This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/LbD2tYPsPC8uP37pndvidAshgOM.roa File: LbD2tYPsPC8uP37pndvidAshgOM.roa (raw, json) Hash identifier: ePxnnXcYkNMYiZIwMvTVXJah+jChUGFP5Kv/37gIREs= Subject key identifier: 2D:B0:F6:B5:83:EC:3C:2F:2E:3F:7E:E9:9D:DB:E2:74:0B:21:80:E3 Certificate issuer: /CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca Certificate serial: 019B797EFE57156D9DB919E7F721C1E8BC3A Authority key identifier: D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/LbD2tYPsPC8uP37pndvidAshgOM.roa Signing time: Thu 01 Jan 2026 12:18:44 +0000 ROA not before: Thu 01 Jan 2026 12:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197350 IP address blocks: 46.60.0.0/20 maxlen: 20 46.60.0.0/22 maxlen: 22 46.60.1.0/24 maxlen: 24 46.60.4.0/22 maxlen: 22 46.60.5.0/24 maxlen: 24 46.60.7.0/24 maxlen: 24 46.60.12.0/23 maxlen: 23 46.60.13.0/24 maxlen: 24 46.60.14.0/24 maxlen: 24 46.60.15.0/24 maxlen: 24 46.60.48.0/24 maxlen: 24 46.60.49.0/24 maxlen: 24 46.60.51.0/24 maxlen: 24 46.60.52.0/24 maxlen: 24 46.60.53.0/24 maxlen: 24 46.60.54.0/24 maxlen: 24 46.60.55.0/24 maxlen: 24 46.60.56.0/22 maxlen: 22 46.60.58.0/23 maxlen: 23 46.60.60.0/24 maxlen: 24 46.60.61.0/24 maxlen: 24 46.60.62.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.mft rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:fe:57:15:6d:9d:b9:19:e7:f7:21:c1:e8:bc:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d187d4c98b3ed8a717c7d6e45554d353ea3e05ca Validity Not Before: Jan 1 12:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2db0f6b583ec3c2f2e3f7ee99ddbe2740b2180e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:93:cd:01:bb:e0:61:f6:f3:5b:97:93:ca:1a: f7:12:77:88:fe:ed:a1:4f:4b:33:93:fc:e8:ab:a3: fd:2d:a4:a6:47:a2:0f:35:ff:7b:5b:37:96:09:df: bf:53:c0:80:ee:be:58:a0:4f:53:b5:5b:39:6c:6c: 25:78:08:db:2f:94:d3:8c:2a:31:9a:db:b2:6e:a1: 0b:e2:56:bd:d0:86:de:c2:f2:97:8a:1e:f5:1c:68: 1e:df:d7:44:6b:b6:bb:92:68:2c:ae:80:01:42:1b: 72:07:3c:ff:13:c6:66:77:79:44:38:82:44:90:95: 2b:c3:0e:f0:93:57:d2:03:d2:0d:9b:07:f7:a1:80: 7d:49:09:d6:94:11:b4:81:97:da:91:a7:1f:4f:9e: 9a:37:93:07:a3:8e:72:18:ae:f4:66:6b:22:66:98: 67:57:51:16:0b:08:b6:b2:6e:24:1a:0f:67:ee:ab: c3:bd:9d:b1:c8:87:fb:7f:c9:cb:19:84:22:4a:35: 98:ce:52:dc:88:e8:b0:31:94:5a:d9:e0:f3:b5:52: ac:d6:45:b1:77:41:28:08:24:c0:9c:16:c3:87:63: 88:8d:3e:e2:c1:78:ef:82:46:3a:3f:c4:1a:c8:15: 73:f0:11:a0:d0:f9:fe:4f:28:37:21:dc:38:c1:f6: 01:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:B0:F6:B5:83:EC:3C:2F:2E:3F:7E:E9:9D:DB:E2:74:0B:21:80:E3 X509v3 Authority Key Identifier: keyid:D1:87:D4:C9:8B:3E:D8:A7:17:C7:D6:E4:55:54:D3:53:EA:3E:05:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YfUyYs-2KcXx9bkVVTTU-o-Bco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/LbD2tYPsPC8uP37pndvidAshgOM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/ba3316-5b95-4e12-875c-502967dfcc48/1/0YfUyYs-2KcXx9bkVVTTU-o-Bco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.60.0.0/20 