This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/jGH-B0ZtHWB2vW4ZWbbJ0o66MCY.roa File: jGH-B0ZtHWB2vW4ZWbbJ0o66MCY.roa (raw, json) Hash identifier: 3Hjbziobt0NexfpenfCsX8qQDjMLoP2uJzMZMRnjlcw= Subject key identifier: 8C:61:FE:07:46:6D:1D:60:76:BD:6E:19:59:B6:C9:D2:8E:BA:30:26 Certificate issuer: /CN=07fa540a25432e2aa4dca057845c359d214886f7 Certificate serial: 019B7A5ACED92945EB0D5DD49858182D589C Authority key identifier: 07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/jGH-B0ZtHWB2vW4ZWbbJ0o66MCY.roa Signing time: Thu 01 Jan 2026 16:18:50 +0000 ROA not before: Thu 01 Jan 2026 16:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196922 IP address blocks: 46.232.184.0/21 maxlen: 24 46.232.184.0/24 maxlen: 24 46.232.185.0/24 maxlen: 24 46.232.186.0/24 maxlen: 24 46.232.187.0/24 maxlen: 24 46.232.188.0/24 maxlen: 24 46.232.189.0/24 maxlen: 24 46.232.190.0/24 maxlen: 24 46.232.191.0/24 maxlen: 24 178.248.240.0/21 maxlen: 24 178.248.240.0/24 maxlen: 24 178.248.241.0/24 maxlen: 24 178.248.242.0/24 maxlen: 24 178.248.243.0/24 maxlen: 24 178.248.244.0/24 maxlen: 24 178.248.245.0/24 maxlen: 24 178.248.246.0/24 maxlen: 24 178.248.247.0/24 maxlen: 24 185.115.24.0/22 maxlen: 24 185.115.24.0/23 maxlen: 23 185.115.26.0/23 maxlen: 23 185.115.26.128/27 maxlen: 27 2a02:1308::/29 maxlen: 32 2a02:1308::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:ce:d9:29:45:eb:0d:5d:d4:98:58:18:2d:58:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07fa540a25432e2aa4dca057845c359d214886f7 Validity Not Before: Jan 1 16:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c61fe07466d1d6076bd6e1959b6c9d28eba3026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ff:32:7c:11:f3:97:24:b0:a6:e2:e8:fd:db: 0c:2a:8c:9f:cd:30:fa:75:e2:77:72:27:25:d9:a9: 4d:82:7f:b6:52:51:18:17:de:ea:71:3d:e3:5a:af: ce:b9:73:57:71:ee:06:7b:5e:39:a4:0b:f6:33:dc: d0:75:d3:c8:76:91:dd:ea:53:b1:49:42:21:fb:e6: ca:e4:d5:73:11:cc:9c:1c:eb:a6:5a:63:98:04:ff: 3b:40:69:c3:c0:67:01:88:35:75:5c:94:bd:33:d1: 6a:05:01:2a:7d:a9:fa:6c:da:35:46:6c:46:87:30: 33:74:ac:fa:39:48:a0:ad:bc:c2:59:f1:91:cc:5b: bf:31:97:82:f7:ae:1a:75:c1:13:a5:d5:4d:ac:c9: f0:f4:02:f3:55:84:e1:05:3d:ad:1f:56:06:6d:f9: 13:86:c5:65:bc:f2:df:05:78:b6:2d:de:65:40:c7: 8d:56:ce:aa:a8:44:16:3b:08:ae:1f:97:db:c0:03: 1d:b3:a2:cf:d1:71:e8:b6:1e:4a:be:75:ee:8d:3d: fd:b8:be:bd:8c:6c:33:d2:95:dc:be:ad:a6:5d:67: 7f:c1:43:08:58:ad:59:d5:00:bf:15:16:1f:46:52: 23:05:10:55:e2:ba:76:0e:99:d6:af:0d:7d:0d:08: 1b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:61:FE:07:46:6D:1D:60:76:BD:6E:19:59:B6:C9:D2:8E:BA:30:26 X509v3 Authority Key Identifier: keyid:07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/jGH-B0ZtHWB2vW4ZWbbJ0o66MCY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.232.184.0/21 