This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/C2FZwLx5J6LOD83i2EDZOR5RtUI.roa File: C2FZwLx5J6LOD83i2EDZOR5RtUI.roa (raw, json) Hash identifier: TfNzI2cSGpuwkVH14MS6urWLY0KlAYesDO88Jrb6EW8= Subject key identifier: 0B:61:59:C0:BC:79:27:A2:CE:0F:CD:E2:D8:40:D9:39:1E:51:B5:42 Certificate issuer: /CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e Certificate serial: 019BBE0F18EB2D13D9249640EAC23E41320C Authority key identifier: 2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/C2FZwLx5J6LOD83i2EDZOR5RtUI.roa Signing time: Wed 14 Jan 2026 19:50:18 +0000 ROA not before: Wed 14 Jan 2026 19:50:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215625 IP address blocks: 46.235.12.0/24 maxlen: 24 2a14:1b00:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:be:0f:18:eb:2d:13:d9:24:96:40:ea:c2:3e:41:32:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e0a9333f93cca544fdabe2ea7a6738a54af759e Validity Not Before: Jan 14 19:50:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b6159c0bc7927a2ce0fcde2d840d9391e51b542 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bb:15:7d:0e:1e:40:08:78:a3:f8:03:e3:c7: 5d:51:56:00:a9:9d:e3:07:54:5a:19:5e:5a:9a:89: 8f:f5:90:aa:e7:25:ba:8f:b9:d6:64:aa:be:8f:6c: 22:05:72:ff:3a:05:a1:5f:af:ec:9e:f0:22:7c:8d: f8:d4:df:84:a2:d6:98:f0:36:d3:d7:9b:72:1f:94: a2:cd:87:ea:d7:54:51:15:f1:26:8c:b7:de:67:48: 98:85:4d:c0:38:55:39:14:1f:0f:72:8f:d8:bd:3c: cb:6e:29:10:aa:03:23:01:0e:2e:77:70:11:1c:2e: 3e:5d:93:25:a9:91:d5:ab:4d:e4:8a:ac:13:0b:68: 54:dd:76:bb:3c:60:22:fa:d1:4c:ec:85:cc:a1:f0: bb:e3:54:cf:af:cb:a0:da:c9:1c:40:6f:96:7e:e0: 4f:e3:23:ee:3c:44:be:57:ef:8e:3b:09:88:15:4b: 2c:1f:04:27:37:8c:0e:94:5f:5d:c4:00:9d:72:63: e3:b7:b7:aa:a0:a4:1a:11:2f:92:d1:17:d0:7c:60: 89:4f:ef:d7:de:17:a5:74:83:3e:1a:ff:3f:06:85: 68:0a:27:f3:66:fb:de:9f:58:be:c1:09:a6:cd:e4: 16:c4:0d:0a:05:0f:fd:fc:03:36:4c:a3:bd:3e:2d: 06:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:61:59:C0:BC:79:27:A2:CE:0F:CD:E2:D8:40:D9:39:1E:51:B5:42 X509v3 Authority Key Identifier: keyid:2E:0A:93:33:F9:3C:CA:54:4F:DA:BE:2E:A7:A6:73:8A:54:AF:75:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LgqTM_k8ylRP2r4up6ZzilSvdZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/C2FZwLx5J6LOD83i2EDZOR5RtUI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a4d09f-29df-44ea-a7b1-0a0aaeaee4f1/1/LgqTM_k8ylRP2r4up6ZzilSvdZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.235.12.0/24 IPv6: 2a14:1b00:3::/48 Signature Algorithm: sha256WithRSAEncryption 