This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/fdbL7NAP47irHOzJjIQ1UCPjHv4.roa File: fdbL7NAP47irHOzJjIQ1UCPjHv4.roa (raw, json) Hash identifier: /duFYYBL5EFMJ+GBSkHnBWbx00mzQ7E7FQ4nR5f4zzQ= Subject key identifier: 7D:D6:CB:EC:D0:0F:E3:B8:AB:1C:EC:C9:8C:84:35:50:23:E3:1E:FE Certificate issuer: /CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550 Certificate serial: 019B7A5AD16B1D728637B0B2C30427C94B9A Authority key identifier: DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/fdbL7NAP47irHOzJjIQ1UCPjHv4.roa Signing time: Thu 01 Jan 2026 16:18:50 +0000 ROA not before: Thu 01 Jan 2026 16:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52145 IP address blocks: 46.253.90.0/24 maxlen: 24 46.253.93.0/24 maxlen: 24 46.253.94.0/24 maxlen: 24 46.253.95.0/24 maxlen: 24 2a04:19c0::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.mft rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:d1:6b:1d:72:86:37:b0:b2:c3:04:27:c9:4b:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd97c7ca05bcc3d6a2ad1ba235bed8feab694550 Validity Not Before: Jan 1 16:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7dd6cbecd00fe3b8ab1cecc98c84355023e31efe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6b:a4:0f:e4:8f:7d:f2:cf:a4:75:e0:bf:7d: d8:bf:17:1f:26:72:aa:4f:ed:36:30:bd:bd:b4:7f: 32:c4:04:55:eb:b7:76:38:8d:87:14:66:fe:65:40: 69:30:5a:de:35:f3:04:9e:a8:32:24:8c:06:75:ba: 9b:f7:ae:35:0b:a0:28:19:db:8b:1a:26:df:2b:22: a1:2b:38:1e:d2:2e:1d:e9:f3:6f:5a:eb:8f:ef:70: 93:da:36:a5:14:b4:e2:50:51:60:8b:ae:c7:c2:22: a2:c8:84:f8:25:f4:15:0c:af:a9:c1:69:e3:e8:77: f9:55:27:c8:0c:53:40:d3:20:71:80:9d:c1:1f:98: c1:25:d1:fe:3c:d9:f9:42:66:90:c5:cc:a6:b1:44: e2:5b:fd:29:8d:c6:0e:73:03:f2:6a:a3:43:1c:7b: 2d:10:41:fb:82:b6:1b:c6:ee:40:86:f3:4b:15:cd: f2:ff:98:40:40:af:8d:02:00:22:d5:97:76:81:70: 22:65:26:7a:6c:5d:45:e5:3f:56:3a:3e:2e:9b:b3: b8:44:03:80:42:c1:32:e9:53:eb:6f:ff:a5:40:11: ce:75:b6:9a:e6:b8:f8:b8:8d:16:1a:8d:8b:27:13: 89:05:16:93:55:cf:73:a2:14:8b:88:4c:b5:4c:32: 7d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D6:CB:EC:D0:0F:E3:B8:AB:1C:EC:C9:8C:84:35:50:23:E3:1E:FE X509v3 Authority Key Identifier: keyid:DD:97:C7:CA:05:BC:C3:D6:A2:AD:1B:A2:35:BE:D8:FE:AB:69:45:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ZfHygW8w9airRuiNb7Y_qtpRVA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/fdbL7NAP47irHOzJjIQ1UCPjHv4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e32a9a-83e0-4fb9-ac71-4d4b16144d68/1/3ZfHygW8w9airRuiNb7Y_qtpRVA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.253.90.0/24 46.253.93.0-46.253.95.255 