This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/__Dgd7-J-86n_H3f9MA9izC8gvw.roa File: __Dgd7-J-86n_H3f9MA9izC8gvw.roa (raw, json) Hash identifier: M/nUfbIEM2inKtTnhlYsAXO1yArVjEQz7qqzPrm8UY0= Subject key identifier: FF:F0:E0:77:BF:89:FB:CE:A7:FC:7D:DF:F4:C0:3D:8B:30:BC:82:FC Certificate issuer: /CN=22373571c90249bf2aa948e78bed13e08528b87e Certificate serial: 019B7A5B7DF6DCAFEDD07C87940A397774C6 Authority key identifier: 22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/__Dgd7-J-86n_H3f9MA9izC8gvw.roa Signing time: Thu 01 Jan 2026 16:19:34 +0000 ROA not before: Thu 01 Jan 2026 16:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59962 IP address blocks: 46.209.32.0/24 maxlen: 24 46.209.33.0/24 maxlen: 24 46.209.34.0/24 maxlen: 24 46.209.35.0/24 maxlen: 24 46.209.36.0/24 maxlen: 24 46.209.37.0/24 maxlen: 24 46.209.38.0/24 maxlen: 24 46.209.39.0/24 maxlen: 24 46.209.168.0/24 maxlen: 24 46.209.169.0/24 maxlen: 24 46.209.170.0/24 maxlen: 24 46.209.171.0/24 maxlen: 24 46.209.172.0/24 maxlen: 24 46.209.173.0/24 maxlen: 24 46.209.174.0/24 maxlen: 24 46.209.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.mft rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:7d:f6:dc:af:ed:d0:7c:87:94:0a:39:77:74:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22373571c90249bf2aa948e78bed13e08528b87e Validity Not Before: Jan 1 16:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fff0e077bf89fbcea7fc7ddff4c03d8b30bc82fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a6:76:5f:98:b7:05:3a:5c:1b:f6:c1:1f:6a: cc:b5:01:bf:53:87:0d:6f:f0:b8:2f:8f:00:1b:00: 45:8d:27:5b:11:40:fc:9d:3e:17:91:70:2f:b1:dd: 6f:c2:24:68:f2:a0:8e:45:14:40:4b:44:19:e8:93: 55:5c:64:ab:b0:af:2a:28:85:ae:c9:ba:60:e8:59: ce:78:59:f1:91:fa:c6:d5:59:02:7b:5a:5e:ee:2f: de:a9:25:86:c0:95:15:c7:e7:83:0e:aa:6d:6e:06: 80:3d:84:dd:3f:5b:a4:38:21:93:cf:25:0b:94:0f: 90:3d:41:63:cb:4f:b3:ae:b5:57:33:81:38:22:ad: 2e:ad:7c:c7:f2:cb:f9:61:8f:df:ca:43:5f:e6:0d: 5f:a9:e9:f3:72:ec:e3:d4:d8:15:2d:b9:3a:1a:c4: 84:11:a0:61:05:44:0f:0d:ca:f4:1f:fb:3f:12:9c: 24:d8:42:df:41:14:85:60:c1:cc:7e:de:c0:63:f1: 55:31:d3:f4:02:f8:d2:35:16:13:82:94:a3:2f:d1: 0d:52:67:80:97:c6:17:99:84:3c:b7:45:47:b2:14: c9:74:2c:b1:9a:59:a9:30:90:8f:a6:2b:6f:18:5e: 7a:97:48:6f:ca:48:10:fe:93:54:05:44:59:9e:c9: 0d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:F0:E0:77:BF:89:FB:CE:A7:FC:7D:DF:F4:C0:3D:8B:30:BC:82:FC X509v3 Authority Key Identifier: keyid:22:37:35:71:C9:02:49:BF:2A:A9:48:E7:8B:ED:13:E0:85:28:B8:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ijc1cckCSb8qqUjni-0T4IUouH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/__Dgd7-J-86n_H3f9MA9izC8gvw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/866e5e-831e-4cb1-bd51-b4540c74c94b/1/Ijc1cckCSb8qqUjni-0T4IUouH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.209.32.0/21 