This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/GE2ARU4cDdNn6enc-akT7XWRQlE.roa File: GE2ARU4cDdNn6enc-akT7XWRQlE.roa (raw, json) Hash identifier: PcLtWTiOiUpmjvYxdyMX87WTs2nrby8CwES10rXpDvs= Subject key identifier: 18:4D:80:45:4E:1C:0D:D3:67:E9:E9:DC:F9:A9:13:ED:75:91:42:51 Certificate issuer: /CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94 Certificate serial: 019A7755DBCB0382C2AB11DB1EE38A477DFB Authority key identifier: 9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/GE2ARU4cDdNn6enc-akT7XWRQlE.roa Signing time: Wed 12 Nov 2025 09:11:46 +0000 ROA not before: Wed 12 Nov 2025 09:11:46 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 6079 IP address blocks: 46.70.0.0/17 maxlen: 24 46.70.128.0/19 maxlen: 24 46.70.160.0/20 maxlen: 24 46.70.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 02:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:77:55:db:cb:03:82:c2:ab:11:db:1e:e3:8a:47:7d:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94 Validity Not Before: Nov 12 09:11:46 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=184d80454e1c0dd367e9e9dcf9a913ed75914251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ed:78:c3:5f:c1:84:6f:bd:9d:c4:b1:43:d3: cf:21:40:45:03:59:02:d3:84:43:3f:e2:14:6a:04: 1a:e8:61:8d:8d:1d:71:50:da:62:7f:6a:90:15:ba: 31:6c:b1:5b:65:f8:ca:1c:93:3d:5d:04:5a:62:d1: 17:68:f1:87:39:2f:8a:c1:44:b4:47:38:ee:c7:fa: 67:dc:37:93:d8:95:d5:7d:4e:2c:ff:ab:98:0e:9d: 02:f1:b1:55:ae:c4:7b:5c:b4:e1:1a:80:c4:e9:83: ea:e9:5f:c6:23:6f:1b:f8:f2:b9:d1:6f:39:1a:71: dc:5e:50:d8:69:0d:9f:e1:cd:01:09:76:10:89:35: f3:cf:ff:af:4a:09:7a:fd:43:98:21:df:f1:bf:43: 9d:e4:d7:41:b1:ab:30:db:21:33:52:78:95:c6:d5: ae:db:3e:44:94:90:de:50:9a:4d:c7:c4:5b:93:b7: cc:69:9d:35:72:54:b6:9b:22:df:b7:75:04:54:25: aa:33:67:e5:12:d3:3e:4d:e8:59:bb:c5:67:48:c9: 65:7c:f1:c7:a7:1b:f5:1f:a4:4e:d1:a1:27:eb:32: 94:20:49:81:8a:a8:b6:c7:d1:5c:b6:d9:c6:9f:05: ca:ce:ae:b6:94:01:51:53:f9:c6:5a:9b:22:9b:8a: 4d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:4D:80:45:4E:1C:0D:D3:67:E9:E9:DC:F9:A9:13:ED:75:91:42:51 X509v3 Authority Key Identifier: keyid:9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/GE2ARU4cDdNn6enc-akT7XWRQlE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.70.0.0-46.70.191.255 Signature Algorithm: sha256WithRSAEncryption 47:b6:cb:5d:6e:d0:dd:ff:66:9f:27:32:26:ea:1b:1a:6c:6c: ed:8f:27:36:df:a1:b5:8d:8c:11:26:b3:1a:cf:2c:84:d3:67: df:7b:55:96:4f:0a:1c:57:aa:f0:cd:8c:00:1d:16:61:08:a5: ce:3a:02:03:02:2c:fc:96:e7:d9:30:bd:71:01:13:32:bf:12: 29:a9:66:2a:dc:d5:3d:90:ce:e4:eb:92:d7:87:ac:e2:a9:64: 83:25:00:28:0e:f4:9e:4c:1c:55:b6:1d:0f:19:9c:db:34:47: bf:5f:d6:77:2d:de:88:1d:9c:ae:35:d3:ae:62:e7:1d:78:6c: 2e:b5:fa:28:2a:06:5f:15:22:d6:0f:d7:30:ce:87:20:2d:e1: b1:e7:24:09:bb:44:5a:70:32:58:0f:aa:1d:c8:e8:d5:47:80: ac:3a:83:ee:ac:88:9c:70:cc:9f:59:ca:08:18:02:8d:4b:df: ac:23:c0:5e:7b:50:81:4f:01:49:79:c4:63:fd:18:08:3d:f2: 4c:e8:bb:7f:ff:4f:43:e3:2c:fb:b9:32:94:02:94:a3:89:ee: 99:54:d9:19:29:8e:ca:37:ae:b4:5f:e9:d9:d4:f3:26:63:86: 03:21:78:83:f7:a6:b6:c9:c9:f2:00:bf:24:4b:e6:bc:a7:d9: 76:3b:b5:23 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZp3VdvLA4LCqxHbHuOKR337MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZmYxNTI3OGY1M2Y3NzYxYzJmM2QzM2RkOWJlNzdhOGE0 ZmJkOTQwHhcNMjUxMTEyMDkxMTQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxODRkODA0NTRlMWMwZGQzNjdlOWU5ZGNmOWE5MTNlZDc1OTE0MjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAze14w1/BhG+9ncSxQ9PPIUBFA1kC 04RDP+IUagQa6GGNjR1xUNpif2qQFboxbLFbZfjKHJM9XQRaYtEXaPGHOS+KwUS0 Rzjux/pn3DeT2JXVfU4s/6uYDp0C8bFVrsR7XLThGoDE6YPq6V/GI28b+PK50W85 GnHcXlDYaQ2f4c0BCXYQiTXzz/+vSgl6/UOYId/xv0Od5NdBsasw2yEzUniVxtWu 2z5ElJDeUJpNx8Rbk7fMaZ01clS2myLft3UEVCWqM2flEtM+TehZu8VnSMllfPHH pxv1H6RO0aEn6zKUIEmBiqi2x9FcttnGnwXKzq62lAFRU/nGWpsim4pNDQIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFBhNgEVOHA3TZ+np3PmpE+11kUJRMB8GA1UdIwQY MBaAFJv/FSePU/d2HC89M92b53qKT72UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbV84Vko0OVQ5M1ljTHowejNadm5lb3BQdlpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hYTdiMzMtZGVlYi00YWJkLWI4ZDIt NTY5NzI0OWY1MTI0LzEvR0UyQVJVNGNEZE5uNmVuYy1ha1Q3WFdSUWxFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9hYTdiMzMtZGVlYi00YWJkLWI4ZDItNTY5NzI0OWY1MTI0 LzEvbV84Vko0OVQ5M1ljTHowejNadm5lb3BQdlpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDAwEuRgME Bi5GgDANBgkqhkiG9w0BAQsFAAOCAQEAR7bLXW7Q3f9mnycyJuobGmxs7Y8nNt+h tY2MESazGs8shNNn33tVlk8KHFeq8M2MAB0WYQilzjoCAwIs/Jbn2TC9cQETMr8S KalmKtzVPZDO5OuS14es4qlkgyUAKA70nkwcVbYdDxmc2zRHv1/Wdy3eiB2crjXT rmLnHXhsLrX6KCoGXxUi1g/XMM6HIC3hseckCbtEWnAyWA+qHcjo1UeArDqD7qyI nHDMn1nKCBgCjUvfrCPAXntQgU8BSXnEY/0YCD3yTOi7f/9PQ+Ms+7kylAKUo4nu mVTZGSmOyjeutF/p2dTzJmOGAyF4g/emtsnJ8gC/JEvmvKfZdju1Iw== -----END CERTIFICATE-----Generated at Fri Dec 5 12:24:20 2025 by rpki-client