This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/i1BjMoSXoEWlc23if0J_xkTVNk8.roa File: i1BjMoSXoEWlc23if0J_xkTVNk8.roa (raw, json) Hash identifier: l69kedN+dgUtEyfn899iCFRNjGmUnUexKwv+aYvezR4= Subject key identifier: 8B:50:63:32:84:97:A0:45:A5:73:6D:E2:7F:42:7F:C6:44:D5:36:4F Certificate issuer: /CN=83c103d65a54d6af1efba6ac3e63722028af2bb1 Certificate serial: 019B7E39157E7881334A72D456009E52EACA Authority key identifier: 83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/i1BjMoSXoEWlc23if0J_xkTVNk8.roa Signing time: Fri 02 Jan 2026 10:20:28 +0000 ROA not before: Fri 02 Jan 2026 10:20:28 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49544 IP address blocks: 66.22.196.0/22 maxlen: 22 66.22.200.0/22 maxlen: 22 66.22.204.0/22 maxlen: 22 66.22.208.0/22 maxlen: 22 66.22.212.0/22 maxlen: 22 66.22.216.0/23 maxlen: 23 66.22.218.0/23 maxlen: 23 66.22.220.0/23 maxlen: 23 66.22.222.0/23 maxlen: 23 66.22.224.0/23 maxlen: 23 66.22.226.0/23 maxlen: 23 66.22.230.0/24 maxlen: 24 66.22.231.0/24 maxlen: 24 66.22.232.0/24 maxlen: 24 66.22.233.0/24 maxlen: 24 66.22.234.0/24 maxlen: 24 66.22.235.0/24 maxlen: 24 66.22.236.0/24 maxlen: 24 66.22.237.0/24 maxlen: 24 66.22.238.0/24 maxlen: 24 66.22.239.0/24 maxlen: 24 66.22.240.0/24 maxlen: 24 66.22.241.0/24 maxlen: 24 66.22.242.0/24 maxlen: 24 66.22.243.0/24 maxlen: 24 66.22.244.0/24 maxlen: 24 66.22.245.0/24 maxlen: 24 66.22.246.0/24 maxlen: 24 66.22.247.0/24 maxlen: 24 66.22.248.0/24 maxlen: 24 2a0e:5940::/44 maxlen: 44 2a0e:5940:10::/44 maxlen: 44 2a0e:5940:20::/44 maxlen: 44 2a0e:5940:30::/44 maxlen: 44 2a0e:5940:40::/44 maxlen: 44 2a0e:5940:50::/44 maxlen: 44 2a0e:5940:60::/44 maxlen: 44 2a0e:5940:70::/44 maxlen: 44 2a0e:5940:80::/44 maxlen: 44 2a0e:5940:90::/44 maxlen: 44 2a0e:5940:a0::/44 maxlen: 44 2a0e:5940:b0::/44 maxlen: 44 2a0e:5940:c0::/44 maxlen: 44 2a0e:5940:d0::/44 maxlen: 44 2a0e:5940:e0::/44 maxlen: 44 2a0e:5940:f0::/44 maxlen: 44 2a0e:5940:100::/44 maxlen: 44 2a0e:5940:110::/44 maxlen: 44 2a0e:5940:120::/44 maxlen: 44 2a0e:5940:130::/44 maxlen: 44 2a0e:5940:140::/44 maxlen: 44 2a0e:5940:150::/44 maxlen: 44 2a0e:5940:160::/44 maxlen: 44 2a0e:5940:170::/44 maxlen: 44 2a0e:5940:180::/44 maxlen: 44 2a0e:5940:190::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.mft rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:39:15:7e:78:81:33:4a:72:d4:56:00:9e:52:ea:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83c103d65a54d6af1efba6ac3e63722028af2bb1 Validity Not Before: Jan 2 10:20:28 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8b5063328497a045a5736de27f427fc644d5364f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ac:db:a8:cd:d8:ea:c3:f1:e4:1c:92:21:33: b9:0f:19:66:8b:d9:6d:c1:50:5e:20:9f:6b:dc:1c: 8a:2e:70:a9:68:d6:6e:9d:a3:a6:5d:a3:e8:bc:7f: 6a:d2:85:1b:d4:de:25:a6:b8:21:17:9c:23:9a:09: ed:5c:c3:9c:a4:8a:f2:4a:19:6c:ab:4d:65:b8:ae: 4e:e7:17:f0:02:bd:18:d5:ea:de:c7:2e:8a:24:bb: c3:a5:1a:56:86:47:27:22:22:b6:35:60:7d:62:e2: 05:f0:55:37:65:33:9c:a0:e2:95:a1:da:25:c5:2c: 17:6b:2a:55:92:78:7a:be:6b:4c:8e:db:fb:eb:e4: 74:9c:91:39:4c:b9:4a:83:5c:32:4c:9e:71:d1:4d: 49:a0:86:7d:2b:72:b4:60:9c:2b:4a:e2:06:76:0a: 7b:22:cc:0f:fe:f1:f3:cd:84:97:3c:41:17:25:c4: 37:fc:0d:8e:30:52:f2:7d:b4:f7:e4:7c:85:d1:c9: 2f:43:42:17:7f:ed:db:7e:c7:eb:5b:44:37:1b:fb: 50:dd:1d:b1:7c:f9:9f:da:a3:78:c4:92:24:00:8c: 