This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/bSC7RVTqh-EvKl7Z-N-MYagSTB0.roa File: bSC7RVTqh-EvKl7Z-N-MYagSTB0.roa (raw, json) Hash identifier: fXQllw8VZVYHGOPsqntwHwX5QpNIrlOnadEQ+JteA+I= Subject key identifier: 6D:20:BB:45:54:EA:87:E1:2F:2A:5E:D9:F8:DF:8C:61:A8:12:4C:1D Certificate issuer: /CN=f416539e74934d23a0572f6625dbfdb54e820873 Certificate serial: 019B76EBA48201557C0969311A6896894D07 Authority key identifier: F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/bSC7RVTqh-EvKl7Z-N-MYagSTB0.roa Signing time: Thu 01 Jan 2026 00:18:33 +0000 ROA not before: Thu 01 Jan 2026 00:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47394 IP address blocks: 46.255.144.0/21 maxlen: 21 46.255.144.0/22 maxlen: 22 46.255.144.0/24 maxlen: 24 46.255.145.0/24 maxlen: 24 46.255.146.0/24 maxlen: 24 46.255.147.0/24 maxlen: 24 46.255.148.0/22 maxlen: 22 46.255.148.0/24 maxlen: 24 46.255.149.0/24 maxlen: 24 46.255.150.0/24 maxlen: 24 46.255.151.0/24 maxlen: 24 95.107.128.0/21 maxlen: 21 95.107.129.0/24 maxlen: 24 95.107.132.0/24 maxlen: 24 95.107.135.0/24 maxlen: 24 95.107.136.0/21 maxlen: 21 95.107.136.0/24 maxlen: 24 95.107.141.0/24 maxlen: 24 95.107.144.0/23 maxlen: 23 95.107.144.0/24 maxlen: 24 95.107.145.0/24 maxlen: 24 95.107.146.0/23 maxlen: 23 95.107.150.0/24 maxlen: 24 95.107.151.0/24 maxlen: 24 95.107.156.0/24 maxlen: 24 95.107.157.0/24 maxlen: 24 95.107.159.0/24 maxlen: 24 95.107.160.0/21 maxlen: 21 95.107.160.0/22 maxlen: 22 95.107.160.0/24 maxlen: 24 95.107.162.0/23 maxlen: 23 95.107.162.0/24 maxlen: 24 95.107.164.0/22 maxlen: 22 95.107.164.0/24 maxlen: 24 95.107.165.0/24 maxlen: 24 95.107.166.0/24 maxlen: 24 95.107.167.0/24 maxlen: 24 95.107.168.0/22 maxlen: 22 95.107.168.0/23 maxlen: 23 95.107.170.0/23 maxlen: 23 95.107.172.0/23 maxlen: 23 95.107.174.0/24 maxlen: 24 95.107.176.0/21 maxlen: 21 95.107.176.0/22 maxlen: 22 95.107.177.0/24 maxlen: 24 95.107.180.0/22 maxlen: 22 95.107.182.0/24 maxlen: 24 95.107.184.0/21 maxlen: 21 95.107.184.0/22 maxlen: 22 95.107.188.0/22 maxlen: 22 95.107.188.0/24 maxlen: 24 95.107.192.0/22 maxlen: 22 95.107.192.0/24 maxlen: 24 95.107.193.0/24 maxlen: 24 95.107.194.0/23 maxlen: 23 95.107.194.0/24 maxlen: 24 95.107.195.0/24 maxlen: 24 95.107.196.0/22 maxlen: 22 95.107.196.0/23 maxlen: 23 95.107.196.0/24 maxlen: 24 95.107.198.0/23 maxlen: 23 95.107.200.0/21 maxlen: 21 95.107.200.0/22 maxlen: 22 95.107.200.0/24 maxlen: 24 95.107.201.0/24 maxlen: 24 95.107.202.0/23 maxlen: 23 95.107.204.0/22 maxlen: 22 95.107.208.0/20 maxlen: 20 95.107.208.0/21 maxlen: 21 95.107.208.0/22 maxlen: 22 95.107.208.0/23 maxlen: 23 95.107.209.0/24 maxlen: 24 95.107.212.0/22 maxlen: 22 95.107.212.0/23 maxlen: 23 95.107.212.0/24 