IPv6: 2a04:19c0::/29 Signature Algorithm: sha256WithRSAEncryption d2:84:4b:cc:19:7b:7a:f2:81:8b:c6:8d:4b:54:ec:85:5e:cf: 04:37:87:2b:7e:51:79:2a:87:26:e0:32:21:9c:6d:ef:af:c5: 51:86:20:07:31:6f:35:0e:55:b7:bd:0f:2f:94:13:fc:51:9a: d7:58:59:83:17:19:66:7c:0b:7b:0f:f1:a5:f2:ec:41:03:70: e9:99:e8:55:7e:aa:7b:52:90:0a:de:2c:45:ed:6e:b1:cf:7c: 3e:99:f6:1f:c6:7e:cd:df:a7:e6:7d:c2:70:69:42:5a:96:c6: b5:26:53:c6:31:3e:c9:cc:a3:14:f2:f1:5e:5e:ed:6c:e8:a7: a4:cf:a5:bc:82:1d:50:13:ad:1d:7e:bb:ba:70:3c:7d:12:f9: c7:d1:2d:f1:d6:95:30:20:97:14:70:5f:e0:aa:56:64:b5:48: fb:55:4d:93:c0:d3:c2:1e:e3:a4:0a:8e:24:36:ff:1f:ab:60: 20:8d:cc:be:de:0f:19:e7:37:b8:a8:65:27:55:4d:e9:21:e4: 07:b3:d0:23:dc:23:00:c1:c0:50:82:70:b4:12:28:a8:46:c2: b5:fe:f4:ec:59:ff:75:7f:3f:86:19:a5:52:e3:75:ba:8b:2f: 3c:9e:88:c5:db:10:66:7f:5e:fd:b6:cc:5a:82:32:b9:b2:ce: a2:1a:99:09 -----BEGIN CERTIFICATE----- MIIFGjCCBAKgAwIBAgISAZt6WtFrHXKGN7CywwQnyUuaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRkOTdjN2NhMDViY2MzZDZhMmFkMWJhMjM1YmVkOGZlYWI2 OTQ1NTAwHhcNMjYwMTAxMTYxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZGQ2Y2JlY2QwMGZlM2I4YWIxY2VjYzk4Yzg0MzU1MDIzZTMxZWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGukD+SPffLPpHXgv33YvxcfJnKq T+02ML29tH8yxARV67d2OI2HFGb+ZUBpMFreNfMEnqgyJIwGdbqb9641C6AoGduL GibfKyKhKzge0i4d6fNvWuuP73CT2jalFLTiUFFgi67HwiKiyIT4JfQVDK+pwWnj 6Hf5VSfIDFNA0yBxgJ3BH5jBJdH+PNn5QmaQxcymsUTiW/0pjcYOcwPyaqNDHHst EEH7grYbxu5AhvNLFc3y/5hAQK+NAgAi1Zd2gXAiZSZ6bF1F5T9WOj4um7O4RAOA QsEy6VPrb/+lQBHOdbaa5rj4uI0WGo2LJxOJBRaTVc9zohSLiEy1TDJ9rQIDAQAB o4ICJjCCAiIwHQYDVR0OBBYEFH3Wy+zQD+O4qxzsyYyENVAj4x7+MB8GA1UdIwQY MBaAFN2Xx8oFvMPWoq0bojW+2P6raUVQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM1pmSHlnVzh3OWFpclJ1aU5iN1lfcXRwUlZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9lMzJhOWEtODNlMC00ZmI5LWFjNzEt NGQ0YjE2MTQ0ZDY4LzEvZmRiTDdOQVA0N2lySE96SmpJUTFVQ1BqSHY0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9lMzJhOWEtODNlMC00ZmI5LWFjNzEtNGQ0YjE2MTQ0ZDY4 LzEvM1pmSHlnVzh3OWFpclJ1aU5iN1lfcXRwUlZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQALv1aMAwD BAAu/V0DBAUu/UAwDQQCAAIwBwMFAyoEGcAwDQYJKoZIhvcNAQELBQADggEBANKE S8wZe3rygYvGjUtU7IVezwQ3hyt+UXkqhybgMiGcbe+vxVGGIAcxbzUOVbe9Dy+U E/xRmtdYWYMXGWZ8C3sP8aXy7EEDcOmZ6FV+qntSkAreLEXtbrHPfD6Z9h/Gfs3f p+Z9wnBpQlqWxrUmU8YxPsnMoxTy8V5e7Wzop6TPpbyCHVATrR1+u7pwPH0S+cfR LfHWlTAglxRwX+CqVmS1SPtVTZPA08Ie46QKjiQ2/x+rYCCNzL7eDxnnN7ioZSdV Tekh5Aez0CPcIwDBwFCCcLQSKKhGwrX+9OxZ/3V/P4YZpVLjdbqLLzyeiMXbEGZ/ Xv22zFqCMrmyzqIamQk= -----END CERTIFICATE-----Generated at Tue Feb 10 06:06:24 2026 by rpki-client