This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/wMzcJA8U-elR042FRK7p2mEkLXQ.roa File: wMzcJA8U-elR042FRK7p2mEkLXQ.roa (raw, json) Hash identifier: 2FuJ3+DD/R0opX6AY17BI4FucoAga+f1dvN2aFG/YF0= Subject key identifier: C0:CC:DC:24:0F:14:F9:E9:51:D3:8D:85:44:AE:E9:DA:61:24:2D:74 Certificate issuer: /CN=e822d845e153992a78e8f44523264d2614b17b9d Certificate serial: 019B78A3740DD80C1302E9CA9E1EBF412747 Authority key identifier: E8:22:D8:45:E1:53:99:2A:78:E8:F4:45:23:26:4D:26:14:B1:7B:9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6CLYReFTmSp46PRFIyZNJhSxe50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/wMzcJA8U-elR042FRK7p2mEkLXQ.roa Signing time: Thu 01 Jan 2026 08:18:56 +0000 ROA not before: Thu 01 Jan 2026 08:18:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12693 IP address blocks: 46.167.32.0/21 maxlen: 21 46.167.32.0/24 maxlen: 24 185.101.52.0/22 maxlen: 22 185.101.52.0/23 maxlen: 23 185.101.54.0/24 maxlen: 24 185.101.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.mft rsync://rpki.ripe.net/repository/DEFAULT/6CLYReFTmSp46PRFIyZNJhSxe50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:74:0d:d8:0c:13:02:e9:ca:9e:1e:bf:41:27:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e822d845e153992a78e8f44523264d2614b17b9d Validity Not Before: Jan 1 08:18:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0ccdc240f14f9e951d38d8544aee9da61242d74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:87:33:cc:f4:2b:44:84:9d:2f:8a:d1:38:a7: 9e:ee:e7:06:2b:84:0f:82:b2:ca:c4:f0:4a:ba:2c: 2f:72:68:2a:a2:16:ad:18:5d:14:eb:a6:e3:0d:b7: 26:eb:60:06:8d:af:ca:36:a1:94:f9:ce:02:34:09: ba:05:6d:a5:3f:da:3f:92:28:3a:39:7d:eb:08:e9: 52:a2:89:c7:28:05:e4:6a:14:26:66:b6:50:07:ce: 34:2f:06:62:74:9c:e2:dc:58:42:b7:ac:10:c0:2b: 74:99:01:a8:f8:60:9d:db:f2:bc:27:0d:58:68:d9: 76:3d:fb:12:d5:3d:7c:1b:0a:f0:1f:5f:ba:8d:8e: ca:98:3a:ee:a8:d6:1c:66:4a:75:43:f7:bf:3a:7b: ff:ba:d7:56:3b:b9:70:46:d9:49:4b:07:4d:ed:cd: ef:e4:4e:dd:aa:39:f0:6f:40:dc:8d:56:ed:44:a4: 45:6c:1e:9c:f2:12:62:72:1d:ae:46:07:bb:97:3e: 3e:e3:52:e2:d4:a1:f5:4f:e6:e7:a2:c7:9b:95:10: 7c:26:14:c4:73:ab:a0:65:de:76:f7:47:f0:c9:e5: ad:2f:ba:01:6a:c9:9b:3e:6f:95:6f:cc:8c:80:e7: 4e:3c:ab:ad:fd:63:54:8d:dd:c3:3b:b5:86:6b:f1: a6:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:CC:DC:24:0F:14:F9:E9:51:D3:8D:85:44:AE:E9:DA:61:24:2D:74 X509v3 Authority Key Identifier: keyid:E8:22:D8:45:E1:53:99:2A:78:E8:F4:45:23:26:4D:26:14:B1:7B:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6CLYReFTmSp46PRFIyZNJhSxe50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/wMzcJA8U-elR042FRK7p2mEkLXQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/7f1a8c-48e4-4d97-b042-1d4246d7f155/1/6CLYReFTmSp46PRFIyZNJhSxe50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.167.32.0/21 