This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/wPsZzpJEn_GStorpuC3iywaYKxE.roa File: wPsZzpJEn_GStorpuC3iywaYKxE.roa (raw, json) Hash identifier: QPCyCzYsSoE4zDvQdoA1GBhvi+phFJA75kbTCYsLAeY= Subject key identifier: C0:FB:19:CE:92:44:9F:F1:92:B6:8A:E9:B8:2D:E2:CB:06:98:2B:11 Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019BE4D655E24D8715016E97F74ED7E6E557 Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/wPsZzpJEn_GStorpuC3iywaYKxE.roa Signing time: Thu 22 Jan 2026 08:33:30 +0000 ROA not before: Thu 22 Jan 2026 08:33:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208912 IP address blocks: 46.8.118.0/23 maxlen: 23 46.8.118.0/24 maxlen: 24 46.8.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e4:d6:55:e2:4d:87:15:01:6e:97:f7:4e:d7:e6:e5:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Jan 22 08:33:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0fb19ce92449ff192b68ae9b82de2cb06982b11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f3:c6:35:20:d3:0c:93:14:04:07:f5:fb:a5: d1:71:78:e1:65:be:d1:5f:41:fc:01:28:07:3f:9e: 57:18:5d:1f:f9:51:de:7e:22:e0:b9:d9:c4:28:ee: 12:aa:03:7d:6e:4f:f1:8b:c3:27:51:3c:d2:bd:1f: 70:75:93:7d:fb:d3:34:c8:0c:75:13:e2:31:af:54: 6f:b6:07:b8:ac:de:4e:ec:79:21:c8:4f:b4:91:27: 7e:2c:b3:dc:9a:dc:4a:84:3c:f9:58:8f:84:e8:2b: ed:a3:21:ba:1a:50:01:9e:e7:86:3a:9e:1b:55:2f: 32:a7:5b:ce:57:c8:6f:b9:fa:00:9c:91:1c:14:44: 8b:fc:ac:cb:5a:79:4b:a3:d5:7a:9e:2b:69:ab:c2: ea:a5:4b:24:c5:e0:e0:dc:62:b1:9a:00:ae:c6:3f: ff:90:fd:6c:ab:3c:31:31:4d:0e:f9:a3:c7:4a:6e: 93:d5:69:a0:34:e4:11:2b:65:4e:8c:f5:63:e5:22: 7e:c9:36:c8:47:48:e9:a5:79:47:dd:7f:69:82:4a: cc:e7:49:11:2e:36:4f:b1:1d:c4:a5:60:58:c0:5e: 3b:17:9e:0a:ef:f9:a7:77:43:1a:d1:98:40:e4:4d: f5:eb:2e:c3:fb:8c:f6:42:e7:27:16:1f:c5:39:7a: bb:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:FB:19:CE:92:44:9F:F1:92:B6:8A:E9:B8:2D:E2:CB:06:98:2B:11 X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/wPsZzpJEn_GStorpuC3iywaYKxE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.8.118.0/23 Signature Algorithm: sha256WithRSAEncryption 64:29:ee:f6:df:b4:f0:5f:cd:bb:ed:fb:29:23:55:08:94:e9: 3e:9f:2c:dc:16:4c:4f:17:59:86:c3:48:a8:5a:00:b9:ca:a9: 97:3f:c4:d6:b1:1d:f1:7a:cf:e1:d9:60:99:35:08:84:fe:61: c9:62:77:c9:d1:b9:ef:26:50:4d:93:89:90:40:9c:95:8a:0f: fb:94:f7:ce:58:c7:35:c5:9e:05:49:0d:95:ac:46:6c:e6:21: 2f:b7:9b:3c:47:1f:f9:fd:98:f0:57:20:15:58:4e:4b:49:d2: 76:65:f7:6c:fa:d3:65:74:15:41:16:0b:df:91:4e:2b:ba:a6: 5b:60:dc:2c:93:11:45:32:51:c9:2e:9f:3f:cf:e8:54:17:1a: d9:a9:24:fa:c4:55:67:16:92:e8:44:2b:7d:7c:7c:1e:5b:98: 72:1c:c7:de:1d:20:d9:9b:f7:09:07:2e:40:27:f4:f1:39:76: 28:2e:d1:f1:01:46:5f:a7:44:66:06:d4:e3:33:0c:b4:34:88: b1:83:5f:9a:90:e9:f1:2a:f3:05:4a:0e:bc:21:94:76:09:aa: 97:c0:45:d7:7b:d9:fc:6a:c2:63:9d:fe:33:0e:03:d7:78:cc: a9:f5:56:8c:0e:92:7a:f9:fe:76:1c:8a:a8:3c:0f:c8:6f:4b: 5a:6f:b1:69 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvk1lXiTYcVAW6X907X5uVXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjYwMTIyMDgzMzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMGZiMTljZTkyNDQ5ZmYxOTJiNjhhZTliODJkZTJjYjA2OTgyYjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfPGNSDTDJMUBAf1+6XRcXjhZb7R X0H8ASgHP55XGF0f+VHefiLgudnEKO4SqgN9bk/xi8MnUTzSvR9wdZN9+9M0yAx1 E+Ixr1Rvtge4rN5O7HkhyE+0kSd+LLPcmtxKhDz5WI+E6CvtoyG6GlABnueGOp4b VS8yp1vOV8hvufoAnJEcFESL/KzLWnlLo9V6nitpq8LqpUskxeDg3GKxmgCuxj// kP1sqzwxMU0O+aPHSm6T1WmgNOQRK2VOjPVj5SJ+yTbIR0jppXlH3X9pgkrM50kR LjZPsR3EpWBYwF47F54K7/mnd0Ma0ZhA5E316y7D+4z2QucnFh/FOXq7IwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMD7Gc6SRJ/xkraK6bgt4ssGmCsRMB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEvd1BzWnpwSkVuX0dTdG9ycHVDM2l5d2FZS3hFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLgh2MA0G CSqGSIb3DQEBCwUAA4IBAQBkKe7237TwX8277fspI1UIlOk+nyzcFkxPF1mGw0io WgC5yqmXP8TWsR3xes/h2WCZNQiE/mHJYnfJ0bnvJlBNk4mQQJyVig/7lPfOWMc1 xZ4FSQ2VrEZs5iEvt5s8Rx/5/ZjwVyAVWE5LSdJ2Zfds+tNldBVBFgvfkU4ruqZb YNwskxFFMlHJLp8/z+hUFxrZqST6xFVnFpLoRCt9fHweW5hyHMfeHSDZm/cJBy5A J/TxOXYoLtHxAUZfp0RmBtTjMwy0NIixg1+akOnxKvMFSg68IZR2CaqXwEXXe9n8 asJjnf4zDgPXeMyp9VaMDpJ6+f52HIqoPA/Ib0tab7Fp -----END CERTIFICATE-----Generated at Sun Jan 25 22:41:39 2026 by rpki-client