This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/I1nMPwSGaA-hpoKveutW4hkwALc.roa File: I1nMPwSGaA-hpoKveutW4hkwALc.roa (raw, json) Hash identifier: e7v4gqh15QeSe47GzgmyuNxUkvj9l4QpG0PMy8DKuDw= Subject key identifier: 23:59:CC:3F:04:86:68:0F:A1:A6:82:AF:7A:EB:56:E2:19:30:00:B7 Certificate issuer: /CN=a2900e4655ab349a4632b140719dc97230431725 Certificate serial: 019B7CEDB3FAD8DAA59C2233584A6B238D0E Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/I1nMPwSGaA-hpoKveutW4hkwALc.roa Signing time: Fri 02 Jan 2026 04:18:31 +0000 ROA not before: Fri 02 Jan 2026 04:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51369 IP address blocks: 46.44.0.0/18 maxlen: 20 62.140.224.0/19 maxlen: 24 80.77.161.0/24 maxlen: 24 80.77.162.0/23 maxlen: 23 80.77.170.0/23 maxlen: 23 93.191.8.0/21 maxlen: 24 2a02:2518:3::/48 maxlen: 48 2a02:251b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:b3:fa:d8:da:a5:9c:22:33:58:4a:6b:23:8d:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2900e4655ab349a4632b140719dc97230431725 Validity Not Before: Jan 2 04:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2359cc3f0486680fa1a682af7aeb56e2193000b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:55:11:30:07:b8:b8:69:47:0b:5a:f3:b8:8a: 06:4a:05:a5:c8:22:84:49:77:f4:d4:e1:ba:b7:10: 5d:84:98:31:5b:3a:12:a5:26:6f:f1:b2:52:1c:7d: a4:fd:9b:0b:b7:99:9a:8a:ab:4d:d5:28:1f:55:c1: bb:a0:cd:30:5c:d3:78:10:5d:9c:70:f1:c6:d4:44: 6a:5c:45:3e:97:41:b9:20:94:5b:ef:78:7e:bd:15: 88:e8:d1:49:dd:3e:9c:16:1d:19:c8:0d:05:db:ff: 6b:e3:56:07:03:e2:b8:82:e1:81:67:34:8c:fe:28: 17:16:13:e3:6d:ba:1c:1d:e0:a4:27:e7:4b:fe:19: 4e:61:b6:07:cd:c9:14:6b:a4:89:99:2c:c7:fb:bf: f8:47:6f:f7:61:a9:28:0e:b3:f0:6d:12:94:47:c7: e4:b3:71:19:81:a6:7c:b0:f2:ee:65:6c:d0:b1:42: 8e:15:ee:b4:f0:16:0b:c6:87:8b:47:17:2e:e1:e1: 4f:1d:67:0b:03:0f:88:c1:20:41:f0:35:37:8b:63: 34:f4:6a:2d:69:c0:63:9c:85:3c:0e:92:e2:f5:e7: 3e:00:f2:c3:04:d2:09:37:89:40:49:27:e1:74:20: 58:cf:3b:fe:e8:27:49:36:b0:76:1e:91:b5:4a:da: 1c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:59:CC:3F:04:86:68:0F:A1:A6:82:AF:7A:EB:56:E2:19:30:00:B7 X509v3 Authority Key Identifier: keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/I1nMPwSGaA-hpoKveutW4hkwALc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.44.0.0/18 62.140.224.0/19 80.77.161.0-80.77.163.255 80.77.170.0/23 93.191.8.0/21 IPv6: 2a02:2518:3::/48 2a02:251b::/32 Signature