This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/yU97JpL8vhtzjZItL8jC7MTVyrI.roa File: yU97JpL8vhtzjZItL8jC7MTVyrI.roa (raw, json) Hash identifier: k7fKEhbHDybB05NhQDugPbENccrkTCNpahczLkbCDd8= Subject key identifier: C9:4F:7B:26:92:FC:BE:1B:73:8D:92:2D:2F:C8:C2:EC:C4:D5:CA:B2 Certificate issuer: /CN=23d8f620999506cc86d7548ea7282bb129f02d68 Certificate serial: 019B7BA512C5967E9B7C3E270A58510F694F Authority key identifier: 23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/yU97JpL8vhtzjZItL8jC7MTVyrI.roa Signing time: Thu 01 Jan 2026 22:19:34 +0000 ROA not before: Thu 01 Jan 2026 22:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 46.227.40.0/24 maxlen: 24 46.227.41.0/24 maxlen: 24 46.227.42.0/24 maxlen: 24 46.227.43.0/24 maxlen: 24 46.227.44.0/24 maxlen: 24 46.227.45.0/24 maxlen: 24 46.227.47.0/24 maxlen: 24 185.31.204.0/24 maxlen: 24 185.31.205.0/24 maxlen: 24 185.31.206.0/24 maxlen: 24 185.31.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.mft rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:12:c5:96:7e:9b:7c:3e:27:0a:58:51:0f:69:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23d8f620999506cc86d7548ea7282bb129f02d68 Validity Not Before: Jan 1 22:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c94f7b2692fcbe1b738d922d2fc8c2ecc4d5cab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9d:ea:d2:b1:83:ed:97:af:8d:f6:d0:bb:86: 91:aa:46:54:c8:8b:e0:a5:52:39:83:d3:67:4d:28: d0:d9:5b:0d:d8:51:68:7b:9c:22:6c:21:11:60:03: 71:2d:e6:db:6b:23:11:d2:8f:66:23:e2:19:53:eb: b1:50:26:a4:3f:a8:8f:14:c1:78:f1:60:6a:ee:bf: 3c:32:2a:f1:ed:05:ac:81:dd:bb:8b:07:12:69:95: 76:82:5f:9d:d0:f2:78:39:55:d0:2f:a5:57:83:7a: b0:2d:f0:04:3b:d8:8d:86:be:4d:b2:89:fa:f1:7e: 01:d4:6b:51:e9:4f:80:4f:7d:4a:18:4b:7e:eb:7b: f7:f8:e1:39:25:d3:e8:dc:09:a1:a2:6b:c2:96:ed: da:57:00:bf:fb:29:dd:a2:4d:d4:15:b3:a3:3b:df: 41:b7:36:64:e9:56:82:e0:97:fa:ed:85:a1:f9:b4: 72:fe:88:d2:9c:eb:6b:33:25:a1:ee:23:57:6f:50: ff:ac:88:de:0d:59:77:70:ad:80:cd:71:38:4e:a2: 30:a2:0c:f2:5a:41:31:ec:55:a3:2f:64:38:44:6f: f6:2e:5a:d3:bb:45:df:03:a8:79:92:ba:62:db:47: 5a:ba:6b:7f:39:e2:8f:ab:13:94:43:6f:88:b9:e8: 8a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:4F:7B:26:92:FC:BE:1B:73:8D:92:2D:2F:C8:C2:EC:C4:D5:CA:B2 X509v3 Authority Key Identifier: keyid:23:D8:F6:20:99:95:06:CC:86:D7:54:8E:A7:28:2B:B1:29:F0:2D:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9j2IJmVBsyG11SOpygrsSnwLWg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/yU97JpL8vhtzjZItL8jC7MTVyrI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/403ec4-266e-4ea4-ba3a-4fdc48da8f33/1/I9j2IJmVBsyG11SOpygrsSnwLWg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.227.40.0-46.227.45.255 