This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/UeQMQKBSHdroxIS0vXmTkkgb_kw.roa File: UeQMQKBSHdroxIS0vXmTkkgb_kw.roa (raw, json) Hash identifier: 3drND/9p9/h8FwC5YZRmAUwNKn5zQHLox5Z2I6On0f4= Subject key identifier: 51:E4:0C:40:A0:52:1D:DA:E8:C4:84:B4:BD:79:93:92:48:1B:FE:4C Certificate issuer: /CN=9f7a47be773a8cad6d75980e739b7841ad4d9b91 Certificate serial: 019AFDEAB89C831358D36D1EFE099916FBE0 Authority key identifier: 9F:7A:47:BE:77:3A:8C:AD:6D:75:98:0E:73:9B:78:41:AD:4D:9B:91 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/UeQMQKBSHdroxIS0vXmTkkgb_kw.roa Signing time: Mon 08 Dec 2025 12:23:29 +0000 ROA not before: Mon 08 Dec 2025 12:23:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 47630 IP address blocks: 46.19.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.crl rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.mft rsync://rpki.ripe.net/repository/DEFAULT/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 17 Dec 2025 09:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:fd:ea:b8:9c:83:13:58:d3:6d:1e:fe:09:99:16:fb:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f7a47be773a8cad6d75980e739b7841ad4d9b91 Validity Not Before: Dec 8 12:23:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=51e40c40a0521ddae8c484b4bd799392481bfe4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:55:fc:89:a5:46:6f:11:9d:e8:0c:2c:6b:02: 57:61:dd:1b:8d:2b:14:31:11:60:09:47:d1:3d:b2: 54:67:26:f3:0d:83:9b:4b:1d:fa:43:ea:51:da:8d: d3:78:e6:6c:f1:b6:de:1f:41:d1:9f:a5:e9:87:9b: b2:fb:92:f6:97:b0:da:44:69:22:a6:bf:86:78:49: 80:c6:c6:87:b5:ab:96:40:10:fb:bf:c3:33:d4:ee: 99:6d:04:ec:49:18:ec:e3:4f:96:f1:63:fb:cb:3a: b0:be:24:a5:43:ca:71:36:04:dc:ca:98:1a:ba:05: b9:43:0c:e9:c7:21:90:dd:01:b6:82:bb:f3:f7:eb: 7e:3a:9a:42:8b:fd:b4:6e:cc:a1:f0:9d:16:ac:6c: 66:de:ec:3d:b9:57:24:48:31:6e:c9:f6:56:e1:33: f2:69:d0:4b:98:ab:64:f4:70:d0:f1:e6:98:02:30: 30:e8:7a:5b:d5:f7:27:bd:2e:9d:2a:a3:30:2c:97: 37:e0:fd:46:d6:f2:0f:08:8b:40:8d:f9:03:73:17: 6f:ba:3d:a2:16:9c:ba:52:d4:f8:34:af:df:82:b3: fe:09:de:2b:9f:15:21:5d:d7:cd:2d:3a:3b:d9:90: 0c:2c:f1:22:a9:c9:a3:d7:11:86:f5:ca:34:10:93: 40:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E4:0C:40:A0:52:1D:DA:E8:C4:84:B4:BD:79:93:92:48:1B:FE:4C X509v3 Authority Key Identifier: keyid:9F:7A:47:BE:77:3A:8C:AD:6D:75:98:0E:73:9B:78:41:AD:4D:9B:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/UeQMQKBSHdroxIS0vXmTkkgb_kw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.19.6.