This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/RSH629Di86JEdgcD_JE71CBSWUg.roa File: RSH629Di86JEdgcD_JE71CBSWUg.roa (raw, json) Hash identifier: 3smoBk5+RI6KLm1HKHlJ8NiPGLzfi2c1vThooYrHwBw= Subject key identifier: 45:21:FA:DB:D0:E2:F3:A2:44:76:07:03:FC:91:3B:D4:20:52:59:48 Certificate issuer: /CN=c3e86569b1690c9dff745cbb43805b8582b005ad Certificate serial: 019B78A30081C99C6B2EF206702A3247E1A1 Authority key identifier: C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/RSH629Di86JEdgcD_JE71CBSWUg.roa Signing time: Thu 01 Jan 2026 08:18:27 +0000 ROA not before: Thu 01 Jan 2026 08:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47253 IP address blocks: 46.18.16.0/21 maxlen: 21 46.18.16.0/24 maxlen: 24 46.18.17.0/24 maxlen: 24 46.18.18.0/24 maxlen: 24 46.18.19.0/24 maxlen: 24 46.18.20.0/24 maxlen: 24 46.18.21.0/24 maxlen: 24 46.18.22.0/24 maxlen: 24 46.18.23.0/24 maxlen: 24 62.16.64.0/20 maxlen: 20 62.16.64.0/24 maxlen: 24 62.16.65.0/24 maxlen: 24 62.16.66.0/24 maxlen: 24 62.16.67.0/24 maxlen: 24 62.16.68.0/24 maxlen: 24 62.16.69.0/24 maxlen: 24 62.16.70.0/24 maxlen: 24 62.16.71.0/24 maxlen: 24 62.16.72.0/24 maxlen: 24 62.16.73.0/24 maxlen: 24 62.16.74.0/24 maxlen: 24 62.16.75.0/24 maxlen: 24 62.16.76.0/24 maxlen: 24 62.16.77.0/24 maxlen: 24 62.16.78.0/24 maxlen: 24 62.16.79.0/24 maxlen: 24 93.184.0.0/20 maxlen: 20 93.184.0.0/22 maxlen: 22 93.184.0.0/24 maxlen: 24 93.184.1.0/24 maxlen: 24 93.184.2.0/24 maxlen: 24 93.184.3.0/24 maxlen: 24 93.184.4.0/22 maxlen: 22 93.184.4.0/24 maxlen: 24 93.184.5.0/24 maxlen: 24 93.184.6.0/24 maxlen: 24 93.184.7.0/24 maxlen: 24 93.184.8.0/22 maxlen: 22 93.184.8.0/24 maxlen: 24 93.184.9.0/24 maxlen: 24 93.184.10.0/24 maxlen: 24 93.184.11.0/24 maxlen: 24 93.184.12.0/22 maxlen: 22 93.184.12.0/24 maxlen: 24 93.184.13.0/24 maxlen: 24 93.184.14.0/24 maxlen: 24 93.184.15.0/24 maxlen: 24 185.6.56.0/22 maxlen: 24 185.6.56.0/24 maxlen: 24 185.6.57.0/24 maxlen: 24 185.6.58.0/24 maxlen: 24 185.6.59.0/24 maxlen: 24 193.124.248.0/22 maxlen: 22 193.124.248.0/24 maxlen: 24 193.124.249.0/24 maxlen: 24 193.124.250.0/24 maxlen: 24 193.124.251.0/24 maxlen: 24 194.58.72.0/22 maxlen: 22 194.58.72.0/24 maxlen: 24 194.58.73.0/24 maxlen: 24 194.58.74.0/24 maxlen: 24 194.58.75.0/24 maxlen: 24 194.58.76.0/23 maxlen: 23 194.58.76.0/24 maxlen: 24 194.58.77.0/24 maxlen: 24 194.58.152.0/23 maxlen: 23 194.58.152.0/24 maxlen: 24 194.58.153.0/24 maxlen: 24 194.58.220.0/23 maxlen: 23 