This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/CkS-0ZO81J7h4SUtAuEyUgGbKKU.roa File: CkS-0ZO81J7h4SUtAuEyUgGbKKU.roa (raw, json) Hash identifier: L1PkP2HK5SAM89Mc7I0Bg6LJYR7nkUK6xOo/LrIcry8= Subject key identifier: 0A:44:BE:D1:93:BC:D4:9E:E1:E1:25:2D:02:E1:32:52:01:9B:28:A5 Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Certificate serial: 019C04F76FB958B3798BF6B7E53E879B83A3 Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/CkS-0ZO81J7h4SUtAuEyUgGbKKU.roa Signing time: Wed 28 Jan 2026 14:17:30 +0000 ROA not before: Wed 28 Jan 2026 14:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205132 IP address blocks: 46.10.156.0/24 maxlen: 24 46.10.179.0/24 maxlen: 24 77.85.170.0/24 maxlen: 24 77.85.198.0/24 maxlen: 24 83.228.61.0/24 maxlen: 24 83.228.86.0/24 maxlen: 24 83.228.87.0/24 maxlen: 24 83.228.89.0/24 maxlen: 24 84.238.167.0/24 maxlen: 24 84.238.192.0/24 maxlen: 24 84.238.193.0/24 maxlen: 24 84.238.194.0/24 maxlen: 24 87.126.134.0/24 maxlen: 24 94.236.169.0/24 maxlen: 24 212.72.199.0/24 maxlen: 24 212.72.221.0/24 maxlen: 24 213.91.157.0/24 maxlen: 24 213.91.173.0/24 maxlen: 24 213.91.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:04:f7:6f:b9:58:b3:79:8b:f6:b7:e5:3e:87:9b:83:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Validity Not Before: Jan 28 14:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0a44bed193bcd49ee1e1252d02e13252019b28a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:8b:ad:c1:ad:c2:71:35:98:a3:3c:a4:29:b7: 8f:cb:16:0c:9a:49:5c:8f:96:fd:60:fc:12:a1:4e: 33:d8:64:ac:6d:7a:af:37:ac:1f:33:89:ce:b7:73: 1a:31:88:5b:10:2e:dc:71:a2:46:43:a0:3c:94:df: 26:d8:3b:41:fb:c3:d8:db:99:51:3d:03:c4:88:6a: 50:45:74:2c:5b:a0:e0:13:98:9f:54:2a:f0:a6:37: 96:ff:b9:99:63:cf:b9:3a:3a:a9:46:c4:27:7a:e9: 15:f6:b4:87:98:69:22:16:1d:f3:d0:10:19:a2:95: 7d:44:78:c5:64:e9:01:f2:ab:3d:97:73:00:b2:2f: 86:43:b6:87:48:ff:0b:57:78:15:63:fc:87:98:fa: ff:4c:6d:9e:c5:4b:75:c3:74:1b:f9:a0:cf:a5:86: 90:2e:fc:14:d9:ff:28:ba:16:58:9e:b1:aa:bd:96: e1:16:e2:cc:49:3c:5f:96:10:10:56:5d:b4:57:84: 42:b6:a5:03:71:74:fd:01:c0:ec:37:fb:fd:f3:62: e2:2f:38:4d:74:db:35:8b:4d:61:00:63:ef:77:1a: 7e:85:31:36:fa:61:d9:5d:cd:b9:5d:68:b5:40:52: bb:c3:e7:df:d1:82:f0:21:05:f6:bf:94:54:01:93: 00:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:44:BE:D1:93:BC:D4:9E:E1:E1:25:2D:02:E1:32:52:01:9B:28:A5 X509v3 Authority Key Identifier: keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/CkS-0ZO81J7h4SUtAuEyUgGbKKU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.10.156.0/24 46.10.179.0/24 77.85.170.0/24 