This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/44f5d2-b70e-4dae-82e3-1e4782be6445/1/xNT50RAyDxcML2FHARCowN-B2yY.roa File: xNT50RAyDxcML2FHARCowN-B2yY.roa (raw, json) Hash identifier: uwYuoU/4PVFSmUYkXiyzHxMpNvfb8CgDItUlXunmtks= Subject key identifier: C4:D4:F9:D1:10:32:0F:17:0C:2F:61:47:01:10:A8:C0:DF:81:DB:26 Certificate issuer: /CN=db6eff73efff81277c2d5d38f0e46d6d12a708d7 Certificate serial: 019B7A5B659AD0DBB41C99D2BD9D5BCF4487 Authority key identifier: DB:6E:FF:73:EF:FF:81:27:7C:2D:5D:38:F0:E4:6D:6D:12:A7:08:D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/227_c-__gSd8LV048ORtbRKnCNc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/44f5d2-b70e-4dae-82e3-1e4782be6445/1/xNT50RAyDxcML2FHARCowN-B2yY.roa Signing time: Thu 01 Jan 2026 16:19:28 +0000 ROA not before: Thu 01 Jan 2026 16:19:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33984 IP address blocks: 46.235.24.0/24 maxlen: 24 46.235.25.0/24 maxlen: 24 46.235.26.0/24 maxlen: 24 46.235.27.0/24 maxlen: 24 46.235.28.0/24 maxlen: 24 46.235.29.0/24 maxlen: 24 46.235.30.0/24 maxlen: 24 46.235.31.0/24 maxlen: 24 78.111.64.0/20 maxlen: 20 81.20.128.0/20 maxlen: 20 85.88.0.0/19 maxlen: 19 2a02:f98::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/44f5d2-b70e-4dae-82e3-1e4782be6445/1/227_c-__gSd8LV048ORtbRKnCNc.crl rsync://rpki.ripe.net/repository/DEFAULT/92/44f5d2-b70e-4dae-82e3-1e4782be6445/1/227_c-__gSd8LV048ORtbRKnCNc.mft rsync://rpki.ripe.net/repository/DEFAULT/227_c-__gSd8LV048ORtbRKnCNc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:65:9a:d0:db:b4:1c:99:d2:bd:9d:5b:cf:44:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=db6eff73efff81277c2d5d38f0e46d6d12a708d7 Validity Not Before: Jan 1 16:19:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c4d4f9d110320f170c2f61470110a8c0df81db26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c1:9a:e9:35:80:27:b6:ea:e7:f8:31:f1:3f: e2:03:e7:1a:5c:2f:0a:f2:7e:3a:c9:85:33:fa:0a: b8:17:f9:33:64:cd:db:fd:b1:1e:65:5e:e0:ba:ca: 4b:52:0a:d8:51:4f:3a:99:8e:b6:65:5d:e3:d2:d8: 95:84:b0:d1:36:1d:95:11:b6:e3:24:b1:74:f0:fc: c8:7d:17:ce:c9:8b:2e:9b:e2:4e:9a:9d:1e:56:47: dd:28:b3:ad:7a:23:21:9f:2f:d7:b8:54:9c:e7:55: d8:e0:f9:1c:79:4d:62:87:08:fb:be:93:19:b5:0c: 5f:79:84:20:4f:62:8b:db:ac:53:8e:c1:03:78:a1: 45:06:92:f2:6d:a9:3a:ca:2c:d7:5b:41:27:10:b9: fe:03:66:57:26:b0:a0:ff:c4:d5:ce:5e:9b:f9:db: ef:a3:d7:87:98:2f:9b:5c:10:4a:0f:f7:54:e2:2c: bb:e0:24:3e:60:b1:31:0c:c5:0a:53:09:e5:ec:1f: 7f:f2:9d:98:3d:b7:35:57:e8:69:d5:70:27:4a:e9: 70:85:18:1b:a8:fa:fb:45:f3:bd:a7:93:a1:45:b7: cd:81:70:c9:90:ba:e5:d3:c1:28:35:87:69:d8:1d: fd:a1:c3:41:3b:3d:a0:37:95:0e:5b:e9:78:cd:85: 7b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D4:F9:D1:10:32:0F:17:0C:2F:61:47:01:10:A8:C0:DF:81:DB:26 X509v3 Authority Key Identifier: keyid:DB:6E:FF:73:EF:FF:81:27:7C:2D:5D:38:F0:E4:6D:6D:12:A7:08:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/227_c-__gSd8LV048ORtbRKnCNc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/44f5d2-b70e-4dae-82e3-1e4782be6445/1/xNT50RAyDxcML2FHARCowN-B2yY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/92/44f5d2-b70e-4dae-82e3-1e4782be6445/1/227_c-__gSd8LV048ORtbRKnCNc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.235.24.0/21 78.111.64.0/20 81.20.128.0/20 85.88.0.0/19 IPv6: 2a02:f98::/32 Signature Algorithm: sha256WithRSAEncryption 5b:9d:b7:81:65:b7:33:ee:8a:cb:41:bc:d8:4d:0a:f2:82:65: 8c:ab:bc:d0:d9:dc:00:fd:69:a6:76:6a:34:4e:d9:3e:05:6a: 55:f9:ab:f5:7f:de:29:03:70:c2:8d:5b:25:4d:fc:50:83:b4: db:30:d5:c9:ad:0d:b5:71:36:30:26:be:c9:1f:8b:2d:cb:f1: 01:f8:ba:c1:5b:dc:3a:a5:9a:ed:36:fe:81:6d:c2:bb:d7:b0: f5:26:26:24:a9:3a:18:8c:8b:44:f9:a7:5f:23:9e:29:10:3b: 7d:2d:e3:e0:46:6d:ec:eb:20:55:68:f9:f0:7f:65:b8:4a:d8: 20:6b:88:84:df:e7:50:1f:90:73:a2:a6:7f:e4:e5:c5:bd:23: f5:f2:05:ce:9a:00:bf:b5:27:71:54:63:df:06:48:6c:6c:84: ab:dc:7b:2c:1c:6d:4a:b6:c4:c1:7a:aa:c7:eb:e3:53:dc:cf: 36:62:6d:80:76:12:85:33:6d:16:7a:8c:c0:a0:b3:47:13:0d: 68:e6:93:77:52:5a:9f:59:6a:ca:fc:5a:67:c2:35:43:68:f2: 58:ee:3c:ae:83:5a:c6:a0:e8:aa:e4:2c:8a:06:4b:df:ac:6c: 2c:4e:85:3b:d7:5b:13:3f:8a:d9:02:36:6c:f3:4c:bb:95:fa: 55:fe:73:3b -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt6W2Wa0Nu0HJnSvZ1bz0SHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiNmVmZjczZWZmZjgxMjc3YzJkNWQzOGYwZTQ2ZDZkMTJh NzA4ZDcwHhcNMjYwMTAxMTYxOTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGQ0ZjlkMTEwMzIwZjE3MGMyZjYxNDcwMTEwYThjMGRmODFkYjI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8Ga6TWAJ7bq5/gx8T/iA+caXC8K 8n46yYUz+gq4F/kzZM3b/bEeZV7guspLUgrYUU86mY62ZV3j0tiVhLDRNh2VEbbj JLF08PzIfRfOyYsum+JOmp0eVkfdKLOteiMhny/XuFSc51XY4PkceU1ihwj7vpMZ tQxfeYQgT2KL26xTjsEDeKFFBpLybak6yizXW0EnELn+A2ZXJrCg/8TVzl6b+dvv o9eHmC+bXBBKD/dU4iy74CQ+YLExDMUKUwnl7B9/8p2YPbc1V+hp1XAnSulwhRgb qPr7RfO9p5OhRbfNgXDJkLrl08EoNYdp2B39ocNBOz2gN5UOW+l4zYV73QIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFMTU+dEQMg8XDC9hRwEQqMDfgdsmMB8GA1UdIwQY MBaAFNtu/3Pv/4EnfC1dOPDkbW0SpwjXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjI3X2MtX19nU2Q4TFYwNDhPUnRiUktuQ05jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi80NGY1ZDItYjcwZS00ZGFlLTgyZTMt MWU0NzgyYmU2NDQ1LzEveE5UNTBSQXlEeGNNTDJGSEFSQ293Ti1CMnlZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Mi80NGY1ZDItYjcwZS00ZGFlLTgyZTMtMWU0NzgyYmU2NDQ1 LzEvMjI3X2MtX19nU2Q4TFYwNDhPUnRiUktuQ05jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDLusYAwQE Tm9AAwQEURSAAwQFVVgAMA0EAgACMAcDBQAqAg+YMA0GCSqGSIb3DQEBCwUAA4IB AQBbnbeBZbcz7orLQbzYTQrygmWMq7zQ2dwA/Wmmdmo0Ttk+BWpV+av1f94pA3DC jVslTfxQg7TbMNXJrQ21cTYwJr7JH4sty/EB+LrBW9w6pZrtNv6BbcK717D1JiYk qToYjItE+adfI54pEDt9LePgRm3s6yBVaPnwf2W4Stgga4iE3+dQH5BzoqZ/5OXF vSP18gXOmgC/tSdxVGPfBkhsbISr3HssHG1KtsTBeqrH6+NT3M82Ym2AdhKFM20W eozAoLNHEw1o5pN3UlqfWWrK/FpnwjVDaPJY7jyug1rGoOiq5CyKBkvfrGwsToU7 11sTP4rZAjZs80y7lfpV/nM7 -----END CERTIFICATE-----Generated at Mon Jan 26 11:39:53 2026 by rpki-client