This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/4qXSv4pSAqpnU74tHbocpsl5apY.roa File: 4qXSv4pSAqpnU74tHbocpsl5apY.roa (raw, json) Hash identifier: AmCyfHs+gOS/K/S8kxUjs3Z1ZbZQQlEbS6Fv8dAMrpE= Subject key identifier: E2:A5:D2:BF:8A:52:02:AA:67:53:BE:2D:1D:BA:1C:A6:C9:79:6A:96 Certificate issuer: /CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf Certificate serial: 019B47DEE96057413977B452AE65DFBD1F00 Authority key identifier: 98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/4qXSv4pSAqpnU74tHbocpsl5apY.roa Signing time: Mon 22 Dec 2025 21:02:29 +0000 ROA not before: Mon 22 Dec 2025 21:02:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 208066 IP address blocks: 46.45.64.0/20 maxlen: 20 46.45.64.0/22 maxlen: 22 46.45.68.0/22 maxlen: 22 46.45.72.0/22 maxlen: 22 46.45.76.0/22 maxlen: 22 2a03:24c0:ffcf::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Dec 2025 23:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:47:de:e9:60:57:41:39:77:b4:52:ae:65:df:bd:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf Validity Not Before: Dec 22 21:02:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e2a5d2bf8a5202aa6753be2d1dba1ca6c9796a96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:dc:0b:35:90:3f:a2:74:12:6a:4b:5e:23:ea: cb:40:a7:8f:e4:da:0d:e4:e5:7f:81:05:c1:c1:28: 25:60:76:32:16:57:ba:1a:38:99:6e:b2:db:a3:9d: 77:68:43:e7:0e:5b:3e:56:5e:d2:54:90:67:a3:ee: d8:0c:0c:08:6d:7f:84:bc:04:3b:34:1d:57:40:42: fa:12:a3:30:7a:f9:4e:a3:f2:8e:cd:d9:e3:12:de: 1c:43:7f:5f:f3:f8:b6:6b:b8:92:c0:31:45:3a:66: a2:27:7c:f9:24:b1:e4:23:0f:74:ce:4e:82:09:e9: 59:a5:0a:c1:b6:63:bb:a1:cb:f6:90:9d:01:52:51: 07:a4:62:71:31:15:2b:3f:bd:93:2e:ee:17:d1:f5: db:f4:56:34:9e:ea:41:ca:89:80:71:52:ad:bf:61: d1:5e:62:1c:e6:c0:14:c2:af:72:3e:54:24:15:74: 77:aa:0a:35:f4:ba:e2:b0:c5:09:c9:12:83:03:e4: 5b:20:f3:7d:22:7e:b0:0e:91:85:af:e3:77:df:88: b8:79:8d:13:dc:2a:42:69:72:6e:48:4a:e1:d0:2d: 85:97:29:dd:b1:1c:35:3c:82:82:70:09:9c:83:5a: ec:42:d3:12:b1:24:9b:9c:b3:7b:bf:30:5f:17:4c: c7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A5:D2:BF:8A:52:02:AA:67:53:BE:2D:1D:BA:1C:A6:C9:79:6A:96 X509v3 Authority Key Identifier: keyid:98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/4qXSv4pSAqpnU74tHbocpsl5apY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.45.64.0/20 IPv6: 2a03:24c0:ffcf::/48 Signature Algorithm: sha256WithRSAEncryption 00:86:96:44:93:62:15:bd:3f:08:44:ba:c3:b9:2f:fc:92:d0: 