This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/ti3mUArhKLQrEjTCNGs-Y0VDIQo.roa File: ti3mUArhKLQrEjTCNGs-Y0VDIQo.roa (raw, json) Hash identifier: NyzIfv0AUJPnQoEB0U5NhplDCpeAjCmUBJkpoKkG650= Subject key identifier: B6:2D:E6:50:0A:E1:28:B4:2B:12:34:C2:34:6B:3E:63:45:43:21:0A Certificate issuer: /CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe Certificate serial: 019B77C740D81A7E6F6ABC35D0147A77C245 Authority key identifier: FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/ti3mUArhKLQrEjTCNGs-Y0VDIQo.roa Signing time: Thu 01 Jan 2026 04:18:25 +0000 ROA not before: Thu 01 Jan 2026 04:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198957 IP address blocks: 46.30.136.0/24 maxlen: 24 46.30.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:40:d8:1a:7e:6f:6a:bc:35:d0:14:7a:77:c2:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe Validity Not Before: Jan 1 04:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b62de6500ae128b42b1234c2346b3e634543210a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:cc:84:73:f7:6c:a8:53:e5:ab:f2:97:7b:e3: bd:b9:a1:a0:7d:ec:4e:cb:e9:69:99:72:bd:3b:9a: 1d:3e:7d:71:28:6e:ec:17:c0:c8:99:e5:28:ed:e9: 0c:0d:c4:f6:61:05:ce:7d:91:8a:d2:f4:95:39:93: 39:ba:7a:14:c8:6b:a3:91:7e:e3:04:03:56:44:96: b0:c7:46:dd:2d:c6:cc:54:7a:da:24:cf:fd:44:a2: 17:1e:f5:e6:d5:ba:69:f2:dc:62:87:21:fa:3d:3d: a8:99:84:da:6c:6f:a5:df:d2:09:68:d0:72:48:08: d6:a6:f1:54:0c:82:6e:11:1f:6c:02:72:94:b4:ae: 9d:b0:3b:2a:84:da:17:da:3a:14:ac:88:19:3a:d5: a1:24:da:8d:ed:de:61:c5:f2:8a:83:31:9b:a1:d7: dc:ee:b0:25:9d:44:29:81:58:aa:92:ff:04:25:ac: 67:23:1d:2b:c8:a5:99:a4:85:86:83:cc:1b:e3:98: d9:1b:90:e4:63:de:7b:31:a4:95:e8:ce:89:33:73: 5a:e8:7f:cb:a0:1d:9b:56:21:9e:23:05:8c:81:1a: 44:49:06:14:e3:ca:07:fa:8c:3d:07:b6:ea:69:2a: d7:a9:da:2f:bb:91:a9:69:9c:45:37:84:a0:f3:69: c7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:2D:E6:50:0A:E1:28:B4:2B:12:34:C2:34:6B:3E:63:45:43:21:0A X509v3 Authority Key Identifier: keyid:FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/ti3mUArhKLQrEjTCNGs-Y0VDIQo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.30.136.0/24 46.30.140.0/24 Signature Algorithm: sha256WithRSAEncryption a3:58:a7:13:d2:71:ba:df:20:92:ac:4a:ad:1c:48:54:60:d0: e9:88:71:38:da:7f:07:d1:43:cb:80:21:ef:0a:ac:fe:2e:cc: bb:8a:f9:8c:06:e5:62:27:2a:20:a1:03:0b:48:2a:a4:d3:f7: 25:5c:df:21:95:f8:72:72:5d:a9:2d:3e:e5:5e:8d:24:4c:a0: 38:36:c5:cb:c3:24:98:b6:27:a4:1e:75:20:97:4f:9b:2e:57: 4f:25:07:86:5c:b4:e8:6f:2b:32:16:0f:35:b4:7c:15:9f:57: 94:b1:0a:bf:79:ab:ce:35:8c:24:5a:00:8e:35:d6:08:ba:67: 67:d8:d6:07:66:95:b5:e0:6d:0b:cc:98:d3:19:da:ff:0f:8d: 53:51:d9:aa:a4:4a:19:09:1e:13:4c:71:36:65:b2:c3:20:27: c2:ab:3b:29:8f:b4:8c:45:1f:8b:f1:7d:b9:41:7e:e4:d6:f2: 0a:62:96:da:49:00:37:06:d7:cd:01:3e:f3:e3:a9:27:1b:31: ac:47:3e:ab:49:1b:7e:6e:c6:17:14:ef:99:21:b0:c0:d6:73: 33:d7:1f:ec:6f:bf:ca:28:27:d3:18:fa:66:c6:1a:58:ef:89: 14:ca:43:68:b1:4c:6a:96:0f:10:bf:3c:91:ac:fa:08:79:c7: 98:64:91:5c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3x0DYGn5varw10BR6d8JFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMGM2YjJiZDI5ZDMxNjg0ODdjOWVjNWZkZTRjM2ZjNDJk OWNmYmUwHhcNMjYwMTAxMDQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjJkZTY1MDBhZTEyOGI0MmIxMjM0YzIzNDZiM2U2MzQ1NDMyMTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssyEc/dsqFPlq/KXe+O9uaGgfexO y+lpmXK9O5odPn1xKG7sF8DImeUo7ekMDcT2YQXOfZGK0vSVOZM5unoUyGujkX7j BANWRJawx0bdLcbMVHraJM/9RKIXHvXm1bpp8txihyH6PT2omYTabG+l39IJaNBy SAjWpvFUDIJuER9sAnKUtK6dsDsqhNoX2joUrIgZOtWhJNqN7d5hxfKKgzGbodfc 7rAlnUQpgViqkv8EJaxnIx0ryKWZpIWGg8wb45jZG5DkY957MaSV6M6JM3Na6H/L oB2bViGeIwWMgRpESQYU48oH+ow9B7bqaSrXqdovu5GpaZxFN4Sg82nHTQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLYt5lAK4Si0KxI0wjRrPmNFQyEKMB8GA1UdIwQY MBaAFP0MayvSnTFoSHyexf3kw/xC2c++MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1F4cks5S2RNV2hJZko3Rl9lVERfRUxaejc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80MzVkODgtMzcxZS00Zjg2LWE5MGEt Y2ZiYmMxNDY3MWEzLzEvdGkzbVVBcmhLTFFyRWpUQ05Hcy1ZMFZESVFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi80MzVkODgtMzcxZS00Zjg2LWE5MGEtY2ZiYmMxNDY3MWEz LzEvX1F4cks5S2RNV2hJZko3Rl9lVERfRUxaejc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALh6IAwQA Lh6MMA0GCSqGSIb3DQEBCwUAA4IBAQCjWKcT0nG63yCSrEqtHEhUYNDpiHE42n8H 0UPLgCHvCqz+Lsy7ivmMBuViJyogoQMLSCqk0/clXN8hlfhycl2pLT7lXo0kTKA4 NsXLwySYtiekHnUgl0+bLldPJQeGXLTobysyFg81tHwVn1eUsQq/eavONYwkWgCO NdYIumdn2NYHZpW14G0LzJjTGdr/D41TUdmqpEoZCR4TTHE2ZbLDICfCqzspj7SM RR+L8X25QX7k1vIKYpbaSQA3BtfNAT7z46knGzGsRz6rSRt+bsYXFO+ZIbDA1nMz 1x/sb7/KKCfTGPpmxhpY74kUykNosUxqlg8QvzyRrPoIeceYZJFc -----END CERTIFICATE-----Generated at Tue Feb 10 01:29:55 2026 by rpki-client