This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/RjNeSA3OdSgfuKyXCw4On9Hfwig.roa File: RjNeSA3OdSgfuKyXCw4On9Hfwig.roa (raw, json) Hash identifier: TGS0IFEq2/Ak8/1sB2LyNa9KTXiGL21lniik5j5gU80= Subject key identifier: 46:33:5E:48:0D:CE:75:28:1F:B8:AC:97:0B:0E:0E:9F:D1:DF:C2:28 Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140 Certificate serial: 019B7CEDB9E41FBCF8F5EF5A52E455E70DF0 Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/RjNeSA3OdSgfuKyXCw4On9Hfwig.roa Signing time: Fri 02 Jan 2026 04:18:32 +0000 ROA not before: Fri 02 Jan 2026 04:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15785 IP address blocks: 5.1.2.0/24 maxlen: 24 5.1.3.0/24 maxlen: 24 31.128.65.0/24 maxlen: 24 88.81.244.0/23 maxlen: 23 88.81.250.0/24 maxlen: 24 188.0.68.0/24 maxlen: 24 188.0.69.0/24 maxlen: 24 188.0.70.0/24 maxlen: 24 188.0.71.0/24 maxlen: 24 188.0.72.0/24 maxlen: 24 188.0.73.0/24 maxlen: 24 188.0.74.0/24 maxlen: 24 188.0.75.0/24 maxlen: 24 188.0.76.0/24 maxlen: 24 194.110.79.0/24 maxlen: 24 194.146.199.0/24 maxlen: 24 2a01:758::/48 maxlen: 48 2a01:758:8300::/48 maxlen: 48 2a01:758:8301::/48 maxlen: 48 2a01:758:8302::/48 maxlen: 48 2a01:758:8303::/48 maxlen: 48 2a01:758:8304::/48 maxlen: 48 2a01:758:8305::/48 maxlen: 48 2a01:758:8306::/48 maxlen: 48 2a01:758:8307::/48 maxlen: 48 2a01:758:8308::/48 maxlen: 48 2a01:758:8309::/48 maxlen: 48 2a01:758:830a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:b9:e4:1f:bc:f8:f5:ef:5a:52:e4:55:e7:0d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140 Validity Not Before: Jan 2 04:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46335e480dce75281fb8ac970b0e0e9fd1dfc228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:99:57:ff:bb:17:a2:4e:db:95:11:64:2c:a4: 77:f9:57:77:1d:78:68:5e:9e:92:69:8a:57:07:19: c8:46:78:74:71:23:8d:5c:1e:75:3c:ba:06:57:d9: d7:2f:df:9c:55:e3:9c:ad:32:dd:89:c4:31:c0:c0: 39:e6:3b:ab:6d:c2:8e:6c:b9:88:50:c1:6c:6d:e8: cf:9b:4f:bc:a6:ea:73:27:59:e4:4a:a2:dd:1f:dd: b2:7c:8c:32:8b:35:2d:4e:ed:bf:04:58:16:fc:50: dd:c6:21:29:09:5c:9a:0d:eb:62:00:8e:7b:d5:3d: 55:05:4f:4c:85:05:3b:63:a9:eb:67:27:7f:8d:96: ee:f6:8c:9d:7d:2c:7e:94:f4:7a:6e:c4:08:15:db: 75:b1:23:f0:97:ae:4b:d4:7f:56:b8:d6:9b:23:4f: 72:b3:99:40:a8:4a:ca:5e:fd:0d:ad:f6:83:40:c6: 39:a2:df:c8:f4:5f:87:69:d7:cf:e2:58:77:5e:14: 12:47:5e:f9:ed:7f:b5:3f:61:6a:03:16:10:c8:62: 52:b2:e0:fa:ad:ac:b6:1a:36:f1:5e:a0:f0:dd:7f: 24:2e:9f:0a:ab:0a:fb:9d:59:41:1b:e2:18:e7:24: fd:f7:2d:a5:e0:85:88:f3:71:78:a3:b3:32:bd:8f: 41:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:33:5E:48:0D:CE:75:28:1F:B8:AC:97:0B:0E:0E:9F:D1:DF:C2:28 X509v3 Authority Key Identifier: keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/RjNeSA3OdSgfuKyXCw4On9Hfwig.