This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/j9r6omYv5DY7Q-v58Y8r40ZoQ3M.roa File: j9r6omYv5DY7Q-v58Y8r40ZoQ3M.roa (raw, json) Hash identifier: KOh2n4AMu5hrToH8TJbWCfEU0PA2Dt+2tpX65g+S474= Subject key identifier: 8F:DA:FA:A2:66:2F:E4:36:3B:43:EB:F9:F1:8F:2B:E3:46:68:43:73 Certificate issuer: /CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Certificate serial: 019B7AC8BEC103096DFCAA3873C50FE2D9BA Authority key identifier: E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/j9r6omYv5DY7Q-v58Y8r40ZoQ3M.roa Signing time: Thu 01 Jan 2026 18:18:54 +0000 ROA not before: Thu 01 Jan 2026 18:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12578 IP address blocks: 46.109.0.0/16 maxlen: 24 62.85.0.0/17 maxlen: 24 78.84.0.0/16 maxlen: 24 80.232.128.0/17 maxlen: 24 80.232.147.0/24 maxlen: 24 80.232.150.0/24 maxlen: 24 80.232.150.13/32 maxlen: 32 80.232.195.0/24 maxlen: 24 81.198.0.0/16 maxlen: 24 81.198.95.0/24 maxlen: 24 84.237.128.0/17 maxlen: 24 87.110.0.0/16 maxlen: 24 87.246.144.0/20 maxlen: 24 87.246.160.0/19 maxlen: 24 91.105.0.0/17 maxlen: 24 95.68.0.0/17 maxlen: 24 185.38.56.0/22 maxlen: 24 194.8.16.0/21 maxlen: 24 194.8.24.0/22 maxlen: 24 195.2.96.0/19 maxlen: 24 195.13.128.0/17 maxlen: 24 195.13.200.0/24 maxlen: 24 195.13.201.0/24 maxlen: 24 195.13.215.0/24 maxlen: 24 195.13.228.0/24 maxlen: 24 195.13.237.0/24 maxlen: 24 195.13.245.0/24 maxlen: 24 195.13.249.0/24 maxlen: 24 195.13.251.0/24 maxlen: 24 195.13.253.0/24 maxlen: 24 195.114.32.0/19 maxlen: 24 195.122.0.0/19 maxlen: 24 195.122.26.0/23 maxlen: 24 195.122.28.0/24 maxlen: 24 195.122.29.0/24 maxlen: 24 2a02:2330::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.mft rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:be:c1:03:09:6d:fc:aa:38:73:c5:0f:e2:d9:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3be07cb1fd4f1e3c922303b670a881b82e61491 Validity Not Before: Jan 1 18:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8fdafaa2662fe4363b43ebf9f18f2be346684373 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:53:69:b9:fb:6b:27:09:12:80:4e:65:a1:e1: 3b:67:35:46:4c:46:5f:e6:83:fd:69:0c:bc:35:f8: 53:1b:e4:31:a9:4c:f3:de:f0:41:9f:fa:3e:40:28: db:cb:ee:8a:46:4b:ec:dd:b8:8e:df:d6:a4:43:6b: 49:58:a4:67:60:7f:e2:f6:ad:14:bc:0d:d3:51:aa: 1f:64:e2:17:47:ae:ae:7f:25:44:70:9a:e0:34:cd: 14:77:1a:71:e2:56:90:65:57:d0:4a:be:c3:30:58: ac:8d:38:36:18:4b:34:7c:3d:e4:a5:e5:13:14:7d: 09:58:db:40:fc:70:1d:07:c4:47:22:bf:8d:94:71: c1:16:8e:81:e8:58:be:85:39:7f:7d:04:1b:db:2d: 09:a9:13:50:e3:ea:0d:78:1a:bc:fd:3d:7c:36:cb: 9f:3d:3f:a5:c6:d9:b7:08:c5:17:b9:1f:d2:26:d8: 94:57:b1:89:d4:90:1d:14:27:67:36:ac:29:58:11: 74:da:6c:e3:25:97:de:c8:ec:89:50:33:2d:53:45: 69:d3:b8:86:0d:25:58:9b:bc:00:b6:2e:2f:b6:7b: f1:bf:74:fa:eb:ca:49:a7:94:d5:c2:00:6f:e8:bf: b6:18:81:4d:57:f3:e8:8a:60:7e:b9:46:87:5f:15: b5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:DA:FA:A2:66:2F:E4:36:3B:43:EB:F9:F1:8F:2B:E3:46:68:43:73 X509v3 Authority Key Identifier: