This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/IY_IuuJuaK79VLLNGWzdgpmhtzk.roa File: IY_IuuJuaK79VLLNGWzdgpmhtzk.roa (raw, json) Hash identifier: ozNd/EaW8/iXSxCUvy9l7Oy582TGkU20swdy8suxdPo= Subject key identifier: 21:8F:C8:BA:E2:6E:68:AE:FD:54:B2:CD:19:6C:DD:82:99:A1:B7:39 Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Certificate serial: 019BBC647772CFAB759F1DFEB55BCC084F0C Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/IY_IuuJuaK79VLLNGWzdgpmhtzk.roa Signing time: Wed 14 Jan 2026 12:04:19 +0000 ROA not before: Wed 14 Jan 2026 12:04:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49200 IP address blocks: 46.243.204.0/24 maxlen: 24 46.243.207.0/24 maxlen: 24 46.243.208.0/24 maxlen: 24 46.243.213.0/24 maxlen: 24 46.243.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:bc:64:77:72:cf:ab:75:9f:1d:fe:b5:5b:cc:08:4f:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Validity Not Before: Jan 14 12:04:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=218fc8bae26e68aefd54b2cd196cdd8299a1b739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4e:5a:0f:a5:93:36:82:c6:a2:25:09:76:9e: 65:b2:0b:52:4c:91:59:e8:e0:1a:7c:ea:a8:39:96: 34:0b:c1:3f:75:45:4f:7b:9f:8d:fc:66:4e:27:71: 30:3c:22:dc:ff:07:9d:9a:0a:9d:ea:c8:35:dd:ed: a2:fd:16:db:6c:90:b7:c0:31:2a:61:4f:c5:09:cf: 49:c8:69:71:37:d1:e7:64:1e:73:3c:8e:09:0f:c3: eb:09:1f:3b:51:f7:7b:3a:95:32:1e:a6:f7:76:9c: b7:ce:a7:f5:8d:82:50:b1:0a:34:76:65:a8:f5:b6: d1:f3:ba:21:e3:b9:09:c0:f6:46:1c:c0:2d:d9:aa: c9:8c:15:82:38:6e:66:fe:de:2c:cb:2d:7b:db:7a: e9:3a:10:b7:40:4b:1c:21:b7:8b:12:41:5d:ed:a0: 6b:64:cc:a7:86:65:2f:16:43:99:ef:8a:7c:ef:c1: bc:06:61:7c:24:df:fe:03:62:23:3e:70:e7:23:66: 0e:40:79:74:9d:7f:ce:d6:03:5c:9f:4d:84:ba:4f: d1:89:6d:4e:5f:94:28:7b:a4:53:a4:b2:f4:c9:6d: 08:d6:01:b4:14:76:32:06:3b:8b:ca:a6:13:82:a3: 9f:4c:ad:7f:27:18:f9:f4:80:80:53:50:78:65:ca: 18:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:8F:C8:BA:E2:6E:68:AE:FD:54:B2:CD:19:6C:DD:82:99:A1:B7:39 X509v3 Authority Key Identifier: keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/IY_IuuJuaK79VLLNGWzdgpmhtzk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.243.204.0/24 46.243.207.0-46.243.208.255 46.243.213.0/24 46.243.216.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:83:8a:31:61:fa:b4:a5:89:a4:db:e2:b0:df:9a:eb:8b:1d: 85:15:26:96:0f:c1:3c:78:d9:49:b5:64:f6:6f:d8:dc:af:e9: b4:3f:6d:b2:4d:9c:4e:21:07:6c:89:c3:00:97:2a:d9:45:43: cc:17:8e:8f:a6:a2:05:4a:4b:f6:05:06:98:8f:2d:c1:36:78: 26:77:a7:8d:a2:23:2d:a3:43:78:ff:1d:21:73:70:c3:9b:87: 56:6d:30:df:4a:22:02:3c:79:45:2b:cd:76:eb:a0:3f:d0:e0: 67:62:5a:7d:3a:33:67:7d:45:2b:5d:dc:1e:b4:03:f6:15:43: 35:6e:b5:8d:11:ce:9c:12:49:b2:a2:14:3d:66:6d:10:98:dc: 95:de:1b:53:aa:80:c6:86:31:8b:dc:29:26:1d:2f:1d:b0:1f: 54:26:0d:e8:36:42:1c:fa:a0:24:ba:75:9b:7b:11:32:b7:bf: 15:7c:af:34:d3:3c:55:71:d6:08:f2:f2:f9:29:26:32:15:35: 7e:8e:56:7a:6a:8e:72:dd:8b:66:d8:6e:69:e7:67:11:6a:54: 50:16:1d:f8:ba:0c:8b:dd:45:ba:a0:f4:35:2e:e3:1d:93:4f: 69:2d:4c:74:0b:3d:b2:84:11:e5:7c:a6:7a:f1:cb:82:b8:7c: 8a:ed:69:24 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZu8ZHdyz6t1nx3+tVvMCE8MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0 NzA2N2UwHhcNMjYwMTE0MTIwNDE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMThmYzhiYWUyNmU2OGFlZmQ1NGIyY2QxOTZjZGQ4Mjk5YTFiNzM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn05aD6WTNoLGoiUJdp5lsgtSTJFZ 6OAafOqoOZY0C8E/dUVPe5+N/GZOJ3EwPCLc/wedmgqd6sg13e2i/RbbbJC3wDEq YU/FCc9JyGlxN9HnZB5zPI4JD8PrCR87Ufd7OpUyHqb3dpy3zqf1jYJQsQo0dmWo 9bbR87oh47kJwPZGHMAt2arJjBWCOG5m/t4syy1723rpOhC3QEscIbeLEkFd7aBr ZMynhmUvFkOZ74p878G8BmF8JN/+A2IjPnDnI2YOQHl0nX/O1gNcn02Euk/RiW1O X5Qoe6RTpLL0yW0I1gG0FHYyBjuLyqYTgqOfTK1/Jxj59ICAU1B4ZcoYCwIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFCGPyLribmiu/VSyzRls3YKZobc5MB8GA1UdIwQY MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt OGM5NTgxZDk2ZDhmLzEvSVlfSXV1SnVhSzc5VkxMTkdXemRncG1odHprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQALvPMMAwD BAAu888DBAAu89ADBAAu89UDBAAu89gwDQYJKoZIhvcNAQELBQADggEBACyDijFh +rSliaTb4rDfmuuLHYUVJpYPwTx42Um1ZPZv2Nyv6bQ/bbJNnE4hB2yJwwCXKtlF Q8wXjo+mogVKS/YFBpiPLcE2eCZ3p42iIy2jQ3j/HSFzcMObh1ZtMN9KIgI8eUUr zXbroD/Q4GdiWn06M2d9RStd3B60A/YVQzVutY0RzpwSSbKiFD1mbRCY3JXeG1Oq gMaGMYvcKSYdLx2wH1QmDeg2Qhz6oCS6dZt7ETK3vxV8rzTTPFVx1gjy8vkpJjIV NX6OVnpqjnLdi2bYbmnnZxFqVFAWHfi6DIvdRbqg9DUu4x2TT2ktTHQLPbKEEeV8 pnrxy4K4fIrtaSQ= -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:38 2026 by rpki-client