This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/cgHNDzEGhb8mfDDP7wcSav8gBaQ.roa File: cgHNDzEGhb8mfDDP7wcSav8gBaQ.roa (raw, json) Hash identifier: f+xXriKkTWE0tHKclS8WAbf+0R8q8X68olEfM0Me6qg= Subject key identifier: 72:01:CD:0F:31:06:85:BF:26:7C:30:CF:EF:07:12:6A:FF:20:05:A4 Certificate issuer: /CN=64ded85d9a05b1df689a8b6c313f8128c7a00b67 Certificate serial: 019B7A5ADAFB510AFEE53EF56887401F3BD5 Authority key identifier: 64:DE:D8:5D:9A:05:B1:DF:68:9A:8B:6C:31:3F:81:28:C7:A0:0B:67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/cgHNDzEGhb8mfDDP7wcSav8gBaQ.roa Signing time: Thu 01 Jan 2026 16:18:53 +0000 ROA not before: Thu 01 Jan 2026 16:18:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202048 IP address blocks: 46.28.232.0/24 maxlen: 24 46.28.238.0/24 maxlen: 24 46.28.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.crl rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.mft rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:da:fb:51:0a:fe:e5:3e:f5:68:87:40:1f:3b:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64ded85d9a05b1df689a8b6c313f8128c7a00b67 Validity Not Before: Jan 1 16:18:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7201cd0f310685bf267c30cfef07126aff2005a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cd:56:c3:79:b7:a9:3f:48:16:f6:8c:36:ee: 23:05:89:66:36:97:d2:e0:75:8e:b8:32:d5:17:83: b3:e2:57:76:7a:76:bd:c5:13:63:cb:74:05:1f:d6: c4:44:b4:bb:f0:d9:34:50:e8:cb:17:68:a9:95:40: 7e:71:64:15:89:9c:be:3c:ae:59:af:fd:38:eb:43: 69:a6:98:e1:ce:b6:46:41:de:57:a5:6e:57:3b:64: 3d:15:0c:67:75:aa:30:2e:a6:43:be:51:5a:cc:a5: e4:fd:38:c9:d8:a9:b2:f8:f4:0e:e1:84:b6:4f:19: 75:90:ae:c3:6e:cc:55:3e:3c:60:25:d1:ae:50:e1: 38:67:e7:ae:c3:cf:c6:60:15:9b:68:dd:48:69:1a: eb:dc:7a:3a:e5:75:9b:8d:06:f3:f0:f9:aa:51:8c: 13:5e:20:83:8c:09:22:74:59:43:19:d5:81:a5:ff: ce:92:a7:a1:cb:cd:b9:fa:2d:d6:19:a7:bf:67:d8: 3c:dd:a0:cc:3c:c1:7a:8f:3b:28:56:96:a6:09:3f: 4d:af:21:11:0e:ba:f4:59:fc:82:d4:40:5e:f3:5f: e2:c9:64:30:68:d0:33:cf:f9:bd:1c:0f:0c:5d:8e: 52:50:d7:e9:62:12:f3:e7:6a:43:9d:4d:d6:c0:6f: 9e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:01:CD:0F:31:06:85:BF:26:7C:30:CF:EF:07:12:6A:FF:20:05:A4 X509v3 Authority Key Identifier: keyid:64:DE:D8:5D:9A:05:B1:DF:68:9A:8B:6C:31:3F:81:28:C7:A0:0B:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZN7YXZoFsd9omotsMT-BKMegC2c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/cgHNDzEGhb8mfDDP7wcSav8gBaQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/546ade-daa1-49f1-8bbe-b9eb871f6d96/1/ZN7YXZoFsd9omotsMT-BKMegC2c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.28.232.0/24 