This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/n0a58WGNW4N36YfyR27Cl-JiQX8.roa File: n0a58WGNW4N36YfyR27Cl-JiQX8.roa (raw, json) Hash identifier: nAiWPGZKrNkT4M9QgWAisOlWpgCESzAjmoJA8WxlVig= Subject key identifier: 9F:46:B9:F1:61:8D:5B:83:77:E9:87:F2:47:6E:C2:97:E2:62:41:7F Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603 Certificate serial: 019B79111B913A38A7BAA53A83521C9E8E1B Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/n0a58WGNW4N36YfyR27Cl-JiQX8.roa Signing time: Thu 01 Jan 2026 10:18:42 +0000 ROA not before: Thu 01 Jan 2026 10:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64080 IP address blocks: 45.43.64.0/24 maxlen: 24 45.43.65.0/24 maxlen: 24 45.43.67.0/24 maxlen: 24 45.43.68.0/22 maxlen: 24 45.43.80.0/22 maxlen: 24 45.43.84.0/23 maxlen: 24 45.43.87.0/24 maxlen: 24 45.43.93.0/24 maxlen: 24 45.43.94.0/24 maxlen: 24 45.43.95.0/24 maxlen: 24 87.239.253.0/24 maxlen: 24 89.33.6.0/23 maxlen: 24 94.177.5.0/24 maxlen: 24 107.181.128.0/22 maxlen: 24 107.181.132.0/23 maxlen: 24 107.181.140.0/22 maxlen: 24 107.181.148.0/23 maxlen: 24 107.181.150.0/24 maxlen: 24 107.181.152.0/24 maxlen: 24 107.181.153.0/24 maxlen: 24 107.181.154.0/24 maxlen: 24 113.20.157.0/24 maxlen: 24 113.20.158.0/24 maxlen: 24 155.254.32.0/24 maxlen: 24 155.254.33.0/24 maxlen: 24 155.254.34.0/24 maxlen: 24 155.254.36.0/22 maxlen: 24 155.254.48.0/23 maxlen: 24 155.254.61.0/24 maxlen: 24 162.220.246.0/23 maxlen: 24 198.105.100.0/22 maxlen: 24 198.105.108.0/24 maxlen: 24 198.105.109.0/24 maxlen: 24 198.105.110.0/24 maxlen: 24 198.105.111.0/24 maxlen: 24 198.105.119.0/24 maxlen: 24 198.105.121.0/24 maxlen: 24 198.105.122.0/24 maxlen: 24 2a05:9f40:1f::/48 maxlen: 48 2a05:9f44:2a05::/48 maxlen: 48 2a05:9f46::/32 maxlen: 48 2a05:9f47::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:11:1b:91:3a:38:a7:ba:a5:3a:83:52:1c:9e:8e:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603 Validity Not Before: Jan 1 10:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f46b9f1618d5b8377e987f2476ec297e262417f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:55:4c:04:fa:78:f3:25:d9:1c:46:fd:d9:f8: cf:03:80:2a:f7:33:4b:6d:36:7a:41:64:59:1e:53: 41:77:76:24:92:73:1a:b2:ee:ad:2b:7c:91:62:5c: 68:39:a1:02:08:7f:d4:fc:c8:47:0e:e5:f6:99:59: a4:58:f4:73:a8:bd:8e:63:25:28:9a:09:91:32:6c: 1a:28:38:10:2d:42:43:ed:44:15:5f:cf:20:a6:44: c9:cb:78:f3:a2:8c:af:ca:b7:d8:18:60:a8:2b:fe: 0c:ec:2b:ca:44:ba:04:bf:8c:35:f1:e3:dd:62:80: 0d:5d:4a:b2:c1:83:e8:2d:08:56:00:16:c9:2a:7e: 42:38:57:90:3f:69:de:77:89:eb:33:9a:14:7e:d7: d1:c8:d5:68:49:18:71:00:d2:9b:da:82:69:27:44: df:09:58:07:4d:c1:95:6b:cd:8e:c1:68:58:50:88: b8:d5:ee:6c:45:52:32:d6:1e:75:c1:f2:7b:b8:97: ec:ab:73:67:b9:8a:26:7a:f2:1e:cb:c0:08:5a:f1: 22:62:1a:de:e6:6b:7a:be:e5:26:71:7d:83:7b:34: ea:3c:8d:0b:50:c2:97:cd:43:e1:19:b2:5f:ed:12: 30:25:7b:40:b3:de:5a:a0:57:ba:2c:86:60:28:68: c3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:46:B9:F1:61:8D:5B:83:77:E9:87:F2:47:6E:C2:97:E2:62:41:7F X509v3 Authority Key Identifier: keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/n0a58WGNW4N36YfyR27Cl-JiQX8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.43.64.0/23 45.43.67.0-45.43.71.255 