This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/dMl0CEajkrxcgLNcfpnLA8OuL7A.roa File: dMl0CEajkrxcgLNcfpnLA8OuL7A.roa (raw, json) Hash identifier: CYX2WX+QfrhOpGiBFy1DWZkIM2JKpSw/oiXkQ7UpKFU= Subject key identifier: 74:C9:74:08:46:A3:92:BC:5C:80:B3:5C:7E:99:CB:03:C3:AE:2F:B0 Certificate issuer: /CN=d648294443aed16d06b86af14f5a5f0a5083774a Certificate serial: 019B77C7384DFFD1775E9DBBE4F937594AB3 Authority key identifier: D6:48:29:44:43:AE:D1:6D:06:B8:6A:F1:4F:5A:5F:0A:50:83:77:4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kgpREOu0W0GuGrxT1pfClCDd0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/dMl0CEajkrxcgLNcfpnLA8OuL7A.roa Signing time: Thu 01 Jan 2026 04:18:23 +0000 ROA not before: Thu 01 Jan 2026 04:18:23 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197712 IP address blocks: 46.16.56.0/21 maxlen: 24 134.0.8.0/21 maxlen: 24 185.22.200.0/22 maxlen: 24 185.34.192.0/22 maxlen: 24 185.42.104.0/22 maxlen: 24 185.66.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft rsync://rpki.ripe.net/repository/DEFAULT/1kgpREOu0W0GuGrxT1pfClCDd0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:38:4d:ff:d1:77:5e:9d:bb:e4:f9:37:59:4a:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d648294443aed16d06b86af14f5a5f0a5083774a Validity Not Before: Jan 1 04:18:23 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=74c9740846a392bc5c80b35c7e99cb03c3ae2fb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:2f:2e:df:46:10:a6:c7:d7:c0:bb:81:eb:d9: 26:e4:3e:97:84:30:99:09:14:e4:af:9d:92:35:1b: f9:ee:4d:6a:8c:61:46:b0:86:0e:d1:2a:fc:f8:01: 9e:bc:b5:62:0c:6b:e9:1d:57:55:58:13:56:2d:cd: f5:84:df:df:6c:68:72:79:3c:b6:4a:9b:87:d2:a4: ff:62:15:ef:ce:1d:1f:05:79:6f:7c:02:10:8b:8d: d6:31:66:04:30:8f:31:bb:a2:6e:8b:b0:f6:e8:d7: 46:18:5e:72:a2:7c:85:ba:0b:bf:68:8d:35:15:af: b8:bd:3a:66:b3:41:de:cc:64:4f:bc:85:ad:35:4c: 07:d5:c0:64:28:b2:36:55:97:af:f5:40:7b:36:99: 67:66:ee:84:dc:ef:23:da:50:b2:e8:f6:b6:30:36: 1b:50:83:07:dc:0e:15:d5:57:af:ce:cc:63:b6:bb: ad:df:48:b4:c2:a3:27:05:09:e1:68:d2:88:bc:e4: 4b:f4:26:c2:8f:89:e0:a8:b5:65:86:bf:5a:36:e0: e7:64:9d:ce:6d:55:2a:72:f1:4d:d2:ac:ae:85:d4: f2:a1:12:af:67:e3:6b:05:03:0c:7f:b3:2e:01:e3: b3:2a:37:b2:f4:66:50:e2:74:f9:01:6b:52:01:e6: 68:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:C9:74:08:46:A3:92:BC:5C:80:B3:5C:7E:99:CB:03:C3:AE:2F:B0 X509v3 Authority Key Identifier: keyid:D6:48:29:44:43:AE:D1:6D:06:B8:6A:F1:4F:5A:5F:0A:50:83:77:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kgpREOu0W0GuGrxT1pfClCDd0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/dMl0CEajkrxcgLNcfpnLA8OuL7A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.16.56.0/21 