This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/lEbjnQKhS-WOEX9RNI8uvh7ntm8.roa File: lEbjnQKhS-WOEX9RNI8uvh7ntm8.roa (raw, json) Hash identifier: njg2lEvNlP78vJZCgNqoI9ZZjFefykyHjoEjFHNtef0= Subject key identifier: 94:46:E3:9D:02:A1:4B:E5:8E:11:7F:51:34:8F:2E:BE:1E:E7:B6:6F Certificate issuer: /CN=173b0d7f0eac665733d92816dd49162d72e221f3 Certificate serial: 019BFEA033713F5861F82FE99ADBA2A98E3A Authority key identifier: 17:3B:0D:7F:0E:AC:66:57:33:D9:28:16:DD:49:16:2D:72:E2:21:F3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/lEbjnQKhS-WOEX9RNI8uvh7ntm8.roa Signing time: Tue 27 Jan 2026 08:44:30 +0000 ROA not before: Tue 27 Jan 2026 08:44:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49821 IP address blocks: 46.175.12.0/24 maxlen: 24 91.202.196.0/22 maxlen: 22 91.215.204.0/22 maxlen: 22 91.235.184.0/22 maxlen: 22 176.108.144.0/21 maxlen: 21 176.126.48.0/21 maxlen: 21 185.236.64.0/21 maxlen: 21 185.236.64.0/22 maxlen: 22 185.236.68.0/22 maxlen: 22 185.244.76.0/22 maxlen: 22 2a0d:9f00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.mft rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:a0:33:71:3f:58:61:f8:2f:e9:9a:db:a2:a9:8e:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=173b0d7f0eac665733d92816dd49162d72e221f3 Validity Not Before: Jan 27 08:44:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9446e39d02a14be58e117f51348f2ebe1ee7b66f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:11:19:ae:96:48:11:73:b2:80:f4:6b:ba:33: a1:56:6d:40:bd:fa:f4:ae:58:a2:a9:c4:89:d1:02: e5:ba:f3:55:4b:60:26:c9:8b:6b:3f:d3:82:7b:5b: f8:a1:26:32:2c:12:90:0c:d1:00:22:73:b8:fa:4c: 3c:1a:89:15:a9:74:46:7e:25:35:0f:66:fb:2c:ee: 54:e0:88:94:a4:e0:57:14:17:59:9d:19:de:7f:f7: 39:a4:18:79:38:1f:39:13:2a:ec:ed:2e:cd:af:e8: c4:02:03:5d:9d:2e:65:43:63:20:58:74:b5:7a:8b: da:b1:23:d6:1d:3d:13:01:89:ba:13:18:d7:4c:85: b2:11:51:68:3c:fc:af:c4:f7:6e:62:cb:94:25:a4: a3:86:54:b7:3e:8b:85:6b:e7:c8:8b:c2:66:68:68: 3b:6c:48:c5:6e:1a:1e:25:48:ea:56:f6:d4:ce:68: 36:b5:d2:c8:6c:d8:01:90:32:c8:a1:62:4b:fb:c8: 72:05:5f:f2:90:c7:14:43:29:b2:d5:b9:fc:d5:0e: 46:7e:bf:38:8d:f9:09:b5:13:6b:7c:da:8d:35:51: 88:65:79:8a:5e:30:ba:22:39:ff:ed:43:f6:9e:3b: 74:b0:b3:68:8f:cc:b4:a3:92:19:49:af:4f:94:ba: da:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:46:E3:9D:02:A1:4B:E5:8E:11:7F:51:34:8F:2E:BE:1E:E7:B6:6F X509v3 Authority Key Identifier: keyid:17:3B:0D:7F:0E:AC:66:57:33:D9:28:16:DD:49:16:2D:72:E2:21:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzsNfw6sZlcz2SgW3UkWLXLiIfM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/lEbjnQKhS-WOEX9RNI8uvh7ntm8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9011b1-b6dc-4e11-ba21-e23a3934b6f7/1/FzsNfw6sZlcz2SgW3UkWLXLiIfM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.175.12.0/24 