This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/kFtao75kF9zegQ5TLcCcqHTjWnw.roa File: kFtao75kF9zegQ5TLcCcqHTjWnw.roa (raw, json) Hash identifier: uBAKazPTSG/+fQTed7xO/O+Nfhi704c7YNRVr1Kx0qc= Subject key identifier: 90:5B:5A:A3:BE:64:17:DC:DE:81:0E:53:2D:C0:9C:A8:74:E3:5A:7C Certificate issuer: /CN=573e94c43cd34a3b83a4bd8aa7bf4ae3246e6da9 Certificate serial: 019B8D8CDCACC139AABC2E84C5C384B8D88B Authority key identifier: 57:3E:94:C4:3C:D3:4A:3B:83:A4:BD:8A:A7:BF:4A:E3:24:6E:6D:A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vz6UxDzTSjuDpL2Kp79K4yRubak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/kFtao75kF9zegQ5TLcCcqHTjWnw.roa Signing time: Mon 05 Jan 2026 09:46:17 +0000 ROA not before: Mon 05 Jan 2026 09:46:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35457 IP address blocks: 46.235.208.0/21 maxlen: 21 46.235.208.0/24 maxlen: 24 46.235.210.0/24 maxlen: 24 46.235.211.0/24 maxlen: 24 46.235.213.0/24 maxlen: 24 46.235.214.0/24 maxlen: 24 80.95.208.0/20 maxlen: 20 80.95.208.0/24 maxlen: 24 80.95.209.0/24 maxlen: 24 80.95.210.0/24 maxlen: 24 80.95.211.0/24 maxlen: 24 80.95.212.0/24 maxlen: 24 80.95.213.0/24 maxlen: 24 80.95.214.0/24 maxlen: 24 80.95.215.0/24 maxlen: 24 80.95.216.0/24 maxlen: 24 80.95.217.0/24 maxlen: 24 80.95.218.0/24 maxlen: 24 80.95.219.0/24 maxlen: 24 80.95.220.0/24 maxlen: 24 80.95.221.0/24 maxlen: 24 80.95.222.0/24 maxlen: 24 80.95.223.0/24 maxlen: 24 185.49.160.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.mft rsync://rpki.ripe.net/repository/DEFAULT/Vz6UxDzTSjuDpL2Kp79K4yRubak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8d:8c:dc:ac:c1:39:aa:bc:2e:84:c5:c3:84:b8:d8:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=573e94c43cd34a3b83a4bd8aa7bf4ae3246e6da9 Validity Not Before: Jan 5 09:46:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=905b5aa3be6417dcde810e532dc09ca874e35a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4a:c1:be:dc:ec:af:5f:46:bc:25:93:ba:80: 8e:e7:09:e4:40:20:69:a0:cd:bd:12:c7:cf:c3:16: 24:98:52:ae:b6:cb:0f:06:56:2c:b1:f0:46:85:ad: 7a:57:0b:72:7a:8e:3b:40:68:6b:c1:2b:57:be:94: 5e:24:00:4a:e6:a0:1b:37:58:ae:b1:96:b0:34:a6: 7f:72:69:82:95:94:9c:7c:83:76:be:d7:0f:da:f6: 9c:a9:e6:f7:5f:a7:b6:46:39:b4:b7:d6:c9:b7:3e: ac:42:20:14:2c:fb:22:c0:64:d6:00:40:88:f4:3b: 3c:73:43:52:1d:c4:91:90:6e:d7:7c:b2:82:69:28: 57:57:b4:6d:e7:99:ad:54:ca:52:fd:0a:28:b8:ee: b7:66:6f:fd:fd:77:ca:c1:31:9e:b2:e1:3e:2e:1d: 14:6f:d9:e3:42:36:33:f3:1d:74:ab:ec:10:49:0a: 08:47:82:4d:f6:df:e3:55:26:d6:68:a2:75:8f:55: 32:8f:88:b6:15:ae:41:19:6c:45:5e:90:89:d5:33: 6b:ed:4b:c2:49:f7:97:5d:a5:3f:28:9f:4f:fb:97: 09:cb:e6:f4:2d:93:e2:a3:2a:3c:52:5b:48:7a:e4: f9:51:78:0e:97:c0:7a:29:30:42:b8:fb:3e:09:fe: 08:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:5B:5A:A3:BE:64:17:DC:DE:81:0E:53:2D:C0:9C:A8:74:E3:5A:7C X509v3 Authority Key Identifier: keyid:57:3E:94:C4:3C:D3:4A:3B:83:A4:BD:8A:A7:BF:4A:E3:24:6E:6D:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vz6UxDzTSjuDpL2Kp79K4yRubak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/kFtao75kF9zegQ5TLcCcqHTjWnw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/c85bfa-c070-4de8-8444-82977062b947/1/Vz6UxDzTSjuDpL2Kp79K4yRubak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.235.208.0/21 80.95.208.0/20 185.49.160.0/22 Signature Algorithm: sha256WithRSAEncryption 64:4d:8a:9c:3e:38:56:72:8c:f0:c8:78:7c:e7:74:b9:b9:8e: f6:71:81:eb:55:5f:50:8a:60:ac:2f:a2:31:3c:40:99:ae:46: c6:0f:0e:27:33:77:25:d8:61:88:67:e3:ae:1b:99:90:0b:c1: 51:e0:ca:a1:12:d1:28:8d:0a:f7:39:b8:3b:6f:10:e9:b6:9c: fe:e4:02:6c:33:19:a5:a9:43:46:1a:a8:f0:fc:f6:2e:0c:92: 22:f0:24:ba:1a:e7:5d:2e:f2:76:cb:01:11:e4:d9:9f:16:fd: 63:89:b7:b8:8a:83:6c:b7:5a:46:fd:3e:c0:d3:52:ab:f9:0f: 53:00:5c:34:85:86:d8:95:54:dd:c7:3c:6a:39:f6:b9:07:46: 5e:2a:a9:b1:15:fa:8e:0e:3b:7f:8d:89:66:fe:ad:67:dd:b1: 93:d9:11:76:63:a1:f9:86:69:c5:f5:9e:04:f9:48:8d:58:cc: 65:4f:ea:f3:95:9b:2a:c1:86:26:41:f4:96:59:e5:c6:b4:ec: 3e:c5:da:37:0b:32:df:31:37:59:5d:be:69:3b:85:45:e4:ca: 3a:41:b4:bb:1b:47:e2:aa:2b:51:77:df:71:46:c1:9a:ab:45: 33:0e:a0:18:37:11:ec:36:5a:0f:5f:1f:22:1f:57:c1:58:8a: e5:2e:ef:bf -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZuNjNyswTmqvC6ExcOEuNiLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3M2U5NGM0M2NkMzRhM2I4M2E0YmQ4YWE3YmY0YWUzMjQ2 ZTZkYTkwHhcNMjYwMTA1MDk0NjE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDViNWFhM2JlNjQxN2RjZGU4MTBlNTMyZGMwOWNhODc0ZTM1YTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0rBvtzsr19GvCWTuoCO5wnkQCBp oM29EsfPwxYkmFKutssPBlYssfBGha16Vwtyeo47QGhrwStXvpReJABK5qAbN1iu sZawNKZ/cmmClZScfIN2vtcP2vacqeb3X6e2Rjm0t9bJtz6sQiAULPsiwGTWAECI 9Ds8c0NSHcSRkG7XfLKCaShXV7Rt55mtVMpS/QoouO63Zm/9/XfKwTGesuE+Lh0U b9njQjYz8x10q+wQSQoIR4JN9t/jVSbWaKJ1j1Uyj4i2Fa5BGWxFXpCJ1TNr7UvC SfeXXaU/KJ9P+5cJy+b0LZPioyo8UltIeuT5UXgOl8B6KTBCuPs+Cf4IxwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJBbWqO+ZBfc3oEOUy3AnKh041p8MB8GA1UdIwQY MBaAFFc+lMQ800o7g6S9iqe/SuMkbm2pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVno2VXhEelRTanVEcEwyS3A3OUs0eVJ1YmFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9jODViZmEtYzA3MC00ZGU4LTg0NDQt ODI5NzcwNjJiOTQ3LzEva0Z0YW83NWtGOXplZ1E1VExjQ2NxSFRqV253LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9jODViZmEtYzA3MC00ZGU4LTg0NDQtODI5NzcwNjJiOTQ3 LzEvVno2VXhEelRTanVEcEwyS3A3OUs0eVJ1YmFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDLuvQAwQE UF/QAwQCuTGgMA0GCSqGSIb3DQEBCwUAA4IBAQBkTYqcPjhWcozwyHh853S5uY72 cYHrVV9QimCsL6IxPECZrkbGDw4nM3cl2GGIZ+OuG5mQC8FR4MqhEtEojQr3Obg7 bxDptpz+5AJsMxmlqUNGGqjw/PYuDJIi8CS6GuddLvJ2ywER5NmfFv1jibe4ioNs t1pG/T7A01Kr+Q9TAFw0hYbYlVTdxzxqOfa5B0ZeKqmxFfqODjt/jYlm/q1n3bGT 2RF2Y6H5hmnF9Z4E+UiNWMxlT+rzlZsqwYYmQfSWWeXGtOw+xdo3CzLfMTdZXb5p O4VF5Mo6QbS7G0fiqitRd99xRsGaq0UzDqAYNxHsNloPXx8iH1fBWIrlLu+/ -----END CERTIFICATE-----Generated at Mon Feb 2 08:09:09 2026 by rpki-client