This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/1-yDfFT1Of1QgdiD6UOPZeuLc3DU.roa File: 1-yDfFT1Of1QgdiD6UOPZeuLc3DU.roa (raw, json) Hash identifier: 8/0JD00W9iNEqIm7TkhD9o/ThL160i8acaV44zkpW3I= Subject key identifier: FB:20:DF:15:3D:4E:7F:54:20:76:20:FA:50:E3:D9:7A:E2:DC:DC:35 Certificate issuer: /CN=61d764a0434272c1329ae99288d092bc3ef2228f Certificate serial: 019B7A5B470F69B6C4881617A1A903B3AE2B Authority key identifier: 61:D7:64:A0:43:42:72:C1:32:9A:E9:92:88:D0:92:BC:3E:F2:22:8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YddkoENCcsEymumSiNCSvD7yIo8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/1-yDfFT1Of1QgdiD6UOPZeuLc3DU.roa Signing time: Thu 01 Jan 2026 16:19:20 +0000 ROA not before: Thu 01 Jan 2026 16:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51309 IP address blocks: 46.28.16.0/24 maxlen: 24 46.28.17.0/24 maxlen: 24 46.28.18.0/24 maxlen: 24 46.28.19.0/24 maxlen: 24 46.28.20.0/24 maxlen: 24 46.28.21.0/24 maxlen: 24 46.28.22.0/24 maxlen: 24 46.28.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.mft rsync://rpki.ripe.net/repository/DEFAULT/YddkoENCcsEymumSiNCSvD7yIo8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:47:0f:69:b6:c4:88:16:17:a1:a9:03:b3:ae:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61d764a0434272c1329ae99288d092bc3ef2228f Validity Not Before: Jan 1 16:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb20df153d4e7f54207620fa50e3d97ae2dcdc35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:0b:e9:b6:ee:53:e3:09:48:12:31:cd:cd:88: b7:b7:2c:bc:bb:05:b4:cd:00:82:08:76:d5:20:0c: 7c:19:11:25:a7:47:b2:b2:59:06:87:cc:dd:0d:a0: be:31:b2:cb:e4:34:a8:4b:d5:52:25:40:91:fc:82: 14:bf:d0:6f:3f:7d:11:f0:4f:96:48:f0:6f:37:6c: c8:f5:94:03:d7:a4:1b:c3:bd:4f:f5:ac:84:54:aa: ba:cb:e4:d6:c1:88:3c:12:1b:ea:d8:32:23:d8:2e: 81:7a:4f:56:a4:4f:da:ed:a3:2c:89:fb:eb:44:9f: 70:06:00:ab:7e:a2:a4:4d:b0:ca:77:5f:64:8a:32: 06:28:f6:9c:8f:05:ee:3b:23:ec:82:a6:b8:bb:7f: 36:c4:15:6d:27:c9:b6:f5:73:c7:18:3e:8d:0a:33: 7a:06:73:55:f4:60:e8:9e:9a:08:4f:a9:a5:35:6c: 08:56:02:c5:cc:4b:78:5e:77:68:f9:e4:55:18:e0: b4:5d:14:f5:55:a3:97:0e:1a:88:73:f9:d5:91:43: a2:bb:46:86:e4:36:5b:d5:cd:92:9a:39:19:91:c2: be:44:d0:28:12:b3:82:30:76:ca:58:d7:d7:45:54: 49:4c:19:b9:3b:2f:b6:ef:ec:39:70:67:35:c5:58: 70:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:20:DF:15:3D:4E:7F:54:20:76:20:FA:50:E3:D9:7A:E2:DC:DC:35 X509v3 Authority Key Identifier: keyid:61:D7:64:A0:43:42:72:C1:32:9A:E9:92:88:D0:92:BC:3E:F2:22:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YddkoENCcsEymumSiNCSvD7yIo8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/1-yDfFT1Of1QgdiD6UOPZeuLc3DU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/43312f-991d-4e95-93df-2c7ef9ff03f5/1/YddkoENCcsEymumSiNCSvD7yIo8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.28.16.0/21 