1a:98:54:a8:52:96:8e:1a:ff: 9a:37:db:72:03:89:90:56:57:a4:a5:bb:fa:ae:92: ac:11:c2:00:0d:01:61:bc:fe:a1:d6:db:bd:52:f0: 4f:17:83:a0:28:a9:e6:3b:fe:cc:3d:d3:1a:27:44: c1:b0:73:8f:ed:22:63:e3:a2:f9:38:0a:7b:a5:f8: 4b:65:79:95:52:38:50:64:ba:c7:14:b3:b3:09:dc: 82:03:55:26:4b:5e:a2:ed:db:3a:d7:6a:6d:1f:33: 81:37:ac:62:c4:8b:bc:03:38:06:b5:15:f6:bd:08: 56:bf:c0:ae:25:83:d0:ea:18:2e:69:b2:32:64:ad: 33:cf:17:35:08:c6:8e:de:3e:f5:0e:7b:15:4a:06: 8a:26:d3:9d:de:a8:07:09:1c:62:11:5d:11:3d:99: ba:a9:4b:47:f1:87:5a:64:20:76:87:4a:04:35:1a: 8a:61:2b:1c:36:b8:bf:6c:12:53:fa:e7:6d:0d:00: 02:b2:68:f3:3e:ff:05:2a:77:cd:35:fe:d9:58:1e: e4:f5:64:4b:2f:aa:fd:61:d4:68:07:21:40:0a:d6: 64:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:8F:E6:7C:E6:B5:E9:CF:62:D9:A0:79:CB:EE:51:74:59:28:43:3B X509v3 Authority Key Identifier: keyid:42:56:0F:C1:CF:6B:97:46:67:37:C3:02:71:23:FA:12:0B:19:54:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/mI_mfOa16c9i2aB5y-5RdFkoQzs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/fb073f-6b38-4ecb-b96f-2c2079d916ad/1/QlYPwc9rl0ZnN8MCcSP6EgsZVNU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.18.32.0/24 185.59.16.0/22 Signature Algorithm: sha256WithRSAEncryption 22:03:df:22:bc:05:4f:0b:99:5e:7d:57:19:06:f3:c6:48:5b: 61:53:40:98:7e:b9:1e:b3:06:6e:be:f4:12:24:f5:2e:19:1e: fb:c4:9b:5e:a2:0a:e1:0e:16:7f:52:b8:c6:2f:06:f7:91:a5: f9:39:13:92:a9:e0:cc:98:dd:7b:c9:f1:50:c9:fc:0e:a1:5e: 69:e3:9a:a2:84:ee:02:1a:44:59:a0:02:28:c8:54:34:b0:8c: b4:a2:b0:06:51:1b:54:e4:e0:82:d2:b3:1b:75:b3:17:8a:69: b0:a9:ef:b2:0f:6a:e1:fb:cf:99:2d:63:cf:92:ca:75:82:72: 27:7c:14:a7:cd:91:67:6d:18:39:19:d9:e6:b9:2c:28:01:51: d6:59:77:0f:81:8e:80:45:8c:9d:93:3d:80:56:56:e8:c8:6d: 01:f7:09:4e:8c:de:dd:b9:96:ab:b7:08:04:e1:9b:66:28:b0: 3a:b1:c6:b7:36:31:19:cd:ab:ea:bd:3d:0e:09:73:e9:bc:5f: 05:b1:f6:82:ac:01:4d:34:cc:28:87:20:6b:fe:9d:d0:43:16: a4:9a:de:68:a1:58:18:5d:20:10:02:5c:a9:4f:1d:55:07:81: 3f:e0:e4:53:cf:93:42:54:a9:ad:cf:31:c5:da:2f:a0:71:65: cc:0f:f5:16 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5ESokC9ytnAAV+yHUhfzLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyNTYwZmMxY2Y2Yjk3NDY2NzM3YzMwMjcxMjNmYTEyMGIx OTU0ZDUwHhcNMjYwMTAxMTAxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ODhmZTY3Y2U2YjVlOWNmNjJkOWEwNzljYmVlNTE3NDU5Mjg0MzNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOhUCJSJKV/P33wR0RHPnPlrO4VM /fD7nhhwwWzIQPIyyDAamFSoUpaOGv+aN9tyA4mQVlekpbv6rpKsEcIADQFhvP6h 1tu9UvBPF4OgKKnmO/7MPdMaJ0TBsHOP7SJj46L5OAp7pfhLZXmVUjhQZLrHFLOz CdyCA1UmS16i7ds612ptHzOBN6xixIu8AzgGtRX2vQhWv8CuJYPQ6hguabIyZK0z zxc1CMaO3j71DnsVSgaKJtOd3qgHCRxiEV0RPZm6qUtH8YdaZCB2h0oENRqKYSsc Nri/bBJT+udtDQACsmjzPv8FKnfNNf7ZWB7k9WRLL6r9YdRoByFACtZkvQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJiP5nzmtenPYtmgecvuUXRZKEM7MB8GA1UdIwQY MBaAFEJWD8HPa5dGZzfDAnEj+hILGVTVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUWxZUHdjOXJsMFpuTjhNQ2NTUDZFZ3NaVk5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9mYjA3M2YtNmIzOC00ZWNiLWI5NmYt MmMyMDc5ZDkxNmFkLzEvbUlfbWZPYTE2YzlpMmFCNXktNVJkRmtvUXpzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9mYjA3M2YtNmIzOC00ZWNiLWI5NmYtMmMyMDc5ZDkxNmFk LzEvUWxZUHdjOXJsMFpuTjhNQ2NTUDZFZ3NaVk5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALhIgAwQC uTsQMA0GCSqGSIb3DQEBCwUAA4IBAQAiA98ivAVPC5lefVcZBvPGSFthU0CYfrke swZuvvQSJPUuGR77xJteogrhDhZ/UrjGLwb3kaX5OROSqeDMmN17yfFQyfwOoV5p 45qihO4CGkRZoAIoyFQ0sIy0orAGURtU5OCC0rMbdbMXimmwqe+yD2rh+8+ZLWPP ksp1gnInfBSnzZFnbRg5GdnmuSwoAVHWWXcPgY6ARYydkz2AVlboyG0B9wlOjN7d uZartwgE4ZtmKLA6sca3NjEZzavqvT0OCXPpvF8FsfaCrAFNNMwohyBr/p3QQxak mt5ooVgYXSAQAlypTx1VB4E/4ORTz5NCVKmtzzHF2i+gcWXMD/UW -----END CERTIFICATE-----Generated at Tue Feb 10 01:13:53 2026 by rpki-client