194.58.220.0/24 maxlen: 24 194.58.221.0/24 maxlen: 24 194.58.240.0/24 maxlen: 24 194.58.242.0/23 maxlen: 23 194.58.244.0/23 maxlen: 23 194.58.247.0/24 maxlen: 24 2a02:26d0::/32 maxlen: 32 2a02:26d0::/48 maxlen: 48 2a02:26d0:1::/48 maxlen: 48 2a02:26d0:2::/48 maxlen: 48 2a02:26d0:4::/48 maxlen: 48 2a02:26d0:9::/48 maxlen: 48 2a02:26d0:a::/48 maxlen: 48 2a02:26d0:10::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.mft rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:00:81:c9:9c:6b:2e:f2:06:70:2a:32:47:e1:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3e86569b1690c9dff745cbb43805b8582b005ad Validity Not Before: Jan 1 08:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4521fadbd0e2f3a244760703fc913bd420525948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9e:48:ac:d1:10:77:0a:45:f3:17:f6:97:d7: d8:e8:42:ad:11:71:39:14:9c:bd:83:c5:1a:1e:ba: 42:71:bb:3b:5b:29:cc:4e:7a:ec:3a:07:e6:83:c1: 49:6b:22:ca:78:1f:6f:82:fe:70:b1:f7:85:50:20: 50:f7:81:9d:ca:5b:bf:47:7a:32:04:1b:02:a9:99: 45:df:fb:c5:40:95:38:1e:4a:2d:ec:77:6d:3e:f6: 77:61:79:e4:3e:e2:39:c0:e1:35:56:02:58:e2:c1: a1:b7:13:ac:93:6a:33:4f:0c:c9:bb:9d:d2:bc:8d: 30:47:f6:dd:f6:9c:28:4c:de:83:5a:16:d7:eb:04: 6b:d3:d3:67:2c:6c:68:80:d5:70:20:74:c0:1e:81: 6c:7a:23:bc:ef:8f:4a:f3:3e:f4:3f:be:e1:2b:42: e7:0a:59:f1:0e:55:14:3e:1c:b8:ff:65:02:ff:4b: c3:67:70:35:29:6b:75:7c:73:cd:f9:ef:3c:03:f1: 82:ab:31:3b:a6:c3:7a:fc:83:2e:63:62:6c:da:d4: bf:95:aa:68:19:bf:75:fb:ea:c9:20:9f:e9:e3:36: 45:b3:3d:67:22:af:77:3a:7c:ca:2a:65:e8:5d:70: 97:79:6c:1a:77:5a:9e:a1:2d:f5:cb:f0:be:1e:e1: 70:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:21:FA:DB:D0:E2:F3:A2:44:76:07:03:FC:91:3B:D4:20:52:59:48 X509v3 Authority Key Identifier: keyid:C3:E8:65:69:B1:69:0C:9D:FF:74:5C:BB:43:80:5B:85:82:B0:05:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/RSH629Di86JEdgcD_JE71CBSWUg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c976fc-d7d3-4cba-b02e-dbbb35c9e378/1/w-hlabFpDJ3_dFy7Q4BbhYKwBa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.18.16.0/21 62.16.64.0/20 93.184.0.0/20 185.6.56.0/22 193.124.248.0/22 194.58.72.0-194.58.77.255 194.58.152.0/23 194.58.220.0/23 194.58.240.0/24 194.58.242.0-194.58.245.255 194.58.247.0/24 IPv6: 2a02:26d0::/32 Signature Algorithm: sha256WithRSAEncryption 80:6d:cb:ca:41:1b:10:87:48:d4:88:0f:6e:7c:84:e3:62:36: f0:ee:db:c2:d8:54:c9:72:6d:0c:63:58:47:85:9f:04:e2:e9: 94:d6:6d:84:79:77:f8:3f:4c:9b:3a:9b:1a:d4:51:c1:c7:aa: 