This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/m3ikaWlh-zkB50XUevZWu0i7lnY.roa File: m3ikaWlh-zkB50XUevZWu0i7lnY.roa (raw, json) Hash identifier: G47aytYQthtEn/LmBPAMZAXTQaHXE/X0Yi43NostQaI= Subject key identifier: 9B:78:A4:69:69:61:FB:39:01:E7:45:D4:7A:F6:56:BB:48:BB:96:76 Certificate issuer: /CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf Certificate serial: 019B7B357425181A9E99B628B84CE4DDCA3F Authority key identifier: 24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/m3ikaWlh-zkB50XUevZWu0i7lnY.roa Signing time: Thu 01 Jan 2026 20:17:39 +0000 ROA not before: Thu 01 Jan 2026 20:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48065 IP address blocks: 46.57.128.0/21 maxlen: 21 46.57.136.0/21 maxlen: 21 46.57.144.0/21 maxlen: 21 46.57.144.0/22 maxlen: 22 46.57.148.0/22 maxlen: 22 46.57.152.0/21 maxlen: 21 46.57.160.0/21 maxlen: 21 46.57.168.0/21 maxlen: 21 46.57.168.0/22 maxlen: 22 46.57.172.0/22 maxlen: 22 46.57.176.0/21 maxlen: 21 46.57.184.0/21 maxlen: 21 46.57.192.0/21 maxlen: 21 46.57.200.0/21 maxlen: 21 46.57.208.0/21 maxlen: 21 46.57.216.0/21 maxlen: 21 46.57.224.0/21 maxlen: 21 46.57.232.0/21 maxlen: 21 46.57.240.0/21 maxlen: 21 46.57.248.0/21 maxlen: 21 46.213.0.0/21 maxlen: 21 46.213.0.0/22 maxlen: 22 46.213.4.0/22 maxlen: 22 46.213.8.0/21 maxlen: 21 46.213.16.0/21 maxlen: 21 46.213.24.0/21 maxlen: 21 46.213.32.0/21 maxlen: 21 46.213.40.0/21 maxlen: 21 46.213.48.0/21 maxlen: 21 46.213.56.0/21 maxlen: 21 46.213.64.0/21 maxlen: 21 46.213.72.0/21 maxlen: 21 46.213.80.0/21 maxlen: 21 46.213.88.0/21 maxlen: 21 46.213.96.0/21 maxlen: 21 46.213.104.0/21 maxlen: 21 46.213.104.0/22 maxlen: 22 46.213.108.0/22 maxlen: 22 46.213.112.0/21 maxlen: 21 46.213.112.0/22 maxlen: 22 46.213.116.0/22 maxlen: 22 46.213.120.0/21 maxlen: 21 46.213.120.0/22 maxlen: 22 46.213.124.0/22 maxlen: 22 46.213.128.0/21 maxlen: 21 46.213.136.0/21 maxlen: 21 46.213.144.0/21 maxlen: 21 46.213.152.0/21 maxlen: 21 46.213.160.0/21 maxlen: 21 46.213.168.0/21 maxlen: 21 46.213.168.0/22 maxlen: 22 46.213.172.0/22 maxlen: 22 46.213.176.0/21 maxlen: 21 46.213.184.0/21 maxlen: 21 46.213.184.0/22 maxlen: 22 46.213.188.0/22 maxlen: 22 46.213.192.0/21 maxlen: 21 46.213.200.0/21 maxlen: 21 46.213.208.0/21 maxlen: 21 46.213.216.0/21 maxlen: 21 46.213.224.0/21 maxlen: 21 46.213.224.0/22 maxlen: 22 46.213.228.0/22 maxlen: 22 46.213.232.0/21 maxlen: 21 46.213.240.0/21 maxlen: 21 46.213.248.0/21 maxlen: 21 94.252.132.0/22 maxlen: 22 94.252.136.0/21 maxlen: 21 94.252.144.0/21 maxlen: 21 94.252.152.0/21 maxlen: 21 94.252.192.0/21 maxlen: 21 94.252.200.0/21 maxlen: 21 94.252.208.0/21 maxlen: 21 94.252.216.0/21 maxlen: 21 178.52.0.0/21 maxlen: 21 178.52.0.0/22 maxlen: 22 178.52.4.0/22 maxlen: 22 178.52.8.0/21 maxlen: 