This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/2lixoBAnBARmOK4RKfAsQmi8R70.roa File: 2lixoBAnBARmOK4RKfAsQmi8R70.roa (raw, json) Hash identifier: YUaeH3+y7G61QwUgUyO6ZuZ27JOi6UYWcLAKTLp2U44= Subject key identifier: DA:58:B1:A0:10:27:04:04:66:38:AE:11:29:F0:2C:42:68:BC:47:BD Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019B77C69AE734AA03063AEEB985957E3949 Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/2lixoBAnBARmOK4RKfAsQmi8R70.roa Signing time: Thu 01 Jan 2026 04:17:42 +0000 ROA not before: Thu 01 Jan 2026 04:17:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42007 IP address blocks: 46.8.130.0/23 maxlen: 24 46.8.132.0/22 maxlen: 24 46.8.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:9a:e7:34:aa:03:06:3a:ee:b9:85:95:7e:39:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Jan 1 04:17:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=da58b1a0102704046638ae1129f02c4268bc47bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:43:4e:5a:82:04:e2:7e:8a:b7:a5:71:20:67: 29:3f:95:dc:46:76:23:84:5c:13:fd:f1:fd:c9:03: 84:58:8c:7b:79:e5:78:74:51:c6:9c:25:f4:92:6b: 07:55:91:75:4b:c3:45:39:a8:b0:40:55:8f:3b:5f: d9:94:f6:13:4c:a9:0f:fd:20:db:b2:aa:0f:d5:2a: e9:31:df:e6:d9:3d:29:44:88:a8:89:85:5b:3b:ee: 2e:20:b8:74:7a:63:b2:ae:1c:a2:dd:87:7f:a7:8d: aa:bb:bd:7d:15:d1:ea:22:94:d9:bf:37:0a:8e:6c: 0e:56:d0:46:47:52:1e:64:cb:10:3b:61:7d:0e:2e: 09:bb:07:d9:db:72:2e:e8:38:6a:01:fb:12:7e:f6: 0a:05:32:9c:3e:a1:1b:32:68:cf:81:17:88:aa:7b: 10:53:4b:93:75:a9:9d:c2:66:dd:1b:e2:4d:64:8c: 05:ed:1d:48:0c:06:19:61:18:d7:df:47:ea:70:6a: 56:cd:16:8f:52:2e:44:a9:88:99:e5:16:ee:0a:22: fe:22:0d:a1:a6:96:24:e7:95:60:3d:d8:a3:c2:eb: 4a:48:b5:b9:9e:6e:68:ce:89:76:53:60:cc:6d:40: 3b:e7:c8:b8:18:33:0f:3c:73:0c:ec:32:4d:3e:ed: 78:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:58:B1:A0:10:27:04:04:66:38:AE:11:29:F0:2C:42:68:BC:47:BD X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/2lixoBAnBARmOK4RKfAsQmi8R70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.8.130.0-46.8.139.255 Signature Algorithm: sha256WithRSAEncryption a2:97:4f:c9:a4:ba:99:c1:b4:4e:df:88:c9:b9:aa:14:71:59: c7:9c:a0:26:00:56:ce:6d:4e:b4:5f:71:b0:fc:65:55:7b:b1: 00:53:6c:1b:5f:21:ad:eb:43:6a:2a:f9:da:3e:95:42:be:50: ff:c7:01:14:b7:a5:ae:3f:cd:d7:06:ea:e7:ee:f9:6a:c9:d2: b1:00:78:3c:de:30:1a:11:08:c1:c0:3e:38:fc:22:7c:d8:84: 6b:cd:ac:74:a2:fa:be:f0:b9:b6:5e:95:bf:58:2f:3b:fc:8a: 39:50:b4:03:8e:85:4e:47:b8:ef:39:2f:6e:83:20:3c:e8:b1: 5c:5a:3b:7b:e3:24:b0:09:48:93:0d:9b:17:a9:b4:a7:9a:88: c5:bb:5d:cb:f0:09:4f:a2:ee:72:73:64:b9:99:79:b7:e9:8c: 8c:d3:f7:6e:11:a5:87:7a:1c:79:8f:e8:8c:9e:d0:31:96:cd: 42:6c:74:f8:4f:d5:d0:7b:ba:ab:8a:39:c9:3b:e0:09:b6:36: c8:e6:d0:28:ec:e1:9c:63:a9:2f:2f:a7:ff:2b:b5:29:8a:49: f1:93:ee:43:42:02:1b:10:51:76:7e:15:1d:9c:55:53:b5:5d: ab:e0:27:d8:7a:56:60:d9:18:0a:b2:ce:5f:c1:fc:c3:b8:48: 15:95:4c:45 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZt3xprnNKoDBjruuYWVfjlJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjYwMTAxMDQxNzQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYTU4YjFhMDEwMjcwNDA0NjYzOGFlMTEyOWYwMmM0MjY4YmM0N2JkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0NOWoIE4n6Kt6VxIGcpP5XcRnYj hFwT/fH9yQOEWIx7eeV4dFHGnCX0kmsHVZF1S8NFOaiwQFWPO1/ZlPYTTKkP/SDb sqoP1SrpMd/m2T0pRIioiYVbO+4uILh0emOyrhyi3Yd/p42qu719FdHqIpTZvzcK jmwOVtBGR1IeZMsQO2F9Di4JuwfZ23Iu6DhqAfsSfvYKBTKcPqEbMmjPgReIqnsQ U0uTdamdwmbdG+JNZIwF7R1IDAYZYRjX30fqcGpWzRaPUi5EqYiZ5RbuCiL+Ig2h ppYk55VgPdijwutKSLW5nm5ozol2U2DMbUA758i4GDMPPHMM7DJNPu14BwIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFNpYsaAQJwQEZjiuESnwLEJovEe9MB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEvMmxpeG9CQW5CQVJtT0s0UktmQXNRbWk4UjcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAEuCIID BAIuCIgwDQYJKoZIhvcNAQELBQADggEBAKKXT8mkupnBtE7fiMm5qhRxWcecoCYA Vs5tTrRfcbD8ZVV7sQBTbBtfIa3rQ2oq+do+lUK+UP/HARS3pa4/zdcG6ufu+WrJ 0rEAeDzeMBoRCMHAPjj8InzYhGvNrHSi+r7wubZelb9YLzv8ijlQtAOOhU5HuO85 L26DIDzosVxaO3vjJLAJSJMNmxeptKeaiMW7XcvwCU+i7nJzZLmZebfpjIzT924R pYd6HHmP6Iye0DGWzUJsdPhP1dB7uquKOck74Am2Nsjm0Cjs4ZxjqS8vp/8rtSmK SfGT7kNCAhsQUXZ+FR2cVVO1XavgJ9h6VmDZGAqyzl/B/MO4SBWVTEU= -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:13 2026 by rpki-client