This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/oFwZbtA1lxypnx_w-x5XCq34vRQ.roa File: oFwZbtA1lxypnx_w-x5XCq34vRQ.roa (raw, json) Hash identifier: i/Rl9TaZZIbdRkmJK6JnEtSg149s52oPIfIzhWvJ8BQ= Subject key identifier: A0:5C:19:6E:D0:35:97:1C:A9:9F:1F:F0:FB:1E:57:0A:AD:F8:BD:14 Certificate issuer: /CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3 Certificate serial: 019B7CEE1EF52A9F33CE91BD10F328D74E88 Authority key identifier: 77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/oFwZbtA1lxypnx_w-x5XCq34vRQ.roa Signing time: Fri 02 Jan 2026 04:18:58 +0000 ROA not before: Fri 02 Jan 2026 04:18:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205546 IP address blocks: 46.229.246.0/24 maxlen: 24 46.229.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.mft rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:1e:f5:2a:9f:33:ce:91:bd:10:f3:28:d7:4e:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77480527d0b35caf95b37502c4c6f9e3e81fd8a3 Validity Not Before: Jan 2 04:18:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a05c196ed035971ca99f1ff0fb1e570aadf8bd14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:dc:c5:01:18:9c:b2:90:7e:60:4c:23:2f:21: d2:c4:a2:37:1e:dd:fd:72:fe:4a:fb:73:e9:30:c6: 63:c4:b4:10:f2:5d:be:d9:3e:4c:55:0a:4b:06:5f: 1b:8b:96:86:cf:66:6a:9b:69:0b:ed:46:3f:58:08: f9:2f:05:00:63:b1:52:db:d2:31:0a:86:20:9e:59: 64:e9:3a:71:40:fb:69:1b:50:cc:85:46:1e:5a:73: 7a:fa:93:1f:64:5e:38:06:fd:b3:15:81:84:c5:b6: 21:4e:79:ab:8a:d2:3b:2f:a1:85:b9:b2:71:03:cc: 73:d4:31:c2:4d:3b:5b:92:f4:57:3d:d2:fa:fa:34: 3a:92:85:e8:95:92:34:4d:d1:19:05:75:7f:ef:19: 9d:1b:37:aa:82:cb:fd:86:36:aa:65:43:a5:46:86: 7d:5a:6a:34:a8:4f:cb:01:73:b8:e6:bb:37:1b:b7: ec:d1:e5:5c:b9:f9:b2:fc:aa:6b:eb:ce:67:4a:ab: 90:00:2c:5d:2b:35:bd:c7:c1:56:54:11:b2:86:c4: ac:55:c5:3f:8e:71:fa:0b:53:2a:f9:1d:bf:87:d5: 76:1f:6c:32:c5:34:4e:33:74:b3:22:0f:7c:dc:15: c9:4a:44:c9:1f:12:26:ae:b6:f8:f9:e0:a3:96:61: 32:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:5C:19:6E:D0:35:97:1C:A9:9F:1F:F0:FB:1E:57:0A:AD:F8:BD:14 X509v3 Authority Key Identifier: keyid:77:48:05:27:D0:B3:5C:AF:95:B3:75:02:C4:C6:F9:E3:E8:1F:D8:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/oFwZbtA1lxypnx_w-x5XCq34vRQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b97849-2af5-4c3e-8f0e-4dd3853a2241/1/d0gFJ9CzXK-Vs3UCxMb54-gf2KM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.229.246.0/23 Signature Algorithm: sha256WithRSAEncryption 