maxlen: 24 95.107.216.0/21 maxlen: 21 95.107.216.0/22 maxlen: 22 95.107.216.0/23 maxlen: 23 95.107.218.0/23 maxlen: 23 95.107.220.0/22 maxlen: 22 95.107.220.0/23 maxlen: 23 95.107.222.0/23 maxlen: 23 95.107.224.0/20 maxlen: 20 95.107.224.0/22 maxlen: 22 95.107.228.0/22 maxlen: 22 95.107.228.0/24 maxlen: 24 95.107.232.0/22 maxlen: 22 95.107.234.0/23 maxlen: 23 95.107.236.0/22 maxlen: 22 95.107.238.0/23 maxlen: 23 95.107.240.0/20 maxlen: 20 95.107.240.0/22 maxlen: 22 95.107.244.0/22 maxlen: 22 95.107.248.0/22 maxlen: 22 95.107.248.0/23 maxlen: 23 95.107.248.0/24 maxlen: 24 95.107.252.0/22 maxlen: 22 95.107.254.0/23 maxlen: 23 109.69.164.0/22 maxlen: 22 109.69.164.0/24 maxlen: 24 109.69.165.0/24 maxlen: 24 109.69.166.0/24 maxlen: 24 109.69.167.0/24 maxlen: 24 141.8.200.0/21 maxlen: 21 141.8.200.0/22 maxlen: 22 141.8.204.0/22 maxlen: 22 185.118.148.0/22 maxlen: 22 185.118.148.0/23 maxlen: 23 185.118.150.0/23 maxlen: 23 185.122.228.0/22 maxlen: 22 185.122.228.0/23 maxlen: 23 185.122.228.0/24 maxlen: 24 2a03:8480::/32 maxlen: 32 2a03:8480::/33 maxlen: 33 2a03:8480:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a4:82:01:55:7c:09:69:31:1a:68:96:89:4d:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f416539e74934d23a0572f6625dbfdb54e820873 Validity Not Before: Jan 1 00:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d20bb4554ea87e12f2a5ed9f8df8c61a8124c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b0:78:bb:9a:84:49:af:22:1d:b7:aa:fe:0b: 84:68:f6:31:97:6d:60:90:82:4f:ea:e5:9c:62:55: 7e:13:f0:ad:e5:9f:a9:4d:fa:44:a0:a9:67:c2:b1: 77:2b:7f:a4:e7:c3:2b:56:06:e9:11:8e:ca:b9:71: f8:8a:9e:bb:c3:0f:61:82:bb:f0:60:e1:f6:be:3d: 78:43:01:e2:1a:ce:af:01:1b:1f:27:c3:0d:7b:7f: 74:53:e4:6e:e3:d1:b0:cf:53:6b:59:67:f0:4c:63: 25:78:48:35:e8:b7:94:b8:02:89:74:29:d5:34:09: ec:d8:15:04:66:27:34:44:2a:a8:09:ba:f1:cb:1e: 4c:13:e6:c5:45:33:88:07:46:c0:94:2d:98:2b:c1: 60:b4:93:39:ff:d1:b2:c3:7c:c0:82:96:b5:a0:5f: 19:4f:2d:1d:a0:2d:a4:3f:a7:fa:04:d9:b9:61:1b: 31:1b:18:4a:b7:8b:57:d9:e3:46:6e:90:a7:b3:03: 8c:39:a9:07:1c:76:dd:30:d9:86:a2:6c:ea:83:c2: bb:91:2d:24:ff:ed:38:ea:21:06:de:bb:72:d8:61: 9e:8c:0a:c7:2b:1f:fb:5c:bc:dd:65:f1:fc:10:20: fd:55:f5:01:1b:f2:35:cb:6b:05:a4:08:41:a3:42: a2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:20:BB:45:54:EA:87:E1:2F:2A:5E:D9:F8:DF:8C:61:A8:12:4C:1D X509v3 Authority Key Identifier: keyid:F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/bSC7RVTqh-EvKl7Z-N-MYagSTB0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.255.144.0/21 95.107.128.0-95.107.147.255 95.107.150.0/23 95.107.156.0/23 95.107.159.0-95.107.174.255 95.107.176.0-95.107.255.255 109.69.164.0/22 141.8.200.0/21 185.118.148.0/22 185.122.228.0/22 IPv6: 