This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/9tvrLOuk22Ddo6KLDQ-Y3Q9IR10.roa File: 9tvrLOuk22Ddo6KLDQ-Y3Q9IR10.roa (raw, json) Hash identifier: Rswszywt1klmr2sfCBkXn3BlffpWK6hyUCobDy1eOZ0= Subject key identifier: F6:DB:EB:2C:EB:A4:DB:60:DD:A3:A2:8B:0D:0F:98:DD:0F:48:47:5D Certificate issuer: /CN=480aaeb53792d520169bce280c3dd86f8376ec63 Certificate serial: 019B7834E7BCB3DF1575D662D6D80F73758F Authority key identifier: 48:0A:AE:B5:37:92:D5:20:16:9B:CE:28:0C:3D:D8:6F:83:76:EC:63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/9tvrLOuk22Ddo6KLDQ-Y3Q9IR10.roa Signing time: Thu 01 Jan 2026 06:18:11 +0000 ROA not before: Thu 01 Jan 2026 06:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197403 IP address blocks: 46.28.152.0/21 maxlen: 21 46.28.152.0/24 maxlen: 24 46.28.153.0/24 maxlen: 24 46.28.154.0/24 maxlen: 24 46.28.155.0/24 maxlen: 24 46.28.156.0/24 maxlen: 24 46.28.157.0/24 maxlen: 24 46.28.158.0/24 maxlen: 24 46.28.159.0/24 maxlen: 24 2a00:7840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.mft rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:e7:bc:b3:df:15:75:d6:62:d6:d8:0f:73:75:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=480aaeb53792d520169bce280c3dd86f8376ec63 Validity Not Before: Jan 1 06:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6dbeb2ceba4db60dda3a28b0d0f98dd0f48475d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:50:fa:bf:50:75:13:5c:51:d5:94:82:d8:47: 47:3f:e4:2f:7e:90:84:31:0d:a9:b9:59:88:cb:dd: 45:67:ee:0e:78:71:58:c7:c1:4f:f2:38:45:e7:e9: 20:0b:9b:e2:7d:1e:6b:3b:55:81:41:9b:b4:86:ec: 64:27:05:b2:03:a9:62:64:63:d7:0a:ba:15:bc:6e: 09:b9:f4:63:36:8d:6d:8b:4b:1a:ed:a7:6a:de:fc: 6b:b9:5a:c4:1a:8b:26:73:03:16:33:50:45:92:b4: 79:5f:ee:ee:f1:e1:de:01:00:47:8b:26:cb:35:9c: d6:41:cd:b7:d1:54:d9:c1:49:fe:1c:57:c1:ef:dc: 43:62:8c:3c:42:29:00:04:dc:c2:32:80:cb:20:c4: 81:6b:b7:81:35:24:81:b0:63:0d:d4:f4:50:bb:bf: f7:ec:68:37:d6:45:4d:d1:90:26:32:45:c8:64:7b: 80:10:f3:ac:65:de:07:1e:6d:13:bd:32:c1:db:6c: b2:8e:d2:b4:d9:ab:ed:e3:83:16:0f:22:e2:45:f3: 76:2d:1e:41:7d:57:ff:34:c0:2d:5d:91:39:7a:54: 1e:3f:3b:c6:f0:d3:0a:39:4c:b7:23:88:73:12:2c: 87:ea:7e:cf:12:b9:82:73:5d:1b:75:b0:42:72:0c: 24:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:DB:EB:2C:EB:A4:DB:60:DD:A3:A2:8B:0D:0F:98:DD:0F:48:47:5D X509v3 Authority Key Identifier: keyid:48:0A:AE:B5:37:92:D5:20:16:9B:CE:28:0C:3D:D8:6F:83:76:EC:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAqutTeS1SAWm84oDD3Yb4N27GM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/9tvrLOuk22Ddo6KLDQ-Y3Q9IR10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/3d579f-815a-446e-8ed9-d16691ad69fa/1/SAqutTeS1SAWm84oDD3Yb4N27GM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.28.152.0/21 