This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/1gwDv9GtN9mNcBWLOCsB7VQGHmM.roa File: 1gwDv9GtN9mNcBWLOCsB7VQGHmM.roa (raw, json) Hash identifier: GhIPKfB66xl/U3CpScF6j5w7weYfFaK0TgCynT83hYQ= Subject key identifier: D6:0C:03:BF:D1:AD:37:D9:8D:70:15:8B:38:2B:01:ED:54:06:1E:63 Certificate issuer: /CN=2e8edab12215e29bd38c1da9b5e396bd0c96be09 Certificate serial: 019B7A5B9EEE0186C2E64CA04613C55C62AB Authority key identifier: 2E:8E:DA:B1:22:15:E2:9B:D3:8C:1D:A9:B5:E3:96:BD:0C:96:BE:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lo7asSIV4pvTjB2pteOWvQyWvgk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/1gwDv9GtN9mNcBWLOCsB7VQGHmM.roa Signing time: Thu 01 Jan 2026 16:19:43 +0000 ROA not before: Thu 01 Jan 2026 16:19:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29425 IP address blocks: 46.255.136.0/21 maxlen: 21 46.255.142.0/24 maxlen: 24 195.149.105.0/24 maxlen: 24 2a00:95a0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.mft rsync://rpki.ripe.net/repository/DEFAULT/Lo7asSIV4pvTjB2pteOWvQyWvgk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:9e:ee:01:86:c2:e6:4c:a0:46:13:c5:5c:62:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e8edab12215e29bd38c1da9b5e396bd0c96be09 Validity Not Before: Jan 1 16:19:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d60c03bfd1ad37d98d70158b382b01ed54061e63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c5:39:b6:57:21:1b:72:10:d6:e4:b2:96:2b: ca:8c:a7:b7:e2:6b:b0:97:31:d8:e7:1d:3d:1e:5b: 01:02:fb:d9:b4:b1:3b:7f:0d:75:5a:b9:ea:25:e4: ea:f8:01:3f:34:c4:04:5d:4b:b4:6f:16:86:0a:bd: 6d:70:36:91:94:84:98:c0:fc:38:d4:47:2d:ae:3f: 21:8b:1f:15:c9:5d:97:36:f9:4b:96:bd:a1:2d:98: 15:1f:29:bc:39:27:9e:8a:83:c1:73:d3:3a:78:15: f0:88:6a:a6:79:43:f6:01:a7:11:12:74:08:45:6a: 54:e1:78:27:3b:d5:ed:73:05:c7:6a:4e:b6:65:02: 60:a5:4d:d7:6d:ec:0c:b0:f8:fa:6f:e3:5c:82:98: e0:c7:dd:89:22:0b:ec:e6:98:fe:d4:8b:89:e6:9b: 95:fa:af:fe:d9:4b:75:09:35:3c:38:a4:84:65:91: 54:01:bb:e7:35:2e:3a:f5:71:e1:2d:3e:7c:60:e1: 6c:e0:a5:b2:48:7f:60:74:8d:e4:5b:ec:29:ff:b0: 69:d4:48:64:94:bd:3f:b3:6f:93:ec:c6:95:e0:f5: 71:31:81:08:db:87:30:03:97:4f:0a:1d:f9:6e:c8: 81:7b:0c:30:29:34:7f:1f:08:ff:b0:04:c3:50:a0: fe:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:0C:03:BF:D1:AD:37:D9:8D:70:15:8B:38:2B:01:ED:54:06:1E:63 X509v3 Authority Key Identifier: keyid:2E:8E:DA:B1:22:15:E2:9B:D3:8C:1D:A9:B5:E3:96:BD:0C:96:BE:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lo7asSIV4pvTjB2pteOWvQyWvgk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/1gwDv9GtN9mNcBWLOCsB7VQGHmM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/af76e0-6b7d-40ac-9621-643a2fc4473e/1/Lo7asSIV4pvTjB2pteOWvQyWvgk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.255.136.0/21 