This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/46TfkgzFvsJA-mkb18CtoR7-ZNU.roa File: 46TfkgzFvsJA-mkb18CtoR7-ZNU.roa (raw, json) Hash identifier: UwZqgkhkMSRcZLQ/mfRr2bDwJWvzPxqmUX74IwjVtQk= Subject key identifier: E3:A4:DF:92:0C:C5:BE:C2:40:FA:69:1B:D7:C0:AD:A1:1E:FE:64:D5 Certificate issuer: /CN=2018ef08b55ddb20c8816a621a459cdb927b3201 Certificate serial: 019B77C766FC6E3B5201BFF5C7E3E4B18EFB Authority key identifier: 20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/46TfkgzFvsJA-mkb18CtoR7-ZNU.roa Signing time: Thu 01 Jan 2026 04:18:35 +0000 ROA not before: Thu 01 Jan 2026 04:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 91.204.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.mft rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 10:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:66:fc:6e:3b:52:01:bf:f5:c7:e3:e4:b1:8e:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2018ef08b55ddb20c8816a621a459cdb927b3201 Validity Not Before: Jan 1 04:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3a4df920cc5bec240fa691bd7c0ada11efe64d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8f:03:94:86:87:3a:7f:25:3d:9b:e0:62:bd: 5d:1e:12:07:3b:f5:07:34:0e:60:60:ac:9c:c4:3d: 73:ee:f4:45:44:5c:38:f7:15:89:0e:b2:67:9c:a9: 73:3e:d8:aa:df:3c:99:90:ee:45:41:18:74:57:16: 8a:db:23:d8:3b:4c:78:4d:2f:ca:9d:08:ec:f6:fb: eb:3a:3b:b3:43:91:9e:6d:ff:4c:ee:aa:9b:fe:b6: 8e:4c:8c:41:46:d3:b0:39:d1:6a:14:20:c4:1b:7f: 62:ba:2e:43:f2:85:91:47:3c:fa:d7:37:5e:e4:18: ec:76:d9:4d:26:85:04:bc:b8:17:5a:9d:57:f7:46: c5:ae:01:57:87:ba:28:3d:4b:91:12:77:d8:d2:5a: c8:90:db:2f:49:d3:2b:41:6c:bf:d6:9b:46:c8:4e: 67:f5:e0:9a:1d:ea:65:46:84:88:0a:97:88:72:2d: 21:96:0b:db:c6:42:fb:75:6f:6f:88:b8:ae:59:f1: 67:02:c5:b5:16:ee:90:4c:73:ff:69:78:75:2b:c6: ba:32:0f:86:16:bb:15:fc:26:88:fd:7a:2d:33:63: 6d:b6:15:20:cf:7a:ac:92:dd:38:47:c7:43:89:22: b0:64:55:fd:9a:83:c3:d8:7f:5c:fc:ce:8d:83:3f: 57:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:A4:DF:92:0C:C5:BE:C2:40:FA:69:1B:D7:C0:AD:A1:1E:FE:64:D5 X509v3 Authority Key Identifier: keyid:20:18:EF:08:B5:5D:DB:20:C8:81:6A:62:1A:45:9C:DB:92:7B:32:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IBjvCLVd2yDIgWpiGkWc25J7MgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/46TfkgzFvsJA-mkb18CtoR7-ZNU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/28d7cf-22f8-4363-ad02-a0ac49ad343f/1/IBjvCLVd2yDIgWpiGkWc25J7MgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.204.83.0/24 Signature Algorithm: sha256WithRSAEncryption 39:80:e8:5a:ab:da:bc:be:4e:16:c3:8e:47:8d:94:55:82:15: c0:43:bc:84:d6:fd:28:b8:4e:50:2d:2d:6d:45:a0:af:86:37: f9:cd:e7:da:da:30:5c:8b:70:91:0c:f5:07:41:06:4a:1f:9b: ee:19:c6:5e:cc:87:68:ac:c2:62:b9:6d:57:95:a7:f1:b4:69: 5d:c6:2b:36:33:56:23:a8:f2:f8:d8:5e:51:6d:61:86:31:79: 0e:e7:d2:a6:f3:14:e0:aa:df:7d:b2:e8:db:b1:19:e0:34:94: 7c:b0:28:af:f5:21:b3:c6:d0:7c:91:45:0a:2e:ef:a5:cf:8c: 2a:5f:f3:12:ca:69:bc:7d:be:e7:10:e4:f2:c2:e4:5e:e7:bb: a2:ab:d3:02:b0:fa:54:a7:65:ef:58:95:7c:a7:52:9e:d9:6a: 8d:de:10:85:53:cc:29:01:0d:ac:a0:8d:a0:b3:6f:37:2e:16: 96:a6:41:2c:41:06:ea:f4:d3:b1:b9:bd:9d:f5:31:51:83:77: b0:d1:ca:f5:0d:49:3d:51:ed:3e:6a:e2:88:b0:97:c8:54:05: a4:d0:d6:12:0c:c7:dc:ba:eb:22:66:d3:60:97:fd:16:07:9f: e5:37:1a:64:9f:56:f1:1a:8e:3f:2e:6d:3a:f7:83:b7:18:2d: 93:3d:65:e6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x2b8bjtSAb/1x+PksY77MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMThlZjA4YjU1ZGRiMjBjODgxNmE2MjFhNDU5Y2RiOTI3 YjMyMDEwHhcNMjYwMTAxMDQxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2E0ZGY5MjBjYzViZWMyNDBmYTY5MWJkN2MwYWRhMTFlZmU2NGQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuI8DlIaHOn8lPZvgYr1dHhIHO/UH NA5gYKycxD1z7vRFRFw49xWJDrJnnKlzPtiq3zyZkO5FQRh0VxaK2yPYO0x4TS/K nQjs9vvrOjuzQ5Gebf9M7qqb/raOTIxBRtOwOdFqFCDEG39iui5D8oWRRzz61zde 5BjsdtlNJoUEvLgXWp1X90bFrgFXh7ooPUuREnfY0lrIkNsvSdMrQWy/1ptGyE5n 9eCaHeplRoSICpeIci0hlgvbxkL7dW9viLiuWfFnAsW1Fu6QTHP/aXh1K8a6Mg+G FrsV/CaI/XotM2NtthUgz3qskt04R8dDiSKwZFX9moPD2H9c/M6Ngz9XJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOOk35IMxb7CQPppG9fAraEe/mTVMB8GA1UdIwQY MBaAFCAY7wi1XdsgyIFqYhpFnNuSezIBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUJqdkNMVmQyeURJZ1dwaUdrV2MyNUo3TWdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yOGQ3Y2YtMjJmOC00MzYzLWFkMDIt YTBhYzQ5YWQzNDNmLzEvNDZUZmtnekZ2c0pBLW1rYjE4Q3RvUjctWk5VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS8yOGQ3Y2YtMjJmOC00MzYzLWFkMDItYTBhYzQ5YWQzNDNm LzEvSUJqdkNMVmQyeURJZ1dwaUdrV2MyNUo3TWdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8xTMA0G CSqGSIb3DQEBCwUAA4IBAQA5gOhaq9q8vk4Ww45HjZRVghXAQ7yE1v0ouE5QLS1t RaCvhjf5zefa2jBci3CRDPUHQQZKH5vuGcZezIdorMJiuW1XlafxtGldxis2M1Yj qPL42F5RbWGGMXkO59Km8xTgqt99sujbsRngNJR8sCiv9SGzxtB8kUUKLu+lz4wq X/MSymm8fb7nEOTywuRe57uiq9MCsPpUp2XvWJV8p1Ke2WqN3hCFU8wpAQ2soI2g s283LhaWpkEsQQbq9NOxub2d9TFRg3ew0cr1DUk9Ue0+auKIsJfIVAWk0NYSDMfc uusiZtNgl/0WB5/lNxpkn1bxGo4/Lm0694O3GC2TPWXm -----END CERTIFICATE-----Generated at Fri Jan 9 17:06:58 2026 by rpki-client