This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/ATo6rNOsZvRHig1xnSfHpMmgc0Y.roa File: ATo6rNOsZvRHig1xnSfHpMmgc0Y.roa (raw, json) Hash identifier: a0wsPiri9N8v0Qf4OIW+s20J9vgPW/O4uUqTrgadEUg= Subject key identifier: 01:3A:3A:AC:D3:AC:66:F4:47:8A:0D:71:9D:27:C7:A4:C9:A0:73:46 Certificate issuer: /CN=679252b9e21df8176cc538027895f7f4585666ab Certificate serial: 019B7A5ACA9D775453F6DAFD056418C13016 Authority key identifier: 67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/ATo6rNOsZvRHig1xnSfHpMmgc0Y.roa Signing time: Thu 01 Jan 2026 16:18:48 +0000 ROA not before: Thu 01 Jan 2026 16:18:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51468 IP address blocks: 46.30.208.0/21 maxlen: 21 77.111.240.0/22 maxlen: 22 91.198.169.0/24 maxlen: 24 91.221.196.0/23 maxlen: 23 104.37.32.0/21 maxlen: 21 185.10.8.0/22 maxlen: 22 185.10.8.0/23 maxlen: 23 185.10.10.0/24 maxlen: 24 185.10.11.0/24 maxlen: 24 185.164.12.0/22 maxlen: 22 193.202.110.0/24 maxlen: 24 195.47.247.0/24 maxlen: 24 195.206.121.0/24 maxlen: 24 2001:67c:3c0::/48 maxlen: 48 2001:67c:28cc::/48 maxlen: 48 2a02:2350::/32 maxlen: 32 2a03:53c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.mft rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:ca:9d:77:54:53:f6:da:fd:05:64:18:c1:30:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=679252b9e21df8176cc538027895f7f4585666ab Validity Not Before: Jan 1 16:18:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=013a3aacd3ac66f4478a0d719d27c7a4c9a07346 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2d:c6:88:aa:97:31:31:b8:df:b7:f5:f8:4f: 0b:91:18:6b:03:eb:6e:42:6f:48:b6:4a:06:b4:a9: c8:4a:c1:30:c9:2e:90:d3:01:b4:02:33:a5:47:12: c1:0c:b7:18:7c:48:b4:b7:86:4e:23:17:37:fd:0e: b8:42:c7:4b:ee:46:2d:69:9b:0c:75:07:49:20:f0: 37:17:b9:ce:80:79:39:7f:04:09:01:27:23:53:25: 97:6a:3b:64:be:3f:b9:ba:cc:e3:71:c7:89:83:5c: 9d:56:a2:f3:60:88:08:4a:3b:6c:b6:b4:e0:fb:53: 2e:9e:d2:a0:44:02:c7:0c:45:c2:65:94:7e:ff:68: b0:18:d1:1a:50:70:52:82:da:cd:fb:75:33:ca:9b: 80:d9:40:58:6d:bc:0f:80:55:d8:7a:c4:c6:2d:ed: a0:46:8a:4f:31:dc:36:79:f7:fd:20:ac:e8:15:49: ac:8f:a2:a3:98:70:06:33:4a:d7:a9:48:fb:34:dd: c2:38:d2:7b:38:e7:e3:19:1c:58:5d:1d:d1:7e:39: ef:44:64:48:fc:ee:74:48:04:17:d0:6a:e0:6d:49: 76:cb:5c:1e:88:5e:ae:5c:07:63:8b:c0:fe:15:b8: 17:69:3a:09:eb:f7:9c:91:40:78:f2:70:42:b6:f0: 40:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:3A:3A:AC:D3:AC:66:F4:47:8A:0D:71:9D:27:C7:A4:C9:A0:73:46 X509v3 Authority Key Identifier: keyid:67:92:52:B9:E2:1D:F8:17:6C:C5:38:02:78:95:F7:F4:58:56:66:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5JSueId-BdsxTgCeJX39FhWZqs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/ATo6rNOsZvRHig1xnSfHpMmgc0Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/31c267-f2e3-4fa9-9d41-336e5b3dd071/1/Z5JSueId-BdsxTgCeJX39FhWZqs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.30.208.0/21 