This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/wY-Cs55am_CMQf8p1GQXagMI6tE.roa File: wY-Cs55am_CMQf8p1GQXagMI6tE.roa (raw, json) Hash identifier: LKZ2Oa7r49TtzT8prI98TwirtVVWtnVlmoHvBJjp2PI= Subject key identifier: C1:8F:82:B3:9E:5A:9B:F0:8C:41:FF:29:D4:64:17:6A:03:08:EA:D1 Certificate issuer: /CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318 Certificate serial: 019B7EA746466FCC56DC712BC2042E0913D3 Authority key identifier: 7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/wY-Cs55am_CMQf8p1GQXagMI6tE.roa Signing time: Fri 02 Jan 2026 12:20:50 +0000 ROA not before: Fri 02 Jan 2026 12:20:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43541 IP address blocks: 46.243.48.0/24 maxlen: 24 46.243.49.0/24 maxlen: 24 46.243.50.0/24 maxlen: 24 46.243.55.0/24 maxlen: 24 78.24.8.0/21 maxlen: 21 93.185.96.0/20 maxlen: 20 178.251.184.0/21 maxlen: 21 185.14.252.0/22 maxlen: 22 185.59.208.0/22 maxlen: 22 185.64.216.0/22 maxlen: 22 185.115.1.0/24 maxlen: 24 185.115.2.0/24 maxlen: 24 217.16.176.0/20 maxlen: 20 2a00:1ed0::/32 maxlen: 32 2a00:1ed1::/32 maxlen: 32 2a00:1ed2::/32 maxlen: 32 2a02:5420:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.mft rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:46:46:6f:cc:56:dc:71:2b:c2:04:2e:09:13:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e65dab23940cb394f9aaa664fea4d6f8f42e318 Validity Not Before: Jan 2 12:20:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c18f82b39e5a9bf08c41ff29d464176a0308ead1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:da:3d:d3:cc:49:c1:38:dc:ac:95:b0:e5:9c: 7f:6a:b6:06:24:d1:e5:50:9b:18:96:f5:20:ca:f5: eb:38:5b:d9:7b:7d:4a:92:ce:a3:56:67:93:bb:c7: 19:b7:c0:7b:5e:37:84:72:6e:0b:e1:61:0c:1d:d3: 76:bc:04:cc:22:98:a4:f2:3f:e5:ab:59:ea:da:a0: cd:25:19:39:48:32:7e:d0:8e:36:49:04:41:6e:38: e1:01:8e:5c:9f:41:b6:f0:47:48:77:96:5f:8b:be: 1b:e8:4e:79:26:65:29:34:f5:7d:11:ac:fc:c9:5c: 60:9e:30:05:b8:2b:bd:a3:db:e5:27:bb:b3:64:da: 53:2a:ef:c1:1e:14:98:ac:40:6e:ea:80:68:87:c4: 05:76:aa:f9:e2:76:bf:40:63:5c:2a:24:c4:95:9e: c2:49:a3:a8:26:03:f0:b8:d1:53:92:f6:50:62:d6: 3b:80:4c:c4:73:0c:f7:c2:21:d7:33:00:ba:06:6f: 24:f3:3d:99:57:52:1b:98:a4:f1:58:38:ed:f0:af: 71:77:37:80:90:5e:99:99:e1:ed:49:d3:bb:3b:d8: 1f:bb:16:c0:33:0e:e0:64:fa:57:b1:fa:ca:1c:d3: 52:f1:44:b4:3f:0b:5b:9b:db:f7:0c:ed:e7:a9:90: a3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:8F:82:B3:9E:5A:9B:F0:8C:41:FF:29:D4:64:17:6A:03:08:EA:D1 X509v3 Authority Key Identifier: keyid:7E:65:DA:B2:39:40:CB:39:4F:9A:AA:66:4F:EA:4D:6F:8F:42:E3:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fmXasjlAyzlPmqpmT-pNb49C4xg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/wY-Cs55am_CMQf8p1GQXagMI6tE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/58ebb1-dbec-47f9-bb96-849cfcabb657/1/fmXasjlAyzlPmqpmT-pNb49C4xg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.243.48.0-46.243.50.255 46.243.55.0/24 