77.85.198.0/24 83.228.61.0/24 83.228.86.0/23 83.228.89.0/24 84.238.167.0/24 84.238.192.0-84.238.194.255 87.126.134.0/24 94.236.169.0/24 212.72.199.0/24 212.72.221.0/24 213.91.157.0/24 213.91.173.0/24 213.91.191.0/24 Signature Algorithm: sha256WithRSAEncryption 34:1d:35:5e:b0:00:ad:d8:d1:d6:8e:c8:41:b2:51:78:28:1a: c1:4f:53:60:0a:f6:93:45:e7:c5:9c:70:66:54:9f:84:f0:48: 4d:be:cd:1f:65:d5:8e:d0:42:c8:0c:15:b7:62:b1:f9:81:9e: 99:ae:86:13:6e:a6:4a:9e:14:e6:3b:5d:e5:a1:84:c8:2f:30: b3:92:ce:be:09:55:fa:2e:73:56:bb:b7:52:2d:9e:ef:76:62: 03:86:54:78:ef:7c:f6:c0:ff:4b:8a:24:eb:5e:60:86:89:e2: 53:35:b8:cd:21:f7:20:ec:49:9a:bc:a7:13:11:1f:50:8b:a1: 15:06:4c:81:73:b7:d3:5d:c7:08:cb:55:2a:23:bd:66:7b:d6: 1b:59:60:ac:ef:7e:b5:ab:41:ff:b5:a7:ec:2c:fb:d7:fb:0b: c8:cd:8b:0d:b0:c4:1d:a7:fd:91:78:14:af:f1:69:c0:24:2e: e1:b0:95:96:36:10:f8:14:9d:fc:2e:56:f0:aa:1f:eb:ef:07: 84:cc:48:a0:fc:f0:ae:21:5e:9b:93:6b:7a:f8:7c:4a:86:ce: df:7f:a9:4a:10:f2:92:21:33:a9:8d:54:5a:5b:81:69:6d:54: 08:25:07:5d:11:65:48:fc:d8:57:4f:f6:1a:d4:c0:38:b6:fc: 2b:40:06:05 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgISAZwE92+5WLN5i/a35T6Hm4OjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4 ZmI0YzQwHhcNMjYwMTI4MTQxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYTQ0YmVkMTkzYmNkNDllZTFlMTI1MmQwMmUxMzI1MjAxOWIyOGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIutwa3CcTWYozykKbePyxYMmklc j5b9YPwSoU4z2GSsbXqvN6wfM4nOt3MaMYhbEC7ccaJGQ6A8lN8m2DtB+8PY25lR PQPEiGpQRXQsW6DgE5ifVCrwpjeW/7mZY8+5OjqpRsQneukV9rSHmGkiFh3z0BAZ opV9RHjFZOkB8qs9l3MAsi+GQ7aHSP8LV3gVY/yHmPr/TG2exUt1w3Qb+aDPpYaQ LvwU2f8ouhZYnrGqvZbhFuLMSTxflhAQVl20V4RCtqUDcXT9AcDsN/v982LiLzhN dNs1i01hAGPvdxp+hTE2+mHZXc25XWi1QFK7w+ff0YLwIQX2v5RUAZMAswIDAQAB o4ICbDCCAmgwHQYDVR0OBBYEFApEvtGTvNSe4eElLQLhMlIBmyilMB8GA1UdIwQY MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct ODcyYmEyZDlmNDRjLzEvQ2tTLTBaTzgxSjdoNFNVdEF1RXlVZ0diS0tVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGBBggrBgEFBQcBBwEB/wRyMHAwbgQCAAEwaAMEAC4KnAME AC4KswMEAE1VqgMEAE1VxgMEAFPkPQMEAVPkVgMEAFPkWQMEAFTupzAMAwQGVO7A AwQAVO7CAwQAV36GAwQAXuypAwQA1EjHAwQA1EjdAwQA1VudAwQA1VutAwQA1Vu/ MA0GCSqGSIb3DQEBCwUAA4IBAQA0HTVesACt2NHWjshBslF4KBrBT1NgCvaTRefF nHBmVJ+E8EhNvs0fZdWO0ELIDBW3YrH5gZ6ZroYTbqZKnhTmO13loYTILzCzks6+ CVX6LnNWu7dSLZ7vdmIDhlR473z2wP9LiiTrXmCGieJTNbjNIfcg7EmavKcTER9Q i6EVBkyBc7fTXccIy1UqI71me9YbWWCs7361q0H/tafsLPvX+wvIzYsNsMQdp/2R eBSv8WnAJC7hsJWWNhD4FJ38Llbwqh/r7weEzEig/PCuIV6bk2t6+HxKhs7ff6lK EPKSITOpjVRaW4FpbVQIJQddEWVI/NhXT/Ya1MA4tvwrQAYF -----END CERTIFICATE-----Generated at Tue Feb 10 06:26:47 2026 by rpki-client