This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/1xg6uXkk6yTEq-7aZtmgQlD1jdE.roa File: 1xg6uXkk6yTEq-7aZtmgQlD1jdE.roa (raw, json) Hash identifier: 1cqPiawxoH5dhFlRLBeLe2fF7DTjb1dFa/aSbu1gcPI= Subject key identifier: D7:18:3A:B9:79:24:EB:24:C4:AB:EE:DA:66:D9:A0:42:50:F5:8D:D1 Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839 Certificate serial: 019BEF9BE70FBFFFF19BF76A031B9BF85E5B Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/1xg6uXkk6yTEq-7aZtmgQlD1jdE.roa Signing time: Sat 24 Jan 2026 10:45:30 +0000 ROA not before: Sat 24 Jan 2026 10:45:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209641 IP address blocks: 46.243.7.0/24 maxlen: 24 91.200.14.0/24 maxlen: 24 91.200.15.0/24 maxlen: 24 92.62.119.0/24 maxlen: 24 94.232.248.0/24 maxlen: 24 95.81.76.0/24 maxlen: 24 95.81.114.0/24 maxlen: 24 95.81.115.0/24 maxlen: 24 95.81.123.0/24 maxlen: 24 95.81.124.0/24 maxlen: 24 95.81.125.0/24 maxlen: 24 104.128.128.0/24 maxlen: 24 104.128.129.0/24 maxlen: 24 109.69.60.0/24 maxlen: 24 185.87.48.0/22 maxlen: 22 185.87.48.0/24 maxlen: 24 185.87.49.0/24 maxlen: 24 185.87.50.0/24 maxlen: 24 185.87.51.0/24 maxlen: 24 185.117.152.0/22 maxlen: 22 2a06:ddc0::/29 maxlen: 29 2a0b:8040::/29 maxlen: 29 2a0b:d900::/29 maxlen: 29 2a0c:5d00:2001::/48 maxlen: 48 2a0c:6980::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:ef:9b:e7:0f:bf:ff:f1:9b:f7:6a:03:1b:9b:f8:5e:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839 Validity Not Before: Jan 24 10:45:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7183ab97924eb24c4abeeda66d9a04250f58dd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:47:24:17:1a:92:87:0d:1f:11:20:bb:d0:de: e4:95:ca:65:e9:5b:49:62:9f:0d:c3:9f:24:84:75: 3a:ac:f3:63:d6:41:2b:37:c3:3e:10:cb:a7:18:8f: 35:c8:59:8e:bd:c7:15:82:4e:ed:be:f6:2e:3d:d3: d7:be:48:c8:6a:89:9d:6a:9e:33:4b:db:9f:13:c4: 5f:cb:c7:c6:d0:62:e3:c0:d4:29:1b:b1:a5:f6:7e: 30:b3:c3:8c:a4:05:2a:50:2c:5e:70:a5:5d:37:23: 4f:0a:c0:35:cb:7e:e8:9e:7c:6e:b9:94:60:1f:38: ba:2d:4c:f5:c7:31:a4:ba:aa:37:f3:68:d0:ba:d7: b7:4e:55:63:30:fe:95:dd:f0:71:7f:c9:55:79:1d: 27:5d:38:ed:15:29:ed:b6:f1:0c:76:17:2b:53:0e: 8a:17:58:3e:a8:05:80:fa:4c:a3:c7:c7:a2:a3:19: cf:32:2d:6b:e7:bc:76:74:3c:7e:37:b1:92:63:1f: 7a:34:e3:67:5a:c5:fe:c8:f9:73:97:9d:8a:e4:39: 75:d2:b1:39:c7:bc:2d:1d:96:2c:d8:8b:c4:1c:85: 58:ff:d1:0e:36:35:61:8c:4a:fd:35:02:3f:7f:49: 93:8f:2c:db:26:48:2f:83:a5:c7:24:37:c3:c6:9d: a7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:18:3A:B9:79:24:EB:24:C4:AB:EE:DA:66:D9:A0:42:50:F5:8D:D1 X509v3 Authority Key Identifier: keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/1xg6uXkk6yTEq-7aZtmgQlD1jdE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.243.7.0/24 