This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/xR-uNlcwaXq95_WLOZVSHPtWfsg.roa File: xR-uNlcwaXq95_WLOZVSHPtWfsg.roa (raw, json) Hash identifier: wbICW+uS9aypVREci9aQAEMY15M6aAuzi/Y5YFPee8I= Subject key identifier: C5:1F:AE:36:57:30:69:7A:BD:E7:F5:8B:39:95:52:1C:FB:56:7E:C8 Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Certificate serial: 019BD5136F5DFB7E5E11B264C91CDAB63DA1 Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/xR-uNlcwaXq95_WLOZVSHPtWfsg.roa Signing time: Mon 19 Jan 2026 07:06:19 +0000 ROA not before: Mon 19 Jan 2026 07:06:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203622 IP address blocks: 46.32.160.0/24 maxlen: 24 46.32.161.0/24 maxlen: 24 46.32.162.0/24 maxlen: 24 46.32.164.0/24 maxlen: 24 46.32.165.0/24 maxlen: 24 46.32.166.0/24 maxlen: 24 46.32.167.0/24 maxlen: 24 46.32.170.0/24 maxlen: 24 46.32.171.0/24 maxlen: 24 46.32.189.0/24 maxlen: 24 46.32.190.0/24 maxlen: 24 46.32.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d5:13:6f:5d:fb:7e:5e:11:b2:64:c9:1c:da:b6:3d:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Validity Not Before: Jan 19 07:06:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c51fae365730697abde7f58b3995521cfb567ec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:09:94:e3:d3:57:25:b0:20:1b:c9:60:e5:4c: 0b:cd:5c:d5:ca:f2:73:f4:a9:b3:47:8b:4c:d4:6f: b0:73:41:54:05:49:97:3a:b6:aa:47:6a:d5:5e:94: 71:72:5b:92:cd:5f:4e:37:d3:7b:da:97:2f:f5:5d: 50:b3:e8:45:0b:0d:1c:ce:58:a7:01:3e:f6:4a:fc: 2c:5d:df:0d:6f:f6:54:57:a5:6a:d9:81:d7:67:db: f9:fe:7b:0d:88:11:15:34:37:65:5b:6b:b8:88:de: 78:d4:6e:87:f2:73:66:c8:60:0b:da:70:29:fe:4c: 76:66:08:9e:e6:54:23:0b:08:2e:b8:b4:ed:3f:ae: 76:dc:47:87:17:b9:8a:1e:bf:73:b3:e7:36:2f:d8: 5c:47:27:54:83:0e:6f:d1:9f:a2:80:30:8d:dd:35: 2d:76:91:35:ad:4a:a6:83:2a:cc:c9:a0:c9:87:56: ef:d8:47:c8:d8:e0:5d:25:38:0f:ad:17:bd:bd:32: 60:fa:68:69:c7:96:3b:f5:4f:c7:82:9a:80:0e:17: 6b:29:ad:16:0e:dd:4f:db:f0:ed:90:52:a0:2e:8a: b5:49:55:da:da:28:0b:c6:f9:ba:f4:b4:28:d9:c3: 8c:45:1b:b2:f5:7e:e9:2c:b7:98:fa:22:fa:a1:01: f2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:1F:AE:36:57:30:69:7A:BD:E7:F5:8B:39:95:52:1C:FB:56:7E:C8 X509v3 Authority Key Identifier: keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/xR-uNlcwaXq95_WLOZVSHPtWfsg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.32.160.0-46.32.162.255 46.32.164.0/22 46.32.170.0/23 46.32.189.0-46.32.191.255 