This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/iJCNoTkoUBkVfoOgCHAYe4clnEA.roa File: iJCNoTkoUBkVfoOgCHAYe4clnEA.roa (raw, json) Hash identifier: Hly0g7qbNz9e8/TcngsSJ9Ic9Kq0693Z1zASWnuVzzk= Subject key identifier: 88:90:8D:A1:39:28:50:19:15:7E:83:A0:08:70:18:7B:87:25:9C:40 Certificate issuer: /CN=7b148db42f90e96447bd7f63edd8a7ccbeeaa842 Certificate serial: 019B7A5B9057DEE8DFEC02A9A53B1588C1F2 Authority key identifier: 7B:14:8D:B4:2F:90:E9:64:47:BD:7F:63:ED:D8:A7:CC:BE:EA:A8:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/iJCNoTkoUBkVfoOgCHAYe4clnEA.roa Signing time: Thu 01 Jan 2026 16:19:39 +0000 ROA not before: Thu 01 Jan 2026 16:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60501 IP address blocks: 46.30.216.0/24 maxlen: 24 185.30.64.0/22 maxlen: 22 185.109.24.0/22 maxlen: 22 185.109.24.0/24 maxlen: 24 185.109.25.0/24 maxlen: 24 185.109.26.0/24 maxlen: 24 185.109.27.0/24 maxlen: 24 185.187.62.0/24 maxlen: 24 185.253.53.0/24 maxlen: 24 193.43.208.0/24 maxlen: 24 194.156.180.0/22 maxlen: 22 2a00:ae20::/32 maxlen: 32 2a04:f440::/29 maxlen: 29 2a06:4dc0::/29 maxlen: 29 2a0d:cc0::/29 maxlen: 29 2a0f:ccc0::/29 maxlen: 29 2a10:b740::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:90:57:de:e8:df:ec:02:a9:a5:3b:15:88:c1:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b148db42f90e96447bd7f63edd8a7ccbeeaa842 Validity Not Before: Jan 1 16:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88908da139285019157e83a00870187b87259c40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:db:c4:9c:9a:96:fe:bb:f1:35:19:77:e4:bd: 1d:20:8f:1a:74:66:69:01:98:4e:96:7a:f4:14:2d: 0b:53:17:1a:62:c4:b2:3f:0a:8c:92:c2:92:24:e7: 10:ce:0b:19:a5:35:40:ac:bd:d0:6a:bc:4c:7d:e3: a0:b2:d4:da:0a:a0:e0:5c:94:20:6a:37:db:b6:68: 70:51:c5:c7:91:fd:bc:f7:f5:d1:58:85:ac:f5:b9: 90:14:07:1e:1e:d1:a8:ec:45:a9:4f:8c:08:e2:73: 97:6d:ed:1b:5c:5d:3b:57:0a:72:fa:fd:39:52:48: 3b:b4:c8:ea:f2:0a:cc:d1:a1:47:9d:fa:cc:e8:76: a7:bf:21:6f:db:d9:63:af:bf:b7:5b:4c:3f:a7:51: 8b:e8:61:ce:be:e0:65:cb:c4:07:31:98:c6:b5:37: 2e:59:96:2c:50:09:d8:2c:6e:b2:c0:87:05:1d:1c: 7e:f1:96:78:74:6c:aa:d4:2f:82:2f:df:d7:59:7c: ea:e3:e0:80:3d:cf:90:7c:50:d9:d1:98:28:2f:9d: da:25:18:31:e1:3f:11:b4:1e:4e:fa:e3:16:5b:f1: 5f:4c:76:96:a3:9b:b0:35:dc:f4:10:d7:59:92:40: bf:d5:bc:42:1a:b6:ae:50:f3:dc:85:be:9a:d3:b4: 49:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:90:8D:A1:39:28:50:19:15:7E:83:A0:08:70:18:7B:87:25:9C:40 X509v3 Authority Key Identifier: keyid:7B:14:8D:B4:2F:90:E9:64:47:BD:7F:63:ED:D8:A7:CC:BE:EA:A8:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/iJCNoTkoUBkVfoOgCHAYe4clnEA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.30.216.0/24 185.30.64.0/22 185.109.24.0/22 185.187.62.0/24 185.253.53.0/24 193.43.208.0/24 194.156.180.0/22 