46.28.238.0/23 Signature Algorithm: sha256WithRSAEncryption 86:cb:8d:7b:1f:6a:4b:77:6e:f1:26:75:1e:12:08:78:d2:02: 49:ad:30:25:25:59:23:f1:71:60:94:11:a5:0e:d4:66:db:a9: c8:ea:03:f0:70:6f:86:2a:4d:58:dc:26:9e:b8:9e:d4:5b:f3: 72:6e:66:04:d0:78:9b:ef:d3:15:ae:d6:f9:06:a5:dc:48:da: a2:8e:0e:1d:49:ac:3d:d4:67:ab:3c:6b:0c:7c:79:a3:93:58: 7a:65:c0:6d:0f:c8:c8:56:20:a1:a3:cc:d3:7e:eb:b8:71:76: b3:54:36:6d:97:67:b2:e0:47:54:ff:2c:81:07:c4:19:ef:57: 2e:17:5c:40:8a:9d:fe:df:1c:ee:e2:4a:30:e6:dc:e5:cf:8e: a8:cf:ec:e2:c3:2c:77:68:a0:21:49:f1:00:96:5e:d2:02:d8: ac:db:a1:bc:56:68:c6:3f:12:cf:fa:79:ed:17:9b:be:b4:f0: 0d:5c:34:cc:ee:a7:8f:4d:f9:27:24:fb:01:50:2d:bc:15:3e: b1:6a:f4:82:2f:3d:87:9c:ba:4e:2b:be:07:02:a6:3f:66:aa: 11:df:e9:33:f2:b6:08:18:07:77:a3:04:60:33:bf:53:79:79: f7:2a:57:c4:ad:c0:60:17:c9:f8:52:7b:d4:e6:ce:4c:e8:c6: 92:5b:15:7c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6Wtr7UQr+5T71aIdAHzvVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZGVkODVkOWEwNWIxZGY2ODlhOGI2YzMxM2Y4MTI4Yzdh MDBiNjcwHhcNMjYwMTAxMTYxODUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjAxY2QwZjMxMDY4NWJmMjY3YzMwY2ZlZjA3MTI2YWZmMjAwNWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAus1Ww3m3qT9IFvaMNu4jBYlmNpfS 4HWOuDLVF4Oz4ld2ena9xRNjy3QFH9bERLS78Nk0UOjLF2iplUB+cWQViZy+PK5Z r/0460NpppjhzrZGQd5XpW5XO2Q9FQxndaowLqZDvlFazKXk/TjJ2Kmy+PQO4YS2 Txl1kK7DbsxVPjxgJdGuUOE4Z+euw8/GYBWbaN1IaRrr3Ho65XWbjQbz8PmqUYwT XiCDjAkidFlDGdWBpf/Okqehy825+i3WGae/Z9g83aDMPMF6jzsoVpamCT9NryER Drr0WfyC1EBe81/iyWQwaNAzz/m9HA8MXY5SUNfpYhLz52pDnU3WwG+eTwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHIBzQ8xBoW/Jnwwz+8HEmr/IAWkMB8GA1UdIwQY MBaAFGTe2F2aBbHfaJqLbDE/gSjHoAtnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk43WVhab0ZzZDlvbW90c01ULUJLTWVnQzJjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny81NDZhZGUtZGFhMS00OWYxLThiYmUt YjllYjg3MWY2ZDk2LzEvY2dITkR6RUdoYjhtZkREUDd3Y1NhdjhnQmFRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny81NDZhZGUtZGFhMS00OWYxLThiYmUtYjllYjg3MWY2ZDk2 LzEvWk43WVhab0ZzZDlvbW90c01ULUJLTWVnQzJjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALhzoAwQB LhzuMA0GCSqGSIb3DQEBCwUAA4IBAQCGy417H2pLd27xJnUeEgh40gJJrTAlJVkj 8XFglBGlDtRm26nI6gPwcG+GKk1Y3CaeuJ7UW/NybmYE0Hib79MVrtb5BqXcSNqi jg4dSaw91GerPGsMfHmjk1h6ZcBtD8jIViCho8zTfuu4cXazVDZtl2ey4EdU/yyB B8QZ71cuF1xAip3+3xzu4kow5tzlz46oz+ziwyx3aKAhSfEAll7SAtis26G8VmjG PxLP+nntF5u+tPANXDTM7qePTfknJPsBUC28FT6xavSCLz2HnLpOK74HAqY/ZqoR 3+kz8rYIGAd3owRgM79TeXn3KlfErcBgF8n4UnvU5s5M6MaSWxV8 -----END CERTIFICATE-----Generated at Tue Feb 10 04:31:02 2026 by rpki-client