Signature Algorithm: sha256WithRSAEncryption 48:12:43:a0:41:10:d6:9f:96:3d:93:3f:40:66:3f:a8:d1:eb: 8d:ce:ff:5a:7c:d9:e9:cb:23:47:97:b7:66:2f:0f:f9:05:47: b1:a6:b6:d5:0d:bf:98:2f:2f:46:a3:d1:06:38:2f:09:63:54: 54:31:4c:23:4c:14:5b:29:83:de:50:24:93:ca:c6:ea:14:49: 59:44:27:42:24:a5:22:c0:07:19:c6:07:5a:63:7f:55:8f:a2: dd:5e:34:71:b1:b8:f2:97:54:ba:7d:e7:03:81:9e:d3:7d:7a: 76:34:09:44:2b:04:37:ef:c5:76:0c:01:1b:80:07:86:85:db: 82:97:62:2d:9b:62:10:64:da:88:bc:3f:63:a7:6d:bb:e7:06: 9c:4e:fa:24:0b:42:a7:46:bd:ed:d5:87:44:f3:5c:72:a4:e8: bc:bb:fa:ec:f5:7c:02:d9:58:94:77:fc:05:22:cb:2e:37:dd: 39:e4:33:c9:67:68:05:00:6d:bb:70:5f:94:1e:68:16:10:03: 80:25:1d:58:fe:09:b9:d1:8b:d3:25:9b:bf:b8:d0:60:00:60: 21:52:2e:8e:b3:26:14:e0:a4:dc:0a:00:5a:16:75:c6:ee:36: 29:1b:26:84:6d:69:0f:2f:8e:2d:fd:9d:17:da:58:e5:7a:b0: 65:a1:b1:b6 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZvVE29d+35eEbJkyRzatj2hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzN2VlMWVjZWQxOWY4YTBhM2E2MzViZmFhMjY0MjkzZTM0 Mzc3OTUwHhcNMjYwMTE5MDcwNjE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNTFmYWUzNjU3MzA2OTdhYmRlN2Y1OGIzOTk1NTIxY2ZiNTY3ZWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogmU49NXJbAgG8lg5UwLzVzVyvJz 9KmzR4tM1G+wc0FUBUmXOraqR2rVXpRxcluSzV9ON9N72pcv9V1Qs+hFCw0czlin AT72SvwsXd8Nb/ZUV6Vq2YHXZ9v5/nsNiBEVNDdlW2u4iN541G6H8nNmyGAL2nAp /kx2Zgie5lQjCwguuLTtP6523EeHF7mKHr9zs+c2L9hcRydUgw5v0Z+igDCN3TUt dpE1rUqmgyrMyaDJh1bv2EfI2OBdJTgPrRe9vTJg+mhpx5Y79U/HgpqADhdrKa0W Dt1P2/DtkFKgLoq1SVXa2igLxvm69LQo2cOMRRuy9X7pLLeY+iL6oQHySQIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFMUfrjZXMGl6vef1izmVUhz7Vn7IMB8GA1UdIwQY MBaAFON+4eztGfigo6Y1v6omQpPjQ3eVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMt MzZlMzQ0YWJjOWQzLzEveFItdU5sY3dhWHE5NV9XTE9aVlNIUHRXZnNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMtMzZlMzQ0YWJjOWQz LzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAUuIKAD BAAuIKIDBAIuIKQDBAEuIKowDAMEAC4gvQMEBi4ggDANBgkqhkiG9w0BAQsFAAOC AQEASBJDoEEQ1p+WPZM/QGY/qNHrjc7/WnzZ6csjR5e3Zi8P+QVHsaa21Q2/mC8v RqPRBjgvCWNUVDFMI0wUWymD3lAkk8rG6hRJWUQnQiSlIsAHGcYHWmN/VY+i3V40 cbG48pdUun3nA4Ge0316djQJRCsEN+/FdgwBG4AHhoXbgpdiLZtiEGTaiLw/Y6dt u+cGnE76JAtCp0a97dWHRPNccqTovLv67PV8AtlYlHf8BSLLLjfdOeQzyWdoBQBt u3BflB5oFhADgCUdWP4JudGL0yWbv7jQYABgIVIujrMmFOCk3AoAWhZ1xu42KRsm hG1pDy+OLf2dF9pY5XqwZaGxtg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:51 2026 by rpki-client