89:21:a0:52:fb:18:e4:63:cc:fc:80:37:ff:91:7c:4b:b0:ce: a3:0e:64:66:3c:cc:82:3d:8f:e8:9b:57:85:88:1e:6f:42:86: 7b:3e:2b:19:c0:d4:ee:b3:cc:cf:83:39:a6:f7:c5:66:b8:90: 23:fa:63:90:63:69:b1:0d:07:d7:14:99:2d:1e:89:de:7f:a4: 0e:a9:95:6b:45:fa:97:63:fc:51:06:65:a2:05:2f:76:2a:21: 8c:7a:a7:ce:fa:c9:8c:c2:1e:b4:11:35:4f:31:bc:83:0a:fc: 49:18:8e:dc:47:8b:f6:6d:da:e2:62:b2:ff:f9:46:a7:5d:23: fc:24:75:fe:71:5a:f1:a9:31:82:00:ce:e1:fd:a1:e0:65:42: 3a:ca:26:d8:de:b0:d3:f1:49:27:14:39:6b:58:73:66:98:de: 6f:9a:18:71:af:f4:c1:fe:3a:41:1c:12:c0:cf:7f:2f:80:20: 9e:b7:67:c4:47:4a:4b:c2:d9:5b:6e:0e:40:a4:75:5d:18:18: b9:8a:66:8e:fb:94:c9:b9:0d:53:66:ab:04:18:13:fc:b3:3f: 84:ac:61:0f:fb:f3:6d:14:d1:e3:97:d8:8d:63:ce:e6:03:bb: 63:5a:9e:4d:17:ae:4f:83:2e:97:9d:70:ed:88:c8:37:36:b7: 54:28:92:97 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZu+DxjrLRPZJJZA6sI+QTIMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlMGE5MzMzZjkzY2NhNTQ0ZmRhYmUyZWE3YTY3MzhhNTRh Zjc1OWUwHhcNMjYwMTE0MTk1MDE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjYxNTljMGJjNzkyN2EyY2UwZmNkZTJkODQwZDkzOTFlNTFiNTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbsVfQ4eQAh4o/gD48ddUVYAqZ3j B1RaGV5amomP9ZCq5yW6j7nWZKq+j2wiBXL/OgWhX6/snvAifI341N+EotaY8DbT 15tyH5SizYfq11RRFfEmjLfeZ0iYhU3AOFU5FB8Pco/YvTzLbikQqgMjAQ4ud3AR HC4+XZMlqZHVq03kiqwTC2hU3Xa7PGAi+tFM7IXMofC741TPr8ug2skcQG+WfuBP 4yPuPES+V++OOwmIFUssHwQnN4wOlF9dxACdcmPjt7eqoKQaES+S0RfQfGCJT+/X 3heldIM+Gv8/BoVoCifzZvven1i+wQmmzeQWxA0KBQ/9/AM2TKO9Pi0GSwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFAthWcC8eSeizg/N4thA2TkeUbVCMB8GA1UdIwQY MBaAFC4KkzP5PMpUT9q+Lqemc4pUr3WeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTGdxVE1fazh5bFJQMnI0dXA2WnppbFN2ZFo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNGQwOWYtMjlkZi00NGVhLWE3YjEt MGEwYWFlYWVlNGYxLzEvQzJGWndMeDVKNkxPRDgzaTJFRFpPUjVSdFVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9hNGQwOWYtMjlkZi00NGVhLWE3YjEtMGEwYWFlYWVlNGYx LzEvTGdxVE1fazh5bFJQMnI0dXA2WnppbFN2ZFo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALusMMA8E AgACMAkDBwAqFBsAAAMwDQYJKoZIhvcNAQELBQADggEBAIkhoFL7GORjzPyAN/+R fEuwzqMOZGY8zII9j+ibV4WIHm9Chns+KxnA1O6zzM+DOab3xWa4kCP6Y5BjabEN B9cUmS0eid5/pA6plWtF+pdj/FEGZaIFL3YqIYx6p876yYzCHrQRNU8xvIMK/EkY jtxHi/Zt2uJisv/5RqddI/wkdf5xWvGpMYIAzuH9oeBlQjrKJtjesNPxSScUOWtY c2aY3m+aGHGv9MH+OkEcEsDPfy+AIJ63Z8RHSkvC2VtuDkCkdV0YGLmKZo77lMm5 DVNmqwQYE/yzP4SsYQ/7820U0eOX2I1jzuYDu2Nank0Xrk+DLpedcO2IyDc2t1Qo kpc= -----END CERTIFICATE-----Generated at Wed Jan 21 16:14:52 2026 by rpki-client