77.111.240.0/22 91.198.169.0/24 91.221.196.0/23 104.37.32.0/21 185.10.8.0/22 185.164.12.0/22 193.202.110.0/24 195.47.247.0/24 195.206.121.0/24 IPv6: 2001:67c:3c0::/48 2001:67c:28cc::/48 2a02:2350::/32 2a03:53c0::/32 Signature Algorithm: sha256WithRSAEncryption 15:b8:62:38:52:b1:59:35:60:0d:40:4e:bb:71:4c:85:50:78: f1:e9:9e:7b:13:91:f9:dd:9c:0c:99:08:dd:ea:0a:17:df:bb: ab:fb:93:08:81:de:c1:7e:96:8d:32:df:51:6a:0a:bc:c8:24: 90:89:da:8e:98:3c:3e:2b:8e:ec:8f:20:86:b2:26:0e:21:3d: 39:a1:f6:f0:40:c3:dd:cf:0e:12:20:57:de:eb:b4:6d:7b:47: 7e:1a:aa:c9:5e:6e:79:d8:66:66:c0:5e:32:b3:7a:3f:31:36: 91:d7:73:e1:b5:50:6f:0f:80:8f:3c:dd:4d:72:8b:fb:93:28: be:9b:07:0e:a1:d0:d5:c6:ea:72:b2:0d:59:d9:d8:89:25:c1: a1:eb:f2:5e:cd:07:cc:93:d2:c9:fd:c8:f8:37:8c:71:dc:7d: 55:3d:09:56:fd:3c:a1:97:04:04:eb:51:06:d4:e8:39:e5:7a: cd:3b:8c:f2:6d:3a:5e:55:5b:78:60:4e:e4:6e:e0:3b:72:6e: 29:de:c0:76:ce:6f:52:dd:42:11:cc:75:69:1f:66:61:ba:97: 88:b1:db:66:46:04:3b:0e:a6:02:c1:a9:08:82:2b:30:68:d4: 06:fb:15:ad:08:c1:c5:18:7b:36:9b:22:13:7f:75:4e:eb:62: 14:ac:4e:b5 -----BEGIN CERTIFICATE----- MIIFWzCCBEOgAwIBAgISAZt6Wsqdd1RT9tr9BWQYwTAWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OTI1MmI5ZTIxZGY4MTc2Y2M1MzgwMjc4OTVmN2Y0NTg1 NjY2YWIwHhcNMjYwMTAxMTYxODQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMTNhM2FhY2QzYWM2NmY0NDc4YTBkNzE5ZDI3YzdhNGM5YTA3MzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuS3GiKqXMTG437f1+E8LkRhrA+tu Qm9ItkoGtKnISsEwyS6Q0wG0AjOlRxLBDLcYfEi0t4ZOIxc3/Q64QsdL7kYtaZsM dQdJIPA3F7nOgHk5fwQJAScjUyWXajtkvj+5uszjcceJg1ydVqLzYIgISjtstrTg +1MuntKgRALHDEXCZZR+/2iwGNEaUHBSgtrN+3UzypuA2UBYbbwPgFXYesTGLe2g RopPMdw2eff9IKzoFUmsj6KjmHAGM0rXqUj7NN3CONJ7OOfjGRxYXR3RfjnvRGRI /O50SAQX0GrgbUl2y1weiF6uXAdji8D+FbgXaToJ6/eckUB48nBCtvBA5QIDAQAB o4ICZzCCAmMwHQYDVR0OBBYEFAE6OqzTrGb0R4oNcZ0nx6TJoHNGMB8GA1UdIwQY MBaAFGeSUrniHfgXbMU4AniV9/RYVmarMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjVKU3VlSWQtQmRzeFRnQ2VKWDM5RmhXWnFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8zMWMyNjctZjJlMy00ZmE5LTlkNDEt MzM2ZTViM2RkMDcxLzEvQVRvNnJOT3NadlJIaWcxeG5TZkhwTW1nYzBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8zMWMyNjctZjJlMy00ZmE5LTlkNDEtMzM2ZTViM2RkMDcx LzEvWjVKU3VlSWQtQmRzeFRnQ2VKWDM5RmhXWnFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMH0GCCsGAQUFBwEHAQH/BG4wbDBCBAIAATA8AwQDLh7QAwQC TW/wAwQAW8apAwQBW93EAwQDaCUgAwQCuQoIAwQCuaQMAwQAwcpuAwQAwy/3AwQA w855MCYEAgACMCADBwAgAQZ8A8ADBwAgAQZ8KMwDBQAqAiNQAwUAKgNTwDANBgkq hkiG9w0BAQsFAAOCAQEAFbhiOFKxWTVgDUBOu3FMhVB48emeexOR+d2cDJkI3eoK F9+7q/uTCIHewX6WjTLfUWoKvMgkkInajpg8PiuO7I8ghrImDiE9OaH28EDD3c8O EiBX3uu0bXtHfhqqyV5uedhmZsBeMrN6PzE2kddz4bVQbw+AjzzdTXKL+5MovpsH DqHQ1cbqcrINWdnYiSXBoevyXs0HzJPSyf3I+DeMcdx9VT0JVv08oZcEBOtRBtTo OeV6zTuM8m06XlVbeGBO5G7gO3JuKd7Ads5vUt1CEcx1aR9mYbqXiLHbZkYEOw6m AsGpCIIrMGjUBvsVrQjBxRh7NpsiE391TutiFKxOtQ== -----END CERTIFICATE-----Generated at Tue Feb 10 08:38:23 2026 by rpki-client