IPv6: 2a00:ae20::/32 2a04:f440::/29 2a06:4dc0::/29 2a0d:cc0::/29 2a0f:ccc0::/29 2a10:b740::/29 Signature Algorithm: sha256WithRSAEncryption 4b:64:9d:00:a1:cb:bd:00:e6:1a:f7:3f:8b:1a:ab:9d:f0:3a: 12:78:4b:4d:ac:91:b2:21:43:77:43:50:92:09:f2:e9:2e:e9: c1:8f:11:ab:3a:f5:98:7e:5c:03:d2:16:17:ac:97:75:1c:b3: 0f:11:68:db:b7:07:7b:38:7e:ea:4d:ee:93:6a:f2:1c:10:d9: 96:ac:31:66:35:db:e9:ef:1b:c2:f4:a1:24:82:8e:26:07:2a: c7:5e:14:ec:99:25:67:61:24:1e:af:1b:58:bd:c7:6c:bb:3a: 32:24:27:94:3b:13:1a:b5:3a:f3:1a:c0:a8:d0:5d:3d:46:55: 27:18:16:a0:2e:7b:53:96:2e:ef:17:9f:35:f5:4f:b8:36:d7: c5:1b:ce:9d:8c:bd:1f:4c:6f:9a:ee:c0:26:5e:84:1e:85:71: 16:39:84:07:64:f0:b2:8c:36:36:af:55:8f:e8:57:18:6a:94: 55:a1:52:82:56:89:5c:a3:23:b2:d8:af:08:ba:2c:e0:e9:e7: ba:c5:56:d5:63:d8:77:50:57:84:c9:4b:cd:4d:3c:5d:3e:0e: f9:8c:12:87:93:9e:79:d2:58:88:4a:4c:42:75:28:cd:04:5e: 1c:51:88:fa:01:08:bf:6c:52:94:23:09:59:88:c6:ca:d1:90: 34:d4:b9:2c -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgISAZt6W5BX3ujf7AKppTsViMHyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMTQ4ZGI0MmY5MGU5NjQ0N2JkN2Y2M2VkZDhhN2NjYmVl YWE4NDIwHhcNMjYwMTAxMTYxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODkwOGRhMTM5Mjg1MDE5MTU3ZTgzYTAwODcwMTg3Yjg3MjU5YzQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9vEnJqW/rvxNRl35L0dII8adGZp AZhOlnr0FC0LUxcaYsSyPwqMksKSJOcQzgsZpTVArL3QarxMfeOgstTaCqDgXJQg ajfbtmhwUcXHkf289/XRWIWs9bmQFAceHtGo7EWpT4wI4nOXbe0bXF07Vwpy+v05 Ukg7tMjq8grM0aFHnfrM6HanvyFv29ljr7+3W0w/p1GL6GHOvuBly8QHMZjGtTcu WZYsUAnYLG6ywIcFHRx+8ZZ4dGyq1C+CL9/XWXzq4+CAPc+QfFDZ0ZgoL53aJRgx 4T8RtB5O+uMWW/FfTHaWo5uwNdz0ENdZkkC/1bxCGrauUPPchb6a07RJuQIDAQAB o4ICXzCCAlswHQYDVR0OBBYEFIiQjaE5KFAZFX6DoAhwGHuHJZxAMB8GA1UdIwQY MBaAFHsUjbQvkOlkR71/Y+3Yp8y+6qhCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXhTTnRDLVE2V1JIdlg5ajdkaW56TDdxcUVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9mMjQ4ODUtYTRkYi00ZmExLWE3MmQt ODZkNmMxMzA1MzU3LzEvaUpDTm9Ua29VQmtWZm9PZ0NIQVllNGNsbkVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9mMjQ4ODUtYTRkYi00ZmExLWE3MmQtODZkNmMxMzA1MzU3 LzEvZXhTTnRDLVE2V1JIdlg5ajdkaW56TDdxcUVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHUGCCsGAQUFBwEHAQH/BGYwZDAwBAIAATAqAwQALh7YAwQC uR5AAwQCuW0YAwQAubs+AwQAuf01AwQAwSvQAwQCwpy0MDAEAgACMCoDBQAqAK4g AwUDKgT0QAMFAyoGTcADBQMqDQzAAwUDKg/MwAMFAyoQt0AwDQYJKoZIhvcNAQEL BQADggEBAEtknQChy70A5hr3P4saq53wOhJ4S02skbIhQ3dDUJIJ8uku6cGPEas6 9Zh+XAPSFhesl3Ucsw8RaNu3B3s4fupN7pNq8hwQ2ZasMWY12+nvG8L0oSSCjiYH KsdeFOyZJWdhJB6vG1i9x2y7OjIkJ5Q7Exq1OvMawKjQXT1GVScYFqAue1OWLu8X nzX1T7g218Ubzp2MvR9Mb5ruwCZehB6FcRY5hAdk8LKMNjavVY/oVxhqlFWhUoJW iVyjI7LYrwi6LODp57rFVtVj2HdQV4TJS81NPF0+DvmMEoeTnnnSWIhKTEJ1KM0E XhxRiPoBCL9sUpQjCVmIxsrRkDTUuSw= -----END CERTIFICATE-----Generated at Mon Jan 26 17:58:48 2026 by rpki-client