This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/Bgb4R3FK8PY34Yz-lvynRT-9XWQ.roa File: Bgb4R3FK8PY34Yz-lvynRT-9XWQ.roa (raw, json) Hash identifier: St6uFsBRyQsJnyTTYPZwyzlv1Byj/hyZ5kqADUUKKnM= Subject key identifier: 06:06:F8:47:71:4A:F0:F6:37:E1:8C:FE:96:FC:A7:45:3F:BD:5D:64 Certificate issuer: /CN=854e103aaec432fc191d49819bd1ab71fe1cfa80 Certificate serial: 019B7DC9E8C59411B0C16C2C3E5E8E54DCC0 Authority key identifier: 85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/Bgb4R3FK8PY34Yz-lvynRT-9XWQ.roa Signing time: Fri 02 Jan 2026 08:19:02 +0000 ROA not before: Fri 02 Jan 2026 08:19:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50297 IP address blocks: 46.148.16.0/24 maxlen: 24 46.148.17.0/24 maxlen: 24 46.148.18.0/24 maxlen: 24 46.148.19.0/24 maxlen: 24 46.148.20.0/24 maxlen: 24 46.148.21.0/24 maxlen: 24 46.148.22.0/24 maxlen: 24 46.148.26.0/24 maxlen: 24 46.148.27.0/24 maxlen: 24 46.148.28.0/24 maxlen: 24 193.106.28.0/22 maxlen: 22 2001:67c:28f8::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.mft rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 14:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:c9:e8:c5:94:11:b0:c1:6c:2c:3e:5e:8e:54:dc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=854e103aaec432fc191d49819bd1ab71fe1cfa80 Validity Not Before: Jan 2 08:19:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0606f847714af0f637e18cfe96fca7453fbd5d64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:80:63:01:63:ba:c0:73:f3:5a:93:38:ed:85: a2:6a:94:78:19:be:2a:34:dc:ef:f4:f8:b2:d8:4a: 2b:f2:f2:b8:7b:8c:4c:ba:31:04:c3:f4:c7:32:72: ae:e8:b4:09:93:5c:f3:1e:d3:01:a0:60:43:19:88: b4:b6:22:b2:ee:fc:3d:6e:64:b4:ed:73:17:34:fb: a2:6c:0f:44:10:4e:7b:1e:2d:40:98:bb:d0:c9:3b: 3d:c4:66:5b:d5:ab:ae:55:d9:4d:21:d0:87:92:79: 81:78:33:0c:3e:14:66:2c:1c:27:d1:20:13:81:94: 59:cf:07:91:a5:fc:ea:98:2e:ea:71:98:79:18:80: 9f:07:2e:09:e2:1a:e5:d4:89:21:f5:78:69:e6:30: 21:38:d2:df:d9:82:ff:75:db:15:d3:ad:a0:ad:16: b3:b7:5c:dc:2a:9e:84:41:9c:88:60:54:b4:01:60: 3b:f2:46:ac:9d:ba:13:c1:fc:81:62:ce:82:db:67: b2:5b:e9:49:cb:cb:8e:0e:1a:d3:11:85:13:88:4a: e2:a7:56:1b:ef:69:20:cc:a4:a3:f1:22:2e:87:1e: 59:b0:97:82:e3:48:c5:71:23:57:16:4a:51:37:19: 2b:fc:76:f9:12:a8:d4:e6:05:6c:79:7a:cb:5f:fd: d3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:06:F8:47:71:4A:F0:F6:37:E1:8C:FE:96:FC:A7:45:3F:BD:5D:64 X509v3 Authority Key Identifier: keyid:85:4E:10:3A:AE:C4:32:FC:19:1D:49:81:9B:D1:AB:71:FE:1C:FA:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hU4QOq7EMvwZHUmBm9Grcf4c-oA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/Bgb4R3FK8PY34Yz-lvynRT-9XWQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/65f4a2-5f69-465b-8891-9c01df7b9e66/1/hU4QOq7EMvwZHUmBm9Grcf4c-oA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.148.16.0-46.148.22.255 