This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/46k7dadw9C3OGVznNXzdyLjIb3w.roa File: 46k7dadw9C3OGVznNXzdyLjIb3w.roa (raw, json) Hash identifier: dU8nH1WSQjId+wdrU9lE0xJCd2GUXP6yRT4zv3mPIuk= Subject key identifier: E3:A9:3B:75:A7:70:F4:2D:CE:19:5C:E7:35:7C:DD:C8:B8:C8:6F:7C Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B1159BB2A7971D6D13BF84DD767E943B0 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/46k7dadw9C3OGVznNXzdyLjIb3w.roa Signing time: Fri 12 Dec 2025 06:57:31 +0000 ROA not before: Fri 12 Dec 2025 06:57:31 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 199829 IP address blocks: 151.244.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 19 Dec 2025 04:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:11:59:bb:2a:79:71:d6:d1:3b:f8:4d:d7:67:e9:43:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Dec 12 06:57:31 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=e3a93b75a770f42dce195ce7357cddc8b8c86f7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1b:27:a5:97:45:cb:c2:93:9d:8a:52:8c:45: e5:f0:12:25:73:6b:bc:af:95:07:cb:8c:fd:f3:00: d3:4a:1e:a3:76:51:38:b0:b1:de:9f:f9:3b:24:c6: e7:17:a6:9a:9f:e0:ac:ee:01:24:74:9e:05:c5:16: e4:ba:aa:3a:f6:45:13:ae:ca:2d:26:e0:86:c7:07: d4:73:c6:08:1e:54:1f:6f:ef:01:02:d6:a0:e8:9d: d9:b5:36:1e:4f:a4:66:3c:72:2d:b6:e7:f4:4f:ac: cb:92:40:7e:bd:2e:14:3a:85:51:bf:99:65:24:b3: 72:b2:d3:cc:b0:99:ac:4f:96:46:4f:a7:02:ad:d9: 9e:f4:73:c8:f1:50:3e:66:54:65:22:4f:63:e8:a7: 16:62:3b:2b:0b:2b:a6:c1:ea:92:33:6d:fc:bd:c5: bd:5b:dc:71:67:85:9b:b1:4d:ac:c6:d0:b5:ee:c6: 90:12:d0:3b:22:af:b0:cc:d8:34:1f:49:38:16:72: 17:43:9a:c6:e3:08:0f:16:f4:26:bd:92:23:06:34: 8a:5c:2d:cb:dd:d9:cb:c9:d7:8b:97:7d:de:3b:81: af:92:55:e5:3a:d6:21:ad:77:25:d8:54:cd:2b:2c: 5a:4b:76:a2:9c:0e:0c:0d:33:bb:c0:7e:84:64:d3: 81:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:A9:3B:75:A7:70:F4:2D:CE:19:5C:E7:35:7C:DD:C8:B8:C8:6F:7C X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/46k7dadw9C3OGVznNXzdyLjIb3w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.244.242.0/24 Signature Algorithm: sha256WithRSAEncryption 96:3a:60:c2:a1:1c:a2:d2:7b:1f:40:26:3c:a1:da:2d:b3:c9: be:f7:92:fc:67:e9:50:0a:2f:4c:c1:c2:7e:a7:41:87:f8:98: 41:8f:99:98:52:f9:62:29:dc:ad:4d:ab:31:a6:3e:98:9d:39: e9:63:ad:91:83:b0:f6:ca:ea:0f:31:95:8b:22:4e:49:9b:f2: 96:b7:f8:11:c7:39:3d:a9:0d:30:22:a7:ce:e8:c9:83:c5:00: d3:84:bb:36:2a:e2:79:13:0f:0d:f8:4a:65:ca:45:19:d7:0a: 52:ca:52:61:f0:5f:55:8c:2d:b6:d9:ba:c8:0e:3d:d4:60:91: 6b:ae:17:cb:e4:d2:d6:60:67:55:3b:78:d9:91:94:37:ac:a1: ce:b3:27:e6:bc:73:39:f7:d4:03:dc:cd:87:77:d2:81:19:3e: b3:e6:10:b8:3e:4d:02:3b:81:35:db:51:3a:51:51:f3:56:0c: d4:da:b4:9a:2e:d4:1e:79:27:e8:23:6b:9f:a7:a8:78:d2:23: 9b:85:16:56:d3:d7:82:55:a8:9a:71:2c:e2:3e:ef:ee:52:bb: e8:fa:a5:c7:ed:9d:ee:f5:81:ea:f6:48:10:1b:8b:3e:3d:f4: 1d:85:35:28:89:c1:41:47:7d:7a:16:da:85:d2:4c:a9:40:c0: 37:e7:fa:80 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZsRWbsqeXHW0Tv4Tddn6UOwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjUxMjEyMDY1NzMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2E5M2I3NWE3NzBmNDJkY2UxOTVjZTczNTdjZGRjOGI4Yzg2ZjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hsnpZdFy8KTnYpSjEXl8BIlc2u8 r5UHy4z98wDTSh6jdlE4sLHen/k7JMbnF6aan+Cs7gEkdJ4FxRbkuqo69kUTrsot JuCGxwfUc8YIHlQfb+8BAtag6J3ZtTYeT6RmPHIttuf0T6zLkkB+vS4UOoVRv5ll JLNystPMsJmsT5ZGT6cCrdme9HPI8VA+ZlRlIk9j6KcWYjsrCyumweqSM238vcW9 W9xxZ4WbsU2sxtC17saQEtA7Iq+wzNg0H0k4FnIXQ5rG4wgPFvQmvZIjBjSKXC3L 3dnLydeLl33eO4GvklXlOtYhrXcl2FTNKyxaS3ainA4MDTO7wH6EZNOBdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOOpO3WncPQtzhlc5zV83ci4yG98MB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvNDZrN2RhZHc5QzNPR1Z6bk5YemR5TGpJYjN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/TyMA0G CSqGSIb3DQEBCwUAA4IBAQCWOmDCoRyi0nsfQCY8odots8m+95L8Z+lQCi9MwcJ+ p0GH+JhBj5mYUvliKdytTasxpj6YnTnpY62Rg7D2yuoPMZWLIk5Jm/KWt/gRxzk9 qQ0wIqfO6MmDxQDThLs2KuJ5Ew8N+EplykUZ1wpSylJh8F9VjC222brIDj3UYJFr rhfL5NLWYGdVO3jZkZQ3rKHOsyfmvHM599QD3M2Hd9KBGT6z5hC4Pk0CO4E121E6 UVHzVgzU2rSaLtQeeSfoI2ufp6h40iObhRZW09eCVaiacSziPu/uUrvo+qXH7Z3u 9YHq9kgQG4s+PfQdhTUoicFBR316FtqF0kypQMA35/qA -----END CERTIFICATE-----Generated at Thu Dec 18 11:30:02 2025 by rpki-client