78.24.8.0/21 93.185.96.0/20 178.251.184.0/21 185.14.252.0/22 185.59.208.0/22 185.64.216.0/22 185.115.1.0-185.115.2.255 217.16.176.0/20 IPv6: 2a00:1ed0::-2a00:1ed2:ffff:ffff:ffff:ffff:ffff:ffff 2a02:5420:11::/48 Signature Algorithm: sha256WithRSAEncryption 3c:ad:98:7a:93:b0:d8:06:1c:ae:cc:05:1f:3f:50:e3:31:f9: c3:3f:81:66:ff:96:f6:3f:7d:c6:ec:13:96:10:5f:82:66:45: 4e:0c:8b:bd:9a:b8:51:d1:b5:7e:18:9f:c9:0f:82:af:4a:57: d1:2e:54:8b:13:ed:43:3c:85:b2:b0:56:bd:be:44:32:07:03: 51:25:0a:6f:38:f2:7a:0c:ef:0f:94:86:2b:7b:0d:04:38:af: 92:63:1c:a2:28:5f:62:25:f5:da:2d:06:86:b6:03:1e:15:8f: 6c:d4:ec:34:3e:72:7d:30:51:cf:93:dc:c2:65:06:04:29:ec: 08:49:3c:aa:8f:01:1c:cf:73:0e:09:5b:98:44:f5:90:98:59: b0:78:58:46:eb:60:53:8d:34:a6:f8:45:7a:e5:34:4f:ef:47: 00:35:08:b3:df:17:a3:41:bc:1f:63:c9:b4:79:86:c2:9c:b5: 55:d4:aa:2d:cc:63:60:6d:2f:ef:67:de:47:3d:a1:d8:be:01: 66:8c:dc:06:52:20:c1:2c:48:ef:6e:d2:8e:e1:b4:11:19:7e: 49:0f:44:ba:31:4a:0b:74:e8:20:1c:43:51:55:01:55:e3:ce: 65:fc:b8:78:89:ad:4c:9f:6b:8c:e9:24:c6:ba:bd:a6:5d:82: a8:e7:98:6d -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgISAZt+p0ZGb8xW3HErwgQuCRPTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlNjVkYWIyMzk0MGNiMzk0ZjlhYWE2NjRmZWE0ZDZmOGY0 MmUzMTgwHhcNMjYwMTAyMTIyMDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMThmODJiMzllNWE5YmYwOGM0MWZmMjlkNDY0MTc2YTAzMDhlYWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9o908xJwTjcrJWw5Zx/arYGJNHl UJsYlvUgyvXrOFvZe31Kks6jVmeTu8cZt8B7XjeEcm4L4WEMHdN2vATMIpik8j/l q1nq2qDNJRk5SDJ+0I42SQRBbjjhAY5cn0G28EdId5Zfi74b6E55JmUpNPV9Eaz8 yVxgnjAFuCu9o9vlJ7uzZNpTKu/BHhSYrEBu6oBoh8QFdqr54na/QGNcKiTElZ7C SaOoJgPwuNFTkvZQYtY7gEzEcwz3wiHXMwC6Bm8k8z2ZV1IbmKTxWDjt8K9xdzeA kF6ZmeHtSdO7O9gfuxbAMw7gZPpXsfrKHNNS8US0Pwtbm9v3DO3nqZCjnwIDAQAB o4ICcTCCAm0wHQYDVR0OBBYEFMGPgrOeWpvwjEH/KdRkF2oDCOrRMB8GA1UdIwQY MBaAFH5l2rI5QMs5T5qqZk/qTW+PQuMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZm1YYXNqbEF5emxQbXFwbVQtcE5iNDlDNHhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC81OGViYjEtZGJlYy00N2Y5LWJiOTYt ODQ5Y2ZjYWJiNjU3LzEvd1ktQ3M1NWFtX0NNUWY4cDFHUVhhZ01JNnRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC81OGViYjEtZGJlYy00N2Y5LWJiOTYtODQ5Y2ZjYWJiNjU3 LzEvZm1YYXNqbEF5emxQbXFwbVQtcE5iNDlDNHhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGGBggrBgEFBQcBBwEB/wR3MHUwUgQCAAEwTDAMAwQELvMw AwQALvMyAwQALvM3AwQDThgIAwQEXblgAwQDsvu4AwQCuQ78AwQCuTvQAwQCuUDY MAwDBAC5cwEDBAC5cwIDBATZELAwHwQCAAIwGTAOAwUEKgAe0AMFACoAHtIDBwAq AlQgABEwDQYJKoZIhvcNAQELBQADggEBADytmHqTsNgGHK7MBR8/UOMx+cM/gWb/ lvY/fcbsE5YQX4JmRU4Mi72auFHRtX4Yn8kPgq9KV9EuVIsT7UM8hbKwVr2+RDIH A1ElCm848noM7w+Uhit7DQQ4r5JjHKIoX2Il9dotBoa2Ax4Vj2zU7DQ+cn0wUc+T 3MJlBgQp7AhJPKqPARzPcw4JW5hE9ZCYWbB4WEbrYFONNKb4RXrlNE/vRwA1CLPf F6NBvB9jybR5hsKctVXUqi3MY2BtL+9n3kc9odi+AWaM3AZSIMEsSO9u0o7htBEZ fkkPRLoxSgt06CAcQ1FVAVXjzmX8uHiJrUyfa4zpJMa6vaZdgqjnmG0= -----END CERTIFICATE-----Generated at Mon Jan 26 07:23:41 2026 by rpki-client