This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/QaIOKbnLhv0FBwr6_gZMcRUUWWg.roa File: QaIOKbnLhv0FBwr6_gZMcRUUWWg.roa (raw, json) Hash identifier: BMFsOeiNuY49ojsyecDmxR9mnhel+ZMb42FzYYuLqW4= Subject key identifier: 41:A2:0E:29:B9:CB:86:FD:05:07:0A:FA:FE:06:4C:71:15:14:59:68 Certificate issuer: /CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485 Certificate serial: 019B7D5C902197298BF263CF4C9583B234B6 Authority key identifier: A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/QaIOKbnLhv0FBwr6_gZMcRUUWWg.roa Signing time: Fri 02 Jan 2026 06:19:36 +0000 ROA not before: Fri 02 Jan 2026 06:19:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57865 IP address blocks: 46.191.184.0/22 maxlen: 22 46.191.188.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.mft rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:90:21:97:29:8b:f2:63:cf:4c:95:83:b2:34:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a36d0ae5e2fbffcce08770ebc20c216b9fbf9485 Validity Not Before: Jan 2 06:19:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=41a20e29b9cb86fd05070afafe064c7115145968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b4:26:2c:b5:83:db:d9:7b:08:d6:9c:82:52: 72:17:e0:06:74:6a:54:66:8b:82:79:0a:8c:44:70: e8:ed:d8:32:56:66:cf:ae:f2:5f:2d:9a:6b:7e:87: 37:25:21:e1:76:e1:8a:30:4a:64:ed:ed:b8:38:e6: 7f:16:a7:6a:72:1a:6b:5b:1a:02:9c:fb:f9:71:41: 08:47:ff:ba:44:4b:f0:5e:12:62:ee:47:ec:c2:0d: bc:0e:06:75:27:b9:02:21:d8:82:6f:9d:d4:b8:3a: fd:54:6c:42:fd:f5:81:06:c9:db:fb:42:a0:55:3a: 43:17:2e:e9:4c:3c:c9:b6:fa:56:ee:fd:3d:9b:1f: 34:35:0e:ed:99:5f:ac:28:ec:f4:d9:2a:d0:d9:b1: 9f:06:64:97:e8:88:07:fd:79:fb:26:ac:b2:88:8e: 99:dc:cb:65:d8:2c:e0:91:1f:7a:a8:68:40:96:a5: 51:d6:77:e7:4d:22:cc:8a:05:1b:68:0a:4c:1a:38: 59:b4:65:eb:d7:4d:0c:dc:0a:56:90:63:72:cf:49: 6b:01:c9:05:01:9f:d0:b9:c3:76:70:b5:db:9b:b3: 12:be:0b:7d:aa:d3:6d:37:d1:1f:69:d4:03:cc:f2: 0c:13:07:27:f7:01:58:6e:0e:ab:db:50:7b:36:fc: d0:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A2:0E:29:B9:CB:86:FD:05:07:0A:FA:FE:06:4C:71:15:14:59:68 X509v3 Authority Key Identifier: keyid:A3:6D:0A:E5:E2:FB:FF:CC:E0:87:70:EB:C2:0C:21:6B:9F:BF:94:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o20K5eL7_8zgh3Drwgwha5-_lIU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/QaIOKbnLhv0FBwr6_gZMcRUUWWg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/o20K5eL7_8zgh3Drwgwha5-_lIU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.191.184.0/21 