This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/67MNcwT0-fSIjvN2yM4jYzb0vqs.roa File: 67MNcwT0-fSIjvN2yM4jYzb0vqs.roa (raw, json) Hash identifier: +TmKsPtzTJ3DN61orAbDX8cA1ATRIUpqaxNXU7pJAiM= Subject key identifier: EB:B3:0D:73:04:F4:F9:F4:88:8E:F3:76:C8:CE:23:63:36:F4:BE:AB Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Certificate serial: 019AA3C9624E9C9D702249749F407D4E80C8 Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/67MNcwT0-fSIjvN2yM4jYzb0vqs.roa Signing time: Fri 21 Nov 2025 00:21:15 +0000 ROA not before: Fri 21 Nov 2025 00:21:15 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 142019 IP address blocks: 46.249.104.0/24 maxlen: 24 46.249.105.0/24 maxlen: 24 46.249.106.0/24 maxlen: 24 46.249.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 29 Nov 2025 21:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:a3:c9:62:4e:9c:9d:70:22:49:74:9f:40:7d:4e:80:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Validity Not Before: Nov 21 00:21:15 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=ebb30d7304f4f9f4888ef376c8ce236336f4beab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:fc:66:93:ba:a7:77:b0:14:fa:d0:5a:64:5d: 49:0f:fa:71:73:c8:f4:f0:bb:48:89:ac:9d:dc:2a: 19:08:de:e0:ee:f1:3c:78:8d:b3:26:fe:c0:0c:27: 37:13:8d:c9:43:40:74:c0:c0:85:fc:fa:8e:f9:9f: 43:c6:e7:b8:1a:e6:1f:44:b7:14:24:ff:89:b3:e7: 6a:d1:85:42:aa:7a:9f:aa:96:60:3f:72:a8:81:b8: c7:1c:90:d8:bd:2d:04:1d:2a:4b:4d:a4:b9:f7:10: 7b:ac:80:42:3f:87:4d:9e:0c:aa:74:df:9e:52:cc: 37:d5:73:db:2b:5f:40:6d:9b:13:27:2e:04:ad:94: 18:11:e1:7e:fc:74:54:f3:75:59:16:54:f8:91:8a: 1e:b6:c1:2a:d3:3d:92:1d:96:df:de:36:d4:bd:a3: 40:28:cd:a6:3a:05:54:fb:15:78:67:2b:63:67:61: 57:d1:3c:75:7e:91:09:26:17:9e:71:93:e1:52:eb: 6c:4d:f4:92:63:e6:7c:d8:eb:e2:f9:e1:ed:fc:61: cd:bb:82:43:98:29:00:2e:9f:f1:ec:02:17:9c:23: 06:3c:13:9a:5f:97:e2:10:e0:6e:3d:4a:53:4c:82: 5e:08:7a:50:91:6f:be:f9:69:31:6e:af:c3:d5:38: f1:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B3:0D:73:04:F4:F9:F4:88:8E:F3:76:C8:CE:23:63:36:F4:BE:AB X509v3 Authority Key Identifier: keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/67MNcwT0-fSIjvN2yM4jYzb0vqs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.249.104.0/22 Signature Algorithm: sha256WithRSAEncryption ba:0e:37:1a:c0:3d:56:52:7f:34:fc:13:b6:86:2a:38:9f:f9: f1:94:c5:34:7d:96:81:03:74:f4:e2:dc:62:ec:05:47:57:06: d6:b9:c5:23:f7:16:0e:6c:a6:40:72:79:9d:d8:a6:6c:14:b7: f3:7e:03:9a:b8:a5:dc:68:cf:ca:66:cc:97:cb:78:28:11:72: 24:41:db:27:e5:df:ca:e9:d9:5e:27:3c:a5:a8:1b:d2:61:3b: 16:5d:96:86:24:9d:d5:59:67:d1:5b:18:a4:45:9a:d5:1b:27: fc:53:f0:5b:bc:17:f3:e4:4b:b3:0b:c4:18:fb:b9:7d:ab:6b: eb:f9:b4:14:3c:9d:ce:0e:8d:3e:17:96:d3:64:25:42:e3:84: 03:23:a7:cd:83:00:29:b4:68:a0:15:e8:0c:61:7e:22:f5:71: 18:57:69:9c:47:ca:7d:91:5f:24:5c:74:be:8c:2c:d4:7f:51: cd:c7:4a:44:e5:20:2b:bc:38:cb:8a:75:37:17:98:d5:bd:3d: f9:0b:c7:a6:cb:40:ea:60:c9:01:93:3e:bd:4f:22:0d:1c:a6: 97:1c:7f:04:78:6f:d1:b1:8e:ac:57:a0:71:fc:57:08:ec:b6: 76:07:c3:27:a2:26:0a:20:02:9b:df:41:a0:76:01:82:41:b0: 9f:51:2e:92 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqjyWJOnJ1wIkl0n0B9ToDIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2 NWE0NzgwHhcNMjUxMTIxMDAyMTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYmIzMGQ3MzA0ZjRmOWY0ODg4ZWYzNzZjOGNlMjM2MzM2ZjRiZWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPxmk7qnd7AU+tBaZF1JD/pxc8j0 8LtIiayd3CoZCN7g7vE8eI2zJv7ADCc3E43JQ0B0wMCF/PqO+Z9Dxue4GuYfRLcU JP+Js+dq0YVCqnqfqpZgP3KogbjHHJDYvS0EHSpLTaS59xB7rIBCP4dNngyqdN+e Usw31XPbK19AbZsTJy4ErZQYEeF+/HRU83VZFlT4kYoetsEq0z2SHZbf3jbUvaNA KM2mOgVU+xV4ZytjZ2FX0Tx1fpEJJheecZPhUutsTfSSY+Z82Ovi+eHt/GHNu4JD mCkALp/x7AIXnCMGPBOaX5fiEOBuPUpTTIJeCHpQkW+++Wkxbq/D1TjxnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOuzDXME9Pn0iI7zdsjOI2M29L6rMB8GA1UdIwQY MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt ZmUwNjU5MTc2YTU2LzEvNjdNTmN3VDAtZlNJanZOMnlNNGpZemIwdnFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2 LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLvloMA0G CSqGSIb3DQEBCwUAA4IBAQC6DjcawD1WUn80/BO2hio4n/nxlMU0fZaBA3T04txi 7AVHVwbWucUj9xYObKZAcnmd2KZsFLfzfgOauKXcaM/KZsyXy3goEXIkQdsn5d/K 6dleJzylqBvSYTsWXZaGJJ3VWWfRWxikRZrVGyf8U/BbvBfz5EuzC8QY+7l9q2vr +bQUPJ3ODo0+F5bTZCVC44QDI6fNgwAptGigFegMYX4i9XEYV2mcR8p9kV8kXHS+ jCzUf1HNx0pE5SArvDjLinU3F5jVvT35C8emy0DqYMkBkz69TyINHKaXHH8EeG/R sY6sV6Bx/FcI7LZ2B8MnoiYKIAKb30GgdgGCQbCfUS6S -----END CERTIFICATE-----Generated at Sat Nov 29 07:11:15 2025 by rpki-client