3f:1d:90:e3:b1:6c:c0:ca:8d:8e:a6:7c:ae:c5:b1: 8e:04:c6:0b:11:0c:13:c7:e1:a3:bb:db:3a:16:a6: 01:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:50:63:32:84:97:A0:45:A5:73:6D:E2:7F:42:7F:C6:44:D5:36:4F X509v3 Authority Key Identifier: keyid:83:C1:03:D6:5A:54:D6:AF:1E:FB:A6:AC:3E:63:72:20:28:AF:2B:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8ED1lpU1q8e-6asPmNyICivK7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/i1BjMoSXoEWlc23if0J_xkTVNk8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/081bd4-1210-4021-a864-b50cf5f2aa22/1/g8ED1lpU1q8e-6asPmNyICivK7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 66.22.196.0-66.22.227.255 66.22.230.0-66.22.248.255 IPv6: 2a0e:5940::-2a0e:5940:19f:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption b0:f1:91:e5:4e:30:2e:26:3c:f0:10:47:1d:9d:6f:a3:40:1c: 44:1c:db:46:5a:36:2e:f9:5b:8b:63:42:10:4c:64:77:db:56: 2b:ca:c1:73:d4:20:5d:28:87:39:74:5c:72:35:dc:a1:76:e4: 67:12:e2:84:38:95:18:b4:20:00:83:64:3f:1d:6a:eb:68:30: ba:8d:5e:df:3a:1b:44:1f:e9:13:32:86:d5:f0:52:db:ed:07: 22:9a:ad:de:bb:d2:9d:07:42:a5:83:4d:53:c6:f2:a4:a2:ac: 1f:ea:2f:3c:29:dc:21:ee:cc:db:45:42:52:51:ac:c6:f3:d0: 93:62:30:26:9b:84:75:cf:83:b6:c3:53:fb:4e:82:81:e1:9d: a6:1f:54:12:80:23:13:68:2a:ad:b6:a4:81:1a:c3:30:d3:69: dd:62:43:7c:42:0a:f4:83:e7:f4:cd:f1:db:3b:78:2f:83:5a: 0a:d1:83:9b:ff:af:8f:1c:55:96:df:30:8b:c5:fc:f9:d3:b6: 7b:0b:a2:2a:91:8a:71:d7:0d:99:b9:e6:64:91:c4:7b:c1:36: 41:35:98:3c:fd:9d:d8:5a:18:70:c5:29:ab:e0:46:17:b8:c7: 71:dc:00:ab:1c:31:ec:16:a4:79:01:73:75:2d:0c:ab:39:95: 28:7c:91:bf -----BEGIN CERTIFICATE----- MIIFLTCCBBWgAwIBAgISAZt+ORV+eIEzSnLUVgCeUurKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzYzEwM2Q2NWE1NGQ2YWYxZWZiYTZhYzNlNjM3MjIwMjhh ZjJiYjEwHhcNMjYwMTAyMTAyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YjUwNjMzMjg0OTdhMDQ1YTU3MzZkZTI3ZjQyN2ZjNjQ0ZDUzNjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqzbqM3Y6sPx5BySITO5Dxlmi9lt wVBeIJ9r3ByKLnCpaNZunaOmXaPovH9q0oUb1N4lprghF5wjmgntXMOcpIryShls q01luK5O5xfwAr0Y1erexy6KJLvDpRpWhkcnIiK2NWB9YuIF8FU3ZTOcoOKVodol xSwXaypVknh6vmtMjtv76+R0nJE5TLlKg1wyTJ5x0U1JoIZ9K3K0YJwrSuIGdgp7 IswP/vHzzYSXPEEXJcQ3/A2OMFLyfbT35HyF0ckvQ0IXf+3bfsfrW0Q3G/tQ3R2x fPmf2qN4xJIkAIw/HZDjsWzAyo2OpnyuxbGOBMYLEQwTx+Gju9s6FqYBPQIDAQAB o4ICOTCCAjUwHQYDVR0OBBYEFItQYzKEl6BFpXNt4n9Cf8ZE1TZPMB8GA1UdIwQY MBaAFIPBA9ZaVNavHvumrD5jciAoryuxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzhFRDFscFUxcThlLTZhc1BtTnlJQ2l2SzdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wODFiZDQtMTIxMC00MDIxLWE4NjQt YjUwY2Y1ZjJhYTIyLzEvaTFCak1vU1hvRVdsYzIzaWYwSl94a1RWTms4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8wODFiZDQtMTIxMC00MDIxLWE4NjQtYjUwY2Y1ZjJhYTIy LzEvZzhFRDFscFUxcThlLTZhc1BtTnlJQ2l2SzdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjAiBAIAATAcMAwDBAJCFsQD BAJCFuAwDAMEAUIW5gMEAEIW+DAYBAIAAjASMBADBQYqDllAAwcFKg5ZQAGAMA0G CSqGSIb3DQEBCwUAA4IBAQCw8ZHlTjAuJjzwEEcdnW+jQBxEHNtGWjYu+VuLY0IQ TGR321YrysFz1CBdKIc5dFxyNdyhduRnEuKEOJUYtCAAg2Q/HWrraDC6jV7fOhtE H+kTMobV8FLb7Qcimq3eu9KdB0Klg01TxvKkoqwf6i88Kdwh7szbRUJSUazG89CT YjAmm4R1z4O2w1P7ToKB4Z2mH1QSgCMTaCqttqSBGsMw02ndYkN8Qgr0g+f0zfHb O3gvg1oK0YOb/6+PHFWW3zCLxfz507Z7C6IqkYpx1w2ZueZkkcR7wTZBNZg8/Z3Y WhhwxSmr4EYXuMdx3ACrHDHsFqR5AXN1LQyrOZUofJG/ -----END CERTIFICATE-----Generated at Sat Jan 3 03:54:55 2026 by rpki-client