30:5a:b9:59:cb:9f:5a:d6:89:c3:92:d9:b6:b8:7e:41:8b:ba: 5b:2f:92:95:b8:99:2b:e1:7c:cb:26:d3:2e:37:1b:50:d4:0a: 12:8b:f5:64:67:4a:5a:38:23:55:23:e0:b3:ed:aa:36:d2:99: 94:c8:a4:b8:82:3d:6b:b2:87:6c:93:82:20:5e:8b:ed:f3:6f: 3d:be:0c:6e:2a:2a:93:61:53:22:b7:64:66:2f:41:13:ce:5a: 46:16:4f:bb:6a:67:bb:b2:cf:16:15:87:46:dd:45:8b:85:8d: 78:ae:fe:f5:16:e0:9c:c2:5e:15:9d:a0:9d:6b:08:f3:2a:55: e9:4a:16:b7:ee:7d:1f:60:67:ed:21:21:6b:5d:49:0a:aa:5f: e4:b7:7d:a8:73:6e:e8:9e:78:92:ca:a6:33:d7:20:dc:eb:18: 85:6e:44:99:67:49:9a:03:06:78:ac:78:82:00:fc:53:58:b2: 1d:4b:f4:6c:f3:c9:51:bd:0b:09:a5:76:7c:4a:57:c7:c6:b3: ab:bc:6d:74:85:3a:ee:7a:65:cc:e6:33:11:e2:e3:3d:5d:3a: cb:6c:05:21:d9:a3:cc:83:df:17:33:a7:13:1a:5f:7f:53:7a: e3:8f:57:19 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZtH3ulgV0E5d7RSrmXfvR8AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MTNlMmY2MzUxZDNiNGQxZTYxYWE0MDE2ZjFiMmNmYTYy ZDdjZGYwHhcNMjUxMjIyMjEwMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmE1ZDJiZjhhNTIwMmFhNjc1M2JlMmQxZGJhMWNhNmM5Nzk2YTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttwLNZA/onQSakteI+rLQKeP5NoN 5OV/gQXBwSglYHYyFle6GjiZbrLbo513aEPnDls+Vl7SVJBno+7YDAwIbX+EvAQ7 NB1XQEL6EqMwevlOo/KOzdnjEt4cQ39f8/i2a7iSwDFFOmaiJ3z5JLHkIw90zk6C CelZpQrBtmO7ocv2kJ0BUlEHpGJxMRUrP72TLu4X0fXb9FY0nupByomAcVKtv2HR XmIc5sAUwq9yPlQkFXR3qgo19LrisMUJyRKDA+RbIPN9In6wDpGFr+N334i4eY0T 3CpCaXJuSErh0C2FlyndsRw1PIKCcAmcg1rsQtMSsSSbnLN7vzBfF0zH3wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFOKl0r+KUgKqZ1O+LR26HKbJeWqWMB8GA1UdIwQY MBaAFJgT4vY1HTtNHmGqQBbxss+mLXzfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUJQaTlqVWRPMDBlWWFwQUZ2R3l6Nll0Zk44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8zZjc0NjMtNGQ0Zi00MWE2LThkNzIt Mzk1MTM3OGFhNzY2LzEvNHFYU3Y0cFNBcXBuVTc0dEhib2Nwc2w1YXBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8zZjc0NjMtNGQ0Zi00MWE2LThkNzItMzk1MTM3OGFhNzY2 LzEvbUJQaTlqVWRPMDBlWWFwQUZ2R3l6Nll0Zk44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQELi1AMA8E AgACMAkDBwAqAyTA/88wDQYJKoZIhvcNAQELBQADggEBAACGlkSTYhW9PwhEusO5 L/yS0DBauVnLn1rWicOS2ba4fkGLulsvkpW4mSvhfMsm0y43G1DUChKL9WRnSlo4 I1Uj4LPtqjbSmZTIpLiCPWuyh2yTgiBei+3zbz2+DG4qKpNhUyK3ZGYvQRPOWkYW T7tqZ7uyzxYVh0bdRYuFjXiu/vUW4JzCXhWdoJ1rCPMqVelKFrfufR9gZ+0hIWtd SQqqX+S3fahzbuieeJLKpjPXINzrGIVuRJlnSZoDBniseIIA/FNYsh1L9GzzyVG9 CwmldnxKV8fGs6u8bXSFOu56ZczmMxHi4z1dOstsBSHZo8yD3xczpxMaX39TeuOP Vxk= -----END CERTIFICATE-----Generated at Tue Dec 23 09:12:33 2025 by rpki-client