This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/wKc9eJnbVysRkEBhIIlTu83g1ns.roa File: wKc9eJnbVysRkEBhIIlTu83g1ns.roa (raw, json) Hash identifier: Hlabi5D4kY5C7I4IHd8YVHEe37kFrOvj4N/zPqtWiYU= Subject key identifier: C0:A7:3D:78:99:DB:57:2B:11:90:40:61:20:89:53:BB:CD:E0:D6:7B Certificate issuer: /CN=e17b10fd607ad927006c62ce35691ebaa8f018b5 Certificate serial: 019B77C75255F529EEDD334161DF1A61D543 Authority key identifier: E1:7B:10:FD:60:7A:D9:27:00:6C:62:CE:35:69:1E:BA:A8:F0:18:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4XsQ_WB62ScAbGLONWkeuqjwGLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/wKc9eJnbVysRkEBhIIlTu83g1ns.roa Signing time: Thu 01 Jan 2026 04:18:30 +0000 ROA not before: Thu 01 Jan 2026 04:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51968 IP address blocks: 46.23.128.0/20 maxlen: 20 46.23.136.0/24 maxlen: 24 2a10:2880::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.crl rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.mft rsync://rpki.ripe.net/repository/DEFAULT/4XsQ_WB62ScAbGLONWkeuqjwGLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:52:55:f5:29:ee:dd:33:41:61:df:1a:61:d5:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e17b10fd607ad927006c62ce35691ebaa8f018b5 Validity Not Before: Jan 1 04:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0a73d7899db572b11904061208953bbcde0d67b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:55:e2:ed:aa:c2:28:ff:a4:5a:77:1d:43:6c: 60:38:9f:16:f4:36:9a:67:e7:e4:82:4d:70:35:b3: 5c:6c:9c:54:1c:77:dd:72:3c:91:49:b6:96:c7:14: a5:8a:ad:d1:1b:53:aa:c8:77:38:e1:8b:72:0f:9f: da:82:bc:de:52:83:cc:bf:6f:37:d7:2b:71:2c:c4: 3f:0b:b9:28:91:45:4f:b8:6f:39:1a:ea:19:a2:b2: f0:68:35:eb:ad:91:95:de:54:85:73:ac:21:b5:42: 63:39:e4:a0:08:87:f5:86:f4:2e:22:f9:4b:fb:f0: b7:97:5c:38:6a:a4:cf:4b:26:2e:4d:01:4b:85:3b: ca:e5:09:9a:dc:43:34:08:57:9d:1f:8e:5c:90:f2: 04:79:ac:78:d9:04:5a:5c:80:5f:dd:da:4c:e7:f3: bc:be:cd:c4:aa:84:6a:6b:df:a5:30:7d:db:a6:ed: 52:d3:8a:27:cc:c8:98:d9:75:cb:6b:48:9f:0c:85: 94:46:88:39:29:66:f3:c0:83:3f:25:e6:3b:4f:e9: 4f:b6:a5:b6:07:59:11:6f:b1:d3:eb:b3:a9:b3:d0: 60:3b:0d:a4:16:9e:7d:0a:c6:c6:2f:72:53:73:b9: 86:ef:c3:ad:45:ba:d9:7e:ab:ab:ea:ba:b8:ee:13: c4:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A7:3D:78:99:DB:57:2B:11:90:40:61:20:89:53:BB:CD:E0:D6:7B X509v3 Authority Key Identifier: keyid:E1:7B:10:FD:60:7A:D9:27:00:6C:62:CE:35:69:1E:BA:A8:F0:18:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XsQ_WB62ScAbGLONWkeuqjwGLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/wKc9eJnbVysRkEBhIIlTu83g1ns.