This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/fkreEwL9i_WFct5R3Lmih3A6nXk.roa File: fkreEwL9i_WFct5R3Lmih3A6nXk.roa (raw, json) Hash identifier: mAkb5z60hK6EVuMnyR6xB4SOK+FJ+cVNYl8vrOn5u5Y= Subject key identifier: 7E:4A:DE:13:02:FD:8B:F5:85:72:DE:51:DC:B9:A2:87:70:3A:9D:79 Certificate issuer: /CN=28526132c4fcf6b4cdff740255602ccf9dcb042f Certificate serial: 019B76EAF3912EAA96DB24A4805FBC4604CC Authority key identifier: 28:52:61:32:C4:FC:F6:B4:CD:FF:74:02:55:60:2C:CF:9D:CB:04:2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KFJhMsT89rTN_3QCVWAsz53LBC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/fkreEwL9i_WFct5R3Lmih3A6nXk.roa Signing time: Thu 01 Jan 2026 00:17:47 +0000 ROA not before: Thu 01 Jan 2026 00:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47337 IP address blocks: 46.16.152.0/21 maxlen: 24 2a02:2520::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.mft rsync://rpki.ripe.net/repository/DEFAULT/KFJhMsT89rTN_3QCVWAsz53LBC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f3:91:2e:aa:96:db:24:a4:80:5f:bc:46:04:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28526132c4fcf6b4cdff740255602ccf9dcb042f Validity Not Before: Jan 1 00:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e4ade1302fd8bf58572de51dcb9a287703a9d79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:35:29:c3:4b:8f:8e:26:ca:3a:43:de:e0:f2: cc:33:b4:f9:d8:3c:2f:73:52:c6:1e:ad:29:75:76: 91:d4:01:e5:23:c7:74:6d:da:a1:27:97:75:a2:18: be:7a:a9:ca:c1:64:0e:5f:7f:29:96:da:4e:b0:f9: 52:de:ba:fc:37:ab:5d:24:6a:c5:23:92:ad:0c:e2: e0:5b:63:a9:3e:25:c4:05:d4:20:7a:be:76:6b:7a: 15:57:e4:fa:ed:0d:b9:2e:96:5d:18:9e:47:af:4d: ac:a0:35:6e:39:38:c1:33:5c:43:03:22:af:e8:bd: af:c6:d0:69:09:48:a5:c0:7c:98:81:22:86:10:c7: 82:fe:50:0d:d8:1f:2b:a8:a4:ca:57:98:d8:67:6e: a1:e3:01:11:fe:75:ba:95:d4:a5:30:2a:a8:a9:c8: 7c:83:00:08:be:a0:40:10:11:7f:1c:4a:aa:72:8d: a2:8b:23:1f:6b:73:9a:4b:97:34:62:5b:b0:36:df: 71:40:26:75:4b:5e:68:94:ef:0f:c8:ab:5c:6a:67: 51:64:5a:d6:53:56:df:1b:45:24:8e:da:86:fe:69: f4:b1:21:cb:7f:2a:e1:16:84:83:d7:c7:15:d7:c4: 4f:a9:85:6a:7b:37:fa:18:35:65:95:5a:98:26:e3: 5c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:4A:DE:13:02:FD:8B:F5:85:72:DE:51:DC:B9:A2:87:70:3A:9D:79 X509v3 Authority Key Identifier: keyid:28:52:61:32:C4:FC:F6:B4:CD:FF:74:02:55:60:2C:CF:9D:CB:04:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KFJhMsT89rTN_3QCVWAsz53LBC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/fkreEwL9i_WFct5R3Lmih3A6nXk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.16.152.0/21 IPv6: 