46.227.47.0/24 185.31.204.0/22 Signature Algorithm: sha256WithRSAEncryption a5:6b:6e:80:2f:e6:d9:55:2f:19:4a:e8:d6:1f:56:f5:aa:07: 0c:76:d7:e3:df:90:5a:4b:c6:2a:23:39:0d:05:4b:27:3d:a6: 50:04:49:0e:b2:6f:04:f1:07:4a:4f:c9:99:b1:f4:86:7e:6a: 25:0e:3e:51:47:cf:ec:de:54:f7:ff:c3:bc:89:50:c2:dc:5c: c5:f6:08:18:a1:83:e4:dd:79:03:9d:7b:70:be:dd:45:a1:98: 68:78:7c:95:1e:63:e1:92:58:1d:1f:e2:b8:66:41:ad:0c:b4: d7:b9:35:b0:6a:a8:07:64:6f:e7:78:82:b5:d5:35:0b:be:ac: e4:b3:7d:04:74:f4:c5:2e:71:1d:8b:39:c0:81:99:33:bf:de: aa:81:0e:5d:1b:70:3f:9e:7d:0b:1d:6a:63:59:e5:ae:0f:9c: 42:ad:40:1d:e7:91:95:9b:9a:58:e6:b1:38:f4:21:1b:a7:57: 1d:c4:72:69:5f:cb:19:6b:50:bd:cb:91:30:df:9b:26:45:0d: ba:86:5e:c1:fc:d5:20:e2:de:ad:ee:0e:38:ac:96:4f:41:49: 09:88:ac:04:38:7f:49:e2:14:de:19:81:44:21:a8:10:a4:f7: 46:6d:69:7a:f7:e6:fa:80:3a:2d:94:36:3e:21:82:da:09:83: 3f:eb:1e:bd -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt7pRLFln6bfD4nClhRD2lPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZDhmNjIwOTk5NTA2Y2M4NmQ3NTQ4ZWE3MjgyYmIxMjlm MDJkNjgwHhcNMjYwMTAxMjIxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTRmN2IyNjkyZmNiZTFiNzM4ZDkyMmQyZmM4YzJlY2M0ZDVjYWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJ3q0rGD7ZevjfbQu4aRqkZUyIvg pVI5g9NnTSjQ2VsN2FFoe5wibCERYANxLebbayMR0o9mI+IZU+uxUCakP6iPFMF4 8WBq7r88Mirx7QWsgd27iwcSaZV2gl+d0PJ4OVXQL6VXg3qwLfAEO9iNhr5Nson6 8X4B1GtR6U+AT31KGEt+63v3+OE5JdPo3AmhomvClu3aVwC/+yndok3UFbOjO99B tzZk6VaC4Jf67YWh+bRy/ojSnOtrMyWh7iNXb1D/rIjeDVl3cK2AzXE4TqIwogzy WkEx7FWjL2Q4RG/2LlrTu0XfA6h5krpi20daumt/OeKPqxOUQ2+IueiKQQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFMlPeyaS/L4bc42SLS/IwuzE1cqyMB8GA1UdIwQY MBaAFCPY9iCZlQbMhtdUjqcoK7Ep8C1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTlqMklKbVZCc3lHMTFTT3B5Z3JzU253TFdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80MDNlYzQtMjY2ZS00ZWE0LWJhM2Et NGZkYzQ4ZGE4ZjMzLzEveVU5N0pwTDh2aHR6alpJdEw4akM3TVRWeXJJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80MDNlYzQtMjY2ZS00ZWE0LWJhM2EtNGZkYzQ4ZGE4ZjMz LzEvSTlqMklKbVZCc3lHMTFTT3B5Z3JzU253TFdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAMu4ygD BAEu4ywDBAAu4y8DBAK5H8wwDQYJKoZIhvcNAQELBQADggEBAKVrboAv5tlVLxlK 6NYfVvWqBwx21+PfkFpLxiojOQ0FSyc9plAESQ6ybwTxB0pPyZmx9IZ+aiUOPlFH z+zeVPf/w7yJUMLcXMX2CBihg+TdeQOde3C+3UWhmGh4fJUeY+GSWB0f4rhmQa0M tNe5NbBqqAdkb+d4grXVNQu+rOSzfQR09MUucR2LOcCBmTO/3qqBDl0bcD+efQsd amNZ5a4PnEKtQB3nkZWbmljmsTj0IRunVx3EcmlfyxlrUL3LkTDfmyZFDbqGXsH8 1SDi3q3uDjislk9BSQmIrAQ4f0niFN4ZgUQhqBCk90ZtaXr35vqAOi2UNj4hgtoJ gz/rHr0= -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:25 2026 by rpki-client