This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/MXsHfHHkocXir6Fl7XKAaAu2S0E.roa File: MXsHfHHkocXir6Fl7XKAaAu2S0E.roa (raw, json) Hash identifier: dcyx37qVuvEq+keCJub/tkmWpbj7d9S3C2o/mbDIfZg= Subject key identifier: 31:7B:07:7C:71:E4:A1:C5:E2:AF:A1:65:ED:72:80:68:0B:B6:4B:41 Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Certificate serial: 019B7F83A0FF6DB80CA4FDF19D2C8406CDD3 Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/MXsHfHHkocXir6Fl7XKAaAu2S0E.roa Signing time: Fri 02 Jan 2026 16:21:31 +0000 ROA not before: Fri 02 Jan 2026 16:21:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56911 IP address blocks: 46.243.128.0/22 maxlen: 22 46.243.132.0/23 maxlen: 23 46.243.134.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:a0:ff:6d:b8:0c:a4:fd:f1:9d:2c:84:06:cd:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Validity Not Before: Jan 2 16:21:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=317b077c71e4a1c5e2afa165ed7280680bb64b41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b6:fe:86:ff:a2:2c:4b:17:04:10:40:bd:88: c0:92:d3:d7:67:aa:25:0a:4f:fd:b3:f3:22:de:da: 61:76:63:32:64:ed:b4:6d:ac:b4:e7:c3:50:c9:60: 98:c5:9c:8d:f5:b3:dc:11:07:84:b6:5c:eb:b2:b6: 56:86:87:56:92:e8:b5:55:ad:e4:be:49:86:ea:29: 1b:e6:cc:ec:a7:3b:fe:63:54:1b:18:24:01:cd:d5: 97:c7:50:5a:b1:30:cd:c0:56:2d:37:40:04:8c:47: 09:35:b5:03:d0:52:9e:5c:4b:fc:1e:2e:aa:0b:43: ea:10:bb:ce:07:e0:5d:9f:7d:46:91:aa:a3:a4:55: 94:b3:de:f7:ef:a3:de:b3:7c:52:39:a5:c6:ef:51: 8d:c5:2c:9a:7d:a4:13:cc:26:7d:cf:96:9d:a9:18: 32:8c:d3:43:2a:ff:2f:43:75:ef:55:7c:13:7e:43: 6b:14:03:94:c9:86:5e:fc:ac:c0:09:d4:b4:28:cd: ae:2f:13:70:1e:38:58:28:18:82:39:7d:6a:da:8c: 77:96:b4:5f:ed:65:38:13:2a:bd:82:77:d8:97:35: f5:10:ac:3c:20:f5:83:a8:67:66:73:dd:84:08:5f: c2:49:f4:d4:f4:0f:22:4b:36:fc:73:0e:27:2b:1e: 94:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:7B:07:7C:71:E4:A1:C5:E2:AF:A1:65:ED:72:80:68:0B:B6:4B:41 X509v3 Authority Key Identifier: keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/MXsHfHHkocXir6Fl7XKAaAu2S0E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.243.128.0/21 Signature Algorithm: sha256WithRSAEncryption 87:4d:32:f0:75:cb:0b:a6:60:60:ee:06:09:57:b4:c4:a1:8e: e5:4c:59:ab:6a:b8:7c:51:e9:44:6d:49:b5:76:16:9a:fe:f0: 8e:fe:7e:ef:e6:b1:0a:12:f5:83:0b:21:37:63:40:f0:d5:48: 22:bc:ee:08:2f:44:62:5c:83:9a:69:e6:f6:26:f3:0d:09:49: 7d:21:55:0b:ea:e6:e7:6c:5c:29:02:97:25:ff:b2:56:89:c8: 01:50:ec:28:37:b4:e7:05:d0:3c:f3:ec:3f:fe:c0:38:b0:20: 51:83:5b:ef:ab:7d:63:bc:33:18:a8:a5:6e:d9:3b:40:af:5c: bf:98:60:78:f9:8c:50:99:19:b5:d3:30:86:bf:67:bc:db:b5: 51:a5:9f:50:5c:8f:11:ae:b2:b1:ef:8c:e9:c9:a4:11:6a:41: 2d:bf:a2:7e:94:59:2c:3d:b6:50:c9:bc:64:c2:bf:cf:f9:15: ea:e3:b7:ec:44:68:5e:68:1a:b3:e1:8b:7a:bf:db:ff:7f:65: 0b:27:af:7f:d5:58:77:fe:19:78:1b:1e:e9:59:35:af:e2:0f: 93:da:d8:96:07:bf:4d:bf:85:41:b3:34:8b:c6:fe:c1:86:3c: d7:97:a8:42:4d:ce:23:87:57:f3:c3:36:b8:b8:09:97:4f:bb: bc:21:bd:70 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g6D/bbgMpP3xnSyEBs3TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0 NzA2N2UwHhcNMjYwMTAyMTYyMTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzMTdiMDc3YzcxZTRhMWM1ZTJhZmExNjVlZDcyODA2ODBiYjY0YjQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07b+hv+iLEsXBBBAvYjAktPXZ6ol Ck/9s/Mi3tphdmMyZO20bay058NQyWCYxZyN9bPcEQeEtlzrsrZWhodWkui1Va3k vkmG6ikb5szspzv+Y1QbGCQBzdWXx1BasTDNwFYtN0AEjEcJNbUD0FKeXEv8Hi6q C0PqELvOB+Bdn31GkaqjpFWUs97376Pes3xSOaXG71GNxSyafaQTzCZ9z5adqRgy jNNDKv8vQ3XvVXwTfkNrFAOUyYZe/KzACdS0KM2uLxNwHjhYKBiCOX1q2ox3lrRf 7WU4Eyq9gnfYlzX1EKw8IPWDqGdmc92ECF/CSfTU9A8iSzb8cw4nKx6UAwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDF7B3xx5KHF4q+hZe1ygGgLtktBMB8GA1UdIwQY MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt OGM5NTgxZDk2ZDhmLzEvTVhzSGZISGtvY1hpcjZGbDdYS0FhQXUyUzBFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLvOAMA0G CSqGSIb3DQEBCwUAA4IBAQCHTTLwdcsLpmBg7gYJV7TEoY7lTFmrarh8UelEbUm1 dhaa/vCO/n7v5rEKEvWDCyE3Y0Dw1UgivO4IL0RiXIOaaeb2JvMNCUl9IVUL6ubn bFwpApcl/7JWicgBUOwoN7TnBdA88+w//sA4sCBRg1vvq31jvDMYqKVu2TtAr1y/ mGB4+YxQmRm10zCGv2e827VRpZ9QXI8RrrKx74zpyaQRakEtv6J+lFksPbZQybxk wr/P+RXq47fsRGheaBqz4Yt6v9v/f2ULJ69/1Vh3/hl4Gx7pWTWv4g+T2tiWB79N v4VBszSLxv7BhjzXl6hCTc4jh1fzwza4uAmXT7u8Ib1w -----END CERTIFICATE-----Generated at Mon Jan 26 04:50:26 2026 by rpki-client