This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/a-RfJEkqSAZCcoPr0GaKWgyFyUY.roa File: a-RfJEkqSAZCcoPr0GaKWgyFyUY.roa (raw, json) Hash identifier: jOtVSSPZObpK8XqzAlQVoc0c5TSMX2XvXMtPwq4gvlk= Subject key identifier: 6B:E4:5F:24:49:2A:48:06:42:72:83:EB:D0:66:8A:5A:0C:85:C9:46 Certificate issuer: /CN=93cf4e7927e104964e4c96f441649ce34174ce3a Certificate serial: 019B7EA72449FEAE21FCFC6F5D0BFB1B0EA8 Authority key identifier: 93:CF:4E:79:27:E1:04:96:4E:4C:96:F4:41:64:9C:E3:41:74:CE:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/a-RfJEkqSAZCcoPr0GaKWgyFyUY.roa Signing time: Fri 02 Jan 2026 12:20:41 +0000 ROA not before: Fri 02 Jan 2026 12:20:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56349 IP address blocks: 46.227.176.0/21 maxlen: 24 46.227.176.0/22 maxlen: 24 46.227.180.0/22 maxlen: 24 2a02:6380::/32 maxlen: 48 2a02:6380::/33 maxlen: 48 2a02:6380:8000::/33 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.crl rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:24:49:fe:ae:21:fc:fc:6f:5d:0b:fb:1b:0e:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93cf4e7927e104964e4c96f441649ce34174ce3a Validity Not Before: Jan 2 12:20:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6be45f24492a4806427283ebd0668a5a0c85c946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:97:24:f5:f0:e8:09:1f:b2:ad:49:02:0b:91: 23:15:54:34:97:0a:5b:7a:83:61:8a:b2:a9:1e:8a: 03:8c:f0:b9:6a:00:dc:fe:af:1e:1f:20:29:7f:a0: 49:b5:ae:4e:ac:8d:65:19:5e:e9:fe:0e:f4:8a:66: e8:59:fa:a6:0f:40:57:3e:67:01:59:5b:02:f4:ba: 0a:d9:01:1e:47:a5:6c:00:eb:a6:1d:c1:6c:7b:c0: cb:a6:f9:2a:ff:df:7f:7f:50:f5:54:19:6b:09:46: 87:17:b9:f1:c0:51:eb:0a:0c:dc:39:b1:ae:bf:1e: 05:02:e8:4d:75:80:89:50:07:5c:0c:77:3d:bd:9d: c4:46:bc:e8:3c:94:e9:c9:1a:32:bc:8a:29:2d:85: c8:ba:cb:9f:09:f2:5e:cf:6c:22:7b:48:b5:92:1d: 71:35:66:10:20:8a:b8:4a:6a:b0:28:a0:34:db:a7: 9a:3c:23:10:a3:47:5b:4e:a2:79:5c:b9:6b:38:54: a5:2d:c0:0c:72:48:f7:e6:a5:9b:ca:ca:77:17:cb: 3d:7b:44:de:a0:ce:4a:3b:c1:61:35:40:4d:e1:e0: 16:62:c5:1e:af:ae:78:e1:52:d2:c5:ca:e2:d2:45: 69:ce:11:0e:54:c8:85:53:03:dc:19:6a:ea:3b:fe: 1e:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:E4:5F:24:49:2A:48:06:42:72:83:EB:D0:66:8A:5A:0C:85:C9:46 X509v3 Authority Key Identifier: keyid:93:CF:4E:79:27:E1:04:96:4E:4C:96:F4:41:64:9C:E3:41:74:CE:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/a-RfJEkqSAZCcoPr0GaKWgyFyUY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.227.176.0/21 IPv6: 2a02:6380::/32 Signature Algorithm: sha256WithRSAEncryption 