This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/64d2dc-1c7d-47a0-ad37-45437d16cf73/1/JiK2pjmCPrTXNIAPXjRmT-mxX2g.roa File: JiK2pjmCPrTXNIAPXjRmT-mxX2g.roa (raw, json) Hash identifier: wPkXhb4r7jSAULebsw8xQOmHcFjCQBNs6OfuXo7EuTM= Subject key identifier: 26:22:B6:A6:39:82:3E:B4:D7:34:80:0F:5E:34:66:4F:E9:B1:5F:68 Certificate issuer: /CN=9177ba4c654da982f6211575fcc81c4f09cb3a1b Certificate serial: 019A82B71A5445CEF53ECC5D1E3431232E27 Authority key identifier: 91:77:BA:4C:65:4D:A9:82:F6:21:15:75:FC:C8:1C:4F:09:CB:3A:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXe6TGVNqYL2IRV1_MgcTwnLOhs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/64d2dc-1c7d-47a0-ad37-45437d16cf73/1/JiK2pjmCPrTXNIAPXjRmT-mxX2g.roa Signing time: Fri 14 Nov 2025 14:13:49 +0000 ROA not before: Fri 14 Nov 2025 14:13:49 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 205716 IP address blocks: 46.254.156.0/22 maxlen: 22 185.96.216.0/22 maxlen: 22 185.208.244.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/64d2dc-1c7d-47a0-ad37-45437d16cf73/1/kXe6TGVNqYL2IRV1_MgcTwnLOhs.crl rsync://rpki.ripe.net/repository/DEFAULT/93/64d2dc-1c7d-47a0-ad37-45437d16cf73/1/kXe6TGVNqYL2IRV1_MgcTwnLOhs.mft rsync://rpki.ripe.net/repository/DEFAULT/kXe6TGVNqYL2IRV1_MgcTwnLOhs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:82:b7:1a:54:45:ce:f5:3e:cc:5d:1e:34:31:23:2e:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9177ba4c654da982f6211575fcc81c4f09cb3a1b Validity Not Before: Nov 14 14:13:49 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=2622b6a639823eb4d734800f5e34664fe9b15f68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:40:a5:0b:23:16:a8:e2:04:be:23:d6:ac:a1: c0:aa:b7:7c:10:af:35:ed:62:1f:c8:0d:a4:8d:ac: 97:1c:08:b4:fb:36:b0:09:d5:ab:81:f2:1f:1b:91: df:bd:24:f8:33:d1:e7:75:20:e9:76:39:7c:29:22: 37:e9:5d:b9:33:89:6d:c4:e2:69:9c:9d:9f:1c:00: f8:81:91:67:0d:80:6b:bb:d7:d8:ac:de:4f:7d:1f: 03:6d:bf:c5:ec:c4:e2:42:ab:1b:e6:17:03:d7:5b: 37:0a:c8:55:34:89:ae:fe:6d:27:24:2e:ad:b5:bd: 26:c1:2c:32:d0:fc:20:6c:17:3d:20:f6:4d:db:1d: e7:95:a6:ca:8c:b1:c4:43:29:49:11:23:69:bc:fc: 94:80:ff:a7:bd:59:61:fe:0b:a3:12:d9:5f:ef:45: 72:ef:71:25:3a:12:08:c5:05:86:50:6d:24:6a:ed: 57:e8:56:f6:5a:de:77:4e:b7:8b:9a:fb:89:95:39: fd:df:3e:83:11:01:8a:2f:d8:f4:dc:9c:84:52:e4: 0e:d1:ab:52:e0:f7:1b:02:4e:e7:81:33:34:fc:0e: f9:f6:ae:1c:82:77:f9:7b:a3:7e:63:e7:0a:22:04: 81:0d:b3:77:fb:87:71:4a:9c:8d:54:11:a6:ba:fd: 9e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:22:B6:A6:39:82:3E:B4:D7:34:80:0F:5E:34:66:4F:E9:B1:5F:68 X509v3 Authority Key Identifier: keyid:91:77:BA:4C:65:4D:A9:82:F6:21:15:75:FC:C8:1C:4F:09:CB:3A:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXe6TGVNqYL2IRV1_MgcTwnLOhs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/64d2dc-1c7d-47a0-ad37-45437d16cf73/1/JiK2pjmCPrTXNIAPXjRmT-mxX2g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/64d2dc-1c7d-47a0-ad37-45437d16cf73/1/kXe6TGVNqYL2IRV1_MgcTwnLOhs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.254.156.0/22 