This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/lKGOd5BHzMG9lnuCN04rKWjeYTY.roa File: lKGOd5BHzMG9lnuCN04rKWjeYTY.roa (raw, json) Hash identifier: k6Z+gJiAn4RiySPTJPoY7GBm1+WgZnuRGtskfS6kogI= Subject key identifier: 94:A1:8E:77:90:47:CC:C1:BD:96:7B:82:37:4E:2B:29:68:DE:61:36 Certificate issuer: /CN=32507f9e078be89932e91b23acf882ab467c6aa7 Certificate serial: 019B7FF119E5CBB6706D1C8AD253AAEBA438 Authority key identifier: 32:50:7F:9E:07:8B:E8:99:32:E9:1B:23:AC:F8:82:AB:46:7C:6A:A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/lKGOd5BHzMG9lnuCN04rKWjeYTY.roa Signing time: Fri 02 Jan 2026 18:21:05 +0000 ROA not before: Fri 02 Jan 2026 18:21:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197503 IP address blocks: 46.149.144.0/20 maxlen: 20 46.149.146.0/23 maxlen: 23 46.149.148.0/23 maxlen: 23 46.149.150.0/23 maxlen: 23 46.149.152.0/23 maxlen: 23 46.149.154.0/23 maxlen: 23 46.149.156.0/23 maxlen: 23 46.149.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.mft rsync://rpki.ripe.net/repository/DEFAULT/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:19:e5:cb:b6:70:6d:1c:8a:d2:53:aa:eb:a4:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32507f9e078be89932e91b23acf882ab467c6aa7 Validity Not Before: Jan 2 18:21:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=94a18e779047ccc1bd967b82374e2b2968de6136 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:01:3c:05:ad:5f:89:89:3c:a8:51:bb:cf:f1: 3f:ce:af:ec:95:b5:8a:17:4e:f9:8c:83:97:2b:fe: 15:1e:89:a6:73:52:b3:f2:82:bb:51:d4:6b:e7:8f: 24:39:28:da:26:44:84:d3:0f:45:35:bc:c0:45:d9: 5d:4c:96:ef:e9:49:2f:5d:54:a1:fd:8d:23:04:10: 74:a6:e3:27:3f:b9:31:3b:ad:1f:dd:59:d0:ad:4c: a1:fe:5f:7d:0a:a6:8c:c3:f1:81:84:19:5d:e1:cb: 8c:e9:25:90:4b:2c:38:4a:e8:f9:f6:58:54:f7:4d: bc:77:d5:f5:24:15:c7:72:7b:c9:35:ff:a1:c6:b7: fa:18:72:6b:7e:be:43:d9:9a:78:35:dd:3a:40:55: 92:1c:15:9e:48:ac:25:e7:c6:62:d1:e6:3f:02:49: c4:8e:1b:2b:95:b0:3a:c8:57:c0:15:74:4a:f0:72: db:6e:a6:62:1d:dc:01:31:7a:44:91:08:e4:0d:06: bf:ee:99:0a:b0:73:c7:8a:fc:26:fc:b6:f7:40:8a: e1:39:6a:f1:98:69:53:09:6d:b8:22:b4:87:a6:82: c6:44:d4:ad:3f:6a:88:d9:89:46:6e:4e:9a:fc:2a: 81:a0:14:59:d1:ae:1e:73:a9:c3:84:45:42:be:8b: 68:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:A1:8E:77:90:47:CC:C1:BD:96:7B:82:37:4E:2B:29:68:DE:61:36 X509v3 Authority Key Identifier: keyid:32:50:7F:9E:07:8B:E8:99:32:E9:1B:23:AC:F8:82:AB:46:7C:6A:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/lKGOd5BHzMG9lnuCN04rKWjeYTY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/cdae9b-1945-4e99-8b5a-9d196a0e32a0/1/MlB_ngeL6Jky6RsjrPiCq0Z8aqc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.149.144.0/20 