This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/nb4M4Vs_oRCpP6av5yHYY7ajtGs.roa File: nb4M4Vs_oRCpP6av5yHYY7ajtGs.roa (raw, json) Hash identifier: cPr0jW1v5b3Y4dRV/He/q4udsj1U7jqFBGqtSVxJD3c= Subject key identifier: 9D:BE:0C:E1:5B:3F:A1:10:A9:3F:A6:AF:E7:21:D8:63:B6:A3:B4:6B Certificate issuer: /CN=8d4dd2d06d920e403933fdb2cd1984893552579c Certificate serial: 019B77C6FEAA40D7CB46765E95399F784749 Authority key identifier: 8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/nb4M4Vs_oRCpP6av5yHYY7ajtGs.roa Signing time: Thu 01 Jan 2026 04:18:08 +0000 ROA not before: Thu 01 Jan 2026 04:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39232 IP address blocks: 46.18.64.0/21 maxlen: 21 46.18.64.0/22 maxlen: 22 46.18.64.0/24 maxlen: 24 46.18.65.0/24 maxlen: 24 46.18.66.0/24 maxlen: 24 46.18.67.0/24 maxlen: 24 46.18.68.0/22 maxlen: 22 46.18.68.0/24 maxlen: 24 46.18.69.0/24 maxlen: 24 46.18.70.0/24 maxlen: 24 46.18.71.0/24 maxlen: 24 89.219.36.0/22 maxlen: 22 89.219.36.0/23 maxlen: 23 89.219.38.0/23 maxlen: 23 89.219.40.0/21 maxlen: 21 89.219.40.0/22 maxlen: 22 89.219.44.0/22 maxlen: 22 89.219.48.0/20 maxlen: 20 89.219.48.0/21 maxlen: 21 89.219.56.0/21 maxlen: 21 89.219.132.0/23 maxlen: 23 89.219.132.0/24 maxlen: 24 89.219.133.0/24 maxlen: 24 89.219.155.0/24 maxlen: 24 89.219.156.0/22 maxlen: 22 89.219.156.0/23 maxlen: 23 89.219.158.0/23 maxlen: 23 89.219.160.0/24 maxlen: 24 89.219.163.0/24 maxlen: 24 89.219.164.0/22 maxlen: 22 89.219.164.0/23 maxlen: 23 89.219.166.0/23 maxlen: 23 89.219.169.0/24 maxlen: 24 89.219.170.0/23 maxlen: 23 89.219.170.0/24 maxlen: 24 89.219.171.0/24 maxlen: 24 89.219.172.0/22 maxlen: 22 89.219.172.0/23 maxlen: 23 89.219.174.0/23 maxlen: 23 89.219.176.0/20 maxlen: 20 89.219.176.0/21 maxlen: 21 89.219.184.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.mft rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:fe:aa:40:d7:cb:46:76:5e:95:39:9f:78:47:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d4dd2d06d920e403933fdb2cd1984893552579c Validity Not Before: Jan 1 04:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9dbe0ce15b3fa110a93fa6afe721d863b6a3b46b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:aa:1c:45:1c:05:cf:a2:53:61:7a:82:2a:0e: e5:08:b3:76:13:9d:12:17:8d:a0:1f:75:8a:eb:cf: db:c1:fe:a5:82:1a:1c:ee:23:e0:99:70:12:80:20: 8f:01:9d:ba:65:b7:c4:27:1a:ea:1d:ad:e8:9c:ab: 39:b4:38:20:07:3b:53:60:7f:0f:de:d2:4a:eb:f1: f5:fe:c9:3b:17:8e:20:3e:93:66:c5:5b:a9:d2:5c: e5:2f:3d:01:c7:b7:29:dd:9a:da:c2:43:f0:56:fa: 24:e9:39:0d:29:04:c5:6d:f0:0e:44:de:99:e4:b7: d7:42:e2:bd:c4:c1:0c:78:c8:7c:f8:ed:56:96:3b: 5f:68:05:96:a6:39:c7:dc:75:63:49:94:02:3c:22: c6:fa:8c:98:42:fe:79:42:92:6c:c5:f2:20:3a:e9: f1:95:43:de:57:95:b5:ea:b2:46:44:5a:ee:de:78: b8:d4:ac:0d:dc:f7:58:63:1c:d9:da:4c:27:e4:fe: 00:5a:0b:c1:8d:99:1b:97:6f:97:12:f4:03:62:ff: 64:8b:05:fe:5b:37:3a:01:e5:b8:c1:a1:30:2f:10: 21:5f:32:06:4e:9b:fe:b7:99:5d:63:63:6f:e5:50: bd:dd:66:35:98:cb:a7:32:74:21:58:19:36:20:59: c3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:BE:0C:E1:5B:3F:A1:10:A9:3F:A6:AF:E7:21:D8:63:B6:A3:B4:6B X509v3 Authority Key Identifier: keyid:8D:4D:D2:D0:6D:92:0E:40:39:33:FD:B2:CD:19:84:89:35:52:57:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU3S0G2SDkA5M_2yzRmEiTVSV5w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/nb4M4Vs_oRCpP6av5yHYY7ajtGs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f621a7-e080-4255-926d-32ff31ceec8b/1/jU3S0G2SDkA5M_2yzRmEiTVSV5w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.18.64.0/21 89.219.36.0-89.219.63.255 89.219.132.0/23 89.219.155.0-89.219.160.255 89.219.163.0-89.219.167.255 89.219.169.0-89.219.191.255 Signature Algorithm: sha256WithRSAEncryption e3:c5:00:01:3e:1c:41:80:1b:ed:12:2e:80:ff:b3:e3:7d:e0: 18:ab:fb:6e:6e:f8:5e:61:d5:a6:1b:a4:b6:e6:74:7e:11:4c: a2:f7:f6:ba:98:6d:e9:68:f6:f4:6e:66:85:82:51:32:a4:5e: ba:91:36:d2:43:81:87:5e:73:fc:ea:e9:10:d8:39:4a:c4:98: 2e:f6:b9:da:5f:f9:fc:ad:4b:a5:8f:26:08:be:c4:29:33:23: bb:f2:0d:26:0c:62:0e:2d:b1:71:ac:cc:fe:95:72:ec:07:bc: 0d:a2:2a:e7:7b:8f:7c:fb:2b:29:f7:07:e9:1c:f4:6e:d9:58: 43:f4:a0:38:04:bf:7b:d5:1a:a5:ea:af:48:9c:e1:e7:33:c7: a2:3a:ee:ad:7d:a5:df:c6:09:7d:3c:7b:76:35:2f:1d:90:06: 12:9b:03:a9:c3:56:f8:d7:c2:75:8d:00:b7:05:cd:a8:04:70: a3:6f:a7:07:14:86:7f:fd:60:90:a5:ae:eb:c8:2e:e9:65:7c: 30:a7:06:44:a7:e4:5f:55:66:88:0f:e6:53:fa:f5:8f:a3:03: 48:43:a2:58:2e:41:c2:e0:39:68:81:dc:69:df:92:9d:5a:06: cd:e0:05:b7:97:f9:07:a0:85:a0:b1:34:67:9b:aa:d0:ec:c4: 33:7f:80:ed -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgISAZt3xv6qQNfLRnZelTmfeEdJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkNGRkMmQwNmQ5MjBlNDAzOTMzZmRiMmNkMTk4NDg5MzU1 MjU3OWMwHhcNMjYwMTAxMDQxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZGJlMGNlMTViM2ZhMTEwYTkzZmE2YWZlNzIxZDg2M2I2YTNiNDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3KocRRwFz6JTYXqCKg7lCLN2E50S F42gH3WK68/bwf6lghoc7iPgmXASgCCPAZ26ZbfEJxrqHa3onKs5tDggBztTYH8P 3tJK6/H1/sk7F44gPpNmxVup0lzlLz0Bx7cp3ZrawkPwVvok6TkNKQTFbfAORN6Z 5LfXQuK9xMEMeMh8+O1WljtfaAWWpjnH3HVjSZQCPCLG+oyYQv55QpJsxfIgOunx lUPeV5W16rJGRFru3ni41KwN3PdYYxzZ2kwn5P4AWgvBjZkbl2+XEvQDYv9kiwX+ Wzc6AeW4waEwLxAhXzIGTpv+t5ldY2Nv5VC93WY1mMunMnQhWBk2IFnD2QIDAQAB o4ICRzCCAkMwHQYDVR0OBBYEFJ2+DOFbP6EQqT+mr+ch2GO2o7RrMB8GA1UdIwQY MBaAFI1N0tBtkg5AOTP9ss0ZhIk1UlecMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalUzUzBHMlNEa0E1TV8yeXpSbUVpVFZTVjV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9mNjIxYTctZTA4MC00MjU1LTkyNmQt MzJmZjMxY2VlYzhiLzEvbmI0TTRWc19vUkNwUDZhdjV5SFlZN2FqdEdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9mNjIxYTctZTA4MC00MjU1LTkyNmQtMzJmZjMxY2VlYzhi LzEvalUzUzBHMlNEa0E1TV8yeXpSbUVpVFZTVjV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQDLhJAMAwD BAJZ2yQDBAZZ2wADBAFZ24QwDAMEAFnbmwMEAFnboDAMAwQAWdujAwQDWdugMAwD BABZ26kDBAZZ24AwDQYJKoZIhvcNAQELBQADggEBAOPFAAE+HEGAG+0SLoD/s+N9 4Bir+25u+F5h1aYbpLbmdH4RTKL39rqYbelo9vRuZoWCUTKkXrqRNtJDgYdec/zq 6RDYOUrEmC72udpf+fytS6WPJgi+xCkzI7vyDSYMYg4tsXGszP6VcuwHvA2iKud7 j3z7Kyn3B+kc9G7ZWEP0oDgEv3vVGqXqr0ic4eczx6I67q19pd/GCX08e3Y1Lx2Q BhKbA6nDVvjXwnWNALcFzagEcKNvpwcUhn/9YJClruvILullfDCnBkSn5F9VZogP 5lP69Y+jA0hDolguQcLgOWiB3Gnfkp1aBs3gBbeX+QeghaCxNGebqtDsxDN/gO0= -----END CERTIFICATE-----Generated at Mon Jan 26 18:10:50 2026 by rpki-client