This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/l4Qn1DLaoWGHSM-0zESfzSh4Fw8.roa File: l4Qn1DLaoWGHSM-0zESfzSh4Fw8.roa (raw, json) Hash identifier: W8F0siH2pbAIwect+ZY/d1YQO550SRj2/v8w6HmnQfY= Subject key identifier: 97:84:27:D4:32:DA:A1:61:87:48:CF:B4:CC:44:9F:CD:28:78:17:0F Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Certificate serial: 019B2BE77E1306180F3CC141E58DC985A029 Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/l4Qn1DLaoWGHSM-0zESfzSh4Fw8.roa Signing time: Wed 17 Dec 2025 10:42:29 +0000 ROA not before: Wed 17 Dec 2025 10:42:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 41009 IP address blocks: 46.229.55.0/24 maxlen: 24 46.229.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2b:e7:7e:13:06:18:0f:3c:c1:41:e5:8d:c9:85:a0:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Validity Not Before: Dec 17 10:42:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=978427d432daa1618748cfb4cc449fcd2878170f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d1:1d:b9:ad:4c:f2:72:fd:4f:67:3d:9d:cf: 61:fa:1f:1c:0b:e8:23:6f:4c:92:42:e2:85:71:35: 9b:9b:9e:23:82:e5:d3:34:bd:56:d4:2d:02:e4:67: 19:d9:5a:62:f0:62:b3:e3:07:f5:fe:ff:fd:59:e3: 9b:33:25:a6:60:83:a8:3b:27:03:3e:71:d2:3c:0d: 89:12:29:39:d9:f4:40:6e:bf:f6:23:8b:fa:aa:ff: 04:60:4c:4f:2f:06:83:13:13:e3:7e:ca:67:66:66: 80:96:b6:fc:ca:9b:e6:1d:62:e4:2f:6e:6c:4c:6f: d1:b8:a4:c6:c0:1f:96:72:5d:1d:c1:c1:53:de:29: 0a:31:22:25:cf:4d:c2:8e:fb:50:0c:1f:2c:98:0e: a7:1e:77:60:78:ef:56:81:d2:9d:d2:bb:f1:b2:a4: b3:cc:76:c1:09:9e:d1:dd:c4:11:48:6a:41:e2:44: 28:12:fc:81:40:32:1d:71:8b:f4:06:0d:6e:b0:e9: 4b:21:3d:14:6f:62:8c:a3:32:21:e6:9a:54:b3:aa: 7b:d0:4e:8b:78:fd:ed:b6:2e:ba:ad:7b:51:6a:7e: 67:4e:fc:08:35:eb:9d:d6:48:2f:92:1d:ef:c6:c4: 00:99:b3:4c:5b:bc:57:a2:f9:f5:6b:b4:a5:ab:c3: f0:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:84:27:D4:32:DA:A1:61:87:48:CF:B4:CC:44:9F:CD:28:78:17:0F X509v3 Authority Key Identifier: keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/l4Qn1DLaoWGHSM-0zESfzSh4Fw8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.229.55.0/24 46.229.63.0/24 Signature Algorithm: sha256WithRSAEncryption 33:d9:9e:67:36:7c:9c:a0:2c:e0:d5:0d:10:9d:cf:26:34:94: 2c:fe:d4:91:d5:1e:8d:85:fa:05:f2:27:f7:e7:97:ca:02:0f: ac:a1:0c:ec:35:ea:03:0f:71:62:b2:e1:0a:78:f0:4f:e2:ac: 1e:a1:79:7f:9c:ee:f0:3e:1c:ac:91:f1:86:a6:26:58:2f:e5: 5e:4f:32:e4:de:b6:e2:2b:ce:18:5d:e2:b8:45:33:d6:ce:bf: 1b:c0:65:62:fa:b4:81:64:53:ce:c8:66:8d:9b:a9:18:4d:03: 8c:e8:e1:2e:6e:93:86:62:c5:ae:c1:15:3a:e2:d6:bf:20:32: 48:9d:62:7a:f3:bc:03:8c:c3:16:33:f3:f6:ab:1b:f3:f3:aa: c0:cb:d8:32:14:df:1a:d2:f9:ff:72:17:2e:7d:b8:c1:fa:2c: 1b:e4:9c:41:d3:0f:18:bc:48:9c:f9:c3:d2:0f:88:e2:5a:f4: 76:49:0c:20:dd:b2:3a:0b:11:8e:ab:69:a7:69:77:4f:cc:78: 2f:07:99:07:5c:3f:45:f1:8c:7d:34:0f:3f:04:a4:df:76:82: b2:57:9e:59:18:03:69:fc:c2:fb:e2:0e:2b:5f:c7:3a:89:c6: 60:1e:fd:c0:f1:d9:39:ed:35:a0:5e:56:d5:ce:aa:da:c7:e5: 7f:c6:38:6e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsr534TBhgPPMFB5Y3JhaApMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YmNjMTJhZmE0ZjA1NzM5ZjQ1ZjYwNWUyMjFjNjRjM2Mw ZDJlZDYwHhcNMjUxMjE3MTA0MjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Nzg0MjdkNDMyZGFhMTYxODc0OGNmYjRjYzQ0OWZjZDI4NzgxNzBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNEdua1M8nL9T2c9nc9h+h8cC+gj b0ySQuKFcTWbm54jguXTNL1W1C0C5GcZ2Vpi8GKz4wf1/v/9WeObMyWmYIOoOycD PnHSPA2JEik52fRAbr/2I4v6qv8EYExPLwaDExPjfspnZmaAlrb8ypvmHWLkL25s TG/RuKTGwB+Wcl0dwcFT3ikKMSIlz03CjvtQDB8smA6nHndgeO9WgdKd0rvxsqSz zHbBCZ7R3cQRSGpB4kQoEvyBQDIdcYv0Bg1usOlLIT0Ub2KMozIh5ppUs6p70E6L eP3tti66rXtRan5nTvwINeud1kgvkh3vxsQAmbNMW7xXovn1a7Slq8PwNwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJeEJ9Qy2qFhh0jPtMxEn80oeBcPMB8GA1UdIwQY MBaAFKS8wSr6TwVzn0X2BeIhxkw8DS7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2Mt ODhiMDE2YmJkNTgxLzEvbDRRbjFETGFvV0dIU00tMHpFU2Z6U2g0Rnc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2MtODhiMDE2YmJkNTgx LzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALuU3AwQA LuU/MA0GCSqGSIb3DQEBCwUAA4IBAQAz2Z5nNnycoCzg1Q0Qnc8mNJQs/tSR1R6N hfoF8if355fKAg+soQzsNeoDD3FisuEKePBP4qweoXl/nO7wPhyskfGGpiZYL+Ve TzLk3rbiK84YXeK4RTPWzr8bwGVi+rSBZFPOyGaNm6kYTQOM6OEubpOGYsWuwRU6 4ta/IDJInWJ687wDjMMWM/P2qxvz86rAy9gyFN8a0vn/chcufbjB+iwb5JxB0w8Y vEic+cPSD4jiWvR2SQwg3bI6CxGOq2mnaXdPzHgvB5kHXD9F8Yx9NA8/BKTfdoKy V55ZGANp/ML74g4rX8c6icZgHv3A8dk57TWgXlbVzqrax+V/xjhu -----END CERTIFICATE-----Generated at Thu Dec 18 13:03:17 2025 by rpki-client