This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/JtbY0FQzOJRnoTP2ZFPSZaRelpg.roa File: JtbY0FQzOJRnoTP2ZFPSZaRelpg.roa (raw, json) Hash identifier: fMqCLhQrv0nksxCKmBYDHrUOhFa10GxwpIAcTIeduuc= Subject key identifier: 26:D6:D8:D0:54:33:38:94:67:A1:33:F6:64:53:D2:65:A4:5E:96:98 Certificate issuer: /CN=29390ec0adca5f0743d181145c7899f991fb65e0 Certificate serial: 019B30BA8970E0DEC71B1C2697D91CDE9523 Authority key identifier: 29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/JtbY0FQzOJRnoTP2ZFPSZaRelpg.roa Signing time: Thu 18 Dec 2025 09:11:29 +0000 ROA not before: Thu 18 Dec 2025 09:11:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 2854 IP address blocks: 46.111.0.0/20 maxlen: 20 46.111.120.0/21 maxlen: 21 46.111.128.0/21 maxlen: 21 185.128.196.0/24 maxlen: 24 194.84.46.0/24 maxlen: 24 195.151.140.0/23 maxlen: 23 195.151.242.0/24 maxlen: 24 212.176.0.0/19 maxlen: 19 212.176.32.0/19 maxlen: 19 212.176.64.0/19 maxlen: 19 212.176.96.0/19 maxlen: 19 212.176.128.0/20 maxlen: 20 212.176.224.0/19 maxlen: 19 2a00:1ec8:27::/48 maxlen: 48 2a00:1ec8:38::/48 maxlen: 48 2a00:1ec8:54::/48 maxlen: 48 2a00:1ec8:61::/48 maxlen: 48 2a00:1ec8:63::/48 maxlen: 48 2a00:1ec8:66::/48 maxlen: 48 2a00:1ec8:77::/48 maxlen: 48 2a00:1ec8:78::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 06:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:30:ba:89:70:e0:de:c7:1b:1c:26:97:d9:1c:de:95:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29390ec0adca5f0743d181145c7899f991fb65e0 Validity Not Before: Dec 18 09:11:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=26d6d8d05433389467a133f66453d265a45e9698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:72:19:f7:ed:38:4e:84:6f:23:cc:43:c8:e3: 79:bc:b1:01:d8:cd:2f:7c:72:a4:dc:a5:11:1e:cd: 8e:ec:e2:82:cc:93:8d:c0:dd:d9:fc:ba:01:17:99: 55:fb:02:bd:ee:f8:4c:53:5e:24:54:d9:65:fd:3f: df:e8:8f:51:46:3d:4f:f1:37:3c:7b:d4:92:88:66: 1d:3a:96:80:05:25:3c:c3:54:85:0d:b0:2f:05:d2: 1f:b8:b7:97:4d:46:84:94:86:90:e2:70:91:28:87: 12:e7:5a:02:b9:fb:1d:c2:05:98:d5:7f:7c:55:a6: 44:fc:9b:1b:02:af:64:75:d8:75:f6:13:49:6b:b3: 40:a7:1a:a7:13:9e:78:35:f8:a0:8d:25:a0:0d:12: 0c:56:a6:9d:be:74:85:64:31:42:2a:ad:77:50:89: b6:11:25:7a:72:f1:14:31:08:fc:86:d8:d9:b8:67: d4:2b:89:23:06:81:79:e2:ab:7c:52:46:42:1a:8e: 2f:4f:48:5a:2d:6d:62:b2:72:91:62:c7:47:9b:c9: 16:49:19:26:3c:07:5a:cd:64:50:c1:56:64:a9:cb: 49:0f:da:2e:95:2e:7f:4d:68:8f:36:55:7a:78:ce: a2:5b:07:9d:93:81:d5:ed:89:e9:49:7b:17:dd:d4: 9c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D6:D8:D0:54:33:38:94:67:A1:33:F6:64:53:D2:65:A4:5E:96:98 X509v3 Authority Key Identifier: keyid:29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/JtbY0FQzOJRnoTP2ZFPSZaRelpg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.111.0.0/20 46.111.120.0-46.111.135.255 185.128.196.0/24 194.84.46.0/24 195.151.140.0/23 