91:28:23:bc:05:10:1e:7e:e0:b0:bf:78:e3:8e:32:cc:ab:b8: ad:db:2b:81:a9:06:0b:ef:94:70:33:e0:4e:51:e2:4b:2c:4f: 98:ad:b2:98:5f:86:3f:10:f7:8f:13:d4:94:09:31:96:89:28: de:62:74:e0:67:e3:9a:17:c4:96:77:b0:24:2b:01:67:9a:f4: 15:90:8a:2e:22:12:30:c5:b6:5f:76:74:bd:35:30:cf:63:46: 2b:3e:8e:b0:5c:1d:9f:e7:73:91:47:b5:9b:c8:34:f5:06:be: 97:2f:30:52:60:71:44:6a:bb:8e:ad:21:a2:a1:ad:fb:50:f0: 37:f1:74:ce:f8:f7:19:e0:81:e2:c1:90:7a:29:c6:91:43:d7: 2b:cc:de:a7:81:02:81:70:94:17:6b:58:df:19:76:ca:05:fb: 50:4d:c1:48:8c:1d:48:2a:8e:9f:29:77:6c:0d:3e:90:f8:43: f6:e4:b0:3a:1b:fd:59:30:cc:59:6c:f1:a8:de:35:cc:fb:7c: cd:38:2d:7b:5f:dc:08:4f:2b:22:ef:f8:f3:06:12:66:6b:82: 6b:84:8c:d0:71:d3:e3:0d:ce:d0:27:7d:fa:fa:6b:ba:b2:f5: 90:c5:cd:74:21:81:1c:76:d1:bc:b8:78:78:f1:34:97:4e:09: 20:c6:33:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87h71Kp8zzpG9EPMo106IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3NDgwNTI3ZDBiMzVjYWY5NWIzNzUwMmM0YzZmOWUzZTgx ZmQ4YTMwHhcNMjYwMTAyMDQxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDVjMTk2ZWQwMzU5NzFjYTk5ZjFmZjBmYjFlNTcwYWFkZjhiZDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdzFARicspB+YEwjLyHSxKI3Ht39 cv5K+3PpMMZjxLQQ8l2+2T5MVQpLBl8bi5aGz2Zqm2kL7UY/WAj5LwUAY7FS29Ix CoYgnllk6TpxQPtpG1DMhUYeWnN6+pMfZF44Bv2zFYGExbYhTnmritI7L6GFubJx A8xz1DHCTTtbkvRXPdL6+jQ6koXolZI0TdEZBXV/7xmdGzeqgsv9hjaqZUOlRoZ9 Wmo0qE/LAXO45rs3G7fs0eVcufmy/Kpr685nSquQACxdKzW9x8FWVBGyhsSsVcU/ jnH6C1Mq+R2/h9V2H2wyxTROM3SzIg983BXJSkTJHxImrrb4+eCjlmEyUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKBcGW7QNZccqZ8f8PseVwqt+L0UMB8GA1UdIwQY MBaAFHdIBSfQs1yvlbN1AsTG+ePoH9ijMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZDBnRko5Q3pYSy1WczNVQ3hNYjU0LWdmMktNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iOTc4NDktMmFmNS00YzNlLThmMGUt NGRkMzg1M2EyMjQxLzEvb0Z3WmJ0QTFseHlwbnhfdy14NVhDcTM0dlJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9iOTc4NDktMmFmNS00YzNlLThmMGUtNGRkMzg1M2EyMjQx LzEvZDBnRko5Q3pYSy1WczNVQ3hNYjU0LWdmMktNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLuX2MA0G CSqGSIb3DQEBCwUAA4IBAQCRKCO8BRAefuCwv3jjjjLMq7it2yuBqQYL75RwM+BO UeJLLE+YrbKYX4Y/EPePE9SUCTGWiSjeYnTgZ+OaF8SWd7AkKwFnmvQVkIouIhIw xbZfdnS9NTDPY0YrPo6wXB2f53ORR7WbyDT1Br6XLzBSYHFEaruOrSGioa37UPA3 8XTO+PcZ4IHiwZB6KcaRQ9crzN6ngQKBcJQXa1jfGXbKBftQTcFIjB1IKo6fKXds DT6Q+EP25LA6G/1ZMMxZbPGo3jXM+3zNOC17X9wITysi7/jzBhJma4JrhIzQcdPj Dc7QJ336+mu6svWQxc10IYEcdtG8uHh48TSXTgkgxjNt -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:27 2026 by rpki-client