4c:69:c8:04:fc:f7:3f:9c:fb:3a:8a:b3:a5:99:ff:26:13:83: 0b:05:1e:c8:1c:e0:c0:e8:83:40:f6:f8:00:37:44:84:75:22: de:3f:ec:79:2d:49:62:e6:40:68:06:8d:55:9f:72:7c:25:33: 34:ad:1c:28:c9:21:1a:a0:3b:60:9c:40:9a:c2:98:a9:cd:39: 15:10:df:dd:b5:4e:94:b6:46:04:22:dd:79:8b:be:80:e6:f3: 3f:cb:c8:54:ad:16:b3:fd:c7:6e:ed:7b:5f:d2:c3:1c:fa:73: 20:99:1f:0f:f2:3a:6c:85:7b:d4:3b:5c:ac:4b:ec:98:fa:da: 07:23:ee:5f:f8:5f:78:58:49:84:a7:77:21:28:d9:0e:e3:86: 3d:ab:44:94:64:c4:03:dc:0f:1b:6a:30:f3:9b:d4:07:cf:02: cd:33:06:ae:54:42:44:89:d1:e5:f7:c6:a4:51:74:a1:e8:a8: cc:e6:29:df:f5:69:d4:14:4c:c9:5a:e1:c3:3e:ac:80:39:45: 51:4b:e5:d8:91:14:b1:9f:f9:af:20:aa:ec:83:e4:e1:9e:84: c3:10:1e:d9:63:9d:37:bc:f0:0a:ed:d7:ac:b2:d0:77:b4:90: 8b:e0:ab:32:60:99:bf:4d:f2:90:8a:b7:c7:39:1a:1d:d4:52: 12:d1:69:82 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pyRJ/q4h/PxvXQv7Gw6oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzY2Y0ZTc5MjdlMTA0OTY0ZTRjOTZmNDQxNjQ5Y2UzNDE3 NGNlM2EwHhcNMjYwMTAyMTIyMDQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YmU0NWYyNDQ5MmE0ODA2NDI3MjgzZWJkMDY2OGE1YTBjODVjOTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5ck9fDoCR+yrUkCC5EjFVQ0lwpb eoNhirKpHooDjPC5agDc/q8eHyApf6BJta5OrI1lGV7p/g70imboWfqmD0BXPmcB WVsC9LoK2QEeR6VsAOumHcFse8DLpvkq/99/f1D1VBlrCUaHF7nxwFHrCgzcObGu vx4FAuhNdYCJUAdcDHc9vZ3ERrzoPJTpyRoyvIopLYXIusufCfJez2wie0i1kh1x NWYQIIq4SmqwKKA026eaPCMQo0dbTqJ5XLlrOFSlLcAMckj35qWbysp3F8s9e0Te oM5KO8FhNUBN4eAWYsUer6544VLSxcri0kVpzhEOVMiFUwPcGWrqO/4ejQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFGvkXyRJKkgGQnKD69BmiloMhclGMB8GA1UdIwQY MBaAFJPPTnkn4QSWTkyW9EFknONBdM46MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvazg5T2VTZmhCSlpPVEpiMFFXU2M0MEYwempvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wYjAwMDctZDMwYS00OTk0LWFiMDAt YmQ1YjRlNTQ3MTJiLzEvYS1SZkpFa3FTQVpDY29QcjBHYUtXZ3lGeVVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni8wYjAwMDctZDMwYS00OTk0LWFiMDAtYmQ1YjRlNTQ3MTJi LzEvazg5T2VTZmhCSlpPVEpiMFFXU2M0MEYwempvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDLuOwMA0E AgACMAcDBQAqAmOAMA0GCSqGSIb3DQEBCwUAA4IBAQBMacgE/Pc/nPs6irOlmf8m E4MLBR7IHODA6INA9vgAN0SEdSLeP+x5LUli5kBoBo1Vn3J8JTM0rRwoySEaoDtg nECawpipzTkVEN/dtU6UtkYEIt15i76A5vM/y8hUrRaz/cdu7Xtf0sMc+nMgmR8P 8jpshXvUO1ysS+yY+toHI+5f+F94WEmEp3chKNkO44Y9q0SUZMQD3A8bajDzm9QH zwLNMwauVEJEidHl98akUXSh6KjM5inf9WnUFEzJWuHDPqyAOUVRS+XYkRSxn/mv IKrsg+ThnoTDEB7ZY503vPAK7desstB3tJCL4KsyYJm/TfKQirfHORod1FIS0WmC -----END CERTIFICATE-----Generated at Tue Feb 10 00:02:37 2026 by rpki-client