2a03:8480::/32 Signature Algorithm: sha256WithRSAEncryption 8d:78:6c:50:3e:9b:39:8c:30:1c:06:71:66:f9:79:a0:a4:6a: b8:57:ba:91:45:53:b9:18:99:1a:31:a0:57:61:31:b6:20:b2: 44:a2:8e:76:48:95:ff:d1:21:83:ef:cc:b5:60:6c:d8:29:81: 09:69:8c:e9:a6:7d:8f:f1:cc:19:a1:96:25:2a:5e:af:dc:23: 58:eb:80:39:c4:82:b5:46:da:c3:2c:77:b8:28:10:a7:7e:03: 26:e4:59:92:70:69:9e:e7:d3:a3:d9:e0:1e:49:e6:8b:f9:30: aa:cb:62:19:9d:30:fb:08:59:76:3f:cc:42:19:b9:d9:6c:2a: 1c:c7:60:d6:5c:1a:77:06:be:19:da:0f:0d:ec:63:61:d0:c7: 0d:92:e2:7d:4c:03:fc:80:7f:22:43:99:52:c2:7c:33:d6:32: 2d:05:1a:33:dd:bc:56:16:7b:6c:f8:ff:0f:63:4c:68:7b:07: e2:3f:48:2c:74:af:a2:80:b6:a2:e6:91:11:24:6e:b1:0e:25: c6:ac:b6:f6:15:f3:1f:2b:1b:64:9a:23:b1:5e:12:06:22:89: 32:03:7e:c2:4e:86:46:c6:56:a8:d8:8f:d7:5a:87:1b:8c:7c: e1:2c:6b:6e:8f:8d:1d:4e:6c:16:71:18:83:b2:10:9e:bd:57: d9:e5:a7:a2 -----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgISAZt266SCAVV8CWkxGmiWiU0HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0MTY1MzllNzQ5MzRkMjNhMDU3MmY2NjI1ZGJmZGI1NGU4 MjA4NzMwHhcNMjYwMTAxMDAxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDIwYmI0NTU0ZWE4N2UxMmYyYTVlZDlmOGRmOGM2MWE4MTI0YzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3LB4u5qESa8iHbeq/guEaPYxl21g kIJP6uWcYlV+E/Ct5Z+pTfpEoKlnwrF3K3+k58MrVgbpEY7KuXH4ip67ww9hgrvw YOH2vj14QwHiGs6vARsfJ8MNe390U+Ru49Gwz1NrWWfwTGMleEg16LeUuAKJdCnV NAns2BUEZic0RCqoCbrxyx5ME+bFRTOIB0bAlC2YK8FgtJM5/9Gyw3zAgpa1oF8Z Ty0doC2kP6f6BNm5YRsxGxhKt4tX2eNGbpCnswOMOakHHHbdMNmGomzqg8K7kS0k /+046iEG3rty2GGejArHKx/7XLzdZfH8ECD9VfUBG/I1y2sFpAhBo0Ki9wIDAQAB o4ICZTCCAmEwHQYDVR0OBBYEFG0gu0VU6ofhLype2fjfjGGoEkwdMB8GA1UdIwQY MBaAFPQWU550k00joFcvZiXb/bVOgghzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUJaVG5uU1RUU09nVnk5bUpkdjl0VTZDQ0hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy81M2U0OTYtMDA5Ny00NjJhLWE5ODkt ZDY3YTYxZDU0MTZkLzEvYlNDN1JWVHFoLUV2S2w3Wi1OLU1ZYWdTVEIwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy81M2U0OTYtMDA5Ny00NjJhLWE5ODktZDY3YTYxZDU0MTZk LzEvOUJaVG5uU1RUU09nVnk5bUpkdjl0VTZDQ0hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMHsGCCsGAQUFBwEHAQH/BGwwajBZBAIAATBTAwQDLv+QMAwD BAdfa4ADBAJfa5ADBAFfa5YDBAFfa5wwDAMEAF9rnwMEAF9rrjALAwQEX2uwAwMC X2gDBAJtRaQDBAONCMgDBAK5dpQDBAK5euQwDQQCAAIwBwMFACoDhIAwDQYJKoZI hvcNAQELBQADggEBAI14bFA+mzmMMBwGcWb5eaCkarhXupFFU7kYmRoxoFdhMbYg skSijnZIlf/RIYPvzLVgbNgpgQlpjOmmfY/xzBmhliUqXq/cI1jrgDnEgrVG2sMs d7goEKd+AybkWZJwaZ7n06PZ4B5J5ov5MKrLYhmdMPsIWXY/zEIZudlsKhzHYNZc GncGvhnaDw3sY2HQxw2S4n1MA/yAfyJDmVLCfDPWMi0FGjPdvFYWe2z4/w9jTGh7 B+I/SCx0r6KAtqLmkREkbrEOJcastvYV8x8rG2SaI7FeEgYiiTIDfsJOhkbGVqjY j9dahxuMfOEsa26PjR1ObBZxGIOyEJ69V9nlp6I= -----END CERTIFICATE-----Generated at Sun Jan 25 23:31:36 2026 by rpki-client