This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/kR2I-XM1mPm1BsNV7jo83P1A8sA.roa File: kR2I-XM1mPm1BsNV7jo83P1A8sA.roa (raw, json) Hash identifier: XnMWHAAosB96EoUGDGh1CGEAOmmlQqJ+aL9fGY76sXc= Subject key identifier: 91:1D:88:F9:73:35:98:F9:B5:06:C3:55:EE:3A:3C:DC:FD:40:F2:C0 Certificate issuer: /CN=1792806c34f57583899dc52dca407e25cf9d3622 Certificate serial: 019B7BA4491262A37AA838E25B5E52B265B4 Authority key identifier: 17:92:80:6C:34:F5:75:83:89:9D:C5:2D:CA:40:7E:25:CF:9D:36:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5KAbDT1dYOJncUtykB-Jc-dNiI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/kR2I-XM1mPm1BsNV7jo83P1A8sA.roa Signing time: Thu 01 Jan 2026 22:18:42 +0000 ROA not before: Thu 01 Jan 2026 22:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15969 IP address blocks: 45.86.212.0/22 maxlen: 22 46.227.240.0/23 maxlen: 23 46.227.242.0/23 maxlen: 23 46.227.244.0/24 maxlen: 24 46.227.245.0/24 maxlen: 24 46.227.246.0/23 maxlen: 23 185.7.168.0/23 maxlen: 23 185.7.170.0/23 maxlen: 23 2a01:5e00::/29 maxlen: 29 2a01:7600::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/F5KAbDT1dYOJncUtykB-Jc-dNiI.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/F5KAbDT1dYOJncUtykB-Jc-dNiI.mft rsync://rpki.ripe.net/repository/DEFAULT/F5KAbDT1dYOJncUtykB-Jc-dNiI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:49:12:62:a3:7a:a8:38:e2:5b:5e:52:b2:65:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1792806c34f57583899dc52dca407e25cf9d3622 Validity Not Before: Jan 1 22:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=911d88f9733598f9b506c355ee3a3cdcfd40f2c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:12:d6:09:16:b2:84:a7:64:30:76:35:49:e4: 72:d4:9e:38:34:2b:9e:de:10:e5:fc:43:d8:e5:5c: df:05:23:20:37:67:01:7a:16:55:1d:b6:50:9e:0a: f6:07:62:de:c5:4a:53:5d:4e:56:f6:be:39:bb:24: 32:b8:3c:d9:92:29:22:ef:b8:d4:be:c0:c1:bb:ff: e2:c4:c9:4f:7a:d7:a8:88:73:91:7e:d6:84:ef:03: 1a:41:4c:81:b2:bf:d6:aa:d8:56:81:ae:0b:b5:8a: 50:1e:52:80:08:ea:a2:22:2a:71:5d:f3:12:d8:0e: 06:fa:83:f6:7d:d4:b6:5d:e5:96:1b:5b:ec:f1:89: 16:0b:07:39:32:bf:c3:b1:2e:3b:a2:e0:38:40:89: fd:83:4c:ef:7e:3c:ed:f3:9d:d6:a6:be:a2:65:ee: 7b:f5:2e:59:1e:da:42:be:d6:96:12:45:ed:3e:e7: 1f:d7:8b:b8:0b:76:30:c3:95:a1:d3:46:30:dc:67: 7e:eb:5d:c0:6b:bf:37:2b:4c:e0:81:80:16:62:93: 0e:d5:b2:ee:8f:31:b5:0e:7a:db:71:f1:07:ae:1e: bb:83:96:d1:ef:dc:ca:01:9f:7d:5a:8c:51:11:c5: 30:8e:5e:e2:90:81:c9:11:bc:98:73:35:d4:64:e9: db:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:1D:88:F9:73:35:98:F9:B5:06:C3:55:EE:3A:3C:DC:FD:40:F2:C0 X509v3 Authority Key Identifier: keyid:17:92:80:6C:34:F5:75:83:89:9D:C5:2D:CA:40:7E:25:CF:9D:36:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5KAbDT1dYOJncUtykB-Jc-dNiI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/kR2I-XM1mPm1BsNV7jo83P1A8sA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/96520f-7bd8-4fc8-8c7f-7ef2d70d708f/1/F5KAbDT1dYOJncUtykB-Jc-dNiI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.86.212.0/22 