This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/yw4JQH3GwSpr0HqMrPTktCoX9Yc.roa File: yw4JQH3GwSpr0HqMrPTktCoX9Yc.roa (raw, json) Hash identifier: C5hf4s/QdWtojHyCQ9hOA8bfaE8MjslJ2kdsyGmhhwc= Subject key identifier: CB:0E:09:40:7D:C6:C1:2A:6B:D0:7A:8C:AC:F4:E4:B4:2A:17:F5:87 Certificate issuer: /CN=13932782ee7758990404fa1ccfb09ec23a86123f Certificate serial: 019B7C806317DE18CD32A0D57B89635ACFB1 Authority key identifier: 13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/yw4JQH3GwSpr0HqMrPTktCoX9Yc.roa Signing time: Fri 02 Jan 2026 02:19:07 +0000 ROA not before: Fri 02 Jan 2026 02:19:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9153 IP address blocks: 46.248.96.0/19 maxlen: 19 82.136.0.0/18 maxlen: 18 82.136.4.0/23 maxlen: 23 82.136.8.0/22 maxlen: 22 82.136.48.0/22 maxlen: 22 195.22.128.0/23 maxlen: 23 195.68.206.0/24 maxlen: 24 2001:4088::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.crl rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.mft rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:63:17:de:18:cd:32:a0:d5:7b:89:63:5a:cf:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13932782ee7758990404fa1ccfb09ec23a86123f Validity Not Before: Jan 2 02:19:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cb0e09407dc6c12a6bd07a8cacf4e4b42a17f587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7a:d0:48:8c:77:1f:a6:b1:ac:77:d1:fd:85: 46:0a:7a:f8:34:9a:56:01:8a:7d:c9:32:e0:cb:14: c9:80:aa:f9:23:f9:ac:8e:ae:ab:e4:ad:b7:ad:53: ff:24:66:a0:be:1f:76:ef:51:07:63:1e:85:91:a9: 1f:77:29:9f:e6:e3:21:7c:1f:3e:f6:af:07:8f:34: b4:a8:42:d5:33:66:5d:0a:9b:c0:f1:48:79:7c:da: 6d:9f:cb:82:26:c2:8e:e3:e4:65:23:30:9b:f4:ce: be:6a:c3:5c:d4:ad:42:a0:39:54:d0:9a:7e:5d:f2: 23:97:57:f1:fe:a2:bc:fc:1c:d7:21:a3:d0:90:c7: f1:40:9a:86:39:08:bb:b7:06:63:b1:88:82:3d:a1: f3:27:da:c9:39:20:b7:a0:3d:0f:23:af:b6:0b:1c: bd:2a:c8:bc:7b:5c:6d:4e:f8:5a:2d:13:b5:39:e7: 94:a5:cf:52:10:44:f9:38:57:32:f6:84:fd:13:67: fb:75:d5:d4:8b:5e:d5:c5:47:97:ae:d4:dc:91:90: 4d:d2:4d:50:fe:d9:1c:42:39:23:ac:4f:6e:6d:aa: 58:f9:5e:ee:5d:0e:4a:bc:72:bb:83:7c:5a:b7:d6: 75:72:2d:f2:6b:10:f6:e3:b2:98:69:95:20:9a:29: 05:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:0E:09:40:7D:C6:C1:2A:6B:D0:7A:8C:AC:F4:E4:B4:2A:17:F5:87 X509v3 Authority Key Identifier: keyid:13:93:27:82:EE:77:58:99:04:04:FA:1C:CF:B0:9E:C2:3A:86:12:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E5Mngu53WJkEBPocz7CewjqGEj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/yw4JQH3GwSpr0HqMrPTktCoX9Yc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/828652-addf-4fe8-9fe6-4b1f61653f3d/1/E5Mngu53WJkEBPocz7CewjqGEj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.248.96.0/19 