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:bf:e5:6e:01:a1:ab:7d:15:01:79:3d:95:84:a7:46:99:f0: a5:01:98:cf:3a:1f:98:04:2e:6d:e1:c9:5f:19:9b:a4:7e:a3: d7:97:35:7b:fc:92:03:d1:bc:fd:67:ea:cd:b8:e7:33:aa:06: ea:99:1d:75:ff:54:c1:95:93:e2:e7:ba:c5:cb:20:dd:c6:3f: 6f:e2:ca:c8:f1:80:c2:b6:0c:8d:4f:86:ae:92:29:cf:4e:ff: 1c:13:a3:35:b3:ba:93:92:6c:0d:28:18:cf:e8:e5:52:cf:6c: 23:5d:30:4c:dd:26:17:89:df:46:b9:1d:9c:18:a2:c8:1a:2b: 32:53:70:34:21:b3:c1:a4:1d:22:eb:1b:a2:34:aa:84:77:f6: 39:57:34:80:9b:68:47:ce:fb:53:fb:42:6a:5a:e4:d9:cb:e6: 18:4c:cc:78:0d:39:b8:98:1b:e3:e8:3b:e0:3a:31:be:ce:ae: 6f:17:d9:5c:71:81:e7:25:cf:ea:69:9e:32:04:a2:0b:5e:55: 82:f9:34:ef:dc:b1:71:ea:12:de:aa:28:d7:a9:cc:d3:1c:00: 16:dc:4c:55:25:00:30:48:1b:dc:af:74:ba:50:0e:72:7d:a0: 06:7b:a0:01:59:dd:d8:c9:7b:6d:4a:62:fd:f8:d6:15:70:0f: b1:e0:ef:a0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZr96ricgxNY020e/gmZFvvgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmN2E0N2JlNzczYThjYWQ2ZDc1OTgwZTczOWI3ODQxYWQ0 ZDliOTEwHhcNMjUxMjA4MTIyMzI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MWU0MGM0MGEwNTIxZGRhZThjNDg0YjRiZDc5OTM5MjQ4MWJmZTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+FX8iaVGbxGd6AwsawJXYd0bjSsU MRFgCUfRPbJUZybzDYObSx36Q+pR2o3TeOZs8bbeH0HRn6Xph5uy+5L2l7DaRGki pr+GeEmAxsaHtauWQBD7v8Mz1O6ZbQTsSRjs40+W8WP7yzqwviSlQ8pxNgTcypga ugW5QwzpxyGQ3QG2grvz9+t+OppCi/20bsyh8J0WrGxm3uw9uVckSDFuyfZW4TPy adBLmKtk9HDQ8eaYAjAw6Hpb1fcnvS6dKqMwLJc34P1G1vIPCItAjfkDcxdvuj2i Fpy6UtT4NK/fgrP+Cd4rnxUhXdfNLTo72ZAMLPEiqcmj1xGG9co0EJNAMwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFHkDECgUh3a6MSEtL15k5JIG/5MMB8GA1UdIwQY MBaAFJ96R753OoytbXWYDnObeEGtTZuRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjNwSHZuYzZqSzF0ZFpnT2M1dDRRYTFObTVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi81OWExMmMtY2M3Zi00MjcxLTgzMWEt ZTdmMmMwN2ZjMGY4LzEvVWVRTVFLQlNIZHJveElTMHZYbVRra2diX2t3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yi81OWExMmMtY2M3Zi00MjcxLTgzMWEtZTdmMmMwN2ZjMGY4 LzEvbjNwSHZuYzZqSzF0ZFpnT2M1dDRRYTFObTVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALhMGMA0G CSqGSIb3DQEBCwUAA4IBAQBMv+VuAaGrfRUBeT2VhKdGmfClAZjPOh+YBC5t4clf GZukfqPXlzV7/JID0bz9Z+rNuOczqgbqmR11/1TBlZPi57rFyyDdxj9v4srI8YDC tgyNT4aukinPTv8cE6M1s7qTkmwNKBjP6OVSz2wjXTBM3SYXid9GuR2cGKLIGisy U3A0IbPBpB0i6xuiNKqEd/Y5VzSAm2hHzvtT+0JqWuTZy+YYTMx4DTm4mBvj6Dvg OjG+zq5vF9lccYHnJc/qaZ4yBKILXlWC+TTv3LFx6hLeqijXqczTHAAW3ExVJQAw SBvcr3S6UA5yfaAGe6ABWd3YyXttSmL9+NYVcA+x4O+g -----END CERTIFICATE-----Generated at Tue Dec 16 13:55:45 2025 by rpki-client