This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/Pd4KMlI4Ppo2GPBJpxrTzkBwKDw.roa File: Pd4KMlI4Ppo2GPBJpxrTzkBwKDw.roa (raw, json) Hash identifier: QRB4xsl/x8yZHcMu29po3RVY6KKKQr540pqKTN21RU0= Subject key identifier: 3D:DE:0A:32:52:38:3E:9A:36:18:F0:49:A7:1A:D3:CE:40:70:28:3C Certificate issuer: /CN=44cf3fa7074e7304b1f32e1664ad5f7157d65d62 Certificate serial: 019B7EA54CEC771D0AFC9DDB9C324915DF04 Authority key identifier: 44:CF:3F:A7:07:4E:73:04:B1:F3:2E:16:64:AD:5F:71:57:D6:5D:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RM8_pwdOcwSx8y4WZK1fcVfWXWI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/Pd4KMlI4Ppo2GPBJpxrTzkBwKDw.roa Signing time: Fri 02 Jan 2026 12:18:40 +0000 ROA not before: Fri 02 Jan 2026 12:18:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21283 IP address blocks: 46.122.0.0/15 maxlen: 15 46.122.64.0/21 maxlen: 21 46.122.96.0/21 maxlen: 21 46.164.0.0/18 maxlen: 18 62.84.224.0/20 maxlen: 20 80.95.224.0/20 maxlen: 20 85.10.0.0/19 maxlen: 19 85.10.32.0/20 maxlen: 20 90.157.128.0/17 maxlen: 17 92.37.0.0/17 maxlen: 17 94.127.24.0/21 maxlen: 21 109.239.176.0/20 maxlen: 20 146.212.0.0/16 maxlen: 18 185.28.8.0/22 maxlen: 22 185.173.52.0/22 maxlen: 22 188.64.24.0/21 maxlen: 21 212.18.32.0/19 maxlen: 19 213.157.224.0/19 maxlen: 19 2001:15c0::/29 maxlen: 29 2a00:1a20::/29 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.crl rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.mft rsync://rpki.ripe.net/repository/DEFAULT/RM8_pwdOcwSx8y4WZK1fcVfWXWI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:4c:ec:77:1d:0a:fc:9d:db:9c:32:49:15:df:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44cf3fa7074e7304b1f32e1664ad5f7157d65d62 Validity Not Before: Jan 2 12:18:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3dde0a3252383e9a3618f049a71ad3ce4070283c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:a9:ee:fc:1c:7d:7a:00:40:14:4f:c7:02:eb: bb:69:47:0d:c1:fb:dd:4c:90:f7:4c:7b:3d:21:52: ac:15:e4:48:98:57:fb:c8:3d:6b:14:82:bd:c6:45: 71:e6:ed:b9:52:d9:db:65:2a:8e:cd:62:9f:5b:94: fc:2d:34:5d:cd:d8:b0:df:26:1e:09:91:b6:91:c7: a4:89:11:c7:4d:74:98:19:30:f7:15:fc:4a:78:04: ea:ff:be:be:51:f5:62:aa:b3:f6:ba:fa:e3:cb:cb: 4b:18:73:e0:e6:be:ec:88:90:e7:5f:d4:3a:d6:8d: 30:6f:cd:f6:e7:41:e4:1c:19:2d:5d:89:8c:b0:bc: 56:ca:b6:41:fe:80:cf:f1:c2:e0:91:b4:85:58:b5: c8:ea:2c:8d:71:64:77:6c:e7:90:7f:89:38:44:60: 8f:18:50:24:30:95:33:46:4c:64:f7:55:e9:fe:af: 2c:f3:a7:ce:3f:c7:6b:15:5b:c8:2b:db:9a:3d:b0: f3:ca:6f:18:e6:cd:78:78:85:83:24:df:c0:08:40: db:97:76:54:9b:00:d5:be:99:f0:ea:38:8d:d5:b1: 7a:1f:b9:05:ce:74:df:ad:3c:3a:9c:fe:a6:8f:88: e0:0a:2c:69:19:ee:f9:71:20:c8:93:76:0f:c0:18: 46:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:DE:0A:32:52:38:3E:9A:36:18:F0:49:A7:1A:D3:CE:40:70:28:3C X509v3 Authority Key Identifier: keyid:44:CF:3F:A7:07:4E:73:04:B1:F3:2E:16:64:AD:5F:71:57:D6:5D:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RM8_pwdOcwSx8y4WZK1fcVfWXWI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/Pd4KMlI4Ppo2GPBJpxrTzkBwKDw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/893149-dd25-4596-bad8-1de933d9f843/1/RM8_pwdOcwSx8y4WZK1fcVfWXWI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.122.0.0/15 