178.248.240.0/21 185.115.24.0/22 IPv6: 2a02:1308::/29 Signature Algorithm: sha256WithRSAEncryption a2:6a:f2:36:4d:4e:16:a4:80:0a:b9:2f:67:5e:13:cb:28:d1: 33:c2:e0:be:e5:08:2e:c7:95:08:a0:ad:06:b5:1a:56:82:06: 72:ca:40:f4:65:8b:fc:e9:bc:5b:a2:2b:bc:4b:2c:3b:7c:d7: 34:dd:2b:55:18:ae:79:5a:33:86:07:56:6e:13:d6:49:31:2b: 7e:a3:33:29:19:ba:f7:19:85:22:b7:93:b5:ed:65:90:16:94: 1f:fe:d1:bb:2c:b1:dd:66:08:7f:b2:d4:2f:47:f7:a0:50:1c: 92:c1:74:78:42:a0:55:a4:03:21:de:c8:af:11:94:50:72:3e: ce:33:a0:de:b4:71:8b:80:c8:45:da:7e:a8:57:ea:47:c2:ea: 79:d6:3b:a7:d2:86:17:97:0a:ea:c1:ae:94:02:bf:77:0d:c1: 9e:5e:f0:d9:4a:16:52:59:40:37:35:00:49:cb:07:0a:2e:10: c9:23:6f:b2:a1:56:75:7b:30:7e:dc:eb:f8:e6:23:4f:d7:12: b4:aa:d3:1e:1a:d3:01:22:98:41:b1:04:22:0c:5f:63:04:b5: 58:e7:49:c2:ac:60:bb:34:9f:70:7f:53:64:61:7e:27:60:73: 2f:60:e5:df:cf:97:96:26:39:10:93:8a:14:16:70:a8:e4:47: f1:ca:92:b3 -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt6Ws7ZKUXrDV3UmFgYLVicMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3ZmE1NDBhMjU0MzJlMmFhNGRjYTA1Nzg0NWMzNTlkMjE0 ODg2ZjcwHhcNMjYwMTAxMTYxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzYxZmUwNzQ2NmQxZDYwNzZiZDZlMTk1OWI2YzlkMjhlYmEzMDI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/8yfBHzlySwpuLo/dsMKoyfzTD6 deJ3cicl2alNgn+2UlEYF97qcT3jWq/OuXNXce4Ge145pAv2M9zQddPIdpHd6lOx SUIh++bK5NVzEcycHOumWmOYBP87QGnDwGcBiDV1XJS9M9FqBQEqfan6bNo1RmxG hzAzdKz6OUigrbzCWfGRzFu/MZeC964adcETpdVNrMnw9ALzVYThBT2tH1YGbfkT hsVlvPLfBXi2Ld5lQMeNVs6qqEQWOwiuH5fbwAMds6LP0XHoth5KvnXujT39uL69 jGwz0pXcvq2mXWd/wUMIWK1Z1QC/FRYfRlIjBRBV4rp2DpnWrw19DQgbwwIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFIxh/gdGbR1gdr1uGVm2ydKOujAmMB8GA1UdIwQY MBaAFAf6VAolQy4qpNygV4RcNZ0hSIb3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQl9wVUNpVkRMaXFrM0tCWGhGdzFuU0ZJaHZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC80MzA3ZDEtYjYwOC00NTgxLTk5MmMt NzUzNzQxYTgwZTk0LzEvakdILUIwWnRIV0Iydlc0WldiYkowbzY2TUNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC80MzA3ZDEtYjYwOC00NTgxLTk5MmMtNzUzNzQxYTgwZTk0 LzEvQl9wVUNpVkRMaXFrM0tCWGhGdzFuU0ZJaHZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDLui4AwQD svjwAwQCuXMYMA0EAgACMAcDBQMqAhMIMA0GCSqGSIb3DQEBCwUAA4IBAQCiavI2 TU4WpIAKuS9nXhPLKNEzwuC+5Qgux5UIoK0GtRpWggZyykD0ZYv86bxboiu8Syw7 fNc03StVGK55WjOGB1ZuE9ZJMSt+ozMpGbr3GYUit5O17WWQFpQf/tG7LLHdZgh/ stQvR/egUBySwXR4QqBVpAMh3sivEZRQcj7OM6DetHGLgMhF2n6oV+pHwup51jun 0oYXlwrqwa6UAr93DcGeXvDZShZSWUA3NQBJywcKLhDJI2+yoVZ1ezB+3Ov45iNP 1xK0qtMeGtMBIphBsQQiDF9jBLVY50nCrGC7NJ9wf1NkYX4nYHMvYOXfz5eWJjkQ k4oUFnCo5EfxypKz -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:17 2026 by rpki-client