IPv6: 2a00:7840::/32 Signature Algorithm: sha256WithRSAEncryption 1f:61:f0:6c:34:bb:2b:99:37:87:df:49:cf:8e:fc:56:6d:b1: bb:45:2e:b6:82:b0:49:52:df:a0:e7:56:60:c3:6b:4b:56:c7: d4:74:8b:f7:89:5c:63:8e:ee:2d:23:37:da:ab:d3:85:68:53: ad:dd:0f:a7:58:e0:74:e6:91:78:87:ab:54:e5:6a:80:68:47: fc:bf:d8:ac:b1:3b:13:7c:75:37:0b:00:0d:20:9e:77:fd:97: fd:22:eb:37:73:e2:72:2f:6f:f3:7d:73:66:8f:51:9c:ff:66: f6:3a:42:52:a4:03:e4:50:4d:bb:9d:ef:5d:11:b2:de:60:3e: 4b:a5:00:61:45:7c:d3:b7:31:b4:15:63:eb:f8:35:00:42:19: 0f:8f:c7:fa:b4:c3:61:6b:d2:23:5b:6a:d8:c6:87:bd:d8:25: d1:18:09:51:42:1a:72:01:c6:bb:a0:8b:81:62:10:64:6b:64: 5b:b5:bc:5d:78:e5:2f:ee:ba:14:61:98:66:cf:c7:2d:a1:1c: d5:cf:dc:a4:ff:29:bb:56:ac:49:fe:8d:7c:f9:6e:ed:70:c5: 63:f5:9c:82:f5:11:74:bb:fd:dd:1a:49:a5:5b:02:ae:ea:1e: 9f:4d:d3:24:c7:e0:f8:12:02:f4:9a:8e:12:c3:fb:8a:27:cb: b9:67:27:f7 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NOe8s98VddZi1tgPc3WPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MGFhZWI1Mzc5MmQ1MjAxNjliY2UyODBjM2RkODZmODM3 NmVjNjMwHhcNMjYwMTAxMDYxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmRiZWIyY2ViYTRkYjYwZGRhM2EyOGIwZDBmOThkZDBmNDg0NzVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVD6v1B1E1xR1ZSC2EdHP+QvfpCE MQ2puVmIy91FZ+4OeHFYx8FP8jhF5+kgC5vifR5rO1WBQZu0huxkJwWyA6liZGPX CroVvG4JufRjNo1ti0sa7adq3vxruVrEGosmcwMWM1BFkrR5X+7u8eHeAQBHiybL NZzWQc230VTZwUn+HFfB79xDYow8QikABNzCMoDLIMSBa7eBNSSBsGMN1PRQu7/3 7Gg31kVN0ZAmMkXIZHuAEPOsZd4HHm0TvTLB22yyjtK02avt44MWDyLiRfN2LR5B fVf/NMAtXZE5elQePzvG8NMKOUy3I4hzEiyH6n7PErmCc10bdbBCcgwkvQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFPbb6yzrpNtg3aOiiw0PmN0PSEddMB8GA1UdIwQY MBaAFEgKrrU3ktUgFpvOKAw92G+DduxjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0FxdXRUZVMxU0FXbTg0b0REM1liNE4yN0dNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8zZDU3OWYtODE1YS00NDZlLThlZDkt ZDE2NjkxYWQ2OWZhLzEvOXR2ckxPdWsyMkRkbzZLTERRLVkzUTlJUjEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi8zZDU3OWYtODE1YS00NDZlLThlZDktZDE2NjkxYWQ2OWZh LzEvU0FxdXRUZVMxU0FXbTg0b0REM1liNE4yN0dNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDLhyYMA0E AgACMAcDBQAqAHhAMA0GCSqGSIb3DQEBCwUAA4IBAQAfYfBsNLsrmTeH30nPjvxW bbG7RS62grBJUt+g51Zgw2tLVsfUdIv3iVxjju4tIzfaq9OFaFOt3Q+nWOB05pF4 h6tU5WqAaEf8v9issTsTfHU3CwANIJ53/Zf9Ius3c+JyL2/zfXNmj1Gc/2b2OkJS pAPkUE27ne9dEbLeYD5LpQBhRXzTtzG0FWPr+DUAQhkPj8f6tMNha9IjW2rYxoe9 2CXRGAlRQhpyAca7oIuBYhBka2RbtbxdeOUv7roUYZhmz8ctoRzVz9yk/ym7VqxJ /o18+W7tcMVj9ZyC9RF0u/3dGkmlWwKu6h6fTdMkx+D4EgL0mo4Sw/uKJ8u5Zyf3 -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:11 2026 by rpki-client