Signature Algorithm: sha256WithRSAEncryption 1c:d3:d1:f3:49:f1:43:d1:04:3a:0a:67:65:40:03:1e:6a:08: 9d:e0:47:98:f1:bf:6a:26:11:38:f8:20:06:a0:de:f8:04:55: 64:3c:18:82:91:2f:8f:75:61:04:b1:7b:7c:6b:3a:b2:50:aa: 34:f0:67:9f:ca:1a:3d:1d:39:fc:0f:89:d8:7a:df:cb:3e:7e: 7f:b8:fd:b3:e5:cd:46:34:6f:1a:49:dc:54:ee:9a:32:ee:92: 3c:f7:1f:ab:0e:31:c7:b8:bc:18:1d:9a:d5:0a:cd:c2:87:d1: 57:d7:ff:0b:1e:79:5e:ba:dd:03:ef:2b:5b:c5:87:c5:b8:d4: ca:bb:1e:84:47:7e:19:2d:2d:3d:c8:52:46:46:54:3a:ab:34: 7c:b4:8e:32:e5:fa:e0:24:f5:c6:83:45:91:b5:f6:2a:4b:38: 6e:f7:83:4d:a1:b6:6c:46:41:55:b1:23:59:11:2a:6b:83:dc: c6:e0:0f:ce:d0:d0:58:92:23:0a:28:85:3a:69:8c:a3:39:1f: 65:fa:15:db:b7:8d:87:19:14:bc:52:b1:0f:8c:2b:1f:49:c6: ae:cf:50:51:eb:c2:9b:0d:cf:25:74:a8:c1:7a:4f:02:83:b9: b1:1f:f5:81:aa:88:fc:ce:27:42:7d:0e:a8:0b:59:53:3c:b5: f5:de:6d:2f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XJAhlymL8mPPTJWDsjS2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEzNmQwYWU1ZTJmYmZmY2NlMDg3NzBlYmMyMGMyMTZiOWZi Zjk0ODUwHhcNMjYwMTAyMDYxOTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0MWEyMGUyOWI5Y2I4NmZkMDUwNzBhZmFmZTA2NGM3MTE1MTQ1OTY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7QmLLWD29l7CNacglJyF+AGdGpU ZouCeQqMRHDo7dgyVmbPrvJfLZprfoc3JSHhduGKMEpk7e24OOZ/FqdqchprWxoC nPv5cUEIR/+6REvwXhJi7kfswg28DgZ1J7kCIdiCb53UuDr9VGxC/fWBBsnb+0Kg VTpDFy7pTDzJtvpW7v09mx80NQ7tmV+sKOz02SrQ2bGfBmSX6IgH/Xn7JqyyiI6Z 3Mtl2CzgkR96qGhAlqVR1nfnTSLMigUbaApMGjhZtGXr100M3ApWkGNyz0lrAckF AZ/QucN2cLXbm7MSvgt9qtNtN9EfadQDzPIMEwcn9wFYbg6r21B7NvzQMQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEGiDim5y4b9BQcK+v4GTHEVFFloMB8GA1UdIwQY MBaAFKNtCuXi+//M4Idw68IMIWufv5SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAt Y2JiOTUxODNiMjdhLzEvUWFJT0tibkxodjBGQndyNl9nWk1jUlVVV1dnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAtY2JiOTUxODNiMjdh LzEvbzIwSzVlTDdfOHpnaDNEcndnd2hhNS1fbElVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLr+4MA0G CSqGSIb3DQEBCwUAA4IBAQAc09HzSfFD0QQ6CmdlQAMeagid4EeY8b9qJhE4+CAG oN74BFVkPBiCkS+PdWEEsXt8azqyUKo08Gefyho9HTn8D4nYet/LPn5/uP2z5c1G NG8aSdxU7poy7pI89x+rDjHHuLwYHZrVCs3Ch9FX1/8LHnleut0D7ytbxYfFuNTK ux6ER34ZLS09yFJGRlQ6qzR8tI4y5frgJPXGg0WRtfYqSzhu94NNobZsRkFVsSNZ ESprg9zG4A/O0NBYkiMKKIU6aYyjOR9l+hXbt42HGRS8UrEPjCsfScauz1BR68Kb Dc8ldKjBek8Cg7mxH/WBqoj8zidCfQ6oC1lTPLX13m0v -----END CERTIFICATE-----Generated at Tue Feb 10 00:15:06 2026 by rpki-client