46.209.168.0/21 Signature Algorithm: sha256WithRSAEncryption 82:76:ae:1a:16:28:c2:eb:2a:b3:0b:08:8c:6b:3b:45:0d:b8: ba:4b:ea:9f:49:ed:46:58:4f:fa:22:ea:52:0b:a9:38:e9:16: 19:fc:4f:32:41:24:3c:34:17:78:d7:ee:8c:d2:b3:58:c8:3f: c0:4c:0a:b2:c6:cf:12:b9:c6:b5:8e:01:2c:6f:df:87:73:0c: 6c:9b:50:c3:d7:8e:b1:fb:64:8f:4f:9e:03:47:fd:44:38:2f: 3e:d3:be:f6:8a:06:2c:35:49:2d:6a:f6:2d:d4:3b:e3:36:55: aa:75:6b:eb:23:d8:a0:48:1a:6d:44:18:53:1d:6c:a3:5e:31: f1:98:d4:7d:19:e7:99:29:6d:29:27:dc:20:82:65:ec:d7:e1: a1:53:5d:82:52:e1:c4:4c:d2:6a:f7:03:58:f7:91:53:18:da: 53:28:1c:5e:13:3d:43:bb:e8:bf:08:ad:8c:3c:e1:eb:de:c7: df:40:38:49:82:3e:56:75:46:0c:05:b6:34:c9:03:14:3d:24: 08:e2:4e:23:fd:8b:60:c3:ae:c6:7a:a5:97:ec:9e:5a:f6:94: 15:47:bf:7b:15:80:1f:f1:62:00:de:c0:40:80:c6:02:75:34: 7e:ef:5e:70:17:8d:0f:75:9c:84:82:f9:ca:1d:87:17:3d:b0: ae:bf:02:fb -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6W3323K/t0HyHlAo5d3TGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyMzczNTcxYzkwMjQ5YmYyYWE5NDhlNzhiZWQxM2UwODUy OGI4N2UwHhcNMjYwMTAxMTYxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZmYwZTA3N2JmODlmYmNlYTdmYzdkZGZmNGMwM2Q4YjMwYmM4MmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46Z2X5i3BTpcG/bBH2rMtQG/U4cN b/C4L48AGwBFjSdbEUD8nT4XkXAvsd1vwiRo8qCORRRAS0QZ6JNVXGSrsK8qKIWu ybpg6FnOeFnxkfrG1VkCe1pe7i/eqSWGwJUVx+eDDqptbgaAPYTdP1ukOCGTzyUL lA+QPUFjy0+zrrVXM4E4Iq0urXzH8sv5YY/fykNf5g1fqenzcuzj1NgVLbk6GsSE EaBhBUQPDcr0H/s/Epwk2ELfQRSFYMHMft7AY/FVMdP0AvjSNRYTgpSjL9ENUmeA l8YXmYQ8t0VHshTJdCyxmlmpMJCPpitvGF56l0hvykgQ/pNUBURZnskN7wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFP/w4He/ifvOp/x93/TAPYswvIL8MB8GA1UdIwQY MBaAFCI3NXHJAkm/KqlI54vtE+CFKLh+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEt YjQ1NDBjNzRjOTRiLzEvX19EZ2Q3LUotODZuX0gzZjlNQTlpekM4Z3Z3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS84NjZlNWUtODMxZS00Y2IxLWJkNTEtYjQ1NDBjNzRjOTRi LzEvSWpjMWNja0NTYjhxcVVqbmktMFQ0SVVvdUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLtEgAwQD LtGoMA0GCSqGSIb3DQEBCwUAA4IBAQCCdq4aFijC6yqzCwiMaztFDbi6S+qfSe1G WE/6IupSC6k46RYZ/E8yQSQ8NBd41+6M0rNYyD/ATAqyxs8Suca1jgEsb9+Hcwxs m1DD146x+2SPT54DR/1EOC8+0772igYsNUktavYt1DvjNlWqdWvrI9igSBptRBhT HWyjXjHxmNR9GeeZKW0pJ9wggmXs1+GhU12CUuHETNJq9wNY95FTGNpTKBxeEz1D u+i/CK2MPOHr3sffQDhJgj5WdUYMBbY0yQMUPSQI4k4j/Ytgw67GeqWX7J5a9pQV R797FYAf8WIA3sBAgMYCdTR+715wF40PdZyEgvnKHYcXPbCuvwL7 -----END CERTIFICATE-----Generated at Sun Jan 25 20:46:53 2026 by rpki-client