This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/R887zp6sFk_dmP9fKtjrY24hpnk.roa File: R887zp6sFk_dmP9fKtjrY24hpnk.roa (raw, json) Hash identifier: xMhP2OXxBMHOz2sXZctb+22OEYUQG/I6CAM/IUlPtic= Subject key identifier: 47:CF:3B:CE:9E:AC:16:4F:DD:98:FF:5F:2A:D8:EB:63:6E:21:A6:79 Certificate issuer: /CN=e248d5bf01b0e295bd0885fc5c4df827543822ed Certificate serial: 019B79ECC589414D00046F49FE278DEE1D64 Authority key identifier: E2:48:D5:BF:01:B0:E2:95:BD:08:85:FC:5C:4D:F8:27:54:38:22:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/R887zp6sFk_dmP9fKtjrY24hpnk.roa Signing time: Thu 01 Jan 2026 14:18:38 +0000 ROA not before: Thu 01 Jan 2026 14:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52092 IP address blocks: 46.149.112.0/20 maxlen: 20 46.149.120.0/24 maxlen: 24 46.149.121.0/24 maxlen: 24 2001:67c:3b4::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.crl rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.mft rsync://rpki.ripe.net/repository/DEFAULT/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:c5:89:41:4d:00:04:6f:49:fe:27:8d:ee:1d:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e248d5bf01b0e295bd0885fc5c4df827543822ed Validity Not Before: Jan 1 14:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47cf3bce9eac164fdd98ff5f2ad8eb636e21a679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:07:08:b7:24:c1:f9:d3:5d:ba:62:05:1a:00: 67:1c:05:76:4d:4a:dd:b6:ac:42:8c:47:98:83:a9: cc:fb:0e:be:4b:e4:81:6e:15:e1:f6:94:ed:d4:00: ea:99:68:6c:ea:3c:08:53:cc:2d:a1:fc:fe:39:09: 4f:76:51:8c:4e:1f:ab:1a:82:df:fb:13:b0:3d:af: a7:24:d8:57:45:76:bb:98:30:ea:c8:90:ae:6c:ba: fb:e3:f2:14:55:ee:f7:3b:1d:bc:9a:b9:54:44:c1: f2:f2:e5:e4:b4:6b:9e:5b:60:f7:60:ed:52:18:f7: d5:a8:a4:aa:ca:88:4c:25:2b:13:ee:bb:4b:6a:b9: 2e:81:e8:d0:b5:e6:b4:a5:04:22:57:ce:35:34:1d: ea:24:41:30:03:7e:b3:4b:e5:d6:08:61:14:f2:8b: f3:32:6c:17:b9:e3:db:63:30:56:9e:f6:05:c7:ce: 6c:b1:09:f6:d6:99:d8:db:61:d9:84:f4:68:ba:63: cc:7b:7a:d1:00:27:aa:a5:90:cf:0d:2c:b3:53:bb: d9:e7:d9:cf:a4:e9:79:ff:d9:45:ae:af:37:fd:d7: 69:43:f0:ca:7c:ba:0c:95:d9:d6:8f:4e:56:f8:83: 53:c7:01:74:9e:51:8b:15:b9:66:01:9a:2c:91:bf: 4e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:CF:3B:CE:9E:AC:16:4F:DD:98:FF:5F:2A:D8:EB:63:6E:21:A6:79 X509v3 Authority Key Identifier: keyid:E2:48:D5:BF:01:B0:E2:95:BD:08:85:FC:5C:4D:F8:27:54:38:22:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/R887zp6sFk_dmP9fKtjrY24hpnk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebe8e1-539b-4004-8d4c-a00b5713c6aa/1/4kjVvwGw4pW9CIX8XE34J1Q4Iu0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.149.112.0/20 