This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/2Pl1WOLsPcEe3IssGI6GqTdAUd8.roa File: 2Pl1WOLsPcEe3IssGI6GqTdAUd8.roa (raw, json) Hash identifier: xEvziGYE9gFL6LzKGBIz1s8KI0YFj5pJymQRSZymNEM= Subject key identifier: D8:F9:75:58:E2:EC:3D:C1:1E:DC:8B:2C:18:8E:86:A9:37:40:51:DF Certificate issuer: /CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08 Certificate serial: 019B7E37D872E1C3D70E7F63EE7ED368E590 Authority key identifier: 5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/2Pl1WOLsPcEe3IssGI6GqTdAUd8.roa Signing time: Fri 02 Jan 2026 10:19:07 +0000 ROA not before: Fri 02 Jan 2026 10:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16178 IP address blocks: 46.36.160.0/19 maxlen: 20 79.142.0.0/20 maxlen: 20 85.158.32.0/21 maxlen: 21 85.158.32.0/24 maxlen: 24 85.158.35.0/24 maxlen: 24 85.158.36.0/22 maxlen: 22 178.77.0.0/18 maxlen: 18 178.77.0.0/19 maxlen: 19 178.77.0.0/20 maxlen: 20 178.77.16.0/20 maxlen: 20 178.77.32.0/19 maxlen: 19 185.14.124.0/22 maxlen: 22 217.75.192.0/20 maxlen: 20 217.75.192.0/21 maxlen: 21 217.75.192.0/24 maxlen: 24 217.75.193.0/24 maxlen: 24 217.75.194.0/24 maxlen: 24 217.75.195.0/24 maxlen: 24 217.75.196.0/24 maxlen: 24 217.75.197.0/24 maxlen: 24 217.75.198.0/24 maxlen: 24 217.75.199.0/24 maxlen: 24 217.75.200.0/21 maxlen: 21 217.75.200.0/24 maxlen: 24 217.75.201.0/24 maxlen: 24 217.75.202.0/24 maxlen: 24 217.75.203.0/24 maxlen: 24 217.75.204.0/24 maxlen: 24 217.75.205.0/24 maxlen: 24 217.75.206.0/24 maxlen: 24 217.75.207.0/24 maxlen: 24 2a00:fe8::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.mft rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:d8:72:e1:c3:d7:0e:7f:63:ee:7e:d3:68:e5:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f4a8f04ef2febe54f9db6a9a2f856594b6e2f08 Validity Not Before: Jan 2 10:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d8f97558e2ec3dc11edc8b2c188e86a9374051df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:88:c4:78:fb:79:5e:3f:29:24:31:98:3d:63: 99:5c:30:05:38:ad:69:85:43:f4:4b:0f:87:f3:c0: 9a:0d:44:14:63:2d:55:0d:cd:0e:81:cc:43:fd:89: ce:1e:42:8c:ce:5a:82:8b:12:5b:90:c9:04:96:05: 53:6c:30:a4:c0:53:ce:e3:69:9c:51:c6:d3:b6:79: f9:07:cc:5d:ed:ba:de:a9:7b:14:60:92:73:1b:95: ea:b8:19:11:8d:63:a3:b9:9c:d5:5b:01:25:4e:9d: cd:2b:ff:f4:2d:53:bf:d6:2d:63:5b:c9:17:f2:2d: 0e:f9:01:12:2c:bd:25:ea:9c:b3:cd:71:f4:7e:2e: 43:e6:ba:bf:73:b7:19:4e:c0:cd:80:1b:27:6b:9d: 59:cc:8a:9f:da:e5:ab:67:d0:d4:c9:fa:be:b4:c6: aa:24:a6:65:95:13:e2:28:e0:70:ca:f4:72:07:4d: 0f:62:fa:3a:2c:3d:8f:af:18:87:71:ac:bc:06:4b: 3a:16:81:27:77:24:f1:57:c9:42:eb:6a:3c:de:a8: c8:04:eb:2f:e6:de:d2:47:ec:df:19:1c:fa:a2:59: cb:48:f8:86:8e:79:30:9a:ac:60:4e:b2:d5:de:59: d5:c6:ae:ac:a5:fc:ba:05:11:a4:53:5b:0e:85:5d: 7e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:F9:75:58:E2:EC:3D:C1:1E:DC:8B:2C:18:8E:86:A9:37:40:51:DF X509v3 Authority Key Identifier: keyid:5F:4A:8F:04:EF:2F:EB:E5:4F:9D:B6:A9:A2:F8:56:59:4B:6E:2F:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0qPBO8v6-VPnbapovhWWUtuLwg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/2Pl1WOLsPcEe3IssGI6GqTdAUd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8f3fed-2c53-4eca-a332-4579a38f6d08/1/X0qPBO8v6-VPnbapovhWWUtuLwg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.36.160.0/19 79.142.0.0/20 85.158.32.0/21 178.77.0.0/18 185.14.124.0/22 217.75.192.0/20 IPv6: 2a00:fe8::/32 Signature Algorithm: sha256WithRSAEncryption 04:32:3e:4c:b6:18:62:d4:e0:67:f7:b1:9c:71:59:76:2d:e8: ae:d9:87:ba:dd:5b:4d:5c:e2:64:83:c6:31:9d:50:18:5f:cc: a2:85:83:b2:76:1a:45:59:ea:d1:0e:f5:5c:b6:bf:d0:c5:f3: 20:01:c2:3c:32:25:bd:f8:20:0c:26:12:fa:b0:2c:60:85:9c: 73:b9:69:e0:12:ed:32:85:94:93:a1:7d:85:d0:8b:61:30:3b: 59:bf:1f:15:5e:9b:11:41:29:77:f9:67:8d:1b:03:62:dd:ad: 92:42:c0:2f:23:a9:f5:a4:d8:2c:a2:25:fe:19:47:4a:de:ce: f5:fe:e8:2e:2d:4e:52:da:8e:52:77:9e:08:44:a8:74:ef:27: ed:ff:fb:de:f2:c8:4a:a3:1b:7d:78:47:39:20:18:84:88:59: 4a:c7:0f:56:4c:fb:c6:e2:7d:4b:59:36:96:25:f1:6a:42:3f: af:04:ed:55:cb:61:0d:c6:bc:8f:5a:09:d6:10:e6:3d:e4:ee: ef:9a:86:61:73:a5:76:27:f8:bc:26:5a:41:08:5c:13:d5:8b: 0a:34:52:6e:6b:d6:f8:09:6d:95:fe:d9:84:80:09:72:4f:eb: 8e:aa:59:61:72:6f:9b:49:d3:a9:29:61:ee:3e:84:c2:ef:98: f8:f9:46:3b -----BEGIN CERTIFICATE----- MIIFKjCCBBKgAwIBAgISAZt+N9hy4cPXDn9j7n7TaOWQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmNGE4ZjA0ZWYyZmViZTU0ZjlkYjZhOWEyZjg1NjU5NGI2 ZTJmMDgwHhcNMjYwMTAyMTAxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOGY5NzU1OGUyZWMzZGMxMWVkYzhiMmMxODhlODZhOTM3NDA1MWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIjEePt5Xj8pJDGYPWOZXDAFOK1p hUP0Sw+H88CaDUQUYy1VDc0OgcxD/YnOHkKMzlqCixJbkMkElgVTbDCkwFPO42mc UcbTtnn5B8xd7breqXsUYJJzG5XquBkRjWOjuZzVWwElTp3NK//0LVO/1i1jW8kX 8i0O+QESLL0l6pyzzXH0fi5D5rq/c7cZTsDNgBsna51ZzIqf2uWrZ9DUyfq+tMaq JKZllRPiKOBwyvRyB00PYvo6LD2PrxiHcay8Bks6FoEndyTxV8lC62o83qjIBOsv 5t7SR+zfGRz6olnLSPiGjnkwmqxgTrLV3lnVxq6spfy6BRGkU1sOhV1+iQIDAQAB o4ICNjCCAjIwHQYDVR0OBBYEFNj5dVji7D3BHtyLLBiOhqk3QFHfMB8GA1UdIwQY MBaAFF9KjwTvL+vlT522qaL4VllLbi8IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDBxUEJPOHY2LVZQbmJhcG92aFdXVXR1THdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZjNmZWQtMmM1My00ZWNhLWEzMzIt NDU3OWEzOGY2ZDA4LzEvMlBsMVdPTHNQY0VlM0lzc0dJNkdxVGRBVWQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84ZjNmZWQtMmM1My00ZWNhLWEzMzItNDU3OWEzOGY2ZDA4 LzEvWDBxUEJPOHY2LVZQbmJhcG92aFdXVXR1THdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQFLiSgAwQE T44AAwQDVZ4gAwQGsk0AAwQCuQ58AwQE2UvAMA0EAgACMAcDBQAqAA/oMA0GCSqG SIb3DQEBCwUAA4IBAQAEMj5Mthhi1OBn97GccVl2Leiu2Ye63VtNXOJkg8YxnVAY X8yihYOydhpFWerRDvVctr/QxfMgAcI8MiW9+CAMJhL6sCxghZxzuWngEu0yhZST oX2F0IthMDtZvx8VXpsRQSl3+WeNGwNi3a2SQsAvI6n1pNgsoiX+GUdK3s71/ugu LU5S2o5Sd54IRKh07yft//ve8shKoxt9eEc5IBiEiFlKxw9WTPvG4n1LWTaWJfFq Qj+vBO1Vy2ENxryPWgnWEOY95O7vmoZhc6V2J/i8JlpBCFwT1YsKNFJua9b4CW2V /tmEgAlyT+uOqllhcm+bSdOpKWHuPoTC75j4+UY7 -----END CERTIFICATE-----Generated at Mon Feb 9 21:23:41 2026 by rpki-client