46.164.0.0/18 62.84.224.0/20 80.95.224.0/20 85.10.0.0-85.10.47.255 90.157.128.0/17 92.37.0.0/17 94.127.24.0/21 109.239.176.0/20 146.212.0.0/16 185.28.8.0/22 185.173.52.0/22 188.64.24.0/21 212.18.32.0/19 213.157.224.0/19 IPv6: 2001:15c0::/29 2a00:1a20::/29 Signature Algorithm: sha256WithRSAEncryption 24:8c:07:2f:07:77:b8:27:c5:49:41:43:be:c5:67:f1:47:45: 69:88:2b:cf:68:f8:3a:2b:98:b0:a9:35:ed:0e:87:64:be:d6: ad:21:e7:c1:cd:73:15:47:c5:9b:ad:17:bc:fb:63:0a:c2:69: 15:b2:3e:08:5d:ee:51:f6:8b:df:dd:c9:d2:98:05:e2:cd:d6: f4:e3:97:d7:c9:54:0b:4d:8b:10:42:db:bb:82:e3:37:1c:66: a1:f5:f6:95:3e:00:7e:80:fc:c5:ac:b0:60:10:67:ca:d3:cc: 61:ff:36:eb:25:fb:50:89:31:19:d5:2f:f5:02:0b:4c:aa:94: 93:ef:53:3a:df:28:ba:b9:a1:93:63:8e:65:13:11:23:71:ab: a7:2b:7f:c9:67:e5:92:33:43:ca:18:f8:c4:d3:64:89:9c:c4: 8e:60:e9:be:d3:df:e1:b3:7d:4e:83:22:a3:b4:fd:46:01:e4: 0a:29:f6:5e:33:06:ac:45:64:21:14:21:32:dd:34:0a:8a:29: 8e:23:2a:8f:41:fb:f4:fe:ea:64:b8:bd:19:96:b8:80:fc:9c: 76:b8:c4:92:1e:a4:5a:4b:34:16:f6:88:7b:cf:97:75:87:6b: 7c:88:00:f5:1b:f9:f7:93:a1:df:c8:0a:80:c6:b6:10:5f:fb: d3:af:21:dd -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgISAZt+pUzsdx0K/J3bnDJJFd8EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0Y2YzZmE3MDc0ZTczMDRiMWYzMmUxNjY0YWQ1ZjcxNTdk NjVkNjIwHhcNMjYwMTAyMTIxODQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZGRlMGEzMjUyMzgzZTlhMzYxOGYwNDlhNzFhZDNjZTQwNzAyODNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6nu/Bx9egBAFE/HAuu7aUcNwfvd TJD3THs9IVKsFeRImFf7yD1rFIK9xkVx5u25UtnbZSqOzWKfW5T8LTRdzdiw3yYe CZG2kcekiRHHTXSYGTD3FfxKeATq/76+UfViqrP2uvrjy8tLGHPg5r7siJDnX9Q6 1o0wb83250HkHBktXYmMsLxWyrZB/oDP8cLgkbSFWLXI6iyNcWR3bOeQf4k4RGCP GFAkMJUzRkxk91Xp/q8s86fOP8drFVvIK9uaPbDzym8Y5s14eIWDJN/ACEDbl3ZU mwDVvpnw6jiN1bF6H7kFznTfrTw6nP6mj4jgCixpGe75cSDIk3YPwBhGhQIDAQAB o4ICeTCCAnUwHQYDVR0OBBYEFD3eCjJSOD6aNhjwSaca085AcCg8MB8GA1UdIwQY MBaAFETPP6cHTnMEsfMuFmStX3FX1l1iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk04X3B3ZE9jd1N4OHk0V1pLMWZjVmZXWFdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS84OTMxNDktZGQyNS00NTk2LWJhZDgt MWRlOTMzZDlmODQzLzEvUGQ0S01sSTRQcG8yR1BCSnB4clR6a0J3S0R3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS84OTMxNDktZGQyNS00NTk2LWJhZDgtMWRlOTMzZDlmODQz LzEvUk04X3B3ZE9jd1N4OHk0V1pLMWZjVmZXWFdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGOBggrBgEFBQcBBwEB/wR/MH0wZQQCAAEwXwMDAS56AwQG LqQAAwQEPlTgAwQEUF/gMAsDAwFVCgMEBFUKIAMEB1qdgAMEB1wlAAMEA15/GAME BG3vsAMDAJLUAwQCuRwIAwQCua00AwQDvEAYAwQF1BIgAwQF1Z3gMBQEAgACMA4D BQMgARXAAwUDKgAaIDANBgkqhkiG9w0BAQsFAAOCAQEAJIwHLwd3uCfFSUFDvsVn 8UdFaYgrz2j4OiuYsKk17Q6HZL7WrSHnwc1zFUfFm60XvPtjCsJpFbI+CF3uUfaL 393J0pgF4s3W9OOX18lUC02LEELbu4LjNxxmofX2lT4AfoD8xaywYBBnytPMYf82 6yX7UIkxGdUv9QILTKqUk+9TOt8ourmhk2OOZRMRI3Grpyt/yWflkjNDyhj4xNNk iZzEjmDpvtPf4bN9ToMio7T9RgHkCin2XjMGrEVkIRQhMt00CoopjiMqj0H79P7q ZLi9GZa4gPycdrjEkh6kWks0FvaIe8+XdYdrfIgA9Rv595Oh38gKgMa2EF/7068h 3Q== -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:52 2026 by rpki-client