82.136.0.0/18 195.22.128.0/23 195.68.206.0/24 IPv6: 2001:4088::/32 Signature Algorithm: sha256WithRSAEncryption 7e:7e:1b:bf:1c:ce:7d:92:ba:e2:76:da:db:e4:f6:2c:31:a1: c0:de:46:b0:90:46:9b:0d:8a:42:9e:13:3e:9e:36:0d:f7:9e: 87:35:5c:0e:dd:36:15:f2:86:3a:d3:13:7e:a2:c2:95:23:31: e7:96:4a:40:25:66:d1:83:59:24:8e:7e:cf:50:1b:a6:24:53: 09:b7:58:fd:a0:aa:92:31:84:13:78:8d:ed:01:b5:b1:19:b0: 6b:5e:e3:30:1f:f1:66:a8:26:4d:39:43:12:6a:18:6c:d1:f5: a0:6a:15:b5:83:4d:a0:11:ea:2c:bd:10:a1:c9:13:4f:32:f1: 08:f5:d9:86:a2:2a:4c:28:25:8e:c6:23:8f:bb:2b:f4:52:f0: da:72:40:d7:77:cd:12:54:0d:73:85:27:55:7a:4f:61:93:34: 9d:9f:c4:f2:33:49:7e:f7:31:6f:1e:0c:fc:f3:af:a2:99:47: 69:43:53:9b:b7:ac:97:cd:6b:fe:c1:fe:f1:ee:fb:cf:35:ae: 80:1c:12:47:78:a5:85:e0:2d:26:7a:06:4b:72:fa:3a:9c:61: b0:5c:8e:d9:6a:33:f2:71:3b:be:6f:71:b9:6a:cd:22:c3:a7: f1:16:17:12:71:75:e5:29:62:b1:fc:5e:87:87:87:23:fe:5f: 9b:ae:52:e0 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt8gGMX3hjNMqDVe4ljWs+xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzOTMyNzgyZWU3NzU4OTkwNDA0ZmExY2NmYjA5ZWMyM2E4 NjEyM2YwHhcNMjYwMTAyMDIxOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYjBlMDk0MDdkYzZjMTJhNmJkMDdhOGNhY2Y0ZTRiNDJhMTdmNTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunrQSIx3H6axrHfR/YVGCnr4NJpW AYp9yTLgyxTJgKr5I/msjq6r5K23rVP/JGagvh9271EHYx6Fkakfdymf5uMhfB8+ 9q8HjzS0qELVM2ZdCpvA8Uh5fNptn8uCJsKO4+RlIzCb9M6+asNc1K1CoDlU0Jp+ XfIjl1fx/qK8/BzXIaPQkMfxQJqGOQi7twZjsYiCPaHzJ9rJOSC3oD0PI6+2Cxy9 Ksi8e1xtTvhaLRO1OeeUpc9SEET5OFcy9oT9E2f7ddXUi17VxUeXrtTckZBN0k1Q /tkcQjkjrE9ubapY+V7uXQ5KvHK7g3xat9Z1ci3yaxD247KYaZUgmikFOQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFMsOCUB9xsEqa9B6jKz05LQqF/WHMB8GA1UdIwQY MBaAFBOTJ4Lud1iZBAT6HM+wnsI6hhI/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTVNbmd1NTNXSmtFQlBvY3o3Q2V3anFHRWo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS84Mjg2NTItYWRkZi00ZmU4LTlmZTYt NGIxZjYxNjUzZjNkLzEveXc0SlFIM0d3U3ByMEhxTXJQVGt0Q29YOVljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS84Mjg2NTItYWRkZi00ZmU4LTlmZTYtNGIxZjYxNjUzZjNk LzEvRTVNbmd1NTNXSmtFQlBvY3o3Q2V3anFHRWo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQFLvhgAwQG UogAAwQBwxaAAwQAw0TOMA0EAgACMAcDBQAgAUCIMA0GCSqGSIb3DQEBCwUAA4IB AQB+fhu/HM59krridtrb5PYsMaHA3kawkEabDYpCnhM+njYN956HNVwO3TYV8oY6 0xN+osKVIzHnlkpAJWbRg1kkjn7PUBumJFMJt1j9oKqSMYQTeI3tAbWxGbBrXuMw H/FmqCZNOUMSahhs0fWgahW1g02gEeosvRChyRNPMvEI9dmGoipMKCWOxiOPuyv0 UvDackDXd80SVA1zhSdVek9hkzSdn8TyM0l+9zFvHgz886+imUdpQ1Obt6yXzWv+ wf7x7vvPNa6AHBJHeKWF4C0megZLcvo6nGGwXI7ZajPycTu+b3G5as0iw6fxFhcS cXXlKWKx/F6Hh4cj/l+brlLg -----END CERTIFICATE-----Generated at Sun Jan 25 16:27:43 2026 by rpki-client