195.151.242.0/24 212.176.0.0-212.176.143.255 212.176.224.0/19 IPv6: 2a00:1ec8:27::/48 2a00:1ec8:38::/48 2a00:1ec8:54::/48 2a00:1ec8:61::/48 2a00:1ec8:63::/48 2a00:1ec8:66::/48 2a00:1ec8:77::-2a00:1ec8:78:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 52:8f:43:60:3e:da:3d:e1:28:8e:86:87:d7:a0:ee:f1:f7:fc: ac:04:d0:2f:e7:05:c5:fa:0c:05:64:3a:a2:c0:c8:8e:94:6b: a4:be:4a:1a:38:1a:a6:9f:db:13:f7:37:d3:c5:c2:df:29:07: e6:f6:2f:ec:06:a4:8a:2a:98:e0:9a:ab:2b:f8:42:45:bb:c4: 2e:88:bd:f3:a5:c1:de:0c:60:83:5d:8c:83:a2:d4:fe:57:81: fa:fe:dc:a9:ed:4e:4d:cf:e5:f6:ea:de:fa:06:0d:f9:ea:a8: 99:27:b7:21:8e:70:c7:cd:ef:5d:fc:d6:bb:8b:b3:54:eb:81: c6:14:1c:76:9b:13:2b:ac:a8:68:79:15:98:74:59:92:37:73: 23:60:54:10:6e:e2:03:9a:d9:a2:2f:d8:6d:db:dc:ac:48:9d: 21:11:48:5d:6b:a8:71:41:d8:24:b9:8a:a8:53:d4:ff:c0:bc: f5:04:d6:70:73:d1:7f:a8:df:71:63:fd:1b:36:67:84:ad:f4: 22:5c:1d:7c:68:7c:ef:5e:f2:51:ed:9a:02:af:6b:1e:2c:7a: 39:9d:ae:53:63:50:dd:0f:1c:ce:9c:af:b4:03:65:50:ec:3f: 4f:e0:2d:24:95:7e:32:07:7c:4c:58:65:91:e8:bb:64:52:04: ed:ef:b5:45 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgISAZswuolw4N7HGxwml9kc3pUjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MzkwZWMwYWRjYTVmMDc0M2QxODExNDVjNzg5OWY5OTFm YjY1ZTAwHhcNMjUxMjE4MDkxMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNmQ2ZDhkMDU0MzMzODk0NjdhMTMzZjY2NDUzZDI2NWE0NWU5Njk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHIZ9+04ToRvI8xDyON5vLEB2M0v fHKk3KURHs2O7OKCzJONwN3Z/LoBF5lV+wK97vhMU14kVNll/T/f6I9RRj1P8Tc8 e9SSiGYdOpaABSU8w1SFDbAvBdIfuLeXTUaElIaQ4nCRKIcS51oCufsdwgWY1X98 VaZE/JsbAq9kddh19hNJa7NApxqnE554NfigjSWgDRIMVqadvnSFZDFCKq13UIm2 ESV6cvEUMQj8htjZuGfUK4kjBoF54qt8UkZCGo4vT0haLW1isnKRYsdHm8kWSRkm PAdazWRQwVZkqctJD9oulS5/TWiPNlV6eM6iWwedk4HV7YnpSXsX3dSc4QIDAQAB o4IClzCCApMwHQYDVR0OBBYEFCbW2NBUMziUZ6Ez9mRT0mWkXpaYMB8GA1UdIwQY MBaAFCk5DsCtyl8HQ9GBFFx4mfmR+2XgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9iMzEzOTItMmQxYy00OTM0LWE1OWUt ZWQ0MzNhYWM3ODI4LzEvSnRiWTBGUXpPSlJub1RQMlpGUFNaYVJlbHBnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9iMzEzOTItMmQxYy00OTM0LWE1OWUtZWQ0MzNhYWM3ODI4 LzEvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMIGsBggrBgEFBQcBBwEB/wSBnDCBmTBFBAIAATA/AwQELm8A MAwDBAMub3gDBAMub4ADBAC5gMQDBADCVC4DBAHDl4wDBADDl/IwCwMDBNSwAwQE 1LCAAwQF1LDgMFAEAgACMEoDBwAqAB7IACcDBwAqAB7IADgDBwAqAB7IAFQDBwAq AB7IAGEDBwAqAB7IAGMDBwAqAB7IAGYwEgMHACoAHsgAdwMHACoAHsgAeDANBgkq hkiG9w0BAQsFAAOCAQEAUo9DYD7aPeEojoaH16Du8ff8rATQL+cFxfoMBWQ6osDI jpRrpL5KGjgapp/bE/c308XC3ykH5vYv7AakiiqY4JqrK/hCRbvELoi986XB3gxg g12Mg6LU/leB+v7cqe1OTc/l9ure+gYN+eqomSe3IY5wx83vXfzWu4uzVOuBxhQc dpsTK6yoaHkVmHRZkjdzI2BUEG7iA5rZoi/YbdvcrEidIRFIXWuocUHYJLmKqFPU /8C89QTWcHPRf6jfcWP9GzZnhK30IlwdfGh8717yUe2aAq9rHix6OZ2uU2NQ3Q8c zpyvtANlUOw/T+AtJJV+Mgd8TFhlkei7ZFIE7e+1RQ== -----END CERTIFICATE-----Generated at Sat Dec 20 13:28:07 2025 by rpki-client