This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/PIBmTf3gSYM6zkI7Y8MKCCqkVmM.roa File: PIBmTf3gSYM6zkI7Y8MKCCqkVmM.roa (raw, json) Hash identifier: 5xE+UcziQ9DiquZ2A/57aqh1sjUE876lnNSATCS1lTI= Subject key identifier: 3C:80:66:4D:FD:E0:49:83:3A:CE:42:3B:63:C3:0A:08:2A:A4:56:63 Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143 Certificate serial: 019B7B3671AB3D1F877E7D13E84254A30905 Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/PIBmTf3gSYM6zkI7Y8MKCCqkVmM.roa Signing time: Thu 01 Jan 2026 20:18:44 +0000 ROA not before: Thu 01 Jan 2026 20:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1241 IP address blocks: 46.12.0.0/16 maxlen: 24 46.246.128.0/17 maxlen: 24 62.1.0.0/16 maxlen: 24 77.49.0.0/16 maxlen: 24 79.103.0.0/16 maxlen: 24 130.43.0.0/17 maxlen: 24 188.4.0.0/16 maxlen: 24 193.92.0.0/16 maxlen: 24 194.219.0.0/16 maxlen: 24 195.74.224.0/19 maxlen: 24 212.54.192.0/19 maxlen: 24 212.251.0.0/17 maxlen: 24 213.16.128.0/17 maxlen: 24 2a02:2148::/29 maxlen: 42 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 14:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:71:ab:3d:1f:87:7e:7d:13:e8:42:54:a3:09:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143 Validity Not Before: Jan 1 20:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3c80664dfde049833ace423b63c30a082aa45663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a7:ee:8d:d1:c4:6d:93:cc:e5:30:1f:e3:82: 61:71:e2:64:e7:1f:57:1e:c5:2c:77:ac:d7:8c:9c: 0c:a7:56:67:e2:1d:31:a5:fd:38:31:cd:a4:5b:68: 82:62:ba:5c:b1:7d:07:5e:21:d7:b3:3d:2a:a2:28: 63:56:01:05:c9:b1:8f:72:7f:31:41:3c:44:f7:2b: 00:65:41:b9:c8:4e:a4:75:4e:82:e7:87:db:67:15: 69:e8:e5:1c:8b:cc:96:4d:b3:70:60:8f:64:6d:07: cd:14:5e:23:8b:3e:58:85:f7:7a:78:78:23:ba:2a: 00:5e:d3:79:c0:3f:8a:fd:c7:db:e1:50:64:0e:e6: b2:54:d4:e0:ea:f6:18:dc:a5:aa:66:1f:6d:5f:50: 56:2e:6a:02:4a:49:6e:bd:14:f5:81:88:a3:a0:49: d3:61:67:ac:cf:61:52:29:f8:78:5f:3f:89:18:40: 0b:86:59:d8:db:63:bd:87:f7:e9:fa:ab:15:9b:73: 0a:04:ce:6a:d4:21:d4:3e:8b:88:79:a2:f9:f3:01: 9d:77:fd:33:7f:81:45:1c:7a:dd:b5:e5:ec:72:f1: 19:00:aa:da:49:fb:6f:01:c5:bb:e2:d1:af:a7:e5: be:b3:82:06:e1:77:1f:30:b2:9e:4b:79:9f:4d:f6: 01:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:80:66:4D:FD:E0:49:83:3A:CE:42:3B:63:C3:0A:08:2A:A4:56:63 X509v3 Authority Key Identifier: keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/PIBmTf3gSYM6zkI7Y8MKCCqkVmM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.12.0.0/16 46.246.128.0/17 62.1.0.0/16 77.49.0.0/16 79.103.0.0/16 130.43.0.0/17 188.4.0.0/16 193.92.0.0/16 