185.96.216.0/22 185.208.244.0/22 Signature Algorithm: sha256WithRSAEncryption 1e:0b:40:45:6b:d8:76:dc:b3:be:96:7d:31:8b:a0:cc:5f:a7: 5a:85:46:bf:ec:27:04:75:73:5e:4c:86:56:cf:11:bb:89:44: 69:b0:9b:5a:f2:57:fd:c8:77:19:f9:20:72:33:71:02:14:f5: ec:7e:00:00:13:d0:a4:b1:c0:e5:1f:59:7c:32:21:9a:be:02: cb:b6:a1:47:78:09:d4:08:3b:00:7c:d4:d7:d4:2b:90:1a:59: 3b:b1:55:6f:ee:b5:74:07:bf:0d:15:74:44:88:86:39:d0:dd: 1a:b1:a8:ac:a2:22:26:d1:bf:d5:75:17:3f:81:9b:53:2c:0e: 91:29:b2:a2:3c:4f:1b:d1:bf:b5:46:57:99:86:21:45:bb:8c: 65:66:2d:88:a1:55:80:48:0d:d0:20:07:3a:bc:65:3e:7c:d4: 9b:11:1b:c1:27:62:32:e2:56:c1:2b:a9:7b:33:b2:88:9c:d0: 53:75:a3:5e:69:1e:08:d1:97:25:f7:be:e9:65:fd:d6:6c:fc: 7e:f6:11:ea:25:7c:20:b3:f8:c2:8e:dd:cb:3c:ca:05:ae:af: 97:63:a6:d7:ef:b6:3f:11:bf:86:58:15:de:06:0a:6c:bb:5b: 0d:17:44:81:ae:b6:ab:f5:94:ba:8c:76:73:c2:59:ef:0e:9a: 10:0a:95:44 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZqCtxpURc71PsxdHjQxIy4nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxNzdiYTRjNjU0ZGE5ODJmNjIxMTU3NWZjYzgxYzRmMDlj YjNhMWIwHhcNMjUxMTE0MTQxMzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNjIyYjZhNjM5ODIzZWI0ZDczNDgwMGY1ZTM0NjY0ZmU5YjE1ZjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUClCyMWqOIEviPWrKHAqrd8EK81 7WIfyA2kjayXHAi0+zawCdWrgfIfG5HfvST4M9HndSDpdjl8KSI36V25M4ltxOJp nJ2fHAD4gZFnDYBru9fYrN5PfR8Dbb/F7MTiQqsb5hcD11s3CshVNImu/m0nJC6t tb0mwSwy0PwgbBc9IPZN2x3nlabKjLHEQylJESNpvPyUgP+nvVlh/gujEtlf70Vy 73ElOhIIxQWGUG0kau1X6Fb2Wt53TreLmvuJlTn93z6DEQGKL9j03JyEUuQO0atS 4PcbAk7ngTM0/A759q4cgnf5e6N+Y+cKIgSBDbN3+4dxSpyNVBGmuv2eswIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFCYitqY5gj601zSAD140Zk/psV9oMB8GA1UdIwQY MBaAFJF3ukxlTamC9iEVdfzIHE8JyzobMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1hlNlRHVk5xWUwySVJWMV9NZ2NUd25MT2hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82NGQyZGMtMWM3ZC00N2EwLWFkMzct NDU0MzdkMTZjZjczLzEvSmlLMnBqbUNQclRYTklBUFhqUm1ULW14WDJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My82NGQyZGMtMWM3ZC00N2EwLWFkMzctNDU0MzdkMTZjZjcz LzEva1hlNlRHVk5xWUwySVJWMV9NZ2NUd25MT2hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCLv6cAwQC uWDYAwQCudD0MA0GCSqGSIb3DQEBCwUAA4IBAQAeC0BFa9h23LO+ln0xi6DMX6da hUa/7CcEdXNeTIZWzxG7iURpsJta8lf9yHcZ+SByM3ECFPXsfgAAE9CkscDlH1l8 MiGavgLLtqFHeAnUCDsAfNTX1CuQGlk7sVVv7rV0B78NFXREiIY50N0asaisoiIm 0b/VdRc/gZtTLA6RKbKiPE8b0b+1RleZhiFFu4xlZi2IoVWASA3QIAc6vGU+fNSb ERvBJ2Iy4lbBK6l7M7KInNBTdaNeaR4I0Zcl977pZf3WbPx+9hHqJXwgs/jCjt3L PMoFrq+XY6bX77Y/Eb+GWBXeBgpsu1sNF0SBrrar9ZS6jHZzwlnvDpoQCpVE -----END CERTIFICATE-----Generated at Sat Dec 6 12:28:17 2025 by rpki-client