This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/x04dCWjItyDGXFoquqgz5jnrMRg.roa File: x04dCWjItyDGXFoquqgz5jnrMRg.roa (raw, json) Hash identifier: hVlcjFxSr+ykf+gKZRqjXZQpnt9aXT76dSufsRzsGvo= Subject key identifier: C7:4E:1D:09:68:C8:B7:20:C6:5C:5A:2A:BA:A8:33:E6:39:EB:31:18 Certificate issuer: /CN=d76d71d8845d2fe296a46d79176f590d8db4f16a Certificate serial: 019B7AC90AD8F9D185AEBB6F6ED8502C6D1E Authority key identifier: D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/x04dCWjItyDGXFoquqgz5jnrMRg.roa Signing time: Thu 01 Jan 2026 18:19:14 +0000 ROA not before: Thu 01 Jan 2026 18:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31148 IP address blocks: 46.219.0.0/16 maxlen: 24 78.159.32.0/19 maxlen: 24 81.95.176.0/20 maxlen: 24 89.252.0.0/18 maxlen: 24 94.76.64.0/18 maxlen: 24 94.76.104.0/24 maxlen: 24 109.251.0.0/16 maxlen: 24 185.124.168.0/22 maxlen: 24 188.231.128.0/17 maxlen: 24 193.24.25.0/24 maxlen: 24 212.22.192.0/19 maxlen: 24 2a00:1228::/32 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.mft rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:0a:d8:f9:d1:85:ae:bb:6f:6e:d8:50:2c:6d:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d76d71d8845d2fe296a46d79176f590d8db4f16a Validity Not Before: Jan 1 18:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c74e1d0968c8b720c65c5a2abaa833e639eb3118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:14:18:82:c0:f1:f1:3f:e0:c6:32:5d:8c:f9: 1e:32:72:97:8c:8c:98:93:9d:66:f1:77:38:dc:48: 6e:1d:74:61:56:d2:ab:d1:95:e0:8f:30:4f:c6:52: 9b:ff:e2:ca:22:3a:5d:a1:3f:eb:6d:69:71:9e:36: e8:65:ff:e5:1e:15:80:bc:0c:c5:21:90:95:4e:9d: 1a:6f:88:31:74:9e:c3:07:92:37:30:79:0a:2c:08: 5a:dd:95:82:4f:f9:e9:43:59:62:b9:21:3a:e7:db: 42:7b:23:63:fb:8c:a2:8a:65:e8:ce:6c:1d:b6:05: d0:b5:f8:8f:7b:7e:e7:ca:da:1a:c4:11:47:bc:af: be:7f:36:77:97:2a:58:1c:fb:6f:7f:98:e7:7d:05: ef:79:60:a1:34:04:17:80:0e:9d:1c:26:92:ac:d8: 7c:26:82:eb:a7:f6:9f:c6:ad:a5:a8:c4:ea:e7:6c: d5:60:bc:da:6b:c2:b6:58:d3:69:cb:aa:9b:e8:80: ac:fd:5a:8c:09:6d:56:a8:99:13:0f:aa:ae:66:86: 85:ef:e4:0e:27:84:b7:16:db:49:ed:be:6b:d5:a2: f2:50:6a:91:71:52:5e:07:78:36:7c:e2:37:0f:97: bd:19:1d:c4:91:0e:f0:bc:d4:32:80:05:63:ca:76: f5:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:4E:1D:09:68:C8:B7:20:C6:5C:5A:2A:BA:A8:33:E6:39:EB:31:18 X509v3 Authority Key Identifier: keyid:D7:6D:71:D8:84:5D:2F:E2:96:A4:6D:79:17:6F:59:0D:8D:B4:F1:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/121x2IRdL-KWpG15F29ZDY208Wo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/x04dCWjItyDGXFoquqgz5jnrMRg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/ec3106-e7bf-4299-ae12-dbd91b111844/1/121x2IRdL-KWpG15F29ZDY208Wo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.219.0.0/16 78.159.32.0/19 81.95.176.0/20 