134.0.8.0/21 185.22.200.0/22 185.34.192.0/22 185.42.104.0/22 185.66.40.0/22 Signature Algorithm: sha256WithRSAEncryption c5:2d:f9:37:ce:d4:c3:b9:20:a1:08:5a:57:4e:a6:04:4a:5d: 47:e1:49:5f:6f:2d:72:c5:ba:00:17:6b:de:96:e7:1e:9f:b7: e6:b8:41:42:0c:d2:7a:9f:35:a7:98:9b:00:b0:6d:c6:4d:9c: fb:dc:e4:ed:de:7f:d6:8f:a1:51:91:04:7e:8d:6f:02:3c:bf: 8f:94:98:0a:8c:3c:87:45:94:ae:c7:9d:48:e5:6f:21:03:cc: 03:de:d6:b3:1d:b3:2d:bb:95:74:38:38:78:72:03:46:33:7c: d0:fd:6d:e5:e4:08:87:45:27:6e:2f:6b:d6:f2:bd:71:40:4d: ac:f7:91:79:c0:bd:ef:f5:31:59:43:67:9d:da:e4:5a:0e:9b: ba:26:f4:51:df:21:90:9f:f0:d2:e9:07:74:6d:4f:3b:90:a6: 37:9d:96:a9:75:b9:e2:a8:41:b3:b4:27:98:1a:64:81:60:39: 0f:c1:0f:b3:be:2c:56:7f:00:f3:79:d7:1d:e5:ee:7b:19:01: ca:46:44:5f:15:c6:aa:e0:f8:a6:07:37:ac:a3:75:1d:07:3f: e7:7d:f1:c9:98:e1:ca:69:54:6f:43:0b:62:09:91:ca:d0:7d: 60:e4:e6:94:d5:1b:27:98:0a:3d:ad:c6:6e:14:ca:e0:b7:56: 74:55:68:d6 -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZt3xzhN/9F3Xp275Pk3WUqzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NDgyOTQ0NDNhZWQxNmQwNmI4NmFmMTRmNWE1ZjBhNTA4 Mzc3NGEwHhcNMjYwMTAxMDQxODIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NGM5NzQwODQ2YTM5MmJjNWM4MGIzNWM3ZTk5Y2IwM2MzYWUyZmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3i8u30YQpsfXwLuB69km5D6XhDCZ CRTkr52SNRv57k1qjGFGsIYO0Sr8+AGevLViDGvpHVdVWBNWLc31hN/fbGhyeTy2 SpuH0qT/YhXvzh0fBXlvfAIQi43WMWYEMI8xu6Jui7D26NdGGF5yonyFugu/aI01 Fa+4vTpms0HezGRPvIWtNUwH1cBkKLI2VZev9UB7NplnZu6E3O8j2lCy6Pa2MDYb UIMH3A4V1Vevzsxjtrut30i0wqMnBQnhaNKIvORL9CbCj4ngqLVlhr9aNuDnZJ3O bVUqcvFN0qyuhdTyoRKvZ+NrBQMMf7MuAeOzKjey9GZQ4nT5AWtSAeZoCQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFHTJdAhGo5K8XICzXH6ZywPDri+wMB8GA1UdIwQY MBaAFNZIKURDrtFtBrhq8U9aXwpQg3dKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWtncFJFT3UwVzBHdUdyeFQxcGZDbENEZDBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNTg3ZTktMzNhOS00YTg2LThjZDkt ZTU3Y2M4MWY1MjMzLzEvZE1sMENFYWprcnhjZ0xOY2ZwbkxBOE91TDdBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9iNTg3ZTktMzNhOS00YTg2LThjZDktZTU3Y2M4MWY1MjMz LzEvMWtncFJFT3UwVzBHdUdyeFQxcGZDbENEZDBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQDLhA4AwQD hgAIAwQCuRbIAwQCuSLAAwQCuSpoAwQCuUIoMA0GCSqGSIb3DQEBCwUAA4IBAQDF Lfk3ztTDuSChCFpXTqYESl1H4Ulfby1yxboAF2velucen7fmuEFCDNJ6nzWnmJsA sG3GTZz73OTt3n/Wj6FRkQR+jW8CPL+PlJgKjDyHRZSux51I5W8hA8wD3tazHbMt u5V0ODh4cgNGM3zQ/W3l5AiHRSduL2vW8r1xQE2s95F5wL3v9TFZQ2ed2uRaDpu6 JvRR3yGQn/DS6Qd0bU87kKY3nZapdbniqEGztCeYGmSBYDkPwQ+zvixWfwDzedcd 5e57GQHKRkRfFcaq4PimBzeso3UdBz/nffHJmOHKaVRvQwtiCZHK0H1g5OaU1Rsn mAo9rcZuFMrgt1Z0VWjW -----END CERTIFICATE-----Generated at Mon Feb 9 20:59:45 2026 by rpki-client