21 178.52.8.0/22 maxlen: 22 178.52.12.0/22 maxlen: 22 178.52.16.0/21 maxlen: 21 178.52.24.0/21 maxlen: 21 178.52.32.0/21 maxlen: 21 178.52.40.0/21 maxlen: 21 178.52.48.0/21 maxlen: 21 178.52.56.0/21 maxlen: 21 178.52.64.0/21 maxlen: 21 178.52.72.0/21 maxlen: 21 178.52.80.0/21 maxlen: 21 178.52.88.0/21 maxlen: 21 178.52.96.0/21 maxlen: 21 178.52.104.0/21 maxlen: 21 178.52.104.0/22 maxlen: 22 178.52.108.0/22 maxlen: 22 178.52.112.0/21 maxlen: 21 178.52.120.0/21 maxlen: 21 178.52.128.0/21 maxlen: 21 178.52.136.0/21 maxlen: 21 178.52.144.0/21 maxlen: 21 178.52.152.0/21 maxlen: 21 178.52.160.0/21 maxlen: 21 178.52.168.0/21 maxlen: 21 178.52.176.0/21 maxlen: 21 178.52.176.0/22 maxlen: 22 178.52.180.0/22 maxlen: 22 178.52.184.0/21 maxlen: 21 178.52.192.0/21 maxlen: 21 178.52.200.0/21 maxlen: 21 178.52.208.0/21 maxlen: 21 178.52.216.0/21 maxlen: 21 178.52.224.0/21 maxlen: 21 178.52.232.0/21 maxlen: 21 178.52.240.0/21 maxlen: 21 178.52.248.0/21 maxlen: 21 178.52.248.0/22 maxlen: 22 178.52.252.0/22 maxlen: 22 188.139.128.0/21 maxlen: 21 188.139.136.0/21 maxlen: 21 188.139.144.0/21 maxlen: 21 188.139.152.0/21 maxlen: 21 188.139.160.0/21 maxlen: 21 188.139.168.0/21 maxlen: 21 188.139.176.0/21 maxlen: 21 188.139.184.0/21 maxlen: 21 188.139.192.0/21 maxlen: 21 188.139.200.0/21 maxlen: 21 188.139.208.0/21 maxlen: 21 188.139.216.0/21 maxlen: 21 188.139.224.0/21 maxlen: 21 188.139.232.0/21 maxlen: 21 188.139.240.0/21 maxlen: 21 188.139.248.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:74:25:18:1a:9e:99:b6:28:b8:4c:e4:dd:ca:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf Validity Not Before: Jan 1 20:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9b78a4696961fb3901e745d47af656bb48bb9676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:06:7b:62:a2:40:10:d4:2b:d1:97:74:05:80: cf:68:9d:f1:5d:f7:dd:d2:00:3c:70:41:bc:71:63: 6b:83:4a:93:61:cb:f4:1c:c0:41:2e:6f:aa:0b:d6: 0d:a3:7e:97:23:1f:09:60:8a:47:58:f3:cb:7d:77: 93:8c:8b:59:68:d3:06:60:a3:a4:38:0a:83:85:ff: 92:66:0f:4b:03:56:94:cc:66:91:36:7c:84:5a:75: 6d:4f:40:86:a0:47:22:47:92:c7:2d:db:99:ef:f2: 8e:5d:39:f7:45:33:1f:e6:fe:07:d4:7e:28:a9:dc: ce:27:bf:b0:98:12:6b:dd:3b:1f:32:8e:c3:5c:51: e2:b8:76:f7:21:4a:64:a0:8d:3f:88:92:b6:12:b7: 64:ca:79:b9:f0:f9:01:0b:8b:fa:56:62:af:15:5b: 5d:fc:44:f1:5a:50:a4:f2:aa:8a:3b:75:c4:61:d3: cc:3b:6a:b6:fb:23:0b:0b:3a:44:ce:52:f1:3d:7d: 0a:5e:2e:68:a2:fa:e9:e8:5f:0f:27:b9:32:94:3c: ef:d3:49:58:a5:97:d3:ce:95:9d:16:e3:94:f7:d6: bf:e2:c5:bf:16:8d:4d:5a:d8:0c:d2:6a:88:9f:7d: f3:0c:eb:7f:8c:0a:4f:51:9d:84:c0:2f:1f:91:a5: e4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:78:A4:69:69:61:FB:39:01:E7:45:D4:7A:F6:56:BB:48:BB:96:76 X509v3 Authority Key Identifier: keyid:24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/m3ikaWlh-zkB50XUevZWu0i7lnY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.57.128.0/17 46.213.0.0/16 94.252.132.0-94.252.159.255 94.252.192.0/19 178.52.0.0/16 188.139.128.0/17 Signature Algorithm: sha256WithRSAEncryption 2a:a4:d1:cf:6e:6d:db:5d:4e:08:7b:85:33:b7:ca:b7:ca:6f: 5f:c8:8a:d3:9f:d3:61:70:19:59:ee:3c:34:c9:f6:a1:44:53: 2c:e0:6a:6c:79:60:00:bf:c6:48:25:c4:c3:33:88:5c:af:44: ca:25:10:7a:55:cf:5b:69:a3:a7:63:81:50:18:46:e1:85:41: be:6e:13:dd:44:81:5f:e6:d1:40:f0:6c:85:5f:f5:0a:84:8a: fb:be:36:c3:a1:ab:77:19:89:f0:97:68:ad:96:36:00:72:d6: 81:3a:56:55:2d:7a:e7:ae:e2:8c:31:cc:34:66:7a:49:70:a4: 4b:dc:2e:83:78:65:3b:28:05:36:65:6f:9d:89:a1:a7:3e:99: bf:ec:0d:93:6f:15:bf:7f:7d:62:bd:bb:58:11:58:e7:66:3f: 79:4b:a3:8f:f5:31:b6:c6:03:4a:48:8e:47:64:55:60:5d:e8: 57:7b:9f:9b:d0:f1:52:ef:e3:59:ff:f1:ee:e7:a9:10:ec:fc: d5:5a:74:f6:eb:09:ed:25:f8:e0:04:bd:e5:33:a2:2c:53:07: d8:fe:40:fb:2c:50:66:f0:35:b0:2c:2b:e6:30:79:bc:bf:db: d8:de:52:5a:21:ef:83:a7:c1:9a:15:3a:f1:e7:c1:c0:a5:05: 2d:40:b3:3c -----BEGIN CERTIFICATE----- MIIFITCCBAmgAwIBAgISAZt7NXQlGBqembYouEzk3co/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0ZDlkYTRmZmIxYmI2ZDI3M2RlMWJhZDVkYmJmMGQxZmY0 N2YwY2YwHhcNMjYwMTAxMjAxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Yjc4YTQ2OTY5NjFmYjM5MDFlNzQ1ZDQ3YWY2NTZiYjQ4YmI5Njc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQZ7YqJAENQr0Zd0BYDPaJ3xXffd 0gA8cEG8cWNrg0qTYcv0HMBBLm+qC9YNo36XIx8JYIpHWPPLfXeTjItZaNMGYKOk OAqDhf+SZg9LA1aUzGaRNnyEWnVtT0CGoEciR5LHLduZ7/KOXTn3RTMf5v4H1H4o qdzOJ7+wmBJr3TsfMo7DXFHiuHb3IUpkoI0/iJK2Erdkynm58PkBC4v6VmKvFVtd /ETxWlCk8qqKO3XEYdPMO2q2+yMLCzpEzlLxPX0KXi5oovrp6F8PJ7kylDzv00lY pZfTzpWdFuOU99a/4sW/Fo1NWtgM0mqIn33zDOt/jApPUZ2EwC8fkaXk0wIDAQAB o4ICLTCCAikwHQYDVR0OBBYEFJt4pGlpYfs5AedF1Hr2VrtIu5Z2MB8GA1UdIwQY MBaAFCTZ2k/7G7bSc94brV278NH/R/DPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSk5uYVRfc2J0dEp6M2h1dFhidncwZjlIOE04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8xZWIxMjAtNjg3Yy00OTkzLTg1N2Yt OGEwM2E3YzFmZTliLzEvbTNpa2FXbGgtemtCNTBYVWV2Wld1MGk3bG5ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ny8xZWIxMjAtNjg3Yy00OTkzLTg1N2YtOGEwM2E3YzFmZTli LzEvSk5uYVRfc2J0dEp6M2h1dFhidncwZjlIOE04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQHLjmAAwMA LtUwDAMEAl78hAMEBV78gAMEBV78wAMDALI0AwQHvIuAMA0GCSqGSIb3DQEBCwUA A4IBAQAqpNHPbm3bXU4Ie4Uzt8q3ym9fyIrTn9NhcBlZ7jw0yfahRFMs4GpseWAA v8ZIJcTDM4hcr0TKJRB6Vc9baaOnY4FQGEbhhUG+bhPdRIFf5tFA8GyFX/UKhIr7 vjbDoat3GYnwl2itljYActaBOlZVLXrnruKMMcw0ZnpJcKRL3C6DeGU7KAU2ZW+d iaGnPpm/7A2TbxW/f31ivbtYEVjnZj95S6OP9TG2xgNKSI5HZFVgXehXe5+b0PFS 7+NZ//Hu56kQ7PzVWnT26wntJfjgBL3lM6IsUwfY/kD7LFBm8DWwLCvmMHm8v9vY 3lJaIe+Dp8GaFTrx58HApQUtQLM8 -----END CERTIFICATE-----Generated at Mon Jan 26 02:43:43 2026 by rpki-client