This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/RW0ojBlsX-UMDAMTXaAJjNfClOc.roa File: RW0ojBlsX-UMDAMTXaAJjNfClOc.roa (raw, json) Hash identifier: jZcTAOAhoH03df4Q/rcMMKGLMXhfdLm2TLCLpCgQgyY= Subject key identifier: 45:6D:28:8C:19:6C:5F:E5:0C:0C:03:13:5D:A0:09:8C:D7:C2:94:E7 Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b Certificate serial: 019B7CED829AC6396F59196A5BDA745C30E6 Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/RW0ojBlsX-UMDAMTXaAJjNfClOc.roa Signing time: Fri 02 Jan 2026 04:18:18 +0000 ROA not before: Fri 02 Jan 2026 04:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47374 IP address blocks: 46.254.128.0/22 maxlen: 22 46.254.128.0/24 maxlen: 24 46.254.129.0/24 maxlen: 24 46.254.130.0/24 maxlen: 24 46.254.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:82:9a:c6:39:6f:59:19:6a:5b:da:74:5c:30:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b Validity Not Before: Jan 2 04:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=456d288c196c5fe50c0c03135da0098cd7c294e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b3:9e:96:b2:2c:7e:44:91:44:a8:27:7b:06: ff:16:31:ee:e2:23:c1:0d:46:78:33:d6:84:11:14: 3e:6f:b8:36:4d:7a:d8:29:1d:9f:54:4c:bb:0a:8d: e6:c2:5e:c6:de:7b:90:a2:2b:c8:26:11:a0:46:50: 44:0b:fa:89:fd:19:42:87:f7:e8:2e:e9:68:7b:fc: f5:87:cd:02:2a:e0:2a:53:e0:ca:82:5a:48:41:3e: 7d:bf:71:a2:5b:6d:bf:57:f9:25:14:8a:62:98:aa: e4:2e:ff:d5:56:9e:9e:55:4a:d3:c2:0a:15:99:3a: 67:9e:d5:58:7e:9d:1f:e3:f7:94:d9:f0:f6:29:6c: ef:2c:b2:b0:06:2a:9a:dd:61:e7:72:cc:7e:01:b6: a3:57:71:7f:41:33:ac:4a:3f:33:9c:58:a3:a4:f3: 67:d4:93:09:42:c1:84:1b:ba:07:71:5c:f3:a7:c5: 60:ca:d2:3d:4d:24:c2:b7:14:97:bf:a6:80:c3:11: 85:3e:8e:19:44:30:30:43:b8:52:3f:de:84:be:e5: 1d:e2:bd:be:97:5e:f2:fc:13:d4:4c:80:38:de:a1: ce:5c:0d:b4:22:5c:22:7c:02:46:47:d0:b7:b3:78: 4d:26:9d:99:4d:c8:35:ba:66:26:ec:c4:75:f9:d1: e3:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:6D:28:8C:19:6C:5F:E5:0C:0C:03:13:5D:A0:09:8C:D7:C2:94:E7 X509v3 Authority Key Identifier: keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/RW0ojBlsX-UMDAMTXaAJjNfClOc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.254.128.0/22 Signature Algorithm: sha256WithRSAEncryption 9f:da:ea:aa:9a:34:4b:e1:ce:5b:fc:02:0d:8b:e9:09:46:a8: a5:81:85:5d:25:65:7e:98:a2:4d:84:db:6a:4e:85:37:db:59: 24:59:87:d2:2e:ce:b7:11:ce:c6:90:84:a5:21:ae:bc:8e:1a: 77:73:d7:21:76:65:2c:a4:f3:b6:0a:fa:da:63:b1:c1:2c:4a: fc:bd:96:94:b2:97:bd:b2:4d:c5:78:10:20:49:30:91:f9:c8: d8:b8:9d:07:1e:59:b3:0e:15:4d:d5:65:9f:2f:61:17:26:fb: d6:66:07:79:73:b5:bb:71:f3:a1:62:70:54:fc:23:34:1f:ee: e2:f8:52:49:e2:d3:bc:bd:7d:7d:66:b6:4a:35:e1:05:9e:7f: 96:ef:9a:2f:0a:f3:3f:3f:9a:20:b7:49:29:24:f1:75:95:e8: 45:7d:b6:de:20:a7:65:66:27:b7:af:c1:53:f1:32:d4:c4:86: 8a:ed:6e:27:6d:89:7a:e8:d9:a4:67:c7:c9:71:89:10:c5:a8: ef:0b:da:08:2f:f0:9e:4d:95:90:53:9e:6e:6d:59:7a:e0:21: 1a:d0:df:ff:50:b5:cc:0a:d1:8e:35:ff:30:f4:30:c9:de:a4: 38:87:a7:6e:91:30:dc:88:db:67:23:41:d5:80:ff:ed:f8:71: c5:ec:66:f4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87YKaxjlvWRlqW9p0XDDmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl NGQxMWIwHhcNMjYwMTAyMDQxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTZkMjg4YzE5NmM1ZmU1MGMwYzAzMTM1ZGEwMDk4Y2Q3YzI5NGU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrOelrIsfkSRRKgnewb/FjHu4iPB DUZ4M9aEERQ+b7g2TXrYKR2fVEy7Co3mwl7G3nuQoivIJhGgRlBEC/qJ/RlCh/fo Luloe/z1h80CKuAqU+DKglpIQT59v3GiW22/V/klFIpimKrkLv/VVp6eVUrTwgoV mTpnntVYfp0f4/eU2fD2KWzvLLKwBiqa3WHncsx+AbajV3F/QTOsSj8znFijpPNn 1JMJQsGEG7oHcVzzp8VgytI9TSTCtxSXv6aAwxGFPo4ZRDAwQ7hSP96EvuUd4r2+ l17y/BPUTIA43qHOXA20IlwifAJGR9C3s3hNJp2ZTcg1umYm7MR1+dHj9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEVtKIwZbF/lDAwDE12gCYzXwpTnMB8GA1UdIwQY MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt YTk3YzBkYzBhNzQ5LzEvUlcwb2pCbHNYLVVNREFNVFhhQUpqTmZDbE9jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5 LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLv6AMA0G CSqGSIb3DQEBCwUAA4IBAQCf2uqqmjRL4c5b/AINi+kJRqilgYVdJWV+mKJNhNtq ToU321kkWYfSLs63Ec7GkISlIa68jhp3c9chdmUspPO2CvraY7HBLEr8vZaUspe9 sk3FeBAgSTCR+cjYuJ0HHlmzDhVN1WWfL2EXJvvWZgd5c7W7cfOhYnBU/CM0H+7i +FJJ4tO8vX19ZrZKNeEFnn+W75ovCvM/P5ogt0kpJPF1lehFfbbeIKdlZie3r8FT 8TLUxIaK7W4nbYl66NmkZ8fJcYkQxajvC9oIL/CeTZWQU55ubVl64CEa0N//ULXM CtGONf8w9DDJ3qQ4h6dukTDciNtnI0HVgP/t+HHF7Gb0 -----END CERTIFICATE-----Generated at Mon Jan 26 20:24:50 2026 by rpki-client