194.219.0.0/16 195.74.224.0/19 212.54.192.0/19 212.251.0.0/17 213.16.128.0/17 IPv6: 2a02:2148::/29 Signature Algorithm: sha256WithRSAEncryption 42:d3:8c:da:0c:09:6c:14:dd:d7:ce:8c:3c:8f:27:8a:ab:d6: 40:bf:f2:78:c3:09:6a:b9:64:bc:0e:ba:e5:a5:73:68:d6:2f: 1c:12:9f:93:24:4d:02:d1:89:d3:f5:32:0a:55:00:75:9d:fd: 87:20:d6:e5:45:fb:78:07:56:2b:29:3c:af:9d:aa:5b:90:b5: 86:60:cf:2c:41:f0:45:67:59:ed:5e:98:aa:fa:b8:cc:24:08: e9:6b:88:93:44:b5:31:6c:d9:2d:f6:ad:60:59:c8:c9:d4:5b: 83:04:a0:a5:87:db:76:3f:52:04:8c:d0:58:7b:c7:6b:bf:60: c3:1a:ba:11:ae:16:e7:ba:5c:10:d4:4f:bb:af:20:05:6d:d3: a1:7b:2d:b4:0d:91:b9:63:ed:5d:30:23:de:ac:c3:b8:71:73: 1d:f2:24:2c:9e:51:a8:18:af:bf:01:8d:57:85:d3:85:0b:2d: cb:ae:06:ed:03:a6:65:f7:e3:e2:46:cd:0e:4c:6d:6f:0c:24: c1:55:93:7d:51:c8:03:32:0f:48:64:8f:ad:8c:6f:46:ec:d3: b6:51:47:1f:4b:fe:f1:85:3b:90:7b:8b:8e:33:bf:90:88:b4: 82:bc:28:67:58:2f:85:66:6a:1b:61:93:67:d9:62:ea:ed:eb: 03:16:87:d1 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgISAZt7NnGrPR+Hfn0T6EJUowkFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZmYyYzYyMjlhZjc2M2E5OWY1MzQ5YTMyNTEwZGY0YTQ1 MjYxNDMwHhcNMjYwMTAxMjAxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYzgwNjY0ZGZkZTA0OTgzM2FjZTQyM2I2M2MzMGEwODJhYTQ1NjYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KfujdHEbZPM5TAf44JhceJk5x9X HsUsd6zXjJwMp1Zn4h0xpf04Mc2kW2iCYrpcsX0HXiHXsz0qoihjVgEFybGPcn8x QTxE9ysAZUG5yE6kdU6C54fbZxVp6OUci8yWTbNwYI9kbQfNFF4jiz5Yhfd6eHgj uioAXtN5wD+K/cfb4VBkDuayVNTg6vYY3KWqZh9tX1BWLmoCSkluvRT1gYijoEnT YWesz2FSKfh4Xz+JGEALhlnY22O9h/fp+qsVm3MKBM5q1CHUPouIeaL58wGdd/0z f4FFHHrdteXscvEZAKraSftvAcW74tGvp+W+s4IG4XcfMLKeS3mfTfYBIwIDAQAB o4ICWTCCAlUwHQYDVR0OBBYEFDyAZk394EmDOs5CO2PDCggqpFZjMB8GA1UdIwQY MBaAFPD/LGIpr3Y6mfU0mjJRDfSkUmFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYt ZTY5ZjdhNWQyZDkwLzEvUElCbVRmM2dTWU02emtJN1k4TUtDQ3FrVm1NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYtZTY5ZjdhNWQyZDkw LzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjBNBAIAATBHAwMALgwDBAcu 9oADAwA+AQMDAE0xAwMAT2cDBAeCKwADAwC8BAMDAMFcAwMAwtsDBAXDSuADBAXU NsADBAfU+wADBAfVEIAwDQQCAAIwBwMFAyoCIUgwDQYJKoZIhvcNAQELBQADggEB AELTjNoMCWwU3dfOjDyPJ4qr1kC/8njDCWq5ZLwOuuWlc2jWLxwSn5MkTQLRidP1 MgpVAHWd/Ycg1uVF+3gHVispPK+dqluQtYZgzyxB8EVnWe1emKr6uMwkCOlriJNE tTFs2S32rWBZyMnUW4MEoKWH23Y/UgSM0Fh7x2u/YMMauhGuFue6XBDUT7uvIAVt 06F7LbQNkblj7V0wI96sw7hxcx3yJCyeUagYr78BjVeF04ULLcuuBu0DpmX34+JG zQ5MbW8MJMFVk31RyAMyD0hkj62Mb0bs07ZRRx9L/vGFO5B7i44zv5CItIK8KGdY L4Vmahthk2fZYurt6wMWh9E= -----END CERTIFICATE-----Generated at Mon Jan 26 17:24:35 2026 by rpki-client