This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/RvSp46XarM4KQjsjmd8W8ihdY60.roa File: RvSp46XarM4KQjsjmd8W8ihdY60.roa (raw, json) Hash identifier: vQ45p3Cs9W4CLKvtCbt/Hgg92ogtLOQSOOU3HtQxzyY= Subject key identifier: 46:F4:A9:E3:A5:DA:AC:CE:0A:42:3B:23:99:DF:16:F2:28:5D:63:AD Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Certificate serial: 019BDB1233D0E56A12177DEF19555FC4E506 Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/RvSp46XarM4KQjsjmd8W8ihdY60.roa Signing time: Tue 20 Jan 2026 11:02:41 +0000 ROA not before: Tue 20 Jan 2026 11:02:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206134 IP address blocks: 212.113.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 14:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:db:12:33:d0:e5:6a:12:17:7d:ef:19:55:5f:c4:e5:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Validity Not Before: Jan 20 11:02:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46f4a9e3a5daacce0a423b2399df16f2285d63ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:42:34:03:64:c6:b6:79:ed:31:df:e4:b9:3d: 03:f9:72:7e:4b:50:de:9e:e9:dd:fa:b2:b3:24:95: b0:cb:cc:d5:fe:fc:34:b1:f8:8b:80:63:62:45:15: 8f:82:fa:72:59:fe:60:e9:63:e0:37:a6:1c:34:33: 66:15:14:b9:1e:35:40:29:3e:da:a5:54:3a:fa:ee: 25:5a:e5:e3:b3:ae:61:0f:a0:90:f5:dc:da:6b:ce: 9d:b4:d8:0e:a8:f0:65:19:a0:8d:9b:97:e4:81:40: b1:1d:57:7f:79:9a:af:6d:da:92:bd:83:91:e5:2b: 6c:fc:94:db:7a:d6:ba:de:b0:8f:93:10:84:bf:d7: cb:f0:27:cc:8f:a5:10:1b:f8:bb:4f:33:60:76:f6: 1a:03:8d:e8:6a:e5:47:26:cd:22:9d:00:01:bc:d6: ad:43:b2:38:b9:c4:41:58:f4:6b:2d:dc:8c:9e:42: cf:00:06:c5:63:a5:24:f7:4d:ac:90:fc:ee:48:3d: d5:02:4b:0a:22:c6:74:f8:ef:93:94:0b:9c:31:d0: 02:33:22:eb:2e:09:92:a1:97:a9:00:0f:94:ec:fc: 71:56:da:05:1a:76:4c:f2:fe:a7:41:a0:3d:8b:3d: 49:b9:5b:65:2b:a4:6e:33:9d:d5:80:41:ef:c2:c8: 04:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F4:A9:E3:A5:DA:AC:CE:0A:42:3B:23:99:DF:16:F2:28:5D:63:AD X509v3 Authority Key Identifier: keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/RvSp46XarM4KQjsjmd8W8ihdY60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.113.98.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:0c:16:dd:c2:d9:7e:74:ca:8a:fe:fb:eb:85:a3:71:e9:80: 92:81:40:81:0d:d3:a1:5a:fc:83:9d:b0:57:c8:6c:9d:3c:31: fd:5f:da:60:19:1e:b9:33:0d:e1:00:f1:08:b8:09:7e:23:21: 5b:65:21:35:7f:12:ac:c7:fd:53:38:2c:ca:5d:b2:18:94:a5: d2:40:46:95:51:38:3c:a7:91:c3:8e:32:73:b5:3a:3b:f3:af: db:b5:e5:fe:1e:a9:e9:2e:ee:c2:51:1f:37:5b:0c:7c:96:b3: 1d:b3:0c:c4:48:b0:d1:7e:3c:87:87:ee:32:ec:da:f9:62:c7: e1:dd:c0:30:81:8b:72:15:ff:b2:1b:fa:69:66:03:75:87:c6: 41:98:74:32:2f:24:f1:76:a8:64:b6:0f:13:1a:54:e4:10:bd: da:57:d9:ad:0b:a2:53:c5:62:d1:c2:38:fb:53:43:7c:d6:d2: 14:cb:41:ac:31:68:0e:d9:02:f0:a6:82:7d:71:4c:28:18:10: 96:9f:76:ec:eb:24:e7:6b:fa:7d:99:7a:1a:10:6f:cf:be:fd: b2:e6:a2:f4:9e:e5:46:05:56:c5:c1:5a:34:41:a3:34:41:7d: 6f:0d:78:84:3f:bf:6e:23:93:1b:a1:3d:fb:6a:46:99:11:3c: bb:e5:21:ef -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvbEjPQ5WoSF33vGVVfxOUGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4 NTRmMjkwHhcNMjYwMTIwMTEwMjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmY0YTllM2E1ZGFhY2NlMGE0MjNiMjM5OWRmMTZmMjI4NWQ2M2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEI0A2TGtnntMd/kuT0D+XJ+S1De nund+rKzJJWwy8zV/vw0sfiLgGNiRRWPgvpyWf5g6WPgN6YcNDNmFRS5HjVAKT7a pVQ6+u4lWuXjs65hD6CQ9dzaa86dtNgOqPBlGaCNm5fkgUCxHVd/eZqvbdqSvYOR 5Sts/JTbeta63rCPkxCEv9fL8CfMj6UQG/i7TzNgdvYaA43oauVHJs0inQABvNat Q7I4ucRBWPRrLdyMnkLPAAbFY6Uk902skPzuSD3VAksKIsZ0+O+TlAucMdACMyLr LgmSoZepAA+U7PxxVtoFGnZM8v6nQaA9iz1JuVtlK6RuM53VgEHvwsgENwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEb0qeOl2qzOCkI7I5nfFvIoXWOtMB8GA1UdIwQY MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct MDU3ODE3YmE5ZmI3LzEvUnZTcDQ2WGFyTTRLUWpzam1kOFc4aWhkWTYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODctMDU3ODE3YmE5ZmI3 LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1HFiMA0G CSqGSIb3DQEBCwUAA4IBAQBtDBbdwtl+dMqK/vvrhaNx6YCSgUCBDdOhWvyDnbBX yGydPDH9X9pgGR65Mw3hAPEIuAl+IyFbZSE1fxKsx/1TOCzKXbIYlKXSQEaVUTg8 p5HDjjJztTo786/bteX+HqnpLu7CUR83Wwx8lrMdswzESLDRfjyHh+4y7Nr5Ysfh 3cAwgYtyFf+yG/ppZgN1h8ZBmHQyLyTxdqhktg8TGlTkEL3aV9mtC6JTxWLRwjj7 U0N81tIUy0GsMWgO2QLwpoJ9cUwoGBCWn3bs6yTna/p9mXoaEG/Pvv2y5qL0nuVG BVbFwVo0QaM0QX1vDXiEP79uI5MboT37akaZETy75SHv -----END CERTIFICATE-----Generated at Wed Jan 21 19:42:42 2026 by rpki-client