89.252.0.0/18 94.76.64.0/18 109.251.0.0/16 185.124.168.0/22 188.231.128.0/17 193.24.25.0/24 212.22.192.0/19 IPv6: 2a00:1228::/32 Signature Algorithm: sha256WithRSAEncryption 46:21:39:04:93:ef:d0:03:8c:9c:10:b6:42:5b:8e:8a:1a:00: 4a:e5:92:37:39:4b:0d:40:ae:0b:06:41:72:99:83:9c:fe:60: f2:37:b4:eb:44:38:25:d6:18:99:e0:a8:49:6b:2b:93:b8:1e: 7a:0a:71:52:6d:80:0f:dd:3c:8e:2e:f9:57:6d:92:c6:1c:71: 57:1f:0d:a4:19:f1:0b:3c:7b:25:91:b4:ab:1e:d1:89:40:51: 61:84:73:0e:9a:41:c1:ff:bc:68:e8:b0:b9:de:6b:04:4c:cf: 4f:58:05:c2:7a:c7:e9:78:aa:48:56:b4:83:ce:86:64:e4:c6: 03:0e:05:23:21:23:85:5d:d9:dd:18:00:22:54:ba:fc:9e:76: 57:51:c3:d9:f0:b1:40:2f:6c:3b:e8:39:5c:ed:63:c1:d0:c3: f4:06:af:93:ad:db:25:df:34:f5:a7:8e:1d:b1:7e:8c:5c:f6: ad:43:b7:de:d4:22:b9:86:88:15:83:ed:37:d8:dc:71:f0:7f: 4c:ee:b3:fc:6c:6b:5a:b4:9a:81:65:13:0b:3f:63:3b:6e:d9: a7:d4:19:72:73:3c:33:32:69:f1:a1:68:7b:6e:ab:f6:5b:0f: 54:38:4e:e8:e9:db:25:65:19:ad:0b:ef:aa:1a:35:8a:bd:ef: 61:bf:33:76 -----BEGIN CERTIFICATE----- MIIFQDCCBCigAwIBAgISAZt6yQrY+dGFrrtvbthQLG0eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3NmQ3MWQ4ODQ1ZDJmZTI5NmE0NmQ3OTE3NmY1OTBkOGRi NGYxNmEwHhcNMjYwMTAxMTgxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNzRlMWQwOTY4YzhiNzIwYzY1YzVhMmFiYWE4MzNlNjM5ZWIzMTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+RQYgsDx8T/gxjJdjPkeMnKXjIyY k51m8Xc43EhuHXRhVtKr0ZXgjzBPxlKb/+LKIjpdoT/rbWlxnjboZf/lHhWAvAzF IZCVTp0ab4gxdJ7DB5I3MHkKLAha3ZWCT/npQ1liuSE659tCeyNj+4yiimXozmwd tgXQtfiPe37nytoaxBFHvK++fzZ3lypYHPtvf5jnfQXveWChNAQXgA6dHCaSrNh8 JoLrp/afxq2lqMTq52zVYLzaa8K2WNNpy6qb6ICs/VqMCW1WqJkTD6quZoaF7+QO J4S3FttJ7b5r1aLyUGqRcVJeB3g2fOI3D5e9GR3EkQ7wvNQygAVjynb1BwIDAQAB o4ICTDCCAkgwHQYDVR0OBBYEFMdOHQloyLcgxlxaKrqoM+Y56zEYMB8GA1UdIwQY MBaAFNdtcdiEXS/ilqRteRdvWQ2NtPFqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTIxeDJJUmRMLUtXcEcxNUYyOVpEWTIwOFdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9lYzMxMDYtZTdiZi00Mjk5LWFlMTIt ZGJkOTFiMTExODQ0LzEveDA0ZENXakl0eURHWEZvcXVxZ3o1am5yTVJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC9lYzMxMDYtZTdiZi00Mjk5LWFlMTItZGJkOTFiMTExODQ0 LzEvMTIxeDJJUmRMLUtXcEcxNUYyOVpEWTIwOFdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGIGCCsGAQUFBwEHAQH/BFMwUTBABAIAATA6AwMALtsDBAVO nyADBARRX7ADBAZZ/AADBAZeTEADAwBt+wMEArl8qAMEB7zngAMEAMEYGQMEBdQW wDANBAIAAjAHAwUAKgASKDANBgkqhkiG9w0BAQsFAAOCAQEARiE5BJPv0AOMnBC2 QluOihoASuWSNzlLDUCuCwZBcpmDnP5g8je060Q4JdYYmeCoSWsrk7geegpxUm2A D908ji75V22SxhxxVx8NpBnxCzx7JZG0qx7RiUBRYYRzDppBwf+8aOiwud5rBEzP T1gFwnrH6XiqSFa0g86GZOTGAw4FIyEjhV3Z3RgAIlS6/J52V1HD2fCxQC9sO+g5 XO1jwdDD9Aavk63bJd809aeOHbF+jFz2rUO33tQiuYaIFYPtN9jccfB/TO6z/Gxr WrSagWUTCz9jO27Zp9QZcnM8MzJp8aFoe26r9lsPVDhO6OnbJWUZrQvvqho1ir3v Yb8zdg== -----END CERTIFICATE-----Generated at Mon Jan 26 13:44:42 2026 by rpki-client