This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/aszDxBj7M8omvntO8vjENZck6a0.roa File: aszDxBj7M8omvntO8vjENZck6a0.roa (raw, json) Hash identifier: WNIItU9yK0z+7HMaht46RKL+seuVDX1eeByJOM5lorA= Subject key identifier: 6A:CC:C3:C4:18:FB:33:CA:26:BE:7B:4E:F2:F8:C4:35:97:24:E9:AD Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Certificate serial: 019BB67C8D72699A6BE67F8D82463AAE7499 Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/aszDxBj7M8omvntO8vjENZck6a0.roa Signing time: Tue 13 Jan 2026 08:32:54 +0000 ROA not before: Tue 13 Jan 2026 08:32:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 46.102.237.0/24 maxlen: 24 89.34.106.0/24 maxlen: 24 89.44.76.0/24 maxlen: 24 89.125.126.0/24 maxlen: 24 91.132.50.0/24 maxlen: 24 93.114.183.0/24 maxlen: 24 103.245.228.0/24 maxlen: 24 103.245.229.0/24 maxlen: 24 185.141.217.0/24 maxlen: 24 193.124.224.0/24 maxlen: 24 194.58.47.0/24 maxlen: 24 206.245.152.0/22 maxlen: 22 206.245.158.0/24 maxlen: 24 212.192.0.0/24 maxlen: 24 212.192.7.0/24 maxlen: 24 212.192.8.0/24 maxlen: 24 212.192.10.0/24 maxlen: 24 212.192.30.0/24 maxlen: 24 212.192.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b6:7c:8d:72:69:9a:6b:e6:7f:8d:82:46:3a:ae:74:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1 Validity Not Before: Jan 13 08:32:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6accc3c418fb33ca26be7b4ef2f8c4359724e9ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d9:87:30:7c:15:6e:ce:cd:dc:ee:20:66:c2: 1b:83:be:d5:08:fb:19:c7:91:54:ce:7e:37:da:3a: 0b:47:47:e6:98:ca:89:be:07:75:f3:1a:8e:1e:c2: d2:d7:6c:7d:7d:f0:22:cb:37:18:ed:2b:6d:fb:53: d1:38:82:5e:5e:50:1f:69:58:d4:c2:ed:4b:02:3e: 84:12:df:ff:14:36:4e:86:62:21:7b:02:cf:db:e2: 46:0e:26:0c:68:12:c6:4b:b9:df:98:02:83:bc:c9: a3:96:66:d4:f2:8f:f4:ec:c7:cc:dd:22:79:0f:f5: 4a:a0:aa:8a:1e:f3:4c:09:f5:ed:93:bd:f0:80:58: cf:c7:af:0f:e0:a3:66:18:66:31:56:5d:9c:63:78: 13:44:90:e3:23:80:62:78:ca:b4:05:59:aa:a9:83: c6:98:ee:7f:97:86:83:4f:b7:79:a9:1c:b9:94:90: 6f:6f:f1:db:31:30:e9:6a:fa:b1:75:9d:e4:08:b4: f5:9d:e3:91:3b:23:2f:bd:12:3b:52:b4:c1:0a:62: f4:9d:94:e7:c6:3b:56:96:31:54:3f:b1:a9:d4:ed: 45:a6:ca:1c:b4:74:34:62:2e:e1:ce:2b:c1:05:c3: f8:ae:47:16:13:9a:32:bf:b7:a7:d2:19:85:c4:d0: 34:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:CC:C3:C4:18:FB:33:CA:26:BE:7B:4E:F2:F8:C4:35:97:24:E9:AD X509v3 Authority Key Identifier: keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/aszDxBj7M8omvntO8vjENZck6a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.102.237.0/24 89.34.106.0/24 89.44.76.0/24 89.125.126.0/24 91.132.50.0/24 