This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/0__3uu441ZiJpdZTdly3claw1QU.roa File: 0__3uu441ZiJpdZTdly3claw1QU.roa (raw, json) Hash identifier: tJBE+cXnygPZEMRkDhGb/X3nvMCsKUh56HPkw6m7O5Y= Subject key identifier: D3:FF:F7:BA:EE:38:D5:98:89:A5:D6:53:76:5C:B7:72:56:B0:D5:05 Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Certificate serial: 019B7F83057BE304EB9072D3DD24F5EFC0C0 Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/0__3uu441ZiJpdZTdly3claw1QU.roa Signing time: Fri 02 Jan 2026 16:20:51 +0000 ROA not before: Fri 02 Jan 2026 16:20:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 174 IP address blocks: 46.233.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 17:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:05:7b:e3:04:eb:90:72:d3:dd:24:f5:ef:c0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Validity Not Before: Jan 2 16:20:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3fff7baee38d59889a5d653765cb77256b0d505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:06:51:86:e2:26:3c:c5:2e:b6:8b:49:a1:33: 6b:a8:d0:2e:cb:cf:41:cd:e8:a7:c4:63:04:31:cc: 9d:5b:1c:ea:78:86:a2:97:3b:3b:b2:6a:bf:28:89: 79:b4:67:12:86:55:42:29:be:30:ef:c5:16:fd:b0: 5a:83:85:74:0e:50:85:98:8a:2b:b6:34:15:95:fb: 4b:be:bd:0f:37:1a:9d:af:66:6c:fd:4a:ac:37:d1: a3:85:39:ff:4d:b4:2b:b3:85:12:f2:44:0a:67:93: b4:4d:5f:44:67:ed:cc:27:8e:97:a8:75:06:8c:22: a8:39:60:88:8a:d6:03:e4:ba:5e:65:b8:27:18:b6: 49:66:54:01:43:ec:97:56:bc:67:f1:bf:81:a7:ce: e3:29:79:5a:16:eb:1f:f6:9f:0e:b6:b6:b5:aa:4c: c9:88:d6:d8:13:b5:35:59:ec:19:56:a9:3e:ed:dc: 78:99:ba:82:0c:a6:a0:14:9c:33:f0:a3:17:cd:90: e6:da:79:c8:c2:c2:f1:b8:9a:cc:3d:8f:1a:c9:d0: 8f:42:6d:b3:e3:5a:1a:b7:39:8a:61:86:60:03:3b: 33:a5:fc:43:74:71:6f:76:5d:78:58:9e:b7:17:f5: 78:65:bb:83:64:fc:9a:f2:13:3b:74:2f:c0:16:31: 7a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:FF:F7:BA:EE:38:D5:98:89:A5:D6:53:76:5C:B7:72:56:B0:D5:05 X509v3 Authority Key Identifier: keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/0__3uu441ZiJpdZTdly3claw1QU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.233.42.0/24 Signature Algorithm: sha256WithRSAEncryption 66:52:e8:ff:c6:e4:ac:0f:04:56:31:91:9e:ea:42:b0:61:e7: c8:45:59:7f:f2:3c:c5:c0:11:9e:6b:e5:c3:5c:62:35:18:22: 94:b5:c4:aa:3a:26:fa:ac:6b:f1:c7:6b:b4:57:3d:3e:45:03: ee:f7:d9:fa:1a:ab:f0:f8:2e:c6:ab:fd:f0:89:8f:4d:ab:5a: 51:bb:68:0e:e1:75:8e:73:62:28:03:e6:c6:d0:ce:bc:25:f6: 8c:9a:71:7c:de:6b:74:b8:0c:ec:bc:c4:f0:86:77:8d:34:46: 73:a7:59:35:8c:79:8c:06:52:f0:45:bc:15:b2:bf:77:3a:2e: 83:2d:15:56:e6:81:ed:dd:22:76:4a:fb:3e:3d:30:ea:86:f5: f2:f8:cd:4c:1d:dc:f8:af:0f:bd:a9:eb:7f:55:bd:49:68:db: 85:09:26:4e:7c:7e:63:db:ce:eb:04:82:4e:cb:43:b7:c0:f0: 30:d5:39:bc:a8:02:c7:94:a9:18:91:44:2b:32:c2:34:46:fa: 7f:89:16:31:e9:fd:cf:9f:fa:5b:ec:5d:18:c8:80:a0:e9:0c: ea:45:09:38:6e:30:dd:c9:d1:c6:79:56:10:2d:31:e5:52:3c: b7:9c:ed:63:f8:d3:03:f0:e8:5e:a5:cb:15:5f:fb:50:4f:00: 01:4a:25:57 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gwV74wTrkHLT3ST178DAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1 ZDU2ZjUwHhcNMjYwMTAyMTYyMDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2ZmZjdiYWVlMzhkNTk4ODlhNWQ2NTM3NjVjYjc3MjU2YjBkNTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwZRhuImPMUutotJoTNrqNAuy89B zeinxGMEMcydWxzqeIailzs7smq/KIl5tGcShlVCKb4w78UW/bBag4V0DlCFmIor tjQVlftLvr0PNxqdr2Zs/UqsN9GjhTn/TbQrs4US8kQKZ5O0TV9EZ+3MJ46XqHUG jCKoOWCIitYD5LpeZbgnGLZJZlQBQ+yXVrxn8b+Bp87jKXlaFusf9p8Otra1qkzJ iNbYE7U1WewZVqk+7dx4mbqCDKagFJwz8KMXzZDm2nnIwsLxuJrMPY8aydCPQm2z 41oatzmKYYZgAzszpfxDdHFvdl14WJ63F/V4ZbuDZPya8hM7dC/AFjF6YQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNP/97ruONWYiaXWU3Zct3JWsNUFMB8GA1UdIwQY MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt M2MxNmZmODQxYWIyLzEvMF9fM3V1NDQxWmlKcGRaVGRseTNjbGF3MVFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALukqMA0G CSqGSIb3DQEBCwUAA4IBAQBmUuj/xuSsDwRWMZGe6kKwYefIRVl/8jzFwBGea+XD XGI1GCKUtcSqOib6rGvxx2u0Vz0+RQPu99n6Gqvw+C7Gq/3wiY9Nq1pRu2gO4XWO c2IoA+bG0M68JfaMmnF83mt0uAzsvMTwhneNNEZzp1k1jHmMBlLwRbwVsr93Oi6D LRVW5oHt3SJ2Svs+PTDqhvXy+M1MHdz4rw+9qet/Vb1JaNuFCSZOfH5j287rBIJO y0O3wPAw1Tm8qALHlKkYkUQrMsI0Rvp/iRYx6f3Pn/pb7F0YyICg6QzqRQk4bjDd ydHGeVYQLTHlUjy3nO1j+NMD8OhepcsVX/tQTwABSiVX -----END CERTIFICATE-----Generated at Mon Jan 12 00:50:23 2026 by rpki-client