This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/6-UoC7qjsZof7IzKc6tiG0igP8U.roa File: 6-UoC7qjsZof7IzKc6tiG0igP8U.roa (raw, json) Hash identifier: MgBRI8BnXWIYwjh0iNOR+ruSjwdNX8aCAY7jF113WDY= Subject key identifier: EB:E5:28:0B:BA:A3:B1:9A:1F:EC:8C:CA:73:AB:62:1B:48:A0:3F:C5 Certificate issuer: /CN=9b5895e7f6a6d4aba9c961f713b2e79715f021f0 Certificate serial: 019B7A5AA4E36BDCBDB4E468E99E13A6352C Authority key identifier: 9B:58:95:E7:F6:A6:D4:AB:A9:C9:61:F7:13:B2:E7:97:15:F0:21:F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1iV5_am1KupyWH3E7LnlxXwIfA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/6-UoC7qjsZof7IzKc6tiG0igP8U.roa Signing time: Thu 01 Jan 2026 16:18:39 +0000 ROA not before: Thu 01 Jan 2026 16:18:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51825 IP address blocks: 46.31.96.0/21 maxlen: 21 46.31.96.0/23 maxlen: 23 46.31.96.0/24 maxlen: 24 46.31.97.0/24 maxlen: 24 46.31.98.0/23 maxlen: 23 46.31.98.0/24 maxlen: 24 46.31.99.0/24 maxlen: 24 46.31.100.0/23 maxlen: 23 46.31.100.0/24 maxlen: 24 46.31.101.0/24 maxlen: 24 46.31.102.0/23 maxlen: 23 46.31.102.0/24 maxlen: 24 46.31.103.0/24 maxlen: 24 147.234.92.0/22 maxlen: 22 147.234.96.0/21 maxlen: 21 185.24.204.0/22 maxlen: 22 185.24.204.0/23 maxlen: 23 185.24.204.0/24 maxlen: 24 185.24.205.0/24 maxlen: 24 185.24.206.0/23 maxlen: 23 185.24.206.0/24 maxlen: 24 185.24.207.0/24 maxlen: 24 213.137.64.0/20 maxlen: 20 213.137.64.0/24 maxlen: 24 213.137.65.0/24 maxlen: 24 213.137.66.0/24 maxlen: 24 213.137.67.0/24 maxlen: 24 213.137.70.0/24 maxlen: 24 213.137.71.0/24 maxlen: 24 213.137.72.0/23 maxlen: 23 213.137.73.0/24 maxlen: 24 213.137.77.0/24 maxlen: 24 213.137.78.0/24 maxlen: 24 213.137.79.0/24 maxlen: 24 2a02:5080::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.mft rsync://rpki.ripe.net/repository/DEFAULT/m1iV5_am1KupyWH3E7LnlxXwIfA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:a4:e3:6b:dc:bd:b4:e4:68:e9:9e:13:a6:35:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b5895e7f6a6d4aba9c961f713b2e79715f021f0 Validity Not Before: Jan 1 16:18:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ebe5280bbaa3b19a1fec8cca73ab621b48a03fc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a0:8e:b4:8a:41:36:fb:77:a4:c7:27:7d:25: 60:8d:d0:72:a3:68:ba:bc:2c:d8:2a:17:a2:0d:bc: e3:0d:44:6f:a8:b8:84:10:75:be:18:b3:19:eb:1f: 3a:34:e2:3e:bf:f6:de:e6:ec:d3:f4:61:a3:50:5a: d2:be:7a:16:ef:f2:ec:1d:6f:9b:89:ff:52:d6:45: ca:0b:df:cb:17:9d:80:12:66:0d:16:10:cb:33:d6: 14:74:61:ea:16:fd:2f:e1:49:a8:11:ec:28:3f:a9: c7:32:69:1d:34:81:e4:13:73:68:e0:08:f1:35:84: 6d:10:0e:d4:bf:73:36:40:ef:7f:4e:14:61:5d:6f: ed:f8:6a:3e:d0:c8:0f:8a:d5:6b:f2:e3:9b:7a:87: 6a:cf:9a:5d:a1:61:75:4c:03:09:bd:eb:a5:39:b1: a4:40:6a:87:fe:57:65:d9:46:d3:27:eb:95:60:a2: 62:4b:67:f2:e6:55:ad:ff:0a:5c:32:46:5d:3a:9d: 73:d5:8d:f8:c0:48:55:55:59:8f:f3:16:2c:d3:1a: 25:a3:83:ab:a8:eb:fe:30:a0:3e:1b:92:3c:47:df: d4:05:76:6b:2a:a7:f9:28:1d:e6:ea:70:c0:c3:f0: 1d:a3:2b:a8:c7:1a:9c:80:20:30:fc:44:e4:05:79: db:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:E5:28:0B:BA:A3:B1:9A:1F:EC:8C:CA:73:AB:62:1B:48:A0:3F:C5 X509v3 Authority Key Identifier: keyid:9B:58:95:E7:F6:A6:D4:AB:A9:C9:61:F7:13:B2:E7:97:15:F0:21:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1iV5_am1KupyWH3E7LnlxXwIfA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/6-UoC7qjsZof7IzKc6tiG0igP8U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.31.96.0/21 147.234.92.0-147.234.103.255 185.24.204.0/22 213.137.64.0/20 IPv6: 2a02:5080::/32 Signature Algorithm: sha256WithRSAEncryption 02:4a:37:5e:81:81:e6:8f:fc:93:a6:04:1c:34:24:cc:50:4d: a8:3b:83:aa:12:ba:a7:5d:47:84:aa:a5:1b:bf:ef:e0:41:cc: 21:5a:f9:c2:1d:3e:2b:5c:e3:9c:6d:b9:80:05:71:41:e4:c8: 33:57:07:c5:35:54:c1:83:4b:9e:db:62:5e:7b:04:bc:b8:5c: 32:af:fe:da:01:28:a8:c2:b9:b9:9f:a8:05:42:a8:a5:d6:01: 42:30:7a:aa:fc:11:d8:70:ac:49:12:f4:c3:54:13:1a:98:1b: f8:25:47:4e:0f:2d:23:76:59:99:62:c1:01:2f:c5:f7:0b:e9: d5:5d:1b:9d:36:b7:9e:cc:6e:cd:35:4d:d1:c0:76:ba:01:f3: 65:b1:7e:80:ea:9d:94:bf:f2:34:f5:31:44:fe:f1:0e:56:fb: 2b:9a:78:3a:a9:94:d1:79:8e:34:35:a5:32:16:6b:66:ed:b5: 67:ba:30:80:a3:1e:46:3c:a6:2d:3e:c3:64:3b:b4:65:2f:37: 52:01:cb:35:ea:5e:33:9f:61:60:bd:1e:36:8d:6e:84:fb:b4: 11:bb:4c:0d:77:78:58:eb:49:1c:0a:37:ad:0b:7a:8b:80:a0: c3:80:21:9e:24:3d:4d:13:b2:33:61:fa:e7:6a:39:72:39:dc: b7:24:52:35 -----BEGIN CERTIFICATE----- MIIFJjCCBA6gAwIBAgISAZt6WqTja9y9tORo6Z4TpjUsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliNTg5NWU3ZjZhNmQ0YWJhOWM5NjFmNzEzYjJlNzk3MTVm MDIxZjAwHhcNMjYwMTAxMTYxODM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYmU1MjgwYmJhYTNiMTlhMWZlYzhjY2E3M2FiNjIxYjQ4YTAzZmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqCOtIpBNvt3pMcnfSVgjdByo2i6 vCzYKheiDbzjDURvqLiEEHW+GLMZ6x86NOI+v/be5uzT9GGjUFrSvnoW7/LsHW+b if9S1kXKC9/LF52AEmYNFhDLM9YUdGHqFv0v4UmoEewoP6nHMmkdNIHkE3No4Ajx NYRtEA7Uv3M2QO9/ThRhXW/t+Go+0MgPitVr8uObeodqz5pdoWF1TAMJveulObGk QGqH/ldl2UbTJ+uVYKJiS2fy5lWt/wpcMkZdOp1z1Y34wEhVVVmP8xYs0xolo4Or qOv+MKA+G5I8R9/UBXZrKqf5KB3m6nDAw/AdoyuoxxqcgCAw/ETkBXnb9wIDAQAB o4ICMjCCAi4wHQYDVR0OBBYEFOvlKAu6o7GaH+yMynOrYhtIoD/FMB8GA1UdIwQY MBaAFJtYlef2ptSrqclh9xOy55cV8CHwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbTFpVjVfYW0xS3VweVdIM0U3TG5seFh3SWZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8xMzRiODItYmNmYi00NDVjLWJkNDIt ZmMyYTk3YjdkNTNlLzEvNi1Vb0M3cWpzWm9mN0l6S2M2dGlHMGlnUDhVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi8xMzRiODItYmNmYi00NDVjLWJkNDItZmMyYTk3YjdkNTNl LzEvbTFpVjVfYW0xS3VweVdIM0U3TG5seFh3SWZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAmBAIAATAgAwQDLh9gMAwD BAKT6lwDBAOT6mADBAK5GMwDBATViUAwDQQCAAIwBwMFACoCUIAwDQYJKoZIhvcN AQELBQADggEBAAJKN16BgeaP/JOmBBw0JMxQTag7g6oSuqddR4SqpRu/7+BBzCFa +cIdPitc45xtuYAFcUHkyDNXB8U1VMGDS57bYl57BLy4XDKv/toBKKjCubmfqAVC qKXWAUIweqr8EdhwrEkS9MNUExqYG/glR04PLSN2WZliwQEvxfcL6dVdG502t57M bs01TdHAdroB82WxfoDqnZS/8jT1MUT+8Q5W+yuaeDqplNF5jjQ1pTIWa2bttWe6 MICjHkY8pi0+w2Q7tGUvN1IByzXqXjOfYWC9HjaNboT7tBG7TA13eFjrSRwKN60L eouAoMOAIZ4kPU0TsjNh+udqOXI53LckUjU= -----END CERTIFICATE-----Generated at Tue Feb 10 00:03:17 2026 by rpki-client