This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Dm2MbaPoiiEkQTrW87aWBvrS48U.roa File: Dm2MbaPoiiEkQTrW87aWBvrS48U.roa (raw, json) Hash identifier: dvJhIlYVDMgSSIjiLZRhHBkaJFuvun3PdtLUq6xbomI= Subject key identifier: 0E:6D:8C:6D:A3:E8:8A:21:24:41:3A:D6:F3:B6:96:06:FA:D2:E3:C5 Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019B77C6A29E25E81843D0A90938FF4DED32 Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Dm2MbaPoiiEkQTrW87aWBvrS48U.roa Signing time: Thu 01 Jan 2026 04:17:45 +0000 ROA not before: Thu 01 Jan 2026 04:17:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56971 IP address blocks: 46.8.64.0/24 maxlen: 24 46.8.224.0/24 maxlen: 24 46.8.225.0/24 maxlen: 24 46.8.226.0/24 maxlen: 24 46.8.227.0/24 maxlen: 24 46.8.228.0/24 maxlen: 24 46.8.229.0/24 maxlen: 24 46.8.230.0/24 maxlen: 24 46.8.231.0/24 maxlen: 24 46.8.236.0/24 maxlen: 24 46.8.237.0/24 maxlen: 24 46.8.238.0/24 maxlen: 32 95.182.101.0/24 maxlen: 24 95.182.114.0/24 maxlen: 24 95.182.115.0/24 maxlen: 24 95.182.116.0/24 maxlen: 24 109.248.160.0/24 maxlen: 24 109.248.161.0/24 maxlen: 24 109.248.162.0/24 maxlen: 24 109.248.163.0/24 maxlen: 24 188.130.154.0/24 maxlen: 24 188.130.206.0/24 maxlen: 32 188.130.207.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:a2:9e:25:e8:18:43:d0:a9:09:38:ff:4d:ed:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Jan 1 04:17:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0e6d8c6da3e88a2124413ad6f3b69606fad2e3c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:e1:e9:9c:09:5d:10:6c:84:50:8c:35:e7:f9: 6d:cc:dc:83:dc:b9:b8:14:51:19:b5:70:5b:4a:a1: 96:9b:78:36:be:98:05:dc:0d:14:f4:de:12:04:c6: d7:45:e0:46:fe:89:9d:c8:23:26:fa:ac:d1:13:ef: b0:66:21:45:ae:0a:62:89:85:a5:d7:4a:51:b8:a8: d8:6c:e9:21:61:36:7f:bf:c5:f0:01:2d:23:b4:76: 6b:06:df:78:78:c8:e8:12:d5:f8:a1:67:43:cd:af: cc:43:17:94:df:8a:2d:0a:b8:aa:83:0a:1f:46:d3: 0d:20:bf:7a:65:86:bf:2f:8c:42:c8:3b:78:55:ec: d2:a0:72:84:af:66:26:f8:f7:bb:8d:cf:bb:42:1c: a2:85:80:7b:bf:8a:7e:64:6f:62:9d:93:73:0a:d0: 62:62:63:6e:0c:ca:58:f8:7d:af:4d:36:b8:e9:f6: 65:09:ad:96:9e:6f:90:6c:7d:40:6e:78:d0:76:9f: 7e:5c:b2:ac:81:8a:0d:25:6b:0b:3b:de:3e:9e:98: 86:d1:03:ca:41:43:fa:2f:65:27:cf:75:a2:4d:93: 4f:f6:42:73:32:0d:2d:82:5c:7e:55:03:62:5f:77: 86:9a:6b:2b:52:b6:07:6c:87:07:1d:1a:f7:4e:51: 8d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:6D:8C:6D:A3:E8:8A:21:24:41:3A:D6:F3:B6:96:06:FA:D2:E3:C5 