This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/lR8if6ppIPbhohYi1ZftYsaVivM.roa File: lR8if6ppIPbhohYi1ZftYsaVivM.roa (raw, json) Hash identifier: tWsT29WceBlnruoO07mkklZjKl8F3YK8Bj14J12SHEg= Subject key identifier: 95:1F:22:7F:AA:69:20:F6:E1:A2:16:22:D5:97:ED:62:C6:95:8A:F3 Certificate issuer: /CN=ff8dd5fe4179e8bda28532561919f6d07877c63d Certificate serial: 019BAD29C503690DB21E537E223F0BB5BF1B Authority key identifier: FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/lR8if6ppIPbhohYi1ZftYsaVivM.roa Signing time: Sun 11 Jan 2026 13:05:54 +0000 ROA not before: Sun 11 Jan 2026 13:05:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209372 IP address blocks: 46.149.142.0/24 maxlen: 24 46.149.143.0/24 maxlen: 24 109.197.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.crl rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ad:29:c5:03:69:0d:b2:1e:53:7e:22:3f:0b:b5:bf:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff8dd5fe4179e8bda28532561919f6d07877c63d Validity Not Before: Jan 11 13:05:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=951f227faa6920f6e1a21622d597ed62c6958af3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8a:44:23:13:7b:35:c2:3a:c0:81:a4:f0:2a: cf:4f:ce:07:83:86:cd:d3:50:d9:0c:6b:94:10:a6: d3:c1:3e:e5:6f:6a:cf:89:cd:82:80:3b:2f:0a:2a: ba:4c:2f:9a:0e:6f:c1:d5:7d:a2:31:0a:34:7f:6f: 42:06:25:3c:92:fe:2e:74:33:b6:41:7d:b7:aa:24: 7a:57:93:b1:7b:4b:a6:f6:2b:ec:92:7e:79:28:66: 9d:c7:83:c2:73:91:37:21:8b:58:97:1a:68:1e:07: 1c:ae:b8:17:ea:27:22:1b:20:0e:31:cd:2e:9d:f0: c9:fc:3b:3f:64:e2:1e:b2:1a:73:dc:10:d3:de:11: 46:6c:4f:28:d3:13:e5:41:f1:5d:00:88:73:a0:37: cb:6d:5e:ff:bd:0f:fc:b3:56:61:4c:ec:0a:ff:93: db:80:61:47:bf:c9:97:59:5b:87:ae:8e:85:0e:57: 71:39:87:1f:7d:c4:cc:78:3c:ba:55:9f:9f:3f:c4: ed:45:45:72:87:a2:08:3e:d6:1e:f7:bf:c7:84:4e: 39:40:0e:62:1b:51:92:3e:a1:6b:42:6e:ac:de:db: 1a:32:a5:6e:7c:32:ff:eb:0a:45:7e:ca:b3:66:ae: 47:e6:35:9f:9b:71:ab:7d:7a:27:d5:eb:8e:70:5a: 00:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:1F:22:7F:AA:69:20:F6:E1:A2:16:22:D5:97:ED:62:C6:95:8A:F3 X509v3 Authority Key Identifier: keyid:FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/lR8if6ppIPbhohYi1ZftYsaVivM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.149.142.0/23 109.197.16.0/24 Signature Algorithm: sha256WithRSAEncryption 56:80:57:70:09:65:d7:1c:9d:cf:13:a7:74:6c:f8:d2:1c:4e: fe:f7:92:9f:6f:70:14:5a:3d:b6:03:4a:97:fc:57:d7:d2:83: df:7e:97:f9:8e:62:70:4c:6e:c3:69:b4:c3:e9:74:c7:f6:bf: c7:70:76:30:d5:73:64:8a:06:df:3c:00:7a:09:71:97:41:d5: a4:89:fb:0f:a1:1b:32:47:6b:5a:16:b6:35:1a:10:41:fe:2f: 26:f0:d3:3d:1b:f7:1e:46:3b:a3:05:49:68:c7:55:fe:dd:d6: 87:a2:8c:a6:7a:f9:4a:bb:4d:90:dc:68:a5:2a:37:97:f0:f6: fa:11:7c:39:c9:c0:5c:54:01:ec:af:fa:46:37:91:e5:75:5b: ae:82:f1:1d:7b:ad:c0:32:23:1c:ef:9c:ae:90:c2:d6:c8:48: dd:db:ed:b0:8a:52:6a:cd:0c:bb:95:21:9c:d6:1e:51:d9:4a: 2f:24:1c:2d:ec:19:10:62:fc:94:3c:82:5c:59:98:23:1b:61: 9e:60:be:e6:6e:5c:f2:22:bf:64:e7:4f:17:17:b1:09:48:b4: 84:77:75:a6:b7:24:7f:aa:34:0f:55:9a:27:03:07:89:62:84: 8f:46:ba:f1:de:98:20:53:8f:49:3d:bd:20:5f:0e:8e:2c:a0: 6f:95:3b:e2 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZutKcUDaQ2yHlN+Ij8Ltb8bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmOGRkNWZlNDE3OWU4YmRhMjg1MzI1NjE5MTlmNmQwNzg3 N2M2M2QwHhcNMjYwMTExMTMwNTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NTFmMjI3ZmFhNjkyMGY2ZTFhMjE2MjJkNTk3ZWQ2MmM2OTU4YWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YpEIxN7NcI6wIGk8CrPT84Hg4bN 01DZDGuUEKbTwT7lb2rPic2CgDsvCiq6TC+aDm/B1X2iMQo0f29CBiU8kv4udDO2 QX23qiR6V5Oxe0um9ivskn55KGadx4PCc5E3IYtYlxpoHgccrrgX6iciGyAOMc0u nfDJ/Ds/ZOIeshpz3BDT3hFGbE8o0xPlQfFdAIhzoDfLbV7/vQ/8s1ZhTOwK/5Pb gGFHv8mXWVuHro6FDldxOYcffcTMeDy6VZ+fP8TtRUVyh6IIPtYe97/HhE45QA5i G1GSPqFrQm6s3tsaMqVufDL/6wpFfsqzZq5H5jWfm3GrfXon1euOcFoARwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJUfIn+qaSD24aIWItWX7WLGlYrzMB8GA1UdIwQY MBaAFP+N1f5Beei9ooUyVhkZ9tB4d8Y9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzQzVl9rRjU2TDJpaFRKV0dSbjIwSGgzeGowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80YjJmODgtM2UyMC00YWZhLWI3NTQt MDZhNDA0NDM1ZTUwLzEvbFI4aWY2cHBJUGJob2hZaTFaZnRZc2FWaXZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS80YjJmODgtM2UyMC00YWZhLWI3NTQtMDZhNDA0NDM1ZTUw LzEvXzQzVl9rRjU2TDJpaFRKV0dSbjIwSGgzeGowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLpWOAwQA bcUQMA0GCSqGSIb3DQEBCwUAA4IBAQBWgFdwCWXXHJ3PE6d0bPjSHE7+95Kfb3AU Wj22A0qX/FfX0oPffpf5jmJwTG7DabTD6XTH9r/HcHYw1XNkigbfPAB6CXGXQdWk ifsPoRsyR2taFrY1GhBB/i8m8NM9G/ceRjujBUlox1X+3daHooymevlKu02Q3Gil KjeX8Pb6EXw5ycBcVAHsr/pGN5HldVuugvEde63AMiMc75yukMLWyEjd2+2wilJq zQy7lSGc1h5R2UovJBwt7BkQYvyUPIJcWZgjG2GeYL7mblzyIr9k508XF7EJSLSE d3WmtyR/qjQPVZonAweJYoSPRrrx3pggU49JPb0gXw6OLKBvlTvi -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:59 2026 by rpki-client