This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/zQwFDjozgKlQvVwvtRGvXsXkUZQ.roa File: zQwFDjozgKlQvVwvtRGvXsXkUZQ.roa (raw, json) Hash identifier: zg01df+5xlLpvko6v9nYYQvn+aBu4agH6zbFSUmp2y8= Subject key identifier: CD:0C:05:0E:3A:33:80:A9:50:BD:5C:2F:B5:11:AF:5E:C5:E4:51:94 Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019B8D7250E96F23F0458B28A66BF22F0DF9 Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/zQwFDjozgKlQvVwvtRGvXsXkUZQ.roa Signing time: Mon 05 Jan 2026 09:17:17 +0000 ROA not before: Mon 05 Jan 2026 09:17:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203753 IP address blocks: 46.8.201.0/24 maxlen: 24 46.8.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:8d:72:50:e9:6f:23:f0:45:8b:28:a6:6b:f2:2f:0d:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Jan 5 09:17:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd0c050e3a3380a950bd5c2fb511af5ec5e45194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:40:9f:65:c0:73:14:eb:6f:68:b2:67:eb:20: a6:81:69:cb:7f:86:bf:f3:08:27:d3:31:23:13:c6: e8:14:13:8e:39:d1:44:67:e7:b5:6b:a9:b8:73:c5: c2:11:9c:5c:31:b5:01:bc:ed:c0:92:a8:88:3a:9a: 79:84:c3:ee:fe:bd:79:c5:b9:c4:f2:d6:af:77:6d: 27:34:1b:01:ec:ff:29:e9:70:63:2b:ef:b9:19:38: cf:e4:3f:08:c6:0b:89:86:ba:cc:f1:d0:db:79:42: 06:74:ed:ec:83:bf:4c:77:61:d1:94:65:a2:c5:68: bc:54:ba:48:bc:20:27:83:59:ff:87:22:ea:b5:73: e3:3c:73:16:81:54:c9:a5:15:e5:a6:38:a3:7d:17: 42:a4:05:65:6c:3a:b4:bc:3c:98:df:83:58:1a:bd: 48:c4:55:bd:d5:1c:fb:8b:a9:c9:10:92:2b:fa:1a: 27:34:20:a4:cc:d4:3e:d7:b1:8a:b2:0a:16:0d:2f: 16:32:31:49:98:8d:ea:00:40:3f:d6:8e:9b:3e:38: 96:2e:be:0f:9b:8e:52:01:df:62:9a:ea:db:c1:ed: d4:62:f8:51:40:63:54:6a:fe:a8:ed:76:7f:a1:88: d6:eb:b5:3e:89:09:9a:eb:43:28:7b:64:34:36:90: 3c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:0C:05:0E:3A:33:80:A9:50:BD:5C:2F:B5:11:AF:5E:C5:E4:51:94 X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/zQwFDjozgKlQvVwvtRGvXsXkUZQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.8.201.0-46.8.202.255 Signature Algorithm: sha256WithRSAEncryption 17:0f:45:5a:81:6b:d2:ae:60:0d:ed:af:5d:f2:f0:a1:87:2a: 99:9d:c1:76:b8:a3:51:97:93:ba:8d:30:3b:c8:c1:3b:78:2d: 8e:60:a1:94:22:05:8d:bf:c9:75:91:5e:46:ca:73:8b:6e:b9: 58:7b:c1:f9:a8:b6:35:b4:60:c9:7e:30:fd:90:95:46:b3:2d: 13:00:de:23:b2:d4:6a:c8:b2:95:cc:59:5b:17:b0:77:ba:b3: 8f:6a:d2:35:c9:ca:2d:4d:5f:fb:a4:f1:3d:b5:79:7e:ea:b7: b3:54:b6:ff:a8:b4:60:e5:b9:f2:1e:68:c7:c9:45:60:13:90: f5:0a:e6:b8:32:17:d8:82:ce:f7:12:dd:bf:61:46:bb:a5:70: bd:d3:da:44:46:85:45:d4:a6:8f:fe:d3:cb:de:13:5a:96:7d: 48:22:6b:32:7c:c7:cf:07:68:d6:e7:09:27:f6:52:9c:6c:bc: 61:eb:e9:df:7d:85:47:b7:51:c4:53:4b:8b:ca:14:e2:47:ef: 42:7c:d3:60:31:31:09:5e:3f:80:fd:c7:c8:92:c6:2b:b1:a3: d4:44:6c:b8:d9:e1:f4:ba:04:7f:b8:16:7e:b4:d8:2d:24:5f: ec:b3:94:71:14:f4:ee:35:20:70:14:a3:7c:03:73:18:aa:bd: 7e:3c:1f:d8 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgISAZuNclDpbyPwRYsopmvyLw35MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjYwMTA1MDkxNzE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDBjMDUwZTNhMzM4MGE5NTBiZDVjMmZiNTExYWY1ZWM1ZTQ1MTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvECfZcBzFOtvaLJn6yCmgWnLf4a/ 8wgn0zEjE8boFBOOOdFEZ+e1a6m4c8XCEZxcMbUBvO3AkqiIOpp5hMPu/r15xbnE 8tavd20nNBsB7P8p6XBjK++5GTjP5D8IxguJhrrM8dDbeUIGdO3sg79Md2HRlGWi xWi8VLpIvCAng1n/hyLqtXPjPHMWgVTJpRXlpjijfRdCpAVlbDq0vDyY34NYGr1I xFW91Rz7i6nJEJIr+honNCCkzNQ+17GKsgoWDS8WMjFJmI3qAEA/1o6bPjiWLr4P m45SAd9imurbwe3UYvhRQGNUav6o7XZ/oYjW67U+iQma60Moe2Q0NpA86QIDAQAB o4ICETCCAg0wHQYDVR0OBBYEFM0MBQ46M4CpUL1cL7URr17F5FGUMB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEvelF3RkRqb3pnS2xRdlZ3dnRSR3ZYc1hrVVpRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAuCMkD BAAuCMowDQYJKoZIhvcNAQELBQADggEBABcPRVqBa9KuYA3tr13y8KGHKpmdwXa4 o1GXk7qNMDvIwTt4LY5goZQiBY2/yXWRXkbKc4tuuVh7wfmotjW0YMl+MP2QlUaz LRMA3iOy1GrIspXMWVsXsHe6s49q0jXJyi1NX/uk8T21eX7qt7NUtv+otGDlufIe aMfJRWATkPUK5rgyF9iCzvcS3b9hRrulcL3T2kRGhUXUpo/+08veE1qWfUgiazJ8 x88HaNbnCSf2UpxsvGHr6d99hUe3UcRTS4vKFOJH70J802AxMQleP4D9x8iSxiux o9REbLjZ4fS6BH+4Fn602C0kX+yzlHEU9O41IHAUo3wDcxiqvX48H9g= -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:42 2026 by rpki-client