This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/l85MsveVC4VRyta1Pr3Wv2Mz9Uc.roa File: l85MsveVC4VRyta1Pr3Wv2Mz9Uc.roa (raw, json) Hash identifier: 1339z7QQmPfUk60TSdZgZE0hq+KiRCqz1Ride8dk8So= Subject key identifier: 97:CE:4C:B2:F7:95:0B:85:51:CA:D6:B5:3E:BD:D6:BF:63:33:F5:47 Certificate issuer: /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866 Certificate serial: 019B7CEE43EB090E0EFD803B1600EEF79E4D Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/l85MsveVC4VRyta1Pr3Wv2Mz9Uc.roa Signing time: Fri 02 Jan 2026 04:19:08 +0000 ROA not before: Fri 02 Jan 2026 04:19:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213852 IP address blocks: 46.34.163.0/24 maxlen: 24 89.42.199.0/24 maxlen: 24 92.114.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:43:eb:09:0e:0e:fd:80:3b:16:00:ee:f7:9e:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866 Validity Not Before: Jan 2 04:19:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=97ce4cb2f7950b8551cad6b53ebdd6bf6333f547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:df:ea:2f:74:96:e3:a0:a7:ac:bb:cf:9a:87: 24:c6:79:42:88:0f:14:39:ef:dd:79:68:12:a3:ed: 3c:2a:2d:c4:93:ea:2d:19:6a:01:1c:b9:3b:91:79: 71:d0:19:93:fd:f9:88:e1:2d:da:cf:58:f0:b2:72: ff:f8:cc:37:18:71:bc:9a:7d:61:b9:10:63:3c:9b: c2:a2:ce:fd:d4:38:62:10:72:0a:4a:c6:17:5e:98: 56:89:61:12:7f:6f:22:8f:9f:13:46:a5:04:1c:fb: d4:68:21:e2:b2:bb:9f:a2:e1:54:9b:2c:df:4a:a0: 5a:8b:f8:31:54:b9:6e:22:38:9a:3c:e6:83:83:e8: 97:29:b9:11:23:09:db:f3:f9:df:df:48:8f:10:9c: 1a:79:02:c0:14:95:c1:4d:39:12:2f:ba:95:8b:94: ac:7c:c5:48:71:d2:68:c6:2c:d4:aa:26:12:09:a7: 28:26:6b:c5:e6:5e:3a:5f:bf:90:dd:32:9f:a0:c3: 82:ec:6d:5b:e2:01:d6:92:30:de:53:48:e0:71:3d: 45:ea:59:3c:7c:54:87:77:3a:bf:9e:d2:14:7c:7f: a9:1a:15:ea:d6:ad:76:de:32:df:87:50:af:76:31: 5f:e0:b8:76:3e:19:0d:3b:09:eb:11:5a:34:99:8d: d3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:CE:4C:B2:F7:95:0B:85:51:CA:D6:B5:3E:BD:D6:BF:63:33:F5:47 X509v3 Authority Key Identifier: keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/l85MsveVC4VRyta1Pr3Wv2Mz9Uc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.34.163.0/24 89.42.199.0/24 92.114.51.0/24 Signature Algorithm: sha256WithRSAEncryption bd:d4:30:9f:65:89:97:bd:04:6b:ec:3d:56:ba:3e:81:a2:b9: a1:42:87:69:d7:26:30:70:1e:04:0a:35:a3:12:97:50:69:47: f9:81:28:64:68:c2:88:4d:40:65:be:b2:a8:eb:2e:96:f2:b6: 99:b7:4a:43:2c:bb:4e:6c:cd:e9:bc:02:f1:38:80:05:30:6e: c1:b8:24:4a:79:57:e5:b8:90:74:85:6c:41:c1:14:06:07:19: e6:2d:8a:fe:a8:dd:c1:15:c0:7c:ff:36:7d:79:a6:57:e8:29: 37:ac:bf:d0:f7:59:fc:95:d9:2d:38:93:b6:ab:64:9c:96:e8: 92:17:6a:8b:28:b0:ce:49:76:fa:03:53:de:37:bd:8c:82:4f: 4b:f5:c7:b1:0c:e4:49:8f:e5:8e:ea:16:16:d4:32:13:05:df: 8b:e7:6b:cc:43:18:a7:7b:70:81:ce:2d:c4:65:d3:26:03:ec: 7b:9d:ac:e1:98:8f:67:de:34:0a:f2:61:b3:47:2d:6a:da:47: 02:cc:dd:8e:38:9c:d6:29:60:92:45:3f:d6:e6:72:31:97:42: be:7f:d7:21:d6:87:d2:19:7a:d7:1c:bf:88:90:98:bc:db:f4: ad:8f:f0:e3:ad:e3:22:6a:03:d7:34:27:e7:ef:bc:fb:2e:0b: 67:77:98:35 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt87kPrCQ4O/YA7FgDu955NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2ZTFjOGM2NWM4NmU4ZDI2ZGRiZWI2ODY1OGEzOWE3YThl Mjc4NjYwHhcNMjYwMTAyMDQxOTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5N2NlNGNiMmY3OTUwYjg1NTFjYWQ2YjUzZWJkZDZiZjYzMzNmNTQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzN/qL3SW46CnrLvPmockxnlCiA8U Oe/deWgSo+08Ki3Ek+otGWoBHLk7kXlx0BmT/fmI4S3az1jwsnL/+Mw3GHG8mn1h uRBjPJvCos791DhiEHIKSsYXXphWiWESf28ij58TRqUEHPvUaCHisrufouFUmyzf SqBai/gxVLluIjiaPOaDg+iXKbkRIwnb8/nf30iPEJwaeQLAFJXBTTkSL7qVi5Ss fMVIcdJoxizUqiYSCacoJmvF5l46X7+Q3TKfoMOC7G1b4gHWkjDeU0jgcT1F6lk8 fFSHdzq/ntIUfH+pGhXq1q123jLfh1CvdjFf4Lh2PhkNOwnrEVo0mY3T3wIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJfOTLL3lQuFUcrWtT691r9jM/VHMB8GA1UdIwQY MBaAFMbhyMZchujSbdvraGWKOaeo4nhmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveHVISXhseUc2Tkp0Mi10b1pZbzVwNmppZUdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hNDUzZmUtYTY2NC00N2EyLThiOGEt Y2U1ZTAxZTcxYzkxLzEvbDg1TXN2ZVZDNFZSeXRhMVByM1d2Mk16OVVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9hNDUzZmUtYTY2NC00N2EyLThiOGEtY2U1ZTAxZTcxYzkx LzEveHVISXhseUc2Tkp0Mi10b1pZbzVwNmppZUdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALiKjAwQA WSrHAwQAXHIzMA0GCSqGSIb3DQEBCwUAA4IBAQC91DCfZYmXvQRr7D1Wuj6Bormh Qodp1yYwcB4ECjWjEpdQaUf5gShkaMKITUBlvrKo6y6W8raZt0pDLLtObM3pvALx OIAFMG7BuCRKeVfluJB0hWxBwRQGBxnmLYr+qN3BFcB8/zZ9eaZX6Ck3rL/Q91n8 ldktOJO2q2ScluiSF2qLKLDOSXb6A1PeN72Mgk9L9cexDORJj+WO6hYW1DITBd+L 52vMQxine3CBzi3EZdMmA+x7nazhmI9n3jQK8mGzRy1q2kcCzN2OOJzWKWCSRT/W 5nIxl0K+f9ch1ofSGXrXHL+IkJi82/Stj/DjreMiagPXNCfn77z7Lgtnd5g1 -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:43 2026 by rpki-client