This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/gQlCpCSnLDmN9RPpvzCQtlrd9TA.roa File: gQlCpCSnLDmN9RPpvzCQtlrd9TA.roa (raw, json) Hash identifier: ZKoC7F9vGHQ7V9bs0WMl6IQhGf05jkOf05frZxYmNPQ= Subject key identifier: 81:09:42:A4:24:A7:2C:39:8D:F5:13:E9:BF:30:90:B6:5A:DD:F5:30 Certificate issuer: /CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f Certificate serial: 019B7C80355441122BC49F06CD4EEE34A1AE Authority key identifier: 29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/gQlCpCSnLDmN9RPpvzCQtlrd9TA.roa Signing time: Fri 02 Jan 2026 02:18:55 +0000 ROA not before: Fri 02 Jan 2026 02:18:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25106 IP address blocks: 46.56.40.0/21 maxlen: 21 46.56.40.0/24 maxlen: 24 46.56.41.0/24 maxlen: 24 46.56.42.0/24 maxlen: 24 46.56.56.0/22 maxlen: 24 46.56.60.0/23 maxlen: 24 46.56.60.0/24 maxlen: 24 46.56.62.0/23 maxlen: 23 46.56.64.0/19 maxlen: 24 46.56.96.0/19 maxlen: 24 46.56.114.0/23 maxlen: 23 46.56.125.0/24 maxlen: 24 46.216.0.0/17 maxlen: 24 46.216.128.0/18 maxlen: 24 46.216.144.0/21 maxlen: 21 46.216.152.0/21 maxlen: 21 46.216.184.0/21 maxlen: 21 46.216.192.0/18 maxlen: 24 46.216.192.0/21 maxlen: 21 46.216.246.0/24 maxlen: 24 134.17.0.0/20 maxlen: 24 134.17.0.0/23 maxlen: 23 134.17.16.0/21 maxlen: 21 134.17.17.0/24 maxlen: 24 134.17.24.0/21 maxlen: 21 134.17.24.0/22 maxlen: 22 134.17.28.0/24 maxlen: 24 134.17.32.0/19 maxlen: 19 134.17.32.0/22 maxlen: 22 134.17.64.0/20 maxlen: 20 134.17.79.0/24 maxlen: 24 134.17.80.0/21 maxlen: 21 134.17.80.0/22 maxlen: 22 134.17.88.0/21 maxlen: 24 134.17.89.0/24 maxlen: 24 134.17.96.0/19 maxlen: 19 134.17.124.0/24 maxlen: 24 134.17.128.0/19 maxlen: 19 134.17.128.0/21 maxlen: 21 134.17.136.0/21 maxlen: 21 134.17.144.0/20 maxlen: 20 134.17.160.0/19 maxlen: 19 134.17.208.0/20 maxlen: 24 134.17.208.0/22 maxlen: 24 134.17.224.0/20 maxlen: 24 176.60.0.0/18 maxlen: 24 176.60.4.0/22 maxlen: 22 176.60.40.0/22 maxlen: 22 176.60.44.0/22 maxlen: 22 176.60.64.0/18 maxlen: 24 176.60.80.0/23 maxlen: 23 176.60.128.0/18 maxlen: 24 176.60.132.0/22 maxlen: 22 176.60.176.0/23 maxlen: 23 176.60.184.0/22 maxlen: 24 176.60.192.0/18 maxlen: 24 176.60.192.0/20 maxlen: 20 176.60.208.0/23 maxlen: 23 178.168.128.0/18 maxlen: 24 178.168.144.0/23 maxlen: 23 178.168.160.0/21 maxlen: 21 178.168.168.0/21 maxlen: 24 178.168.180.0/22 maxlen: 22 178.168.192.0/19 maxlen: 24 178.168.220.0/22 maxlen: 22 178.168.224.0/19 maxlen: 24 178.168.242.0/23 maxlen: 