This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/Lr_Xbb1THDKqD6RwPgUdUA9h3EY.roa File: Lr_Xbb1THDKqD6RwPgUdUA9h3EY.roa (raw, json) Hash identifier: cfMlImvmxi+0oJBR3nteg7NdpbusKTlCxQY6ByRViVA= Subject key identifier: 2E:BF:D7:6D:BD:53:1C:32:AA:0F:A4:70:3E:05:1D:50:0F:61:DC:46 Certificate issuer: /CN=c89c2cc489ebe48f490584ac866fe362c4117e75 Certificate serial: 019B7BA4B8C2FF09F656AA31B58EC0000224 Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/Lr_Xbb1THDKqD6RwPgUdUA9h3EY.roa Signing time: Thu 01 Jan 2026 22:19:11 +0000 ROA not before: Thu 01 Jan 2026 22:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42337 IP address blocks: 46.148.32.0/24 maxlen: 24 46.148.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:b8:c2:ff:09:f6:56:aa:31:b5:8e:c0:00:02:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75 Validity Not Before: Jan 1 22:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2ebfd76dbd531c32aa0fa4703e051d500f61dc46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:31:3b:ab:24:8b:d9:30:04:4a:bc:1c:a3:4a: 2d:40:68:e4:cb:f9:10:b4:f0:94:89:05:d3:ab:d6: e1:ad:e2:b9:fb:06:03:98:b3:b0:81:a0:4d:67:3a: 5c:fd:13:46:47:4a:ce:79:3d:d7:ad:46:ee:12:3b: 0e:9a:e6:56:a6:72:39:41:a8:2d:16:fd:34:d1:91: 8f:fb:e3:00:44:ee:b4:98:3c:a6:5a:7f:89:a5:b0: e2:27:4a:5c:d3:83:eb:d8:64:90:89:c0:26:78:fa: e6:55:d3:b8:f5:3d:49:e0:0c:44:31:5f:6b:01:3a: 5e:7d:de:ad:ee:02:f4:94:b1:78:a0:83:6a:b6:2b: 04:2d:e6:ac:20:7e:49:b7:11:b1:ae:91:e3:29:d8: e8:7e:bf:f6:a1:a5:b6:b3:81:4e:9e:4e:72:4c:eb: 1e:a0:4a:77:fc:29:fd:2f:12:3a:9e:c6:70:d4:1e: ad:b9:4c:d3:46:4b:84:f7:3a:64:0e:0f:ba:ef:fc: 97:02:4d:11:aa:dd:97:9e:d1:47:09:77:47:6f:37: ce:8d:67:fa:60:42:50:ea:7b:73:41:a0:f6:0a:7e: 73:07:e7:20:39:17:57:a3:47:bf:3f:be:2d:cb:e1: cf:c8:26:e0:3f:1e:a2:74:ad:61:f0:79:48:f3:3d: 0c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:BF:D7:6D:BD:53:1C:32:AA:0F:A4:70:3E:05:1D:50:0F:61:DC:46 X509v3 Authority Key Identifier: keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/Lr_Xbb1THDKqD6RwPgUdUA9h3EY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.148.32.0/24 46.148.41.0/24 Signature Algorithm: sha256WithRSAEncryption a8:90:f2:45:d3:61:fe:05:b0:74:20:bf:be:92:8b:1a:24:0b: 26:a5:5d:6f:f7:d9:3e:a0:8b:a6:74:14:c9:41:cb:58:0d:86: 3a:0a:03:69:a8:7d:5e:9a:d2:6c:55:eb:ef:3f:f3:76:6d:95: b3:c2:2b:13:a9:9d:a8:a3:60:2a:3e:fb:55:b6:38:fa:9d:58: b7:8f:8b:42:40:b1:4f:06:3c:c9:50:7d:ec:f1:7d:15:ff:ca: 54:ba:df:71:a4:12:66:24:6e:67:26:c2:b0:e6:a1:9c:58:78: 62:d0:af:f5:80:e8:d9:01:0d:36:ea:5d:6b:90:e8:2f:9d:52: ea:82:19:e5:26:9b:25:ab:61:85:cf:0a:d4:ba:6d:ba:9e:85: 0c:4c:3e:20:21:72:a0:e4:eb:9a:ae:38:5c:ed:16:e4:fd:82: 59:9c:24:96:59:be:d2:b0:aa:f1:bf:76:df:c9:2d:23:e8:d2: 0f:66:8c:a2:29:aa:ae:67:c8:45:58:61:d0:5c:0d:c8:0d:12: 28:c3:98:f1:4a:66:bf:14:ea:1f:8e:e2:e4:67:e9:a6:03:f7: 65:3d:72:60:63:53:0c:72:ff:80:d3:a8:ca:b3:d1:75:e3:12: 90:16:41:d5:50:fd:d5:b3:19:76:d4:e6:00:70:d3:55:15:f5: 4e:f7:af:19 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pLjC/wn2VqoxtY7AAAIkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4OWMyY2M0ODllYmU0OGY0OTA1ODRhYzg2NmZlMzYyYzQx MTdlNzUwHhcNMjYwMTAxMjIxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZWJmZDc2ZGJkNTMxYzMyYWEwZmE0NzAzZTA1MWQ1MDBmNjFkYzQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjE7qySL2TAESrwco0otQGjky/kQ tPCUiQXTq9bhreK5+wYDmLOwgaBNZzpc/RNGR0rOeT3XrUbuEjsOmuZWpnI5Qagt Fv000ZGP++MARO60mDymWn+JpbDiJ0pc04Pr2GSQicAmePrmVdO49T1J4AxEMV9r ATpefd6t7gL0lLF4oINqtisELeasIH5JtxGxrpHjKdjofr/2oaW2s4FOnk5yTOse oEp3/Cn9LxI6nsZw1B6tuUzTRkuE9zpkDg+67/yXAk0Rqt2XntFHCXdHbzfOjWf6 YEJQ6ntzQaD2Cn5zB+cgORdXo0e/P74ty+HPyCbgPx6idK1h8HlI8z0MhwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFC6/1229Uxwyqg+kcD4FHVAPYdxGMB8GA1UdIwQY MBaAFMicLMSJ6+SPSQWErIZv42LEEX51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUp3c3hJbnI1STlKQllTc2htX2pZc1FSZm5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hMDBiZTItODc3ZC00MGU3LThhOGEt YWYyY2ZhNjIyZDE4LzEvTHJfWGJiMVRIREtxRDZSd1BnVWRVQTloM0VZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9hMDBiZTItODc3ZC00MGU3LThhOGEtYWYyY2ZhNjIyZDE4 LzEveUp3c3hJbnI1STlKQllTc2htX2pZc1FSZm5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALpQgAwQA LpQpMA0GCSqGSIb3DQEBCwUAA4IBAQCokPJF02H+BbB0IL++kosaJAsmpV1v99k+ oIumdBTJQctYDYY6CgNpqH1emtJsVevvP/N2bZWzwisTqZ2oo2AqPvtVtjj6nVi3 j4tCQLFPBjzJUH3s8X0V/8pUut9xpBJmJG5nJsKw5qGcWHhi0K/1gOjZAQ026l1r kOgvnVLqghnlJpslq2GFzwrUum26noUMTD4gIXKg5Ouarjhc7Rbk/YJZnCSWWb7S sKrxv3bfyS0j6NIPZoyiKaquZ8hFWGHQXA3IDRIow5jxSma/FOofjuLkZ+mmA/dl PXJgY1MMcv+A06jKs9F14xKQFkHVUP3Vsxl21OYAcNNVFfVO968Z -----END CERTIFICATE-----Generated at Mon Jan 26 03:56:45 2026 by rpki-client