Signature Algorithm: sha256WithRSAEncryption 10:6f:4a:76:a7:62:49:5d:ed:18:06:b2:35:7e:07:a3:7b:70: a5:69:9f:b0:d1:9a:b5:95:fc:51:3c:ff:a2:db:ff:8b:d2:f7: 39:71:6b:fc:41:f3:95:26:a9:8e:15:50:34:0b:b9:de:4b:50: b7:ba:6f:eb:88:06:de:57:a0:1f:61:c1:df:11:7b:cf:cd:5a: 38:3a:07:87:7e:f4:f2:48:4e:79:0c:a6:8b:15:b1:33:6e:6a: 8a:aa:29:89:8e:cd:47:9a:22:60:a9:c4:a4:10:a1:aa:6a:81: dd:03:77:5f:95:9b:e3:77:87:1a:40:35:c2:fa:ef:9d:78:2b: ca:be:89:d3:66:76:48:c1:87:a9:f9:81:a2:7a:19:ba:90:ac: 07:27:80:34:17:f3:52:fe:69:92:11:78:ec:d5:af:c1:59:1f: d1:99:10:f9:79:f4:45:07:34:cc:ca:d4:d2:d3:0a:77:6e:ec: c0:51:a9:5d:93:58:5e:f0:87:e0:b7:6f:d1:9f:36:6b:aa:f1: d6:b1:11:40:be:c6:63:5f:1d:e0:87:b1:d4:87:02:e3:ac:34: 09:24:55:6d:b1:5a:25:e6:68:fa:30:95:f8:33:55:fe:c6:a4: bb:8b:f8:45:50:14:d8:7e:a9:71:29:ed:59:a8:9d:21:5c:86: be:9e:6a:62 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/8Rnly7ZwbRyK0lOq66Q4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNTA3ZjllMDc4YmU4OTkzMmU5MWIyM2FjZjg4MmFiNDY3 YzZhYTcwHhcNMjYwMTAyMTgyMTA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NGExOGU3NzkwNDdjY2MxYmQ5NjdiODIzNzRlMmIyOTY4ZGU2MTM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwE8Ba1fiYk8qFG7z/E/zq/slbWK F075jIOXK/4VHommc1Kz8oK7UdRr548kOSjaJkSE0w9FNbzARdldTJbv6UkvXVSh /Y0jBBB0puMnP7kxO60f3VnQrUyh/l99CqaMw/GBhBld4cuM6SWQSyw4Suj59lhU 9028d9X1JBXHcnvJNf+hxrf6GHJrfr5D2Zp4Nd06QFWSHBWeSKwl58Zi0eY/AknE jhsrlbA6yFfAFXRK8HLbbqZiHdwBMXpEkQjkDQa/7pkKsHPHivwm/Lb3QIrhOWrx mGlTCW24IrSHpoLGRNStP2qI2YlGbk6a/CqBoBRZ0a4ec6nDhEVCvoto/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJShjneQR8zBvZZ7gjdOKylo3mE2MB8GA1UdIwQY MBaAFDJQf54Hi+iZMukbI6z4gqtGfGqnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWxCX25nZUw2Smt5NlJzanJQaUNxMFo4YXFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9jZGFlOWItMTk0NS00ZTk5LThiNWEt OWQxOTZhMGUzMmEwLzEvbEtHT2Q1Qkh6TUc5bG51Q04wNHJLV2plWVRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9jZGFlOWItMTk0NS00ZTk5LThiNWEtOWQxOTZhMGUzMmEw LzEvTWxCX25nZUw2Smt5NlJzanJQaUNxMFo4YXFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELpWQMA0G CSqGSIb3DQEBCwUAA4IBAQAQb0p2p2JJXe0YBrI1fgeje3ClaZ+w0Zq1lfxRPP+i 2/+L0vc5cWv8QfOVJqmOFVA0C7neS1C3um/riAbeV6AfYcHfEXvPzVo4OgeHfvTy SE55DKaLFbEzbmqKqimJjs1HmiJgqcSkEKGqaoHdA3dflZvjd4caQDXC+u+deCvK vonTZnZIwYep+YGiehm6kKwHJ4A0F/NS/mmSEXjs1a/BWR/RmRD5efRFBzTMytTS 0wp3buzAUaldk1he8Ifgt2/RnzZrqvHWsRFAvsZjXx3gh7HUhwLjrDQJJFVtsVol 5mj6MJX4M1X+xqS7i/hFUBTYfqlxKe1ZqJ0hXIa+nmpi -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:29 2026 by rpki-client