Algorithm: sha256WithRSAEncryption 50:fd:6c:ec:a4:72:d9:27:d3:53:90:d9:03:b4:cf:5e:96:3b: ae:55:4e:f0:5e:0d:61:cb:0c:6d:73:15:9d:69:da:18:22:3e: ed:be:4c:0f:34:e0:69:3b:77:b1:50:96:c8:14:96:26:3f:b1: 59:71:4b:f0:15:2b:2a:d0:f5:85:55:9d:49:9d:d0:98:94:75: 65:b8:62:a1:63:29:3c:e5:c1:db:e3:99:e0:6e:92:71:c5:66: fb:ee:c0:3b:60:27:85:4c:59:34:4c:eb:0e:69:fc:bb:b1:3b: c4:b5:0b:02:3a:d5:6f:3c:77:03:8e:32:4c:c6:7b:8b:3d:55: 10:72:7c:03:ed:88:37:9f:a7:13:ee:57:93:4e:6b:b7:97:0c: e5:22:71:fc:1e:d8:f9:a3:fe:5e:e4:12:6f:a1:b4:b3:9a:db: 62:7a:70:0b:e4:3f:a0:4a:97:b2:1c:c1:e4:69:46:8a:30:ea: 51:38:8d:b1:f9:7c:bb:8b:fe:48:f2:5f:8e:07:75:e9:5a:8e: 04:79:76:be:00:bc:85:78:e4:8c:54:5b:75:10:09:ad:c5:15: b7:05:d0:be:97:1f:96:a2:41:c2:a5:60:51:de:f6:ab:ef:80: 32:29:f3:69:9e:84:d0:29:af:7f:3e:5d:44:c3:e8:55:01:25: b7:26:3a:56 -----BEGIN CERTIFICATE----- MIIFNTCCBB2gAwIBAgISAZt87bP62NqlnCIzWEprI40OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyOTAwZTQ2NTVhYjM0OWE0NjMyYjE0MDcxOWRjOTcyMzA0 MzE3MjUwHhcNMjYwMTAyMDQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzU5Y2MzZjA0ODY2ODBmYTFhNjgyYWY3YWViNTZlMjE5MzAwMGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVURMAe4uGlHC1rzuIoGSgWlyCKE SXf01OG6txBdhJgxWzoSpSZv8bJSHH2k/ZsLt5maiqtN1SgfVcG7oM0wXNN4EF2c cPHG1ERqXEU+l0G5IJRb73h+vRWI6NFJ3T6cFh0ZyA0F2/9r41YHA+K4guGBZzSM /igXFhPjbbocHeCkJ+dL/hlOYbYHzckUa6SJmSzH+7/4R2/3YakoDrPwbRKUR8fk s3EZgaZ8sPLuZWzQsUKOFe608BYLxoeLRxcu4eFPHWcLAw+IwSBB8DU3i2M09Got acBjnIU8DpLi9ec+APLDBNIJN4lASSfhdCBYzzv+6CdJNrB2HpG1StocXwIDAQAB o4ICQTCCAj0wHQYDVR0OBBYEFCNZzD8EhmgPoaaCr3rrVuIZMAC3MB8GA1UdIwQY MBaAFKKQDkZVqzSaRjKxQHGdyXIwQxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMt ZjRjNWZjM2NhMmM0LzEvSTFuTVB3U0dhQS1ocG9LdmV1dFc0aGt3QUxjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMtZjRjNWZjM2NhMmM0 LzEvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjAsBAIAATAmAwQGLiwAAwQF PozgMAwDBABQTaEDBAJQTaADBAFQTaoDBANdvwgwFgQCAAIwEAMHACoCJRgAAwMF ACoCJRswDQYJKoZIhvcNAQELBQADggEBAFD9bOykctkn01OQ2QO0z16WO65VTvBe DWHLDG1zFZ1p2hgiPu2+TA804Gk7d7FQlsgUliY/sVlxS/AVKyrQ9YVVnUmd0JiU dWW4YqFjKTzlwdvjmeBuknHFZvvuwDtgJ4VMWTRM6w5p/LuxO8S1CwI61W88dwOO MkzGe4s9VRByfAPtiDefpxPuV5NOa7eXDOUicfwe2Pmj/l7kEm+htLOa22J6cAvk P6BKl7IcweRpRoow6lE4jbH5fLuL/kjyX44HdelajgR5dr4AvIV45IxUW3UQCa3F FbcF0L6XH5aiQcKlYFHe9qvvgDIp82mehNApr38+XUTD6FUBJbcmOlY= -----END CERTIFICATE-----Generated at Mon Jan 26 03:40:53 2026 by rpki-client