46.60.48.0/23 46.60.51.0-46.60.63.255 Signature Algorithm: sha256WithRSAEncryption 58:1f:ba:02:4b:0e:e5:c7:9d:d5:94:51:55:38:cf:22:25:a7: 67:4f:3f:59:79:3a:ae:10:34:27:44:87:c8:d7:f4:d6:30:c9: 3f:29:a5:06:04:e0:49:11:88:b2:ba:78:45:3e:57:16:1f:60: 0a:87:7c:c9:da:6f:42:fd:86:36:53:d0:a3:01:cf:e5:06:8a: 2b:a9:61:bb:40:3a:c0:e9:1f:b2:30:69:2a:a0:e3:a4:1a:d9: 48:e7:02:e4:27:db:e4:81:fb:b2:88:99:24:ed:ec:da:a2:5f: ea:b5:a7:a6:21:41:4f:4d:bc:f0:c8:27:77:f3:ce:3e:74:c3: fc:43:b8:0f:9a:34:fe:0b:0b:e2:73:e3:29:16:ca:5f:21:b4: ad:da:9b:4a:e5:3d:ed:93:1f:81:9c:e5:80:ae:b8:72:44:10: 3f:2a:30:37:fc:72:35:0f:92:da:1b:1b:d8:50:ca:a8:5c:56: bc:af:73:a3:08:b4:57:a1:87:46:06:12:3c:49:05:d0:83:c1: 61:c7:cb:0d:5f:c5:fc:f0:21:11:ee:38:f3:d7:c0:b2:2c:4a: 94:fd:78:bc:45:72:85:39:80:f1:63:4e:45:cf:38:8c:4d:0d: 68:93:64:e8:fb:c4:85:97:95:72:9f:f2:02:06:a4:e0:b1:a5: 4e:74:92:fe -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt5fv5XFW2duRnn9yHB6Lw6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxODdkNGM5OGIzZWQ4YTcxN2M3ZDZlNDU1NTRkMzUzZWEz ZTA1Y2EwHhcNMjYwMTAxMTIxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZGIwZjZiNTgzZWMzYzJmMmUzZjdlZTk5ZGRiZTI3NDBiMjE4MGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZPNAbvgYfbzW5eTyhr3EneI/u2h T0szk/zoq6P9LaSmR6IPNf97WzeWCd+/U8CA7r5YoE9TtVs5bGwleAjbL5TTjCox mtuybqEL4la90IbewvKXih71HGge39dEa7a7kmgsroABQhtyBzz/E8Zmd3lEOIJE kJUrww7wk1fSA9INmwf3oYB9SQnWlBG0gZfakacfT56aN5MHo45yGK70ZmsiZphn V1EWCwi2sm4kGg9n7qvDvZ2xyIf7f8nLGYQiSjWYzlLciOiwMZRa2eDztVKs1kWx d0EoCCTAnBbDh2OIjT7iwXjvgkY6P8QayBVz8BGg0Pn+Tyg3Idw4wfYB5QIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFC2w9rWD7DwvLj9+6Z3b4nQLIYDjMB8GA1UdIwQY MBaAFNGH1MmLPtinF8fW5FVU01PqPgXKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFlmVXlZcy0yS2NYeDlia1ZWVFRVLW8tQmNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9iYTMzMTYtNWI5NS00ZTEyLTg3NWMt NTAyOTY3ZGZjYzQ4LzEvTGJEMnRZUHNQQzh1UDM3cG5kdmlkQXNoZ09NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny9iYTMzMTYtNWI5NS00ZTEyLTg3NWMtNTAyOTY3ZGZjYzQ4 LzEvMFlmVXlZcy0yS2NYeDlia1ZWVFRVLW8tQmNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQELjwAAwQB LjwwMAwDBAAuPDMDBAYuPAAwDQYJKoZIhvcNAQELBQADggEBAFgfugJLDuXHndWU UVU4zyIlp2dPP1l5Oq4QNCdEh8jX9NYwyT8ppQYE4EkRiLK6eEU+VxYfYAqHfMna b0L9hjZT0KMBz+UGiiupYbtAOsDpH7IwaSqg46Qa2UjnAuQn2+SB+7KImSTt7Nqi X+q1p6YhQU9NvPDIJ3fzzj50w/xDuA+aNP4LC+Jz4ykWyl8htK3am0rlPe2TH4Gc 5YCuuHJEED8qMDf8cjUPktobG9hQyqhcVryvc6MItFehh0YGEjxJBdCDwWHHyw1f xfzwIRHuOPPXwLIsSpT9eLxFcoU5gPFjTkXPOIxNDWiTZOj7xIWXlXKf8gIGpOCx pU50kv4= -----END CERTIFICATE-----Generated at Mon Feb 9 22:35:40 2026 by rpki-client