keyid:E3:BE:07:CB:1F:D4:F1:E3:C9:22:30:3B:67:0A:88:1B:82:E6:14:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/474Hyx_U8ePJIjA7ZwqIG4LmFJE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/j9r6omYv5DY7Q-v58Y8r40ZoQ3M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/8f5fae-da90-4314-bffc-d4ee1d389e0d/1/474Hyx_U8ePJIjA7ZwqIG4LmFJE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.109.0.0/16 62.85.0.0/17 78.84.0.0/16 80.232.128.0/17 81.198.0.0/16 84.237.128.0/17 87.110.0.0/16 87.246.144.0-87.246.191.255 91.105.0.0/17 95.68.0.0/17 185.38.56.0/22 194.8.16.0-194.8.27.255 195.2.96.0/19 195.13.128.0/17 195.114.32.0/19 195.122.0.0/19 IPv6: 2a02:2330::/29 Signature Algorithm: sha256WithRSAEncryption 4b:10:7a:e9:dc:a8:35:fc:76:5e:fc:db:0e:23:50:87:74:23: 90:b3:d4:95:6d:41:f2:bc:c9:0f:c1:aa:ef:1c:ff:df:07:b5: 27:d7:37:3e:95:a1:a7:13:2d:f1:86:33:91:82:4a:43:2a:5d: 77:03:ff:fd:6a:9d:29:36:36:bb:8e:0a:ec:39:5b:2b:dd:0f: a5:57:ac:af:61:53:72:31:c0:d3:ae:d6:eb:7f:8e:80:c5:73: ca:ba:fb:e9:a4:b2:5a:92:ed:0e:c3:3f:0c:a5:1e:8c:47:ab: f4:70:b7:5d:b6:be:6d:95:85:76:99:21:3a:f2:82:30:0f:09: ba:5a:28:dd:35:5e:80:fa:84:63:46:42:26:b1:e5:09:2e:4f: 9d:03:2f:aa:5f:75:ee:26:c9:0b:89:83:bf:d2:2a:f6:fa:57: e3:9d:e3:f5:2b:cd:48:cd:b4:50:3b:56:b0:45:c5:63:2f:56: be:c4:11:a3:da:53:04:42:17:e7:b7:23:63:5f:1b:0e:f4:26: 71:5c:57:96:80:df:2c:2b:06:0e:cb:98:09:ee:69:1b:be:6b: 3d:68:82:75:e9:32:a7:b8:f3:03:d9:65:df:80:55:38:cb:0e: c2:aa:1a:31:cc:e4:7f:80:18:4c:24:6c:24:0a:04:22:5a:f6: 6e:06:56:7e -----BEGIN CERTIFICATE----- MIIFdTCCBF2gAwIBAgISAZt6yL7BAwlt/Ko4c8UP4tm6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzYmUwN2NiMWZkNGYxZTNjOTIyMzAzYjY3MGE4ODFiODJl NjE0OTEwHhcNMjYwMTAxMTgxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ZmRhZmFhMjY2MmZlNDM2M2I0M2ViZjlmMThmMmJlMzQ2Njg0MzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlNpuftrJwkSgE5loeE7ZzVGTEZf 5oP9aQy8NfhTG+QxqUzz3vBBn/o+QCjby+6KRkvs3biO39akQ2tJWKRnYH/i9q0U vA3TUaofZOIXR66ufyVEcJrgNM0Udxpx4laQZVfQSr7DMFisjTg2GEs0fD3kpeUT FH0JWNtA/HAdB8RHIr+NlHHBFo6B6Fi+hTl/fQQb2y0JqRNQ4+oNeBq8/T18Nsuf PT+lxtm3CMUXuR/SJtiUV7GJ1JAdFCdnNqwpWBF02mzjJZfeyOyJUDMtU0Vp07iG DSVYm7wAti4vtnvxv3T668pJp5TVwgBv6L+2GIFNV/PoimB+uUaHXxW1vQIDAQAB o4ICgTCCAn0wHQYDVR0OBBYEFI/a+qJmL+Q2O0Pr+fGPK+NGaENzMB8GA1UdIwQY MBaAFOO+B8sf1PHjySIwO2cKiBuC5hSRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMt ZDRlZTFkMzg5ZTBkLzEvajlyNm9tWXY1RFk3US12NThZOHI0MFpvUTNNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84ZjVmYWUtZGE5MC00MzE0LWJmZmMtZDRlZTFkMzg5ZTBk LzEvNDc0SHl4X1U4ZVBKSWpBN1p3cUlHNExtRkpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGWBggrBgEFBQcBBwEB/wSBhjCBgzByBAIAATBsAwMALm0D BAc+VQADAwBOVAMEB1DogAMDAFHGAwQHVO2AAwMAV24wDAMEBFf2kAMEBlf2gAME B1tpAAMEB19EAAMEArkmODAMAwQEwggQAwQCwggYAwQFwwJgAwQHww2AAwQFw3Ig AwQFw3oAMA0EAgACMAcDBQMqAiMwMA0GCSqGSIb3DQEBCwUAA4IBAQBLEHrp3Kg1 /HZe/NsOI1CHdCOQs9SVbUHyvMkPwarvHP/fB7Un1zc+laGnEy3xhjORgkpDKl13 A//9ap0pNja7jgrsOVsr3Q+lV6yvYVNyMcDTrtbrf46AxXPKuvvppLJaku0Owz8M pR6MR6v0cLddtr5tlYV2mSE68oIwDwm6WijdNV6A+oRjRkImseUJLk+dAy+qX3Xu JskLiYO/0ir2+lfjneP1K81IzbRQO1awRcVjL1a+xBGj2lMEQhfntyNjXxsO9CZx XFeWgN8sKwYOy5gJ7mkbvms9aIJ16TKnuPMD2WXfgFU4yw7CqhoxzOR/gBhMJGwk CgQiWvZuBlZ+ -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:57 2026 by rpki-client