X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Dm2MbaPoiiEkQTrW87aWBvrS48U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.8.64.0/24 46.8.224.0/21 46.8.236.0-46.8.238.255 95.182.101.0/24 95.182.114.0-95.182.116.255 109.248.160.0/22 188.130.154.0/24 188.130.206.0/23 Signature Algorithm: sha256WithRSAEncryption 38:9f:69:46:ab:3d:69:91:e6:ff:52:d5:81:5a:82:2f:6e:97: c5:92:a1:08:b4:fc:00:98:49:9e:ec:0b:80:e6:f2:f0:cc:f8: 6f:9a:d5:a4:78:0a:76:11:e3:ea:52:e9:29:b4:c0:82:6e:5a: a3:41:e5:e1:64:08:4d:57:4b:ae:c3:8c:85:dc:34:f1:d8:af: 7b:50:4b:db:4d:1e:85:03:16:31:2b:89:5e:65:fe:25:4b:fb: e1:44:53:d9:bb:a7:2d:e8:f4:a0:6b:6f:25:fb:b4:0d:00:d1: c6:60:e5:99:91:92:d4:c6:58:08:eb:f5:ad:2a:9f:c9:64:a3: 97:e6:96:4f:87:f5:79:e9:c1:7e:26:4a:40:79:0e:dc:e0:61: 6b:7e:f1:67:ad:c0:ef:ff:57:14:d7:32:41:eb:a9:6d:c8:64: 7b:a2:95:09:b3:2a:5d:e2:bc:1a:00:a4:6a:77:f2:12:7a:3f: 58:10:9b:34:2e:0e:8b:7b:d6:58:b3:e0:43:41:66:cb:d9:38: 78:77:47:0e:2d:8e:c6:e9:92:96:d3:ac:32:1e:6a:1a:4b:65: 08:60:59:b6:a6:13:89:02:f8:01:b5:8c:d5:c5:0e:1d:2e:5d: a1:bc:b7:8d:67:85:43:7a:7d:85:94:f1:dc:2f:83:b1:94:0b: d7:a3:21:33 -----BEGIN CERTIFICATE----- MIIFNzCCBB+gAwIBAgISAZt3xqKeJegYQ9CpCTj/Te0yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjYwMTAxMDQxNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwZTZkOGM2ZGEzZTg4YTIxMjQ0MTNhZDZmM2I2OTYwNmZhZDJlM2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7+HpnAldEGyEUIw15/ltzNyD3Lm4 FFEZtXBbSqGWm3g2vpgF3A0U9N4SBMbXReBG/omdyCMm+qzRE++wZiFFrgpiiYWl 10pRuKjYbOkhYTZ/v8XwAS0jtHZrBt94eMjoEtX4oWdDza/MQxeU34otCriqgwof RtMNIL96ZYa/L4xCyDt4VezSoHKEr2Ym+Pe7jc+7QhyihYB7v4p+ZG9inZNzCtBi YmNuDMpY+H2vTTa46fZlCa2Wnm+QbH1AbnjQdp9+XLKsgYoNJWsLO94+npiG0QPK QUP6L2Unz3WiTZNP9kJzMg0tglx+VQNiX3eGmmsrUrYHbIcHHRr3TlGNaQIDAQAB o4ICQzCCAj8wHQYDVR0OBBYEFA5tjG2j6IohJEE61vO2lgb60uPFMB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEvRG0yTWJhUG9paUVrUVRyVzg3YVdCdnJTNDhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFkGCCsGAQUFBwEHAQH/BEowSDBGBAIAATBAAwQALghAAwQD LgjgMAwDBAIuCOwDBAAuCO4DBABftmUwDAMEAV+2cgMEAF+2dAMEAm34oAMEALyC mgMEAbyCzjANBgkqhkiG9w0BAQsFAAOCAQEAOJ9pRqs9aZHm/1LVgVqCL26XxZKh CLT8AJhJnuwLgOby8Mz4b5rVpHgKdhHj6lLpKbTAgm5ao0Hl4WQITVdLrsOMhdw0 8dive1BL200ehQMWMSuJXmX+JUv74URT2bunLej0oGtvJfu0DQDRxmDlmZGS1MZY COv1rSqfyWSjl+aWT4f1eenBfiZKQHkO3OBha37xZ63A7/9XFNcyQeupbchke6KV CbMqXeK8GgCkanfyEno/WBCbNC4Oi3vWWLPgQ0Fmy9k4eHdHDi2OxumSltOsMh5q GktlCGBZtqYTiQL4AbWM1cUOHS5doby3jWeFQ3p9hZTx3C+DsZQL16MhMw== -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:00 2026 by rpki-client