IPv6: 2001:67c:3b4::/48 Signature Algorithm: sha256WithRSAEncryption 5a:0e:25:17:0d:18:ab:c8:25:d0:55:cb:94:15:2d:91:5b:d1: ca:cc:96:b9:43:95:6a:7c:fa:59:80:a7:bb:29:54:59:2e:61: 8a:96:c4:11:c9:46:73:73:eb:c3:da:c8:58:d8:24:7b:fd:ba: cb:78:7f:13:ba:c2:11:fe:15:b8:cb:d0:90:6b:12:d5:44:68: 98:dd:a9:d6:7f:32:55:ae:55:42:06:84:c0:4d:d7:69:d4:1f: 13:f9:c6:5b:cb:da:e6:e0:52:4f:82:f1:1f:bf:27:89:d3:e5: 5d:a6:09:b1:56:76:6b:7b:cb:81:b7:9f:6c:de:dc:72:f6:3e: 57:20:31:12:40:e7:39:a2:5f:e0:b1:34:58:73:66:8e:99:57: 4a:10:2a:75:fa:f1:6e:83:f6:40:9f:72:b2:66:06:ee:a1:c2: 4e:48:3e:d1:23:83:93:ad:75:26:99:6f:2f:9a:5c:c3:d4:b0: f0:a9:43:03:a9:e5:7c:31:80:7d:76:cb:fd:f7:84:47:01:38: e3:6a:51:be:d9:d6:92:c1:f2:6b:dd:88:69:7b:e3:f3:8d:ee: 47:46:8e:b2:fc:a7:09:07:79:1b:38:64:04:e8:c1:c6:7a:fc: 4c:61:cc:8a:ce:4b:b5:25:d7:fb:e0:e2:9a:be:f9:3d:45:9a: 2f:3e:8b:1e -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt57MWJQU0ABG9J/ieN7h1kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyNDhkNWJmMDFiMGUyOTViZDA4ODVmYzVjNGRmODI3NTQz ODIyZWQwHhcNMjYwMTAxMTQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0N2NmM2JjZTllYWMxNjRmZGQ5OGZmNWYyYWQ4ZWI2MzZlMjFhNjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QcItyTB+dNdumIFGgBnHAV2TUrd tqxCjEeYg6nM+w6+S+SBbhXh9pTt1ADqmWhs6jwIU8wtofz+OQlPdlGMTh+rGoLf +xOwPa+nJNhXRXa7mDDqyJCubLr74/IUVe73Ox28mrlURMHy8uXktGueW2D3YO1S GPfVqKSqyohMJSsT7rtLarkugejQtea0pQQiV841NB3qJEEwA36zS+XWCGEU8ovz MmwXuePbYzBWnvYFx85ssQn21pnY22HZhPRoumPMe3rRACeqpZDPDSyzU7vZ59nP pOl5/9lFrq83/ddpQ/DKfLoMldnWj05W+INTxwF0nlGLFblmAZoskb9OlQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFEfPO86erBZP3Zj/XyrY62NuIaZ5MB8GA1UdIwQY MBaAFOJI1b8BsOKVvQiF/FxN+CdUOCLtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGtqVnZ3R3c0cFc5Q0lYOFhFMzRKMVE0SXUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9lYmU4ZTEtNTM5Yi00MDA0LThkNGMt YTAwYjU3MTNjNmFhLzEvUjg4N3pwNnNGa19kbVA5Zkt0anJZMjRocG5rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9lYmU4ZTEtNTM5Yi00MDA0LThkNGMtYTAwYjU3MTNjNmFh LzEvNGtqVnZ3R3c0cFc5Q0lYOFhFMzRKMVE0SXUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQELpVwMA8E AgACMAkDBwAgAQZ8A7QwDQYJKoZIhvcNAQELBQADggEBAFoOJRcNGKvIJdBVy5QV LZFb0crMlrlDlWp8+lmAp7spVFkuYYqWxBHJRnNz68PayFjYJHv9ust4fxO6whH+ FbjL0JBrEtVEaJjdqdZ/MlWuVUIGhMBN12nUHxP5xlvL2ubgUk+C8R+/J4nT5V2m CbFWdmt7y4G3n2ze3HL2PlcgMRJA5zmiX+CxNFhzZo6ZV0oQKnX68W6D9kCfcrJm Bu6hwk5IPtEjg5OtdSaZby+aXMPUsPCpQwOp5XwxgH12y/33hEcBOONqUb7Z1pLB 8mvdiGl74/ON7kdGjrL8pwkHeRs4ZATowcZ6/ExhzIrOS7Ul1/vg4pq++T1Fmi8+ ix4= -----END CERTIFICATE-----Generated at Tue Feb 10 02:47:55 2026 by rpki-client