This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4e9880-bf34-4a97-92a2-e3e396d4e605/1/bPrvh2lteYIIPVciG2hNCTuNxJ4.roa File: bPrvh2lteYIIPVciG2hNCTuNxJ4.roa (raw, json) Hash identifier: vL5d+UXUZiwiJq8y9yRxTnXBOAGN3bB+/8wDo4X0aG8= Subject key identifier: 6C:FA:EF:87:69:6D:79:82:08:3D:57:22:1B:68:4D:09:3B:8D:C4:9E Certificate issuer: /CN=78ec2d47e375e68884a4e042f701b16945e12e0b Certificate serial: 019B97614B533F57B7E1A6B94EDE6D2D83DD Authority key identifier: 78:EC:2D:47:E3:75:E6:88:84:A4:E0:42:F7:01:B1:69:45:E1:2E:0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eOwtR-N15oiEpOBC9wGxaUXhLgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4e9880-bf34-4a97-92a2-e3e396d4e605/1/bPrvh2lteYIIPVciG2hNCTuNxJ4.roa Signing time: Wed 07 Jan 2026 07:34:54 +0000 ROA not before: Wed 07 Jan 2026 07:34:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211444 IP address blocks: 216.203.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4e9880-bf34-4a97-92a2-e3e396d4e605/1/eOwtR-N15oiEpOBC9wGxaUXhLgs.crl rsync://rpki.ripe.net/repository/DEFAULT/46/4e9880-bf34-4a97-92a2-e3e396d4e605/1/eOwtR-N15oiEpOBC9wGxaUXhLgs.mft rsync://rpki.ripe.net/repository/DEFAULT/eOwtR-N15oiEpOBC9wGxaUXhLgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 09:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:97:61:4b:53:3f:57:b7:e1:a6:b9:4e:de:6d:2d:83:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=78ec2d47e375e68884a4e042f701b16945e12e0b Validity Not Before: Jan 7 07:34:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6cfaef87696d7982083d57221b684d093b8dc49e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:58:57:1b:7d:87:85:5a:72:77:c6:68:6c:7d: c8:bc:96:77:cd:7a:76:4d:1f:29:2a:13:72:67:37: 99:bc:9d:c1:58:38:a1:ea:8a:30:07:62:60:c8:69: 1c:a2:d4:1b:e3:ec:bd:04:e0:2e:ad:6d:5f:47:e1: e8:d0:49:ad:42:2f:5f:d9:de:82:38:58:fe:11:c3: 00:0a:d3:e7:88:28:ef:97:44:00:4e:45:f9:b5:35: 21:d3:be:27:10:5a:d2:46:cb:f0:29:8d:7f:b0:cc: b3:eb:66:05:c0:be:d0:4e:e1:0f:d0:a8:80:3a:94: 7c:2d:21:a5:f3:7c:45:bf:8a:69:8e:a2:6b:3f:d9: bf:de:60:43:d6:fd:e7:e1:36:73:2a:4a:26:87:4a: 3d:45:3a:78:82:59:a3:08:6b:09:aa:f3:8c:ca:b9: 74:f7:49:f3:03:f8:79:fc:b8:ae:7c:84:33:43:45: c8:cf:c9:df:a5:fb:81:c9:4f:2e:9d:82:cc:7c:54: e0:8b:43:bc:49:43:3d:20:23:54:21:ae:a0:97:6e: 79:a6:e5:c6:35:80:ce:f8:94:22:69:66:03:d9:95: db:1b:c0:a4:68:22:78:f1:91:89:8f:96:fe:26:b9: 88:93:75:98:09:3a:51:4b:43:b6:62:8f:30:97:7b: bc:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:FA:EF:87:69:6D:79:82:08:3D:57:22:1B:68:4D:09:3B:8D:C4:9E X509v3 Authority Key Identifier: keyid:78:EC:2D:47:E3:75:E6:88:84:A4:E0:42:F7:01:B1:69:45:E1:2E:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eOwtR-N15oiEpOBC9wGxaUXhLgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4e9880-bf34-4a97-92a2-e3e396d4e605/1/bPrvh2lteYIIPVciG2hNCTuNxJ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4e9880-bf34-4a97-92a2-e3e396d4e605/1/eOwtR-N15oiEpOBC9wGxaUXhLgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 216.203.59.0/24 Signature Algorithm: sha256WithRSAEncryption 47:22:82:34:60:5a:97:38:d5:ea:6b:43:3a:79:38:a2:10:b6: e1:d0:ad:71:d8:53:bb:41:2b:a6:23:1a:a5:3d:7f:22:de:1c: d7:bc:63:d9:c3:6a:39:f5:54:e0:bf:7f:1d:ed:50:ab:19:b4: e6:fc:09:b1:88:b4:4e:8b:ba:e7:b1:8a:fa:cf:17:a4:4c:ea: 9d:29:14:93:d1:25:3e:e5:8a:61:0d:6e:cf:41:39:0a:0b:06: 5b:21:ae:c6:82:a5:54:a2:e7:48:47:e0:bc:2a:18:a8:50:65: 23:b8:07:ef:7d:64:b0:92:63:20:86:ee:fd:c4:8a:2d:e1:26: e1:4a:0c:2c:c4:2a:5a:da:cb:15:08:1b:b4:dc:b2:f7:84:09: e0:cd:41:72:e9:ab:cf:70:09:d8:20:09:2e:4b:c7:ef:e1:e9: a2:c6:5d:87:0d:6f:3c:c3:71:76:d1:bf:8c:51:4e:85:98:66: db:c0:3c:6f:a5:49:ff:04:3c:38:6d:4e:ca:21:ac:fe:50:73: 1b:b8:cd:a8:8d:56:54:e5:a1:72:6b:17:04:b0:0c:99:a1:71: 99:b4:6a:87:ac:24:01:73:c6:49:4f:de:49:bd:ad:0d:d3:eb: 4c:46:bb:59:c8:94:c1:ea:06:0e:94:de:d3:cd:d8:e0:0b:ec: 9a:d2:3b:d1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuXYUtTP1e34aa5Tt5tLYPdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc4ZWMyZDQ3ZTM3NWU2ODg4NGE0ZTA0MmY3MDFiMTY5NDVl MTJlMGIwHhcNMjYwMTA3MDczNDU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2Y2ZhZWY4NzY5NmQ3OTgyMDgzZDU3MjIxYjY4NGQwOTNiOGRjNDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVhXG32HhVpyd8ZobH3IvJZ3zXp2 TR8pKhNyZzeZvJ3BWDih6oowB2JgyGkcotQb4+y9BOAurW1fR+Ho0EmtQi9f2d6C OFj+EcMACtPniCjvl0QATkX5tTUh074nEFrSRsvwKY1/sMyz62YFwL7QTuEP0KiA OpR8LSGl83xFv4ppjqJrP9m/3mBD1v3n4TZzKkomh0o9RTp4glmjCGsJqvOMyrl0 90nzA/h5/LiufIQzQ0XIz8nfpfuByU8unYLMfFTgi0O8SUM9ICNUIa6gl255puXG NYDO+JQiaWYD2ZXbG8CkaCJ48ZGJj5b+JrmIk3WYCTpRS0O2Yo8wl3u8TwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGz674dpbXmCCD1XIhtoTQk7jcSeMB8GA1UdIwQY MBaAFHjsLUfjdeaIhKTgQvcBsWlF4S4LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZU93dFItTjE1b2lFcE9CQzl3R3hhVVhoTGdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni80ZTk4ODAtYmYzNC00YTk3LTkyYTIt ZTNlMzk2ZDRlNjA1LzEvYlBydmgybHRlWUlJUFZjaUcyaE5DVHVOeEo0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni80ZTk4ODAtYmYzNC00YTk3LTkyYTItZTNlMzk2ZDRlNjA1 LzEvZU93dFItTjE1b2lFcE9CQzl3R3hhVVhoTGdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Ms7MA0G CSqGSIb3DQEBCwUAA4IBAQBHIoI0YFqXONXqa0M6eTiiELbh0K1x2FO7QSumIxql PX8i3hzXvGPZw2o59VTgv38d7VCrGbTm/AmxiLROi7rnsYr6zxekTOqdKRST0SU+ 5YphDW7PQTkKCwZbIa7GgqVUoudIR+C8KhioUGUjuAfvfWSwkmMghu79xIot4Sbh SgwsxCpa2ssVCBu03LL3hAngzUFy6avPcAnYIAkuS8fv4emixl2HDW88w3F20b+M UU6FmGbbwDxvpUn/BDw4bU7KIaz+UHMbuM2ojVZU5aFyaxcEsAyZoXGZtGqHrCQB c8ZJT95Jva0N0+tMRrtZyJTB6gYOlN7TzdjgC+ya0jvR -----END CERTIFICATE-----Generated at Sat Feb 7 16:12:16 2026 by rpki-client