2a02:2520::/32 Signature Algorithm: sha256WithRSAEncryption 81:7c:0b:d6:f5:c5:eb:77:d0:46:6d:a0:f6:ef:76:fa:9c:9f: 46:39:fa:49:24:99:46:14:d6:f4:9e:54:47:7d:d1:bd:88:f4: fb:ae:4e:18:29:66:9e:2a:0e:53:a3:61:4a:e0:88:ce:96:30: 76:8d:d1:f8:63:1b:d8:89:a1:af:9c:5a:ea:b6:13:9b:ce:b1: 4b:8a:95:0a:ae:77:03:49:5f:91:96:0b:a6:7f:90:5b:11:6b: 12:75:5c:fa:27:e1:61:ec:40:4d:19:8b:d2:b1:0b:cf:c1:41: ce:80:63:2c:45:5b:49:12:20:2b:5e:26:6f:bc:82:a1:17:73: d2:bc:1c:13:36:71:6f:9f:73:9b:70:a5:e9:e5:d1:f2:ea:87: 49:96:ac:b6:70:d0:f9:68:33:e5:0e:63:b2:5f:a8:17:fd:c3: 82:4b:5e:2a:4e:fb:aa:5e:38:77:47:c2:26:cb:8a:27:64:b1: 52:d1:17:a3:1f:fa:76:2e:e5:df:7b:c5:41:1d:4e:24:cb:b5: d9:59:7f:55:02:b9:0c:74:01:18:23:fa:88:f2:49:45:42:dd: 90:ce:f0:51:15:1f:e2:8e:c9:cb:46:64:5d:8d:cc:ce:b3:97: 07:ab:83:c6:ca:38:a1:1e:3f:d8:89:9a:26:14:13:89:b5:9f: 28:cf:31:b7 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt26vORLqqW2ySkgF+8RgTMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI4NTI2MTMyYzRmY2Y2YjRjZGZmNzQwMjU1NjAyY2NmOWRj YjA0MmYwHhcNMjYwMTAxMDAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTRhZGUxMzAyZmQ4YmY1ODU3MmRlNTFkY2I5YTI4NzcwM2E5ZDc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTUpw0uPjibKOkPe4PLMM7T52Dwv c1LGHq0pdXaR1AHlI8d0bdqhJ5d1ohi+eqnKwWQOX38pltpOsPlS3rr8N6tdJGrF I5KtDOLgW2OpPiXEBdQger52a3oVV+T67Q25LpZdGJ5Hr02soDVuOTjBM1xDAyKv 6L2vxtBpCUilwHyYgSKGEMeC/lAN2B8rqKTKV5jYZ26h4wER/nW6ldSlMCqoqch8 gwAIvqBAEBF/HEqqco2iiyMfa3OaS5c0YluwNt9xQCZ1S15olO8PyKtcamdRZFrW U1bfG0UkjtqG/mn0sSHLfyrhFoSD18cV18RPqYVqezf6GDVllVqYJuNcdwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFH5K3hMC/Yv1hXLeUdy5oodwOp15MB8GA1UdIwQY MBaAFChSYTLE/Pa0zf90AlVgLM+dywQvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS0ZKaE1zVDg5clROXzNRQ1ZXQXN6NTNMQkM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC84MzE2OGItNmI0MC00ZDEyLThlZDct MWY5OTMxN2M2Yzk0LzEvZmtyZUV3TDlpX1dGY3Q1UjNMbWloM0E2blhrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC84MzE2OGItNmI0MC00ZDEyLThlZDctMWY5OTMxN2M2Yzk0 LzEvS0ZKaE1zVDg5clROXzNRQ1ZXQXN6NTNMQkM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDLhCYMA0E AgACMAcDBQAqAiUgMA0GCSqGSIb3DQEBCwUAA4IBAQCBfAvW9cXrd9BGbaD273b6 nJ9GOfpJJJlGFNb0nlRHfdG9iPT7rk4YKWaeKg5To2FK4IjOljB2jdH4YxvYiaGv nFrqthObzrFLipUKrncDSV+Rlgumf5BbEWsSdVz6J+Fh7EBNGYvSsQvPwUHOgGMs RVtJEiArXiZvvIKhF3PSvBwTNnFvn3ObcKXp5dHy6odJlqy2cND5aDPlDmOyX6gX /cOCS14qTvuqXjh3R8Imy4onZLFS0RejH/p2LuXfe8VBHU4ky7XZWX9VArkMdAEY I/qI8klFQt2QzvBRFR/ijsnLRmRdjczOs5cHq4PGyjihHj/YiZomFBOJtZ8ozzG3 -----END CERTIFICATE-----Generated at Tue Feb 10 04:44:34 2026 by rpki-client