195.149.105.0/24 IPv6: 2a00:95a0::/32 Signature Algorithm: sha256WithRSAEncryption 8b:8a:e1:d0:81:3f:71:0a:1f:03:a9:87:57:97:fc:6f:f8:e0: e3:34:e3:b3:52:51:11:ce:6f:fd:85:e5:ed:e4:1c:7f:86:73: 93:20:a8:ab:83:51:f3:f3:7b:4c:11:c1:cd:3b:53:a6:1f:31: 89:29:d6:df:7e:9a:b6:d6:31:28:6a:8c:68:9d:98:70:e1:a2: a9:7b:ea:9e:76:f2:a6:bd:4f:a0:ae:c3:03:99:10:41:20:89: 6a:9d:c8:09:7c:4a:32:d0:27:9e:31:58:e9:6f:b3:f2:5f:19: 82:d1:9e:cc:1d:08:84:8b:26:de:71:a3:6c:e5:b3:e5:3b:73: d8:c1:a7:4b:5c:ad:b1:e5:2b:47:e1:03:c9:8d:ed:c3:ef:65: a5:77:9f:0c:28:07:a7:f5:ae:3f:fd:e6:54:c1:65:8b:f5:35: 80:18:51:d3:8c:fe:c6:2f:53:bf:d6:45:dc:29:fa:ec:b8:ae: fb:f2:64:ad:de:0f:f8:92:95:06:c4:db:d5:bf:54:8f:ce:08: 18:0d:0e:08:dc:c9:57:7b:13:cd:fe:69:c5:2d:d1:2b:64:08: 9a:cb:ab:fa:5f:68:f6:9e:0b:04:dc:92:81:35:cb:d7:25:9c: d4:7f:e3:1d:06:10:da:12:52:d3:e9:7d:22:25:2f:8b:13:93: 7d:50:70:55 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6W57uAYbC5kygRhPFXGKrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlOGVkYWIxMjIxNWUyOWJkMzhjMWRhOWI1ZTM5NmJkMGM5 NmJlMDkwHhcNMjYwMTAxMTYxOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjBjMDNiZmQxYWQzN2Q5OGQ3MDE1OGIzODJiMDFlZDU0MDYxZTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8U5tlchG3IQ1uSylivKjKe34muw lzHY5x09HlsBAvvZtLE7fw11WrnqJeTq+AE/NMQEXUu0bxaGCr1tcDaRlISYwPw4 1Ectrj8hix8VyV2XNvlLlr2hLZgVHym8OSeeioPBc9M6eBXwiGqmeUP2AacREnQI RWpU4XgnO9XtcwXHak62ZQJgpU3XbewMsPj6b+Ncgpjgx92JIgvs5pj+1IuJ5puV +q/+2Ut1CTU8OKSEZZFUAbvnNS469XHhLT58YOFs4KWySH9gdI3kW+wp/7Bp1Ehk lL0/s2+T7MaV4PVxMYEI24cwA5dPCh35bsiBewwwKTR/Hwj/sATDUKD+BwIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFNYMA7/RrTfZjXAVizgrAe1UBh5jMB8GA1UdIwQY MBaAFC6O2rEiFeKb04wdqbXjlr0Mlr4JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG83YXNTSVY0cHZUakIycHRlT1d2UXlXdmdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9hZjc2ZTAtNmI3ZC00MGFjLTk2MjEt NjQzYTJmYzQ0NzNlLzEvMWd3RHY5R3ROOW1OY0JXTE9Dc0I3VlFHSG1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9hZjc2ZTAtNmI3ZC00MGFjLTk2MjEtNjQzYTJmYzQ0NzNl LzEvTG83YXNTSVY0cHZUakIycHRlT1d2UXlXdmdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDLv+IAwQA w5VpMA0EAgACMAcDBQAqAJWgMA0GCSqGSIb3DQEBCwUAA4IBAQCLiuHQgT9xCh8D qYdXl/xv+ODjNOOzUlERzm/9heXt5Bx/hnOTIKirg1Hz83tMEcHNO1OmHzGJKdbf fpq21jEoaoxonZhw4aKpe+qedvKmvU+grsMDmRBBIIlqncgJfEoy0CeeMVjpb7Py XxmC0Z7MHQiEiybecaNs5bPlO3PYwadLXK2x5StH4QPJje3D72Wld58MKAen9a4/ /eZUwWWL9TWAGFHTjP7GL1O/1kXcKfrsuK778mSt3g/4kpUGxNvVv1SPzggYDQ4I 3MlXexPN/mnFLdErZAiay6v6X2j2ngsE3JKBNcvXJZzUf+MdBhDaElLT6X0iJS+L E5N9UHBV -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:10 2026 by rpki-client