93.114.183.0/24 103.245.228.0/23 185.141.217.0/24 193.124.224.0/24 194.58.47.0/24 206.245.152.0/22 206.245.158.0/24 212.192.0.0/24 212.192.7.0-212.192.8.255 212.192.10.0/24 212.192.30.0/24 212.192.208.0/24 Signature Algorithm: sha256WithRSAEncryption 10:3a:92:6c:03:2e:32:d4:48:1c:12:f1:13:3e:c0:d9:30:c2: bf:fc:1b:b0:d0:91:33:89:7e:af:49:6f:b2:7a:f1:5f:33:b1: 51:4a:96:69:86:12:6b:fd:f0:57:2c:c5:c4:af:8a:27:cc:68: de:5b:65:84:15:63:f9:7a:88:f9:5e:27:02:ee:a6:83:a8:ef: 7b:20:9a:3f:46:6c:8c:bf:30:fe:3d:25:fa:f2:89:91:40:29: c1:b5:c8:bc:57:cb:c6:e2:a0:9f:72:be:21:fa:f5:b9:28:5c: a3:9a:2a:6b:c7:64:ea:c1:24:4d:78:3e:0e:71:62:66:3d:1d: 61:2c:d6:ac:0a:8d:f2:10:bb:f0:3c:25:a9:94:6c:29:10:54: ea:d6:0f:d1:ba:eb:81:3c:9b:24:93:d8:d7:6c:7c:ae:31:a8: 87:9e:de:f6:59:84:ea:35:63:0a:9c:1f:8e:18:b4:35:62:42: 15:98:dd:71:ba:31:85:6e:02:4d:ad:a4:fd:d9:45:1f:a2:12: fd:03:b2:cc:96:ea:ca:99:80:84:3a:c5:ad:87:dc:9c:9e:a9: 83:07:aa:a6:fb:1e:e4:be:c3:38:14:b9:40:02:c6:58:61:56: cb:f5:9a:ab:cd:14:7a:59:09:e2:a2:e1:46:09:da:3f:b2:62: e1:2a:b0:64 -----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgISAZu2fI1yaZpr5n+NgkY6rnSZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm Y2ZlZDEwHhcNMjYwMTEzMDgzMjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWNjYzNjNDE4ZmIzM2NhMjZiZTdiNGVmMmY4YzQzNTk3MjRlOWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9mHMHwVbs7N3O4gZsIbg77VCPsZ x5FUzn432joLR0fmmMqJvgd18xqOHsLS12x9ffAiyzcY7Stt+1PROIJeXlAfaVjU wu1LAj6EEt//FDZOhmIhewLP2+JGDiYMaBLGS7nfmAKDvMmjlmbU8o/07MfM3SJ5 D/VKoKqKHvNMCfXtk73wgFjPx68P4KNmGGYxVl2cY3gTRJDjI4BieMq0BVmqqYPG mO5/l4aDT7d5qRy5lJBvb/HbMTDpavqxdZ3kCLT1neOROyMvvRI7UrTBCmL0nZTn xjtWljFUP7Gp1O1FpsoctHQ0Yi7hzivBBcP4rkcWE5oyv7en0hmFxNA0CwIDAQAB o4ICcjCCAm4wHQYDVR0OBBYEFGrMw8QY+zPKJr57TvL4xDWXJOmtMB8GA1UdIwQY MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt ZTU4MzlmNDNlNTgzLzEvYXN6RHhCajdNOG9tdm50Tzh2akVOWmNrNmEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGHBggrBgEFBQcBBwEB/wR4MHYwdAQCAAEwbgMEAC5m7QME AFkiagMEAFksTAMEAFl9fgMEAFuEMgMEAF1ytwMEAWf15AMEALmN2QMEAMF84AME AMI6LwMEAs71mAMEAM71ngMEANTAADAMAwQA1MAHAwQA1MAIAwQA1MAKAwQA1MAe AwQA1MDQMA0GCSqGSIb3DQEBCwUAA4IBAQAQOpJsAy4y1EgcEvETPsDZMMK//Buw 0JEziX6vSW+yevFfM7FRSpZphhJr/fBXLMXEr4onzGjeW2WEFWP5eoj5XicC7qaD qO97IJo/RmyMvzD+PSX68omRQCnBtci8V8vG4qCfcr4h+vW5KFyjmiprx2TqwSRN eD4OcWJmPR1hLNasCo3yELvwPCWplGwpEFTq1g/RuuuBPJskk9jXbHyuMaiHnt72 WYTqNWMKnB+OGLQ1YkIVmN1xujGFbgJNraT92UUfohL9A7LMlurKmYCEOsWth9yc nqmDB6qm+x7kvsM4FLlAAsZYYVbL9ZqrzRR6WQniouFGCdo/smLhKrBk -----END CERTIFICATE-----Generated at Mon Jan 19 14:39:47 2026 by rpki-client