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.1.2.0/23 31.128.65.0/24 88.81.244.0/23 88.81.250.0/24 188.0.68.0-188.0.76.255 194.110.79.0/24 194.146.199.0/24 IPv6: 2a01:758::/48 2a01:758:8300::-2a01:758:830a:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 6f:b3:8f:1f:76:2f:a6:72:ee:40:32:8c:26:0a:a5:ca:35:e2: b1:0f:bf:7b:97:82:de:a7:37:77:b6:d0:1c:31:d5:e9:5d:0a: e3:84:e7:43:48:78:b1:70:90:ec:af:1c:43:bc:5f:f4:aa:dc: f5:d8:57:c8:f1:ae:48:87:03:27:a8:8c:5b:f4:4b:62:e8:6c: 83:25:29:ad:2f:55:78:d5:c2:34:5d:f4:8e:d3:f1:bd:16:d2: 62:b8:bd:da:e0:41:76:cc:e4:33:4e:32:1d:1d:c7:f7:3b:26: 0e:a7:a1:c2:c0:43:2d:e8:0f:49:8a:b5:d1:11:10:10:d7:a5: 77:e9:06:fb:96:2c:d2:94:cf:1c:95:2c:ae:bc:f2:cc:54:b4: f8:2d:59:48:ab:d5:65:7f:47:db:05:b0:33:42:ca:d9:f4:f8: 8f:a3:32:d3:bd:4c:01:0d:c6:72:1f:5e:21:9f:63:7c:d8:fd: e9:41:4b:d1:1c:49:b9:ab:d4:68:be:7c:5a:c7:39:7e:12:6e: 9e:3c:26:9c:e5:96:af:6c:4e:c2:72:c3:5d:be:22:e6:e5:39: 84:92:7f:c1:bf:55:22:5d:28:7e:01:09:36:89:a9:bb:02:ed: a3:6d:71:fc:67:96:08:9e:33:e3:0c:92:ac:56:29:74:cc:f3: ff:01:79:39 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgISAZt87bnkH7z49e9aUuRV5w3wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYzhkYmU1MjA4M2FkMzM1YzlmMWZkZTYwMTZlYzhiNDky OTMxNDAwHhcNMjYwMTAyMDQxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjMzNWU0ODBkY2U3NTI4MWZiOGFjOTcwYjBlMGU5ZmQxZGZjMjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5lX/7sXok7blRFkLKR3+Vd3HXho Xp6SaYpXBxnIRnh0cSONXB51PLoGV9nXL9+cVeOcrTLdicQxwMA55jurbcKObLmI UMFsbejPm0+8pupzJ1nkSqLdH92yfIwyizUtTu2/BFgW/FDdxiEpCVyaDetiAI57 1T1VBU9MhQU7Y6nrZyd/jZbu9oydfSx+lPR6bsQIFdt1sSPwl65L1H9WuNabI09y s5lAqErKXv0NrfaDQMY5ot/I9F+HadfP4lh3XhQSR1757X+1P2FqAxYQyGJSsuD6 ray2GjbxXqDw3X8kLp8Kqwr7nVlBG+IY5yT99y2l4IWI83F4o7MyvY9BQQIDAQAB o4ICWTCCAlUwHQYDVR0OBBYEFEYzXkgNznUoH7islwsODp/R38IoMB8GA1UdIwQY MBaAFKvI2+Ugg60zXJ8f3mAW7ItJKTFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2Qt MzA1NmFmOWEzMzVlLzEvUmpOZVNBM09kU2dmdUt5WEN3NE9uOUhmd2lnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2QtMzA1NmFmOWEzMzVl LzEvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMG8GCCsGAQUFBwEHAQH/BGAwXjA4BAIAATAyAwQBBQECAwQA H4BBAwQBWFH0AwQAWFH6MAwDBAK8AEQDBAC8AEwDBADCbk8DBADCkscwIgQCAAIw HAMHACoBB1gAADARAwYAKgEHWIMDBwAqAQdYgwowDQYJKoZIhvcNAQELBQADggEB AG+zjx92L6Zy7kAyjCYKpco14rEPv3uXgt6nN3e20Bwx1eldCuOE50NIeLFwkOyv HEO8X/Sq3PXYV8jxrkiHAyeojFv0S2LobIMlKa0vVXjVwjRd9I7T8b0W0mK4vdrg QXbM5DNOMh0dx/c7Jg6nocLAQy3oD0mKtdEREBDXpXfpBvuWLNKUzxyVLK688sxU tPgtWUir1WV/R9sFsDNCytn0+I+jMtO9TAENxnIfXiGfY3zY/elBS9EcSbmr1Gi+ fFrHOX4Sbp48Jpzllq9sTsJyw12+IublOYSSf8G/VSJdKH4BCTaJqbsC7aNtcfxn lgieM+MMkqxWKXTM8/8BeTk= -----END CERTIFICATE-----Generated at Sun Jan 25 18:20:11 2026 by rpki-client