This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/sIdlwG_KvJyr9jN9d5KfNvyl-ws.roa File: sIdlwG_KvJyr9jN9d5KfNvyl-ws.roa (raw, json) Hash identifier: HSdj5IIYXsemUlbbPFPUMMU0DovDtEclq0qz0Z73zr0= Subject key identifier: B0:87:65:C0:6F:CA:BC:9C:AB:F6:33:7D:77:92:9F:36:FC:A5:FB:0B Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140 Certificate serial: 019B7CEDBA8CEDAFED72508810B390F4BEA6 Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/sIdlwG_KvJyr9jN9d5KfNvyl-ws.roa Signing time: Fri 02 Jan 2026 04:18:33 +0000 ROA not before: Fri 02 Jan 2026 04:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21075 IP address blocks: 46.164.138.0/24 maxlen: 24 93.183.236.0/24 maxlen: 24 93.183.238.0/24 maxlen: 24 193.109.80.0/24 maxlen: 24 193.238.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:ba:8c:ed:af:ed:72:50:88:10:b3:90:f4:be:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140 Validity Not Before: Jan 2 04:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b08765c06fcabc9cabf6337d77929f36fca5fb0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:97:2d:9d:e3:b9:2e:36:1a:45:f6:82:22:11: 42:c2:c7:a5:e1:b8:b0:c7:a3:46:af:c8:35:eb:5b: d3:46:c7:95:c2:79:56:a2:21:ea:42:69:58:48:91: ff:f9:4e:9b:54:e7:9e:38:ef:9a:1d:30:23:f9:ba: 8b:6e:d7:7f:72:f2:ca:88:8b:3a:f5:b6:05:44:61: 4d:f2:a0:f7:6b:6a:47:16:6c:9f:e7:88:7f:df:2d: b2:de:bd:61:49:a6:d8:f0:c6:f4:bc:a6:5a:cd:94: 48:36:cc:7c:ed:fc:b3:91:c7:64:09:27:4a:d6:61: 69:12:04:03:ff:48:66:77:f6:31:53:86:53:01:d0: 37:bd:1b:ed:3a:1d:06:24:9c:3a:a3:56:a9:24:d9: a2:a0:f5:cd:56:30:d6:61:f1:2d:7d:66:09:e3:00: af:26:22:a9:98:28:73:12:c1:8d:f5:98:7b:d2:37: 27:7d:15:31:92:f8:3f:aa:30:6b:80:50:bb:4d:ac: 9d:3e:2b:5d:69:bf:8f:4e:0e:6d:55:ad:1a:ca:1b: b2:f6:5e:d5:16:78:90:c6:e9:6d:0b:9d:2c:61:d3: 95:ad:fc:f7:e1:0d:ea:6a:08:2e:82:e8:17:9c:3e: c2:ba:fa:cd:d2:ea:86:f5:7c:5c:8e:4b:6c:37:54: 10:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:87:65:C0:6F:CA:BC:9C:AB:F6:33:7D:77:92:9F:36:FC:A5:FB:0B X509v3 Authority Key Identifier: keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/sIdlwG_KvJyr9jN9d5KfNvyl-ws.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.164.138.0/24 93.183.236.0/24 93.183.238.0/24 193.109.80.0/24 193.238.96.0/22 Signature Algorithm: sha256WithRSAEncryption 1b:62:9c:3b:ef:31:2f:45:86:fa:06:cc:38:c4:1c:5e:10:be: 11:fe:0d:21:8a:6c:7e:c5:fc:c2:93:65:b8:18:56:81:85:c0: 36:8d:15:b1:08:fe:70:e2:38:64:f0:f9:61:f8:6e:20:a4:65: 4b:31:87:34:47:e4:ce:d3:8e:f3:be:1e:a6:bc:e4:e5:23:db: 5e:18:3b:56:db:a1:5a:1b:b6:54:00:50:ae:2d:8d:ba:41:58: b1:75:f4:6f:c3:86:80:3a:89:01:c8:04:af:d8:fb:fc:5e:63: 6d:69:34:b1:8a:3f:b6:c4:47:43:82:8d:5c:3c:bc:0d:c0:95: 54:22:e8:5e:b3:53:c3:14:d6:ce:8a:5e:bc:14:7d:5a:d8:f3: 63:d9:71:57:97:a8:87:9b:e1:0a:1d:ba:0d:57:64:8c:e1:46: 1f:54:1c:b1:5e:07:30:05:88:0a:f3:b5:2b:02:b9:30:b4:ad: 74:b3:89:3e:d8:f4:2e:2b:a7:45:68:c9:c0:3f:2a:84:fb:4c: 4a:00:47:99:4e:9e:76:2b:0c:94:8b:06:86:f4:f7:95:d4:f7: 9f:4d:be:b4:11:07:55:9e:7c:52:ad:ad:20:1a:05:2d:da:c7: 9a:c1:a7:33:93:98:d4:1a:93:6c:1b:22:c0:f4:9e:16:15:20: 9c:c4:64:58 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt87bqM7a/tclCIELOQ9L6mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYzhkYmU1MjA4M2FkMzM1YzlmMWZkZTYwMTZlYzhiNDky OTMxNDAwHhcNMjYwMTAyMDQxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDg3NjVjMDZmY2FiYzljYWJmNjMzN2Q3NzkyOWYzNmZjYTVmYjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZctneO5LjYaRfaCIhFCwsel4biw x6NGr8g161vTRseVwnlWoiHqQmlYSJH/+U6bVOeeOO+aHTAj+bqLbtd/cvLKiIs6 9bYFRGFN8qD3a2pHFmyf54h/3y2y3r1hSabY8Mb0vKZazZRINsx87fyzkcdkCSdK 1mFpEgQD/0hmd/YxU4ZTAdA3vRvtOh0GJJw6o1apJNmioPXNVjDWYfEtfWYJ4wCv JiKpmChzEsGN9Zh70jcnfRUxkvg/qjBrgFC7TaydPitdab+PTg5tVa0ayhuy9l7V FniQxultC50sYdOVrfz34Q3qaggugugXnD7CuvrN0uqG9XxcjktsN1QQEwIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFLCHZcBvyrycq/YzfXeSnzb8pfsLMB8GA1UdIwQY MBaAFKvI2+Ugg60zXJ8f3mAW7ItJKTFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2Qt MzA1NmFmOWEzMzVlLzEvc0lkbHdHX0t2SnlyOWpOOWQ1S2ZOdnlsLXdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2QtMzA1NmFmOWEzMzVl LzEvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALqSKAwQA XbfsAwQAXbfuAwQAwW1QAwQCwe5gMA0GCSqGSIb3DQEBCwUAA4IBAQAbYpw77zEv RYb6Bsw4xBxeEL4R/g0himx+xfzCk2W4GFaBhcA2jRWxCP5w4jhk8Plh+G4gpGVL MYc0R+TO047zvh6mvOTlI9teGDtW26FaG7ZUAFCuLY26QVixdfRvw4aAOokByASv 2Pv8XmNtaTSxij+2xEdDgo1cPLwNwJVUIuhes1PDFNbOil68FH1a2PNj2XFXl6iH m+EKHboNV2SM4UYfVByxXgcwBYgK87UrArkwtK10s4k+2PQuK6dFaMnAPyqE+0xK AEeZTp52KwyUiwaG9PeV1PefTb60EQdVnnxSra0gGgUt2seawaczk5jUGpNsGyLA 9J4WFSCcxGRY -----END CERTIFICATE-----Generated at Sun Jan 25 16:53:43 2026 by rpki-client