23 178.168.253.0/24 maxlen: 24 185.20.112.0/23 maxlen: 23 185.20.114.0/23 maxlen: 23 2a02:bf0::/32 maxlen: 32 2a02:bf0::/48 maxlen: 48 2a02:bf0:1::/48 maxlen: 48 2a02:bf0:2::/48 maxlen: 48 2a02:bf0:3::/48 maxlen: 48 2a02:bf0:6::/48 maxlen: 48 2a02:bf0:7::/48 maxlen: 48 2a02:bf0:10::/44 maxlen: 44 2a02:bf0:25::/48 maxlen: 48 2a02:bf0:26::/48 maxlen: 48 2a02:bf0:27::/48 maxlen: 48 2a02:bf0:28::/48 maxlen: 48 2a02:bf0:29::/48 maxlen: 48 2a02:bf0:100::/44 maxlen: 44 2a02:bf0:110::/44 maxlen: 44 2a02:bf0:1000::/36 maxlen: 36 2a02:bf0:1002::/48 maxlen: 48 2a02:bf0:1003::/48 maxlen: 48 2a02:bf0:3000::/36 maxlen: 44 2a02:bf0:4000::/36 maxlen: 44 2a02:bf0:5000::/36 maxlen: 44 2a02:bf0:6000::/36 maxlen: 44 2a02:bf0:7000::/36 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:35:54:41:12:2b:c4:9f:06:cd:4e:ee:34:a1:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f Validity Not Before: Jan 2 02:18:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=810942a424a72c398df513e9bf3090b65addf530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:02:a1:05:7e:89:22:6f:5d:94:6c:e0:f7:9d: 3e:9c:b3:71:5a:0f:0f:c8:86:34:60:e8:f9:ba:fd: de:d8:c4:e2:d7:db:4a:6e:24:4a:55:6c:e8:21:d2: 36:73:a9:26:f6:db:85:79:39:f7:4d:2d:4a:ed:f9: 3b:be:01:02:48:1e:dc:ac:81:5e:93:86:26:bc:d9: fc:1f:00:53:ea:59:dd:2e:9d:47:13:20:46:ae:bf: 6c:e0:8e:33:97:1e:22:dd:43:27:d9:1b:5c:3f:e4: b1:e5:fe:a6:f2:6b:6a:56:d3:6a:15:78:15:e2:e7: 72:51:5c:c6:de:d1:7d:5d:ff:fd:99:a4:1f:25:5a: b8:04:ad:85:8d:8b:22:e9:df:9b:ef:c3:0d:71:d1: 75:cf:1d:d8:4e:55:5e:67:7b:ac:22:cf:83:da:36: c0:83:10:97:bd:35:50:45:cc:a9:50:d0:7f:44:4c: 0b:48:ae:5c:14:c2:15:d3:3a:e4:dc:01:55:85:47: 66:3b:fb:4c:ff:19:16:13:28:32:cb:7f:6c:b0:75: 1c:19:73:c0:8e:61:b4:b5:70:95:68:62:a0:b4:84: d5:5a:ef:b7:cb:55:f6:ae:7a:d5:67:be:dd:cf:67: 60:28:16:fa:8a:4d:c4:ed:16:8d:6f:73:83:af:a0: 0b:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:09:42:A4:24:A7:2C:39:8D:F5:13:E9:BF:30:90:B6:5A:DD:F5:30 X509v3 Authority Key Identifier: keyid:29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/gQlCpCSnLDmN9RPpvzCQtlrd9TA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.56.40.0/21 46.56.56.0-46.56.127.255 46.216.0.0/16 134.17.0.0-134.17.191.255 134.17.208.0-134.17.239.255 176.60.0.0/16 178.168.128.0/17 185.20.112.0/22 IPv6: 2a02:bf0::/32 Signature Algorithm: sha256WithRSAEncryption 67:7a:be:45:20:23:13:f3:a9:95:f2:20:c7:e8:2e:e2:ad:07: 3b:d7:cd:0f:5f:b8:47:a8:45:a6:1d:4e:89:78:51:bd:a0:6d: 