91.202.196.0/22 91.215.204.0/22 91.235.184.0/22 176.108.144.0/21 176.126.48.0/21 185.236.64.0/21 185.244.76.0/22 IPv6: 2a0d:9f00::/32 Signature Algorithm: sha256WithRSAEncryption cd:02:f7:12:12:2a:40:1f:bb:55:c0:87:ef:3d:25:a7:0a:27: 14:66:79:4a:f9:67:d7:6d:bb:a4:76:ee:69:d9:93:f9:bc:44: 06:ce:07:b4:0b:c0:de:ce:56:7e:3d:d3:fd:fc:e3:4e:ba:64: 09:b1:28:45:f5:1b:42:77:17:e8:9d:e1:b3:5c:7c:77:a9:2d: 56:ec:b5:25:e0:47:86:68:57:9b:8c:90:48:73:fa:f9:ab:04: 3d:6e:e3:ef:a7:1d:ab:60:43:1f:c3:d7:4b:a7:2e:27:e8:b9: 2e:18:a7:47:f2:fa:75:92:68:ac:18:30:88:aa:be:85:2c:2e: 47:6e:c6:d2:ef:87:1a:6e:27:e6:2a:ee:34:bf:5e:7b:c4:66: 26:40:2e:55:99:05:b7:da:a3:78:d8:c8:89:12:93:4a:d8:6e: b2:bd:55:15:0a:cd:59:e2:0e:0b:c9:49:6e:30:9e:49:d4:be: 26:a6:e7:06:44:90:5b:b4:61:71:2a:01:eb:74:e3:78:aa:7e: e5:94:46:33:5e:d2:f9:03:cf:56:ef:b0:28:82:d4:a8:19:74: eb:f7:91:b5:99:b9:d8:65:34:36:56:42:d4:72:51:3d:11:35: 21:ee:e5:2d:c9:e6:ee:7e:2c:b2:b1:a5:14:f5:80:74:da:2a: c7:ed:e2:4f -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgISAZv+oDNxP1hh+C/pmtuiqY46MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3M2IwZDdmMGVhYzY2NTczM2Q5MjgxNmRkNDkxNjJkNzJl MjIxZjMwHhcNMjYwMTI3MDg0NDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NDQ2ZTM5ZDAyYTE0YmU1OGUxMTdmNTEzNDhmMmViZTFlZTdiNjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBEZrpZIEXOygPRrujOhVm1Avfr0 rliiqcSJ0QLluvNVS2AmyYtrP9OCe1v4oSYyLBKQDNEAInO4+kw8GokVqXRGfiU1 D2b7LO5U4IiUpOBXFBdZnRnef/c5pBh5OB85Eyrs7S7Nr+jEAgNdnS5lQ2MgWHS1 eovasSPWHT0TAYm6ExjXTIWyEVFoPPyvxPduYsuUJaSjhlS3PouFa+fIi8JmaGg7 bEjFbhoeJUjqVvbUzmg2tdLIbNgBkDLIoWJL+8hyBV/ykMcUQymy1bn81Q5Gfr84 jfkJtRNrfNqNNVGIZXmKXjC6Ijn/7UP2njt0sLNoj8y0o5IZSa9PlLra9QIDAQAB o4ICQjCCAj4wHQYDVR0OBBYEFJRG450CoUvljhF/UTSPLr4e57ZvMB8GA1UdIwQY MBaAFBc7DX8OrGZXM9koFt1JFi1y4iHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnpzTmZ3NnNabGN6MlNnVzNVa1dMWExpSWZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85MDExYjEtYjZkYy00ZTExLWJhMjEt ZTIzYTM5MzRiNmY3LzEvbEViam5RS2hTLVdPRVg5Uk5JOHV2aDdudG04LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni85MDExYjEtYjZkYy00ZTExLWJhMjEtZTIzYTM5MzRiNmY3 LzEvRnpzTmZ3NnNabGN6MlNnVzNVa1dMWExpSWZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQALq8MAwQC W8rEAwQCW9fMAwQCW+u4AwQDsGyQAwQDsH4wAwQDuexAAwQCufRMMA0EAgACMAcD BQAqDZ8AMA0GCSqGSIb3DQEBCwUAA4IBAQDNAvcSEipAH7tVwIfvPSWnCicUZnlK +WfXbbukdu5p2ZP5vEQGzge0C8DezlZ+PdP9/ONOumQJsShF9RtCdxfoneGzXHx3 qS1W7LUl4EeGaFebjJBIc/r5qwQ9buPvpx2rYEMfw9dLpy4n6LkuGKdH8vp1kmis GDCIqr6FLC5HbsbS74cabifmKu40v157xGYmQC5VmQW32qN42MiJEpNK2G6yvVUV Cs1Z4g4LyUluMJ5J1L4mpucGRJBbtGFxKgHrdON4qn7llEYzXtL5A89W77AogtSo GXTr95G1mbnYZTQ2VkLUclE9ETUh7uUtyebufiyysaUU9YB02irH7eJP -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:37 2026 by rpki-client