This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/po89kTt_M1HMD_TZwbQeOVVxFXw.roa File: po89kTt_M1HMD_TZwbQeOVVxFXw.roa (raw, json) Hash identifier: RYba7TeIJMquk0bjj/NwxPbu20V03433IfrmNgzfovA= Subject key identifier: A6:8F:3D:91:3B:7F:33:51:CC:0F:F4:D9:C1:B4:1E:39:55:71:15:7C Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e Certificate serial: 019B7F15FC477CFEDE3277E7FE74B19F15F3 Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/po89kTt_M1HMD_TZwbQeOVVxFXw.roa Signing time: Fri 02 Jan 2026 14:21:45 +0000 ROA not before: Fri 02 Jan 2026 14:21:45 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 5606 IP address blocks: 46.102.144.0/22 maxlen: 22 89.33.236.0/23 maxlen: 23 89.45.168.0/21 maxlen: 21 89.46.6.0/24 maxlen: 24 93.115.112.0/21 maxlen: 21 93.119.152.0/24 maxlen: 24 93.119.153.0/24 maxlen: 24 185.171.186.0/24 maxlen: 24 195.246.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:fc:47:7c:fe:de:32:77:e7:fe:74:b1:9f:15:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e Validity Not Before: Jan 2 14:21:45 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a68f3d913b7f3351cc0ff4d9c1b41e395571157c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:e3:83:f2:ac:b1:ad:13:06:0b:b6:41:ae:83: 80:b4:2e:61:de:ee:2c:6a:4d:03:71:6c:50:e5:a9: 31:44:93:bf:0a:bd:82:38:a9:fe:ac:d8:13:d0:8f: 26:c8:ae:f8:bd:9e:80:06:c6:b9:1e:4b:62:5d:de: eb:83:ef:89:ee:d4:8e:7c:f7:b1:21:c0:cb:ee:88: 91:da:c3:57:cd:59:a3:86:cf:a8:29:4c:22:37:81: 32:cc:3d:0b:b2:c6:4c:9c:8c:91:06:73:5f:c5:f2: 64:b6:97:f4:3c:dd:18:a2:30:cf:0c:54:57:a3:bb: d3:a2:32:f6:ab:25:59:6f:39:7c:22:0e:d7:a9:1d: c9:71:bb:52:4f:8c:98:75:3d:0f:4a:15:a3:0e:ae: 6d:00:54:2c:d3:3f:8f:7b:91:2a:29:7d:1a:8c:2c: db:ef:61:1c:b9:3a:48:a8:ce:0c:01:c8:0f:41:dd: 0b:28:d4:22:ae:75:43:9f:25:94:17:59:0d:94:d7: fd:d1:a0:09:b5:ac:af:11:b5:ed:e5:e9:39:f0:41: ff:cc:cb:be:62:68:06:eb:20:bf:18:3a:2c:eb:b6: 57:43:d8:aa:8f:54:30:dd:69:c0:70:9f:a4:cb:09: 0f:a2:3e:93:c5:e4:b2:35:90:d0:98:88:08:9a:e8: b5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:8F:3D:91:3B:7F:33:51:CC:0F:F4:D9:C1:B4:1E:39:55:71:15:7C X509v3 Authority Key Identifier: keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/po89kTt_M1HMD_TZwbQeOVVxFXw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.102.144.0/22 89.33.236.0/23 89.45.168.0/21 89.46.6.0/24 93.115.112.0/21 93.119.152.0/23 185.171.186.0/24 195.246.242.0/23 Signature Algorithm: sha256WithRSAEncryption 7b:d7:d1:9f:95:11:76:e0:5a:ad:2a:11:0d:46:08:39:42:f7: 4a:3a:6d:96:3c:92:c1:25:29:d8:2b:a6:54:f5:e6:04:23:2e: 22:0a:78:81:69:c7:2e:25:c4:9a:11:bc:47:da:3c:00:04:13: 28:6e:08:0d:7e:42:a1:47:c6:77:6f:b3:b0:40:d2:d0:98:6f: e5:a6:5d:64:6a:ae:55:12:04:e9:4e:88:9d:5b:db:1d:19:74: 7d:b3:ce:59:40:23:53:2a:43:61:81:e6:81:2e:3d:2b:e6:65: 49:7a:ad:85:d4:0e:db:d8:75:f0:b7:45:f1:57:42:fd:ec:48: d1:8c:18:63:b1:61:37:ba:32:f9:fe:b7:7d:03:6c:fb:91:28: 36:61:39:bd:2c:5a:ff:2a:d3:9b:d7:7e:40:ca:f4:96:06:1b: aa:b6:01:fd:0d:41:bd:fe:dc:27:d1:93:3f:5a:1f:3f:bb:24: 21:73:52:12:54:e3:5e:9b:ec:f7:20:07:37:2a:23:44:1f:81: ce:6b:88:24:18:6a:3b:e3:df:26:1b:7b:e6:38:52:42:8f:50: 7e:da:21:d4:44:8a:59:1a:4a:38:93:1c:5f:71:2d:61:c6:15: 44:4e:96:f0:5e:17:81:07:55:0b:ad:6f:e2:4e:f9:bf:c2:c7: 79:8b:39:02 -----BEGIN CERTIFICATE----- MIIFJzCCBA+gAwIBAgISAZt/FfxHfP7eMnfn/nSxnxXzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQwOGFmNDg1YjRmZDBmMDM3MTdjZDRhNzA5ZWYxMWM2MWQz ZWY0NmUwHhcNMjYwMTAyMTQyMTQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNjhmM2Q5MTNiN2YzMzUxY2MwZmY0ZDljMWI0MWUzOTU1NzExNTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOOD8qyxrRMGC7ZBroOAtC5h3u4s ak0DcWxQ5akxRJO/Cr2COKn+rNgT0I8myK74vZ6ABsa5HktiXd7rg++J7tSOfPex IcDL7oiR2sNXzVmjhs+oKUwiN4EyzD0LssZMnIyRBnNfxfJktpf0PN0YojDPDFRX o7vTojL2qyVZbzl8Ig7XqR3JcbtST4yYdT0PShWjDq5tAFQs0z+Pe5EqKX0ajCzb 72EcuTpIqM4MAcgPQd0LKNQirnVDnyWUF1kNlNf90aAJtayvEbXt5ek58EH/zMu+ YmgG6yC/GDos67ZXQ9iqj1Qw3WnAcJ+kywkPoj6TxeSyNZDQmIgImui1GQIDAQAB o4ICMzCCAi8wHQYDVR0OBBYEFKaPPZE7fzNRzA/02cG0HjlVcRV8MB8GA1UdIwQY MBaAFECK9IW0/Q8DcXzUpwnvEcYdPvRuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lMTE3MWMtNTI3MC00OWNkLTkzNzkt Yjk1YjA4YTIzYWUxLzEvcG84OWtUdF9NMUhNRF9UWndiUWVPVlZ4Rlh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9lMTE3MWMtNTI3MC00OWNkLTkzNzktYjk1YjA4YTIzYWUx LzEvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQCLmaQAwQB WSHsAwQDWS2oAwQAWS4GAwQDXXNwAwQBXXeYAwQAuau6AwQBw/byMA0GCSqGSIb3 DQEBCwUAA4IBAQB719GflRF24FqtKhENRgg5QvdKOm2WPJLBJSnYK6ZU9eYEIy4i CniBaccuJcSaEbxH2jwABBMobggNfkKhR8Z3b7OwQNLQmG/lpl1kaq5VEgTpToid W9sdGXR9s85ZQCNTKkNhgeaBLj0r5mVJeq2F1A7b2HXwt0XxV0L97EjRjBhjsWE3 ujL5/rd9A2z7kSg2YTm9LFr/KtOb135AyvSWBhuqtgH9DUG9/twn0ZM/Wh8/uyQh c1ISVONem+z3IAc3KiNEH4HOa4gkGGo7498mG3vmOFJCj1B+2iHURIpZGko4kxxf cS1hxhVETpbwXheBB1ULrW/iTvm/wsd5izkC -----END CERTIFICATE-----Generated at Sun Jan 25 16:28:35 2026 by rpki-client