0f:a0:00:7c:4b:3e:56:7f:32:d7:fa:ba:8a:08:42:48:7e:77: 9c:35:90:49:b6:d4:f1:4a:4c:45:ff:7f:07:81:4b:7b:4d:d0: b6:1f:9e:38:06:06:3d:7a:bb:7f:62:6a:b7:53:35:83:f7:6c: 33:0b:c8:b5:17:49:33:15:f7:26:c9:30:b0:96:9f:7f:c9:fe: e0:97:9c:19:32:e4:2a:53:62:e6:3c:e2:82:de:62:de:e6:51: a4:59:38:f3:81:0e:26:19:ee:e3:e3:82:a3:24:67:b5:cc:c6: e4:41:32:62:f0:bf:ff:1c:63:89:cd:9d:51:2b:82:b3:9f:8d: fa:ad:da:4c:ff:d0:fa:d2:71:f4:f2:be:86:f9:2a:d7:28:5b: e7:59:4c:22:d3:8a:bf:8e:f1:19:49:0f:5b:b4:b8:87:1e:9e: 93:ec:69:9d:c4:56:f4:b4:8a:68:01:94:47:42:b6:53:eb:78: 3d:6d:35:1f:98:ad:bd:07:9d:b1:24:7b:ed:ac:65:35:69:19: 11:02:a7:b2:48:92:9e:05:86:42:7b:2e:54:81:b7:78:4a:ff: 0a:6f:7f:30 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgISAZt8gDVUQRIrxJ8GzU7uNKGuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ODhhM2M2ODhlOGViMWZlZjA2YzM3NGE3YWE1Y2Y4ZmQ3 NzhlMGYwHhcNMjYwMTAyMDIxODU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MTA5NDJhNDI0YTcyYzM5OGRmNTEzZTliZjMwOTBiNjVhZGRmNTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgKhBX6JIm9dlGzg950+nLNxWg8P yIY0YOj5uv3e2MTi19tKbiRKVWzoIdI2c6km9tuFeTn3TS1K7fk7vgECSB7crIFe k4YmvNn8HwBT6lndLp1HEyBGrr9s4I4zlx4i3UMn2RtcP+Sx5f6m8mtqVtNqFXgV 4udyUVzG3tF9Xf/9maQfJVq4BK2FjYsi6d+b78MNcdF1zx3YTlVeZ3usIs+D2jbA gxCXvTVQRcypUNB/REwLSK5cFMIV0zrk3AFVhUdmO/tM/xkWEygyy39ssHUcGXPA jmG0tXCVaGKgtITVWu+3y1X2rnrVZ77dz2dgKBb6ik3E7RaNb3ODr6ALDQIDAQAB o4ICVzCCAlMwHQYDVR0OBBYEFIEJQqQkpyw5jfUT6b8wkLZa3fUwMB8GA1UdIwQY MBaAFCmIo8aI6Osf7wbDdKeqXPj9d44PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1lpanhvam82eF92QnNOMHA2cGMtUDEzamc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85ZjUyZDEtYzk1ZC00NTViLWFmMDgt Y2VjMGRiYzhkMjQ2LzEvZ1FsQ3BDU25MRG1OOVJQcHZ6Q1F0bHJkOVRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS85ZjUyZDEtYzk1ZC00NTViLWFmMDgtY2VjMGRiYzhkMjQ2 LzEvS1lpanhvam82eF92QnNOMHA2cGMtUDEzamc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBLBAIAATBFAwQDLjgoMAwD BAMuODgDBAcuOAADAwAu2DALAwMAhhEDBAaGEYAwDAMEBIYR0AMEBIYR4AMDALA8 AwQHsqiAAwQCuRRwMA0EAgACMAcDBQAqAgvwMA0GCSqGSIb3DQEBCwUAA4IBAQBn er5FICMT86mV8iDH6C7irQc7180PX7hHqEWmHU6JeFG9oG0PoAB8Sz5WfzLX+rqK CEJIfnecNZBJttTxSkxF/38HgUt7TdC2H544BgY9ert/Ymq3UzWD92wzC8i1F0kz FfcmyTCwlp9/yf7gl5wZMuQqU2LmPOKC3mLe5lGkWTjzgQ4mGe7j44KjJGe1zMbk QTJi8L//HGOJzZ1RK4Kzn436rdpM/9D60nH08r6G+SrXKFvnWUwi04q/jvEZSQ9b tLiHHp6T7GmdxFb0tIpoAZRHQrZT63g9bTUfmK29B52xJHvtrGU1aRkRAqeySJKe BYZCey5Ugbd4Sv8Kb38w -----END CERTIFICATE-----Generated at Mon Feb 9 18:22:28 2026 by rpki-client