06:5b:bf:1c:9b:46:b6:45:36:75:b6:b4:c0:ef:86:6d:2c:19: da:91:14:87:df:bc:88:cf:25:e0:df:b4:66:1f:3c:5f:5c:e7: 1d:42:ee:6f:0e:f2:e5:86:9c:ff:61:63:5b:78:1c:95:ac:57: 4e:ed:89:1c:2c:b0:95:be:ce:17:b0:ef:cc:33:80:c2:1b:80: f4:c1:ad:1e:33:58:a1:8f:06:33:f4:6b:15:ec:76:9f:87:86: c0:5c:c0:9f:55:dd:01:bc:14:90:dd:f9:67:3f:dc:62:77:7a: 9e:9b:30:83:e0:50:58:47:87:53:7b:d8:34:5f:02:e3:c4:7e: 68:49:ba:cc:15:b9:f9:0f:48:29:12:47:2c:4c:6d:35:e2:04: 32:0f:b4:1a:e9:39:cf:58:1d:bb:c2:af:00:0a:d1:cd:34:08: 2a:77:da:4a:83:bf:fe:ec:3c:6f:4f:0a:1f:d0:9c:35:fb:98: 62:0e:fe:df:b0:44:fd:2a:1f:7f:b4:db:ae:9b:43:b5:be:d1: 98:7d:ee:7e -----BEGIN CERTIFICATE----- MIIFWDCCBECgAwIBAgISAZt4owCByZxrLvIGcCoyR+GhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzZTg2NTY5YjE2OTBjOWRmZjc0NWNiYjQzODA1Yjg1ODJi MDA1YWQwHhcNMjYwMTAxMDgxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTIxZmFkYmQwZTJmM2EyNDQ3NjA3MDNmYzkxM2JkNDIwNTI1OTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ5IrNEQdwpF8xf2l9fY6EKtEXE5 FJy9g8UaHrpCcbs7WynMTnrsOgfmg8FJayLKeB9vgv5wsfeFUCBQ94Gdylu/R3oy BBsCqZlF3/vFQJU4Hkot7HdtPvZ3YXnkPuI5wOE1VgJY4sGhtxOsk2ozTwzJu53S vI0wR/bd9pwoTN6DWhbX6wRr09NnLGxogNVwIHTAHoFseiO8749K8z70P77hK0Ln ClnxDlUUPhy4/2UC/0vDZ3A1KWt1fHPN+e88A/GCqzE7psN6/IMuY2Js2tS/lapo Gb91++rJIJ/p4zZFsz1nIq93OnzKKmXoXXCXeWwad1qeoS31y/C+HuFwrQIDAQAB o4ICZDCCAmAwHQYDVR0OBBYEFEUh+tvQ4vOiRHYHA/yRO9QgUllIMB8GA1UdIwQY MBaAFMPoZWmxaQyd/3Rcu0OAW4WCsAWtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdy1obGFiRnBESjNfZEZ5N1E0QmJoWUt3QmEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jOTc2ZmMtZDdkMy00Y2JhLWIwMmUt ZGJiYjM1YzllMzc4LzEvUlNINjI5RGk4NkpFZGdjRF9KRTcxQ0JTV1VnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS9jOTc2ZmMtZDdkMy00Y2JhLWIwMmUtZGJiYjM1YzllMzc4 LzEvdy1obGFiRnBESjNfZEZ5N1E0QmJoWUt3QmEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHoGCCsGAQUFBwEHAQH/BGswaTBYBAIAATBSAwQDLhIQAwQE PhBAAwQEXbgAAwQCuQY4AwQCwXz4MAwDBAPCOkgDBAHCOkwDBAHCOpgDBAHCOtwD BADCOvAwDAMEAcI68gMEAcI69AMEAMI69zANBAIAAjAHAwUAKgIm0DANBgkqhkiG 9w0BAQsFAAOCAQEAgG3LykEbEIdI1IgPbnyE42I28O7bwthUyXJtDGNYR4WfBOLp lNZthHl3+D9MmzqbGtRRwceqBlu/HJtGtkU2dba0wO+GbSwZ2pEUh9+8iM8l4N+0 Zh88X1znHULubw7y5Yac/2FjW3gclaxXTu2JHCywlb7OF7DvzDOAwhuA9MGtHjNY oY8GM/RrFex2n4eGwFzAn1XdAbwUkN35Zz/cYnd6npswg+BQWEeHU3vYNF8C48R+ aEm6zBW5+Q9IKRJHLExtNeIEMg+0Guk5z1gdu8KvAArRzTQIKnfaSoO//uw8b08K H9CcNfuYYg7+37BE/Soff7TbrptDtb7RmH3ufg== -----END CERTIFICATE-----Generated at Mon Jan 26 05:03:00 2026 by rpki-client