Signature Algorithm: sha256WithRSAEncryption 43:3b:b8:29:0b:b4:7b:0e:16:a2:7f:81:2a:07:3f:f3:54:69: 31:11:c7:c3:d9:e9:e8:3b:4f:2c:c3:37:5b:53:fb:a2:78:03: 1d:92:0f:dd:ea:34:ba:f0:5c:88:79:b8:9b:96:cd:88:e3:ea: 5e:5b:5e:fa:9f:42:e5:5e:3a:b1:cd:ad:21:d4:21:14:b9:4e: 57:ec:65:77:28:c2:ad:55:73:41:9e:3e:53:f1:ab:c3:67:27: 4f:43:c1:1d:bd:5b:78:00:1a:40:80:ed:7f:44:85:8d:8e:ee: 3f:72:e4:92:a3:b1:ef:8a:21:27:fd:1d:a0:3d:64:d8:cb:4f: 50:90:28:76:ed:2a:9c:72:d2:57:d5:1f:d0:29:4d:e4:44:d7: ec:ed:84:2c:5e:62:11:bd:5b:01:6a:f6:ea:b8:47:6a:a6:d7: 36:d8:f2:ff:75:b3:69:66:5c:00:79:d8:29:b0:6e:d0:dc:32: 7a:e7:b4:d6:0c:ea:04:0f:5c:31:50:39:c9:fd:c6:81:8a:68: 6d:31:f1:e1:5a:34:08:17:1e:8d:86:86:bf:34:09:1a:13:ea: 57:8c:fb:64:a5:e0:bf:3d:da:14:ba:9d:4e:bf:76:6e:4d:fa: 94:99:f9:8d:f9:6a:f7:5c:f7:28:e4:31:df:ce:9e:c4:e1:e6: 5a:e0:58:00 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt6W0cPabbEiBYXoakDs64rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYxZDc2NGEwNDM0MjcyYzEzMjlhZTk5Mjg4ZDA5MmJjM2Vm MjIyOGYwHhcNMjYwMTAxMTYxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjIwZGYxNTNkNGU3ZjU0MjA3NjIwZmE1MGUzZDk3YWUyZGNkYzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowvptu5T4wlIEjHNzYi3tyy8uwW0 zQCCCHbVIAx8GRElp0eyslkGh8zdDaC+MbLL5DSoS9VSJUCR/IIUv9BvP30R8E+W SPBvN2zI9ZQD16Qbw71P9ayEVKq6y+TWwYg8Ehvq2DIj2C6Bek9WpE/a7aMsifvr RJ9wBgCrfqKkTbDKd19kijIGKPacjwXuOyPsgqa4u382xBVtJ8m29XPHGD6NCjN6 BnNV9GDonpoIT6mlNWwIVgLFzEt4Xndo+eRVGOC0XRT1VaOXDhqIc/nVkUOiu0aG 5DZb1c2SmjkZkcK+RNAoErOCMHbKWNfXRVRJTBm5Oy+27+w5cGc1xVhwOQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPsg3xU9Tn9UIHYg+lDj2Xri3Nw1MB8GA1UdIwQY MBaAFGHXZKBDQnLBMprpkojQkrw+8iKPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWWRka29FTkNjc0V5bXVtU2lOQ1N2RDd5SW84LmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi80MzMxMmYtOTkxZC00ZTk1LTkzZGYt MmM3ZWY5ZmYwM2Y1LzEvMS15RGZGVDFPZjFRZ2RpRDZVT1BaZXVMYzNEVS5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvOWYvNDMzMTJmLTk5MWQtNGU5NS05M2RmLTJjN2VmOWZmMDNm NS8xL1lkZGtvRU5DY3NFeW11bVNpTkNTdkQ3eUlvOC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAy4cEDAN BgkqhkiG9w0BAQsFAAOCAQEAQzu4KQu0ew4Won+BKgc/81RpMRHHw9np6DtPLMM3 W1P7ongDHZIP3eo0uvBciHm4m5bNiOPqXlte+p9C5V46sc2tIdQhFLlOV+xldyjC rVVzQZ4+U/Grw2cnT0PBHb1beAAaQIDtf0SFjY7uP3LkkqOx74ohJ/0doD1k2MtP UJAodu0qnHLSV9Uf0ClN5ETX7O2ELF5iEb1bAWr26rhHaqbXNtjy/3WzaWZcAHnY KbBu0Nwyeue01gzqBA9cMVA5yf3GgYpobTHx4Vo0CBcejYaGvzQJGhPqV4z7ZKXg vz3aFLqdTr92bk36lJn5jflq91z3KOQx386exOHmWuBYAA== -----END CERTIFICATE-----Generated at Mon Jan 26 21:31:32 2026 by rpki-client