185.101.52.0/22 Signature Algorithm: sha256WithRSAEncryption 1c:70:c8:cc:e4:a9:a2:d0:ee:24:69:26:aa:67:7e:bc:53:34: 7c:f7:89:09:a7:a4:b4:57:32:db:5e:33:40:83:6f:23:06:a4: aa:5e:ad:ad:62:f9:9c:fe:6e:b4:ac:bb:c6:14:54:8d:eb:e2: 3c:64:7d:cd:5a:9f:78:10:8d:5b:5f:75:34:a4:e3:64:39:13: 08:12:bd:7d:13:27:fa:6a:18:0b:cc:be:99:94:50:45:d6:20: a1:4b:50:b0:90:2b:bf:2f:f8:67:2d:42:f7:56:d0:4e:e5:5a: a2:61:7c:49:96:8c:da:19:7d:a5:fb:75:a0:b5:a7:c0:0e:43: 85:4e:47:03:ef:eb:76:80:e0:c7:ad:af:a5:3d:81:ee:bb:c9: b3:f9:72:48:4e:69:49:c9:f2:25:03:0a:d8:45:ac:f2:04:0c: 09:4d:c5:e0:50:64:38:bb:26:79:19:81:78:78:b0:f3:2b:dc: 6a:ad:d7:bf:5b:a9:25:c4:fd:46:5c:b7:af:8c:0f:de:f4:0e: 4a:04:88:42:3a:5c:b3:40:f3:70:dd:15:fe:f6:28:c8:ba:7d: cd:f7:4f:2c:90:6e:e2:6a:a7:a4:e2:02:f8:ba:54:05:66:8c: 1e:dd:98:96:94:70:ad:1c:e0:b7:6a:65:a8:58:a2:c2:7c:a7: 62:f9:b1:16 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4o3QN2AwTAunKnh6/QSdHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4MjJkODQ1ZTE1Mzk5MmE3OGU4ZjQ0NTIzMjY0ZDI2MTRi MTdiOWQwHhcNMjYwMTAxMDgxODU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMGNjZGMyNDBmMTRmOWU5NTFkMzhkODU0NGFlZTlkYTYxMjQyZDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4czzPQrRISdL4rROKee7ucGK4QP grLKxPBKuiwvcmgqohatGF0U66bjDbcm62AGja/KNqGU+c4CNAm6BW2lP9o/kig6 OX3rCOlSoonHKAXkahQmZrZQB840LwZidJzi3FhCt6wQwCt0mQGo+GCd2/K8Jw1Y aNl2PfsS1T18GwrwH1+6jY7KmDruqNYcZkp1Q/e/Onv/utdWO7lwRtlJSwdN7c3v 5E7dqjnwb0DcjVbtRKRFbB6c8hJich2uRge7lz4+41Li1KH1T+bnoseblRB8JhTE c6ugZd5290fwyeWtL7oBasmbPm+Vb8yMgOdOPKut/WNUjd3DO7WGa/GmbQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMDM3CQPFPnpUdONhUSu6dphJC10MB8GA1UdIwQY MBaAFOgi2EXhU5kqeOj0RSMmTSYUsXudMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkNMWVJlRlRtU3A0NlBSRkl5Wk5KaFN4ZTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC83ZjFhOGMtNDhlNC00ZDk3LWIwNDIt MWQ0MjQ2ZDdmMTU1LzEvd016Y0pBOFUtZWxSMDQyRlJLN3AybUVrTFhRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC83ZjFhOGMtNDhlNC00ZDk3LWIwNDItMWQ0MjQ2ZDdmMTU1 LzEvNkNMWVJlRlRtU3A0NlBSRkl5Wk5KaFN4ZTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLqcgAwQC uWU0MA0GCSqGSIb3DQEBCwUAA4IBAQAccMjM5Kmi0O4kaSaqZ368UzR894kJp6S0 VzLbXjNAg28jBqSqXq2tYvmc/m60rLvGFFSN6+I8ZH3NWp94EI1bX3U0pONkORMI Er19Eyf6ahgLzL6ZlFBF1iChS1CwkCu/L/hnLUL3VtBO5VqiYXxJlozaGX2l+3Wg tafADkOFTkcD7+t2gODHra+lPYHuu8mz+XJITmlJyfIlAwrYRazyBAwJTcXgUGQ4 uyZ5GYF4eLDzK9xqrde/W6klxP1GXLevjA/e9A5KBIhCOlyzQPNw3RX+9ijIun3N 908skG7iaqek4gL4ulQFZowe3ZiWlHCtHOC3amWoWKLCfKdi+bEW -----END CERTIFICATE-----Generated at Mon Feb 9 21:25:28 2026 by rpki-client