This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/arEWxGjVNSq334y6Ktt8aDjalyE.roa File: arEWxGjVNSq334y6Ktt8aDjalyE.roa (raw, json) Hash identifier: TaWGOyG5nBxY0egiO8Xs2dGnWrPRgWPcphWefnhZTWM= Subject key identifier: 6A:B1:16:C4:68:D5:35:2A:B7:DF:8C:BA:2A:DB:7C:68:38:DA:97:21 Certificate issuer: /CN=a84216954915e3ceef74dbbbcfe9472009d88901 Certificate serial: 019B7759134A717BD4E2D80895017836173F Authority key identifier: A8:42:16:95:49:15:E3:CE:EF:74:DB:BB:CF:E9:47:20:09:D8:89:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEIWlUkV487vdNu7z-lHIAnYiQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/arEWxGjVNSq334y6Ktt8aDjalyE.roa Signing time: Thu 01 Jan 2026 02:18:04 +0000 ROA not before: Thu 01 Jan 2026 02:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15844 IP address blocks: 46.227.128.0/21 maxlen: 21 80.72.240.0/20 maxlen: 20 185.55.180.0/22 maxlen: 22 194.45.26.0/24 maxlen: 24 217.24.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.mft rsync://rpki.ripe.net/repository/DEFAULT/qEIWlUkV487vdNu7z-lHIAnYiQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:13:4a:71:7b:d4:e2:d8:08:95:01:78:36:17:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a84216954915e3ceef74dbbbcfe9472009d88901 Validity Not Before: Jan 1 02:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ab116c468d5352ab7df8cba2adb7c6838da9721 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:88:63:eb:a6:15:09:a2:e8:fc:f8:f4:5b:4d: f1:0d:0d:a9:6d:b6:d4:8f:b4:74:22:b3:4f:74:ab: 82:cf:f1:3e:1b:72:85:fc:03:2e:06:c3:34:de:c6: 72:6e:99:d7:5e:25:32:81:8f:de:31:7a:7e:b6:7d: a1:08:45:28:a9:13:e2:82:1a:71:2f:53:10:f2:a3: 09:ef:12:85:0e:71:08:e2:d9:89:ed:ae:5a:3c:d9: 46:64:9c:f6:82:90:25:95:3a:f8:26:34:0e:a7:20: c3:b8:01:63:8b:68:73:41:da:10:67:bd:bc:81:4b: 59:53:88:bd:2c:5a:99:89:66:da:00:af:26:54:81: ea:15:aa:31:73:39:41:0b:8f:24:5d:bd:80:b0:e8: b7:89:83:af:5f:29:ea:4f:51:91:f2:bf:84:e1:e6: c0:ba:d2:87:fe:bd:47:96:19:8b:80:2c:51:55:35: ee:fa:7e:de:f6:c0:1b:8e:29:1c:8d:d2:b5:fb:12: a7:c5:16:d7:9f:f3:57:74:85:c4:43:b7:17:7f:06: 9b:25:ac:05:e7:73:51:f3:f8:a1:b7:55:9d:21:79: e4:fe:93:36:a1:ee:05:77:4a:f6:85:30:d8:04:86: 05:27:81:62:a9:1f:ef:6d:74:c4:c7:ec:4b:ee:bb: c9:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B1:16:C4:68:D5:35:2A:B7:DF:8C:BA:2A:DB:7C:68:38:DA:97:21 X509v3 Authority Key Identifier: keyid:A8:42:16:95:49:15:E3:CE:EF:74:DB:BB:CF:E9:47:20:09:D8:89:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEIWlUkV487vdNu7z-lHIAnYiQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/arEWxGjVNSq334y6Ktt8aDjalyE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/c3c91d-5319-41aa-b197-ab5d163977f2/1/qEIWlUkV487vdNu7z-lHIAnYiQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.227.128.0/21 