This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/vocP6nA5xa2fikBu5ayQiMk2G70.roa File: vocP6nA5xa2fikBu5ayQiMk2G70.roa (raw, json) Hash identifier: Xh8WxRGumNg1jy4vHCravRBcdrCxC+7cpAxF5kNVSc8= Subject key identifier: BE:87:0F:EA:70:39:C5:AD:9F:8A:40:6E:E5:AC:90:88:C9:36:1B:BD Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019BD1DB7730B11F0807D585E44BD281D74D Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/vocP6nA5xa2fikBu5ayQiMk2G70.roa Signing time: Sun 18 Jan 2026 16:06:19 +0000 ROA not before: Sun 18 Jan 2026 16:06:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30738 IP address blocks: 46.8.96.0/24 maxlen: 24 46.8.100.0/22 maxlen: 24 46.8.114.0/23 maxlen: 24 46.8.118.0/23 maxlen: 24 46.8.120.0/21 maxlen: 24 46.8.198.0/23 maxlen: 24 109.248.16.0/20 maxlen: 24 188.130.182.0/24 maxlen: 24 188.130.224.0/21 maxlen: 24 195.211.52.0/22 maxlen: 24 2001:1468::/32 maxlen: 33 2001:1468:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d1:db:77:30:b1:1f:08:07:d5:85:e4:4b:d2:81:d7:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Jan 18 16:06:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=be870fea7039c5ad9f8a406ee5ac9088c9361bbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:c5:ba:d3:dd:f6:5f:2b:82:b3:fc:3a:35:b3: ce:5d:a2:77:9e:a4:37:8e:39:bf:17:c3:98:94:89: 36:1e:3b:32:14:ef:dd:e6:42:46:fb:a1:70:48:19: ee:fa:2b:46:2b:82:9d:91:ba:14:a0:07:fc:1d:7c: fe:25:89:59:eb:9a:43:99:94:10:2f:45:40:ba:f1: 3a:1e:f3:95:5c:b0:1e:a1:0e:37:5a:26:72:27:f0: df:fa:54:0a:5e:1d:5f:58:c6:4d:28:1d:45:6b:f7: 9a:7c:0a:7f:53:f3:42:b4:f5:60:82:f4:0b:73:dc: 26:77:39:ff:32:62:38:97:a4:7e:a0:ba:03:18:1c: 9e:95:ed:35:7d:8b:8c:c8:15:8f:64:2b:af:d2:36: 29:bd:08:0f:d3:e0:19:b1:46:d4:d8:de:48:d6:94: c2:f9:24:7e:b5:c8:3d:3f:25:48:b2:ef:b7:48:19: e3:74:b1:ed:60:98:96:b8:93:ed:69:16:ac:e3:38: 19:30:d0:08:49:91:a2:cc:f4:3d:c9:ff:cf:53:0b: c6:31:a9:91:cd:ab:15:28:ef:f0:29:d0:85:0d:82: 12:aa:0d:83:80:39:3e:56:60:12:f6:7e:57:db:68: ec:04:9f:05:71:37:d2:a3:99:a4:f9:7d:dc:1a:ed: 8d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:87:0F:EA:70:39:C5:AD:9F:8A:40:6E:E5:AC:90:88:C9:36:1B:BD X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/vocP6nA5xa2fikBu5ayQiMk2G70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.8.96.0/24 46.8.100.0/22 46.8.114.0/23 46.8.118.0-46.8.127.255 46.8.198.0/23 109.248.16.0/20 