46.148.26.0-46.148.28.255 193.106.28.0/22 IPv6: 2001:67c:28f8::/48 Signature Algorithm: sha256WithRSAEncryption 46:af:75:9e:33:d4:b1:fd:13:80:fa:9c:03:93:99:31:fc:c2: 7d:51:fc:cf:2d:2a:24:1d:66:5c:9b:0b:db:98:71:6d:76:b7: 05:ef:d1:80:0d:22:58:86:65:ec:7f:75:a8:d0:20:cd:84:c5: e7:84:18:81:f5:27:37:d6:7e:44:0d:40:a5:90:54:5d:84:5e: 6d:c4:8f:6f:15:bc:7b:52:88:1e:82:b9:a8:d8:b9:9a:0e:2d: 8d:2f:f1:fc:8f:0a:f7:3c:fd:d8:b1:1e:59:06:d2:db:1a:3b: 78:76:1d:75:71:5d:3f:d6:83:1c:aa:e5:3a:83:ac:a3:10:8a: 97:15:f9:ee:64:ad:dc:c1:4d:58:38:8a:40:39:bc:df:f5:ab: df:3d:ec:46:76:3d:fa:ee:44:05:26:cc:7d:ca:24:14:4b:d9: 19:d9:d1:eb:9f:2d:00:9a:cd:dc:0e:c2:54:63:bb:ab:c1:75: 64:47:67:90:2b:b2:eb:6f:70:5e:af:b4:2b:0a:93:e6:73:63: 43:bd:04:07:8c:8d:9b:01:7c:4a:97:fd:84:a8:28:61:e1:5a: 2d:62:fd:71:f1:4f:f8:2f:1c:7a:d0:66:c2:94:57:df:3c:27: 7b:72:b3:35:7f:8f:05:c4:d3:fb:70:74:db:0b:24:c4:8c:84: ba:e5:a1:f7 -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt9yejFlBGwwWwsPl6OVNzAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1NGUxMDNhYWVjNDMyZmMxOTFkNDk4MTliZDFhYjcxZmUx Y2ZhODAwHhcNMjYwMTAyMDgxOTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjA2Zjg0NzcxNGFmMGY2MzdlMThjZmU5NmZjYTc0NTNmYmQ1ZDY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIBjAWO6wHPzWpM47YWiapR4Gb4q NNzv9Piy2Eor8vK4e4xMujEEw/THMnKu6LQJk1zzHtMBoGBDGYi0tiKy7vw9bmS0 7XMXNPuibA9EEE57Hi1AmLvQyTs9xGZb1auuVdlNIdCHknmBeDMMPhRmLBwn0SAT gZRZzweRpfzqmC7qcZh5GICfBy4J4hrl1Ikh9Xhp5jAhONLf2YL/ddsV062grRaz t1zcKp6EQZyIYFS0AWA78kasnboTwfyBYs6C22eyW+lJy8uODhrTEYUTiErip1Yb 72kgzKSj8SIuhx5ZsJeC40jFcSNXFkpRNxkr/Hb5EqjU5gVseXrLX/3T0QIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFAYG+EdxSvD2N+GM/pb8p0U/vV1kMB8GA1UdIwQY MBaAFIVOEDquxDL8GR1JgZvRq3H+HPqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaFU0UU9xN0VNdndaSFVtQm05R3JjZjRjLW9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi82NWY0YTItNWY2OS00NjViLTg4OTEt OWMwMWRmN2I5ZTY2LzEvQmdiNFIzRks4UFkzNFl6LWx2eW5SVC05WFdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi82NWY0YTItNWY2OS00NjViLTg4OTEtOWMwMWRmN2I5ZTY2 LzEvaFU0UU9xN0VNdndaSFVtQm05R3JjZjRjLW9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAoBAIAATAiMAwDBAQulBAD BAAulBYwDAMEAS6UGgMEAC6UHAMEAsFqHDAPBAIAAjAJAwcAIAEGfCj4MA0GCSqG SIb3DQEBCwUAA4IBAQBGr3WeM9Sx/ROA+pwDk5kx/MJ9UfzPLSokHWZcmwvbmHFt drcF79GADSJYhmXsf3Wo0CDNhMXnhBiB9Sc31n5EDUClkFRdhF5txI9vFbx7Uoge grmo2LmaDi2NL/H8jwr3PP3YsR5ZBtLbGjt4dh11cV0/1oMcquU6g6yjEIqXFfnu ZK3cwU1YOIpAObzf9avfPexGdj367kQFJsx9yiQUS9kZ2dHrny0Ams3cDsJUY7ur wXVkR2eQK7Lrb3Ber7QrCpPmc2NDvQQHjI2bAXxKl/2EqChh4VotYv1x8U/4Lxx6 0GbClFffPCd7crM1f48FxNP7cHTbCyTEjIS65aH3 -----END CERTIFICATE-----Generated at Tue Jan 20 00:01:13 2026 by rpki-client