46.227.240.0/21 185.7.168.0/22 IPv6: 2a01:5e00::/29 2a01:7600::/29 Signature Algorithm: sha256WithRSAEncryption 51:91:06:23:35:84:f0:4e:95:33:27:f1:ec:7d:27:2f:c9:08: aa:69:f1:22:f8:3c:1c:6c:7e:22:bc:db:f0:ec:95:e1:47:4f: 7a:06:a8:d2:46:ea:92:e4:1a:ee:04:4b:48:27:74:9b:76:a2: 4b:eb:1d:da:f0:70:47:79:ac:a0:ed:7a:f3:e7:93:2f:eb:d7: fc:1d:19:bd:1c:fc:5c:04:58:35:65:90:b7:2b:c5:38:48:7e: d2:cd:66:77:05:24:10:b9:e0:18:70:8a:a3:88:12:40:6e:79: d8:07:49:7e:f7:58:b8:6e:17:b3:4b:62:a6:f2:62:90:b4:47: 00:d0:9f:d4:8b:51:4c:0b:04:b6:7c:26:b0:17:55:31:ab:e8: a2:59:b1:ea:25:b7:dd:2d:0a:af:df:cc:26:8d:43:e6:7f:83: ca:89:63:b4:a4:59:5f:0a:8c:71:2a:f3:d0:ce:37:ec:ca:c4: 17:c4:f7:76:65:6f:04:a2:d4:2b:db:1a:ec:92:77:09:96:f8: 70:3a:88:c5:c1:e7:83:0d:3f:6c:58:85:a1:a4:91:e2:8c:5d: 59:f2:72:f0:56:59:71:ac:ee:3d:6f:f0:2f:5d:7b:9e:bc:97: e8:c0:f2:1c:c2:73:4c:a3:d5:f3:a1:8e:ba:2c:77:54:b2:40: e8:4f:a8:86 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt7pEkSYqN6qDjiW15SsmW0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3OTI4MDZjMzRmNTc1ODM4OTlkYzUyZGNhNDA3ZTI1Y2Y5 ZDM2MjIwHhcNMjYwMTAxMjIxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MTFkODhmOTczMzU5OGY5YjUwNmMzNTVlZTNhM2NkY2ZkNDBmMmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRLWCRayhKdkMHY1SeRy1J44NCue 3hDl/EPY5VzfBSMgN2cBehZVHbZQngr2B2LexUpTXU5W9r45uyQyuDzZkiki77jU vsDBu//ixMlPeteoiHORftaE7wMaQUyBsr/WqthWga4LtYpQHlKACOqiIipxXfMS 2A4G+oP2fdS2XeWWG1vs8YkWCwc5Mr/DsS47ouA4QIn9g0zvfjzt853Wpr6iZe57 9S5ZHtpCvtaWEkXtPucf14u4C3Yww5Wh00Yw3Gd+613Aa783K0zggYAWYpMO1bLu jzG1DnrbcfEHrh67g5bR79zKAZ99WoxREcUwjl7ikIHJEbyYczXUZOnb4QIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFJEdiPlzNZj5tQbDVe46PNz9QPLAMB8GA1UdIwQY MBaAFBeSgGw09XWDiZ3FLcpAfiXPnTYiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjVLQWJEVDFkWU9KbmNVdHlrQi1KYy1kTmlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NjUyMGYtN2JkOC00ZmM4LThjN2Yt N2VmMmQ3MGQ3MDhmLzEva1IySS1YTTFtUG0xQnNOVjdqbzgzUDFBOHNBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS85NjUyMGYtN2JkOC00ZmM4LThjN2YtN2VmMmQ3MGQ3MDhm LzEvRjVLQWJEVDFkWU9KbmNVdHlrQi1KYy1kTmlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAYBAIAATASAwQCLVbUAwQD LuPwAwQCuQeoMBQEAgACMA4DBQMqAV4AAwUDKgF2ADANBgkqhkiG9w0BAQsFAAOC AQEAUZEGIzWE8E6VMyfx7H0nL8kIqmnxIvg8HGx+Irzb8OyV4UdPegao0kbqkuQa 7gRLSCd0m3aiS+sd2vBwR3msoO168+eTL+vX/B0ZvRz8XARYNWWQtyvFOEh+0s1m dwUkELngGHCKo4gSQG552AdJfvdYuG4Xs0tipvJikLRHANCf1ItRTAsEtnwmsBdV Mavoolmx6iW33S0Kr9/MJo1D5n+DyoljtKRZXwqMcSrz0M437MrEF8T3dmVvBKLU K9sa7JJ3CZb4cDqIxcHngw0/bFiFoaSR4oxdWfJy8FZZcazuPW/wL117nryX6MDy HMJzTKPV86GOuix3VLJA6E+ohg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:14:02 2026 by rpki-client