188.130.182.0/24 188.130.224.0/21 195.211.52.0/22 IPv6: 2001:1468::/32 Signature Algorithm: sha256WithRSAEncryption 6c:c9:84:fa:29:7a:c6:4c:3f:3a:22:fd:fe:e5:46:54:80:0b: 35:32:c8:12:97:85:2f:a7:1d:ef:2a:87:f0:c9:b5:56:78:0d: 27:94:30:2c:84:7e:32:f5:e4:81:7a:20:1b:4c:46:45:9d:c0: 34:f1:22:38:32:92:e4:6b:84:50:e6:72:8e:30:5a:ab:ec:00: 5b:b8:93:b0:f8:7b:58:59:41:d7:20:bf:0c:c9:71:b6:17:27: 00:82:cb:60:fb:4b:70:78:a3:7c:99:45:08:e1:79:01:7d:67: 39:6c:83:7d:91:1d:1d:c1:4b:59:3f:45:f7:91:ee:ca:cb:1e: 40:5b:59:f6:84:1f:5b:9e:26:48:e7:4b:62:68:b0:34:69:ff: 59:77:fc:6a:ab:1c:bb:91:0b:e9:22:e8:5f:af:e4:95:a7:a5: ff:aa:2d:60:a1:fc:52:31:9c:4d:51:91:80:ca:ab:20:83:e2: 37:35:c5:49:42:31:c1:d6:d8:58:18:33:e5:70:9f:38:b5:94: f4:e5:ff:e7:3a:00:67:d0:a7:61:3f:cd:54:31:c9:fb:65:1f: 22:9c:96:69:e7:57:f4:40:b6:82:e6:f9:96:e7:a2:ac:91:7b: ae:90:7d:fb:22:4c:c9:3e:14:31:5b:51:ed:8d:40:32:90:5e: f7:e6:27:e6 -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgISAZvR23cwsR8IB9WF5EvSgddNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjYwMTE4MTYwNjE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZTg3MGZlYTcwMzljNWFkOWY4YTQwNmVlNWFjOTA4OGM5MzYxYmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucW60932XyuCs/w6NbPOXaJ3nqQ3 jjm/F8OYlIk2HjsyFO/d5kJG+6FwSBnu+itGK4KdkboUoAf8HXz+JYlZ65pDmZQQ L0VAuvE6HvOVXLAeoQ43WiZyJ/Df+lQKXh1fWMZNKB1Fa/eafAp/U/NCtPVggvQL c9wmdzn/MmI4l6R+oLoDGByele01fYuMyBWPZCuv0jYpvQgP0+AZsUbU2N5I1pTC +SR+tcg9PyVIsu+3SBnjdLHtYJiWuJPtaRas4zgZMNAISZGizPQ9yf/PUwvGMamR zasVKO/wKdCFDYISqg2DgDk+VmAS9n5X22jsBJ8FcTfSo5mk+X3cGu2N0wIDAQAB o4ICUDCCAkwwHQYDVR0OBBYEFL6HD+pwOcWtn4pAbuWskIjJNhu9MB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEvdm9jUDZuQTV4YTJmaWtCdTVheVFpTWsyRzcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGYGCCsGAQUFBwEHAQH/BFcwVTBEBAIAATA+AwQALghgAwQC LghkAwQBLghyMAwDBAEuCHYDBAcuCAADBAEuCMYDBARt+BADBAC8grYDBAO8guAD BALD0zQwDQQCAAIwBwMFACABFGgwDQYJKoZIhvcNAQELBQADggEBAGzJhPopesZM Pzoi/f7lRlSACzUyyBKXhS+nHe8qh/DJtVZ4DSeUMCyEfjL15IF6IBtMRkWdwDTx IjgykuRrhFDmco4wWqvsAFu4k7D4e1hZQdcgvwzJcbYXJwCCy2D7S3B4o3yZRQjh eQF9Zzlsg32RHR3BS1k/RfeR7srLHkBbWfaEH1ueJkjnS2JosDRp/1l3/GqrHLuR C+ki6F+v5JWnpf+qLWCh/FIxnE1RkYDKqyCD4jc1xUlCMcHW2FgYM+Vwnzi1lPTl /+c6AGfQp2E/zVQxyftlHyKclmnnV/RAtoLm+ZbnoqyRe66QffsiTMk+FDFbUe2N QDKQXvfmJ+Y= -----END CERTIFICATE-----Generated at Sun Jan 25 20:58:59 2026 by rpki-client