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.23.128.0/20 IPv6: 2a10:2880::/32 Signature Algorithm: sha256WithRSAEncryption 16:6e:6d:96:57:65:96:68:e2:8f:6d:cc:f0:4f:1b:32:5c:bc: ee:a8:ed:23:8a:04:f1:a9:8e:91:ca:2f:98:c3:8d:5a:58:4d: c4:2a:e0:25:ed:b9:be:c8:b8:bf:75:75:52:15:fc:44:38:7c: b7:02:75:d4:5f:c7:d0:7a:1b:a3:db:04:9b:d1:74:50:40:4c: f4:02:31:24:08:51:75:58:b8:c2:6d:cd:61:d5:d3:10:4a:d0: f8:8b:0f:82:be:a5:20:72:36:be:cd:01:e3:eb:19:08:04:13: df:77:5f:ba:36:e8:d6:03:0b:46:79:83:c8:cf:44:49:5a:68: f4:de:e7:ed:74:71:08:73:6a:45:99:44:38:70:0c:f3:4c:a9: b8:be:c6:b1:58:ec:e2:55:da:2f:c0:f5:59:64:7d:cf:ed:ba: 57:7f:7a:8b:a4:6c:3a:33:21:5c:f9:5c:bd:86:2c:19:8b:ed: ed:15:04:59:b6:18:1f:4a:25:6d:da:3d:c5:d1:72:27:15:15: 9c:1c:06:f7:1e:0b:e2:9a:ac:cd:5f:ae:dc:0d:14:8b:93:aa: 89:d2:55:56:b9:bd:88:a2:04:e4:42:2e:10:83:68:58:2a:7c: 91:e6:e2:50:ba:b1:2a:4a:b3:6c:53:2f:05:ee:46:24:c2:8b: 99:be:4f:ea -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3x1JV9Snu3TNBYd8aYdVDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxN2IxMGZkNjA3YWQ5MjcwMDZjNjJjZTM1NjkxZWJhYThm MDE4YjUwHhcNMjYwMTAxMDQxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMGE3M2Q3ODk5ZGI1NzJiMTE5MDQwNjEyMDg5NTNiYmNkZTBkNjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFXi7arCKP+kWncdQ2xgOJ8W9Daa Z+fkgk1wNbNcbJxUHHfdcjyRSbaWxxSliq3RG1OqyHc44YtyD5/agrzeUoPMv283 1ytxLMQ/C7kokUVPuG85GuoZorLwaDXrrZGV3lSFc6whtUJjOeSgCIf1hvQuIvlL +/C3l1w4aqTPSyYuTQFLhTvK5Qma3EM0CFedH45ckPIEeax42QRaXIBf3dpM5/O8 vs3EqoRqa9+lMH3bpu1S04onzMiY2XXLa0ifDIWURog5KWbzwIM/JeY7T+lPtqW2 B1kRb7HT67Ops9BgOw2kFp59CsbGL3JTc7mG78OtRbrZfqur6rq47hPEHwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFMCnPXiZ21crEZBAYSCJU7vN4NZ7MB8GA1UdIwQY MBaAFOF7EP1getknAGxizjVpHrqo8Bi1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFhzUV9XQjYyU2NBYkdMT05Xa2V1cWp3R0xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi84NDMyZWQtMmM5Ny00MWQzLTkyNmEt NmE0ZDA0YmE1ODk4LzEvd0tjOWVKbmJWeXNSa0VCaElJbFR1ODNnMW5zLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi84NDMyZWQtMmM5Ny00MWQzLTkyNmEtNmE0ZDA0YmE1ODk4 LzEvNFhzUV9XQjYyU2NBYkdMT05Xa2V1cWp3R0xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQELheAMA0E AgACMAcDBQAqECiAMA0GCSqGSIb3DQEBCwUAA4IBAQAWbm2WV2WWaOKPbczwTxsy XLzuqO0jigTxqY6Ryi+Yw41aWE3EKuAl7bm+yLi/dXVSFfxEOHy3AnXUX8fQehuj 2wSb0XRQQEz0AjEkCFF1WLjCbc1h1dMQStD4iw+CvqUgcja+zQHj6xkIBBPfd1+6 NujWAwtGeYPIz0RJWmj03uftdHEIc2pFmUQ4cAzzTKm4vsaxWOziVdovwPVZZH3P 7bpXf3qLpGw6MyFc+Vy9hiwZi+3tFQRZthgfSiVt2j3F0XInFRWcHAb3HgvimqzN X67cDRSLk6qJ0lVWub2IogTkQi4Qg2hYKnyR5uJQurEqSrNsUy8F7kYkwouZvk/q -----END CERTIFICATE-----Generated at Tue Feb 10 07:30:48 2026 by rpki-client