91.200.14.0/23 92.62.119.0/24 94.232.248.0/24 95.81.76.0/24 95.81.114.0/23 95.81.123.0-95.81.125.255 104.128.128.0/23 109.69.60.0/24 185.87.48.0/22 185.117.152.0/22 IPv6: 2a06:ddc0::/29 2a0b:8040::/29 2a0b:d900::/29 2a0c:5d00:2001::/48 2a0c:6980::/29 Signature Algorithm: sha256WithRSAEncryption 89:31:a8:f5:f5:03:06:b4:8d:f6:97:13:3e:30:89:d4:67:0b: 52:dc:be:0d:88:d6:1f:53:11:96:a6:4f:da:4a:04:12:25:40: f8:bf:77:c0:6d:b2:1f:c3:9d:dc:e6:44:6b:32:96:b2:98:d8: 92:f0:34:99:b6:f6:43:10:03:41:b5:00:eb:d7:51:f7:be:0a: 8b:b9:99:c2:82:4e:07:30:07:a2:cb:b1:56:90:6b:df:77:fd: 35:bd:7c:38:55:ef:8a:db:3e:cc:68:ad:1e:c2:c3:4b:bc:ba: ff:7c:5c:0a:21:16:0c:d2:9a:54:c5:0d:62:84:0b:ae:1a:d2: 11:51:d1:72:ea:b9:c1:a9:98:05:f9:f6:01:2b:f7:60:e6:84: 29:ef:24:df:31:88:0d:6d:65:b6:c3:5f:ab:df:9b:8e:13:8a: 82:57:b7:bb:99:0f:30:ef:76:30:97:29:52:5f:25:f9:13:53: a7:65:2f:81:2b:89:70:82:a4:07:f8:f0:18:a7:e0:5f:6b:54: 17:57:e2:2a:dc:32:8f:06:05:7b:37:33:01:ac:1f:11:6f:10: 4b:5c:15:27:00:c9:42:05:51:5d:57:2d:7a:35:26:cb:9a:84: a3:39:4c:73:30:82:e8:88:b8:08:72:f0:85:ce:57:4b:80:c0: 97:7e:38:ae -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgISAZvvm+cPv//xm/dqAxub+F5bMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx ZmE4MzkwHhcNMjYwMTI0MTA0NTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzE4M2FiOTc5MjRlYjI0YzRhYmVlZGE2NmQ5YTA0MjUwZjU4ZGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkckFxqShw0fESC70N7klcpl6VtJ Yp8Nw58khHU6rPNj1kErN8M+EMunGI81yFmOvccVgk7tvvYuPdPXvkjIaomdap4z S9ufE8Rfy8fG0GLjwNQpG7Gl9n4ws8OMpAUqUCxecKVdNyNPCsA1y37onnxuuZRg Hzi6LUz1xzGkuqo382jQute3TlVjMP6V3fBxf8lVeR0nXTjtFSnttvEMdhcrUw6K F1g+qAWA+kyjx8eioxnPMi1r57x2dDx+N7GSYx96NONnWsX+yPlzl52K5Dl10rE5 x7wtHZYs2IvEHIVY/9EONjVhjEr9NQI/f0mTjyzbJkgvg6XHJDfDxp2nawIDAQAB o4ICfDCCAngwHQYDVR0OBBYEFNcYOrl5JOskxKvu2mbZoEJQ9Y3RMB8GA1UdIwQY MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt MzA0OTVmNDAzNzg0LzEvMXhnNnVYa2s2eVRFcS03YVp0bWdRbEQxamRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0 LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGRBggrBgEFBQcBBwEB/wSBgTB/MFAEAgABMEoDBAAu8wcD BAFbyA4DBABcPncDBABe6PgDBABfUUwDBAFfUXIwDAMEAF9RewMEAV9RfAMEAWiA gAMEAG1FPAMEArlXMAMEArl1mDArBAIAAjAlAwUDKgbdwAMFAyoLgEADBQMqC9kA AwcAKgxdACABAwUDKgxpgDANBgkqhkiG9w0BAQsFAAOCAQEAiTGo9fUDBrSN9pcT PjCJ1GcLUty+DYjWH1MRlqZP2koEEiVA+L93wG2yH8Od3OZEazKWspjYkvA0mbb2 QxADQbUA69dR974Ki7mZwoJOBzAHosuxVpBr33f9Nb18OFXvits+zGitHsLDS7y6 /3xcCiEWDNKaVMUNYoQLrhrSEVHRcuq5wamYBfn2ASv3YOaEKe8k3zGIDW1ltsNf q9+bjhOKgle3u5kPMO92MJcpUl8l+RNTp2UvgSuJcIKkB/jwGKfgX2tUF1fiKtwy jwYFezczAawfEW8QS1wVJwDJQgVRXVctejUmy5qEozlMczCC6Ii4CHLwhc5XS4DA l344rg== -----END CERTIFICATE-----Generated at Mon Jan 26 02:02:35 2026 by rpki-client