45.43.80.0-45.43.85.255 45.43.87.0/24 45.43.93.0-45.43.95.255 87.239.253.0/24 89.33.6.0/23 94.177.5.0/24 107.181.128.0-107.181.133.255 107.181.140.0/22 107.181.148.0-107.181.150.255 107.181.152.0-107.181.154.255 113.20.157.0-113.20.158.255 155.254.32.0-155.254.34.255 155.254.36.0/22 155.254.48.0/23 155.254.61.0/24 162.220.246.0/23 198.105.100.0/22 198.105.108.0/22 198.105.119.0/24 198.105.121.0-198.105.122.255 IPv6: 2a05:9f40:1f::/48 2a05:9f44:2a05::/48 2a05:9f46::/31 Signature Algorithm: sha256WithRSAEncryption 35:05:20:c7:c4:b5:9e:83:24:2c:ec:72:3e:b2:7a:85:13:af: fb:f3:96:f1:0c:2a:4e:75:bf:88:ff:fe:ea:6e:68:fb:1d:e2: ae:d5:6d:df:4f:02:6a:ff:94:19:df:3f:8e:f6:46:8b:ab:b7: 4d:41:72:f8:57:f8:98:f4:63:91:07:62:ee:a7:f0:aa:b0:c0: 31:59:53:0f:f0:fd:a5:25:38:dc:15:98:23:e1:9b:a8:e7:4b: 85:70:f2:c7:51:c4:aa:04:45:c0:a6:15:bc:ba:e6:1a:11:73: b0:71:fc:bb:bc:24:f9:36:b7:a4:bf:62:b2:28:96:f1:84:82: b5:7e:1c:c0:ee:3c:f7:c6:cb:cd:32:20:bb:ef:e4:25:a1:31: 00:07:47:22:f2:4c:3d:dc:21:67:aa:45:86:39:f7:59:57:5c: 21:ea:00:ab:f2:4b:9b:69:d4:81:3c:53:67:f8:94:84:cb:e0: 41:fb:d9:0c:5f:e3:b7:d3:5a:6f:7b:6c:f5:ed:80:ff:b7:05: 77:dc:ad:35:ae:f1:4d:eb:26:fd:d6:52:62:77:2a:4f:83:75: a4:15:bc:2b:4c:c8:1d:6e:18:04:0f:f7:88:c7:19:c1:24:1e: 47:a0:f5:2e:fa:80:47:dd:ad:55:08:0e:2f:f4:5d:ad:9b:09: 2d:84:8e:46 -----BEGIN CERTIFICATE----- MIIF6jCCBNKgAwIBAgISAZt5ERuROjinuqU6g1Icno4bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NTRjMzQ3ZDY4ZDE1NDkzZGU3MWJiOTYyZjBhNTY3ZTEz NGQ2MDMwHhcNMjYwMTAxMTAxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjQ2YjlmMTYxOGQ1YjgzNzdlOTg3ZjI0NzZlYzI5N2UyNjI0MTdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1VMBPp48yXZHEb92fjPA4Aq9zNL bTZ6QWRZHlNBd3YkknMasu6tK3yRYlxoOaECCH/U/MhHDuX2mVmkWPRzqL2OYyUo mgmRMmwaKDgQLUJD7UQVX88gpkTJy3jzooyvyrfYGGCoK/4M7CvKRLoEv4w18ePd YoANXUqywYPoLQhWABbJKn5COFeQP2ned4nrM5oUftfRyNVoSRhxANKb2oJpJ0Tf CVgHTcGVa82OwWhYUIi41e5sRVIy1h51wfJ7uJfsq3NnuYomevIey8AIWvEiYhre 5mt6vuUmcX2DezTqPI0LUMKXzUPhGbJf7RIwJXtAs95aoFe6LIZgKGjDjwIDAQAB o4IC9jCCAvIwHQYDVR0OBBYEFJ9GufFhjVuDd+mH8kduwpfiYkF/MB8GA1UdIwQY MBaAFOdUw0fWjRVJPecbuWLwpWfhNNYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2It MzdiNjJkMjIzOTI0LzEvbjBhNThXR05XNE4zNllmeVIyN0NsLUppUVg4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2ItMzdiNjJkMjIzOTI0 LzEvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIIBCgYIKwYBBQUHAQcBAf8EgfowgfcwgdMEAgABMIHMAwQB LStAMAwDBAAtK0MDBAMtK0AwDAMEBC0rUAMEAS0rVAMEAC0rVzAMAwQALStdAwQF LStAAwQAV+/9AwQBWSEGAwQAXrEFMAwDBAdrtYADBAFrtYQDBAJrtYwwDAMEAmu1 lAMEAGu1ljAMAwQDa7WYAwQAa7WaMAwDBABxFJ0DBABxFJ4wDAMEBZv+IAMEAJv+ IgMEApv+JAMEAZv+MAMEAJv+PQMEAaLc9gMEAsZpZAMEAsZpbAMEAMZpdzAMAwQA xml5AwQAxml6MB8EAgACMBkDBwAqBZ9AAB8DBwAqBZ9EKgUDBQEqBZ9GMA0GCSqG SIb3DQEBCwUAA4IBAQA1BSDHxLWegyQs7HI+snqFE6/785bxDCpOdb+I//7qbmj7 HeKu1W3fTwJq/5QZ3z+O9kaLq7dNQXL4V/iY9GORB2Lup/CqsMAxWVMP8P2lJTjc FZgj4Zuo50uFcPLHUcSqBEXAphW8uuYaEXOwcfy7vCT5Nrekv2KyKJbxhIK1fhzA 7jz3xsvNMiC77+QloTEAB0ci8kw93CFnqkWGOfdZV1wh6gCr8kubadSBPFNn+JSE y+BB+9kMX+O301pve2z17YD/twV33K01rvFN6yb91lJidypPg3WkFbwrTMgdbhgE D/eIxxnBJB5HoPUu+oBH3a1VCA4v9F2tmwkthI5G -----END CERTIFICATE-----Generated at Wed Jan 21 15:07:35 2026 by rpki-client