80.72.240.0/20 185.55.180.0/22 194.45.26.0/24 217.24.0.0/20 Signature Algorithm: sha256WithRSAEncryption 7d:78:88:0f:e7:14:c7:27:41:88:c8:ed:e6:36:8b:f7:10:3c: a3:32:0e:3d:1f:f7:96:b7:1e:d5:3d:4b:08:3e:9b:fd:c3:99: 7a:67:c0:a5:62:31:ad:15:8d:2b:1d:a1:aa:e3:c7:2b:a8:05: 71:99:08:96:d1:ae:60:96:ad:6b:a0:f7:46:4f:30:6d:eb:40: 06:5e:57:2a:6b:b3:42:3b:ce:90:e4:9c:eb:65:d6:b4:f4:15: 64:7a:47:50:fc:4a:17:8a:32:23:87:80:7c:a9:76:6c:22:0f: 3e:42:e9:7f:ca:4f:82:11:29:d4:d4:b4:65:c8:47:35:ad:69: a2:44:2c:05:47:ee:80:70:74:1d:48:28:f8:c1:12:54:5e:a0: a5:31:15:cc:83:cc:fa:3c:55:d7:b8:e5:42:e5:b6:50:14:03: 1c:f5:ba:76:2b:0f:24:8c:a2:ed:05:b9:31:eb:16:88:6e:a0: a4:4f:94:76:92:1e:63:10:8d:a3:f8:a1:94:3a:63:8d:86:22: ec:70:ef:14:08:88:a8:95:5c:c0:5f:20:c6:c0:54:fc:34:b7: 0a:97:29:d9:67:af:d8:fe:85:26:f3:68:bd:04:f1:37:0d:96: d7:b3:c1:1f:1f:e6:10:e6:cf:86:31:12:b6:0f:a9:1f:98:92: 36:44:95:f4 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt3WRNKcXvU4tgIlQF4Nhc/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE4NDIxNjk1NDkxNWUzY2VlZjc0ZGJiYmNmZTk0NzIwMDlk ODg5MDEwHhcNMjYwMTAxMDIxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YWIxMTZjNDY4ZDUzNTJhYjdkZjhjYmEyYWRiN2M2ODM4ZGE5NzIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIhj66YVCaLo/Pj0W03xDQ2pbbbU j7R0IrNPdKuCz/E+G3KF/AMuBsM03sZybpnXXiUygY/eMXp+tn2hCEUoqRPighpx L1MQ8qMJ7xKFDnEI4tmJ7a5aPNlGZJz2gpAllTr4JjQOpyDDuAFji2hzQdoQZ728 gUtZU4i9LFqZiWbaAK8mVIHqFaoxczlBC48kXb2AsOi3iYOvXynqT1GR8r+E4ebA utKH/r1HlhmLgCxRVTXu+n7e9sAbjikcjdK1+xKnxRbXn/NXdIXEQ7cXfwabJawF 53NR8/iht1WdIXnk/pM2oe4Fd0r2hTDYBIYFJ4FiqR/vbXTEx+xL7rvJKwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFGqxFsRo1TUqt9+MuirbfGg42pchMB8GA1UdIwQY MBaAFKhCFpVJFePO73Tbu8/pRyAJ2IkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcUVJV2xVa1Y0ODd2ZE51N3otbEhJQW5ZaVFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9jM2M5MWQtNTMxOS00MWFhLWIxOTct YWI1ZDE2Mzk3N2YyLzEvYXJFV3hHalZOU3EzMzR5Nkt0dDhhRGphbHlFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9jM2M5MWQtNTMxOS00MWFhLWIxOTctYWI1ZDE2Mzk3N2Yy LzEvcUVJV2xVa1Y0ODd2ZE51N3otbEhJQW5ZaVFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQDLuOAAwQE UEjwAwQCuTe0AwQAwi0aAwQE2RgAMA0GCSqGSIb3DQEBCwUAA4IBAQB9eIgP5xTH J0GIyO3mNov3EDyjMg49H/eWtx7VPUsIPpv9w5l6Z8ClYjGtFY0rHaGq48crqAVx mQiW0a5glq1roPdGTzBt60AGXlcqa7NCO86Q5JzrZda09BVkekdQ/EoXijIjh4B8 qXZsIg8+Qul/yk+CESnU1LRlyEc1rWmiRCwFR+6AcHQdSCj4wRJUXqClMRXMg8z6 PFXXuOVC5bZQFAMc9bp2Kw8kjKLtBbkx6xaIbqCkT5R2kh5jEI2j+KGUOmONhiLs cO8UCIiolVzAXyDGwFT8NLcKlynZZ6/Y/oUm82i9BPE3DZbXs8EfH+YQ5s+GMRK2 D6kfmJI2RJX0 -----END CERTIFICATE-----Generated at Mon Feb 9 20:09:42 2026 by rpki-client