This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/2d80ICWvEy2H06WqwwbbUkHjd9Q.roa File: 2d80ICWvEy2H06WqwwbbUkHjd9Q.roa (raw, json) Hash identifier: Ddn5JpBKquVV9p/RAvUdBev4yfl/8irtR+M1x9mKoR4= Subject key identifier: D9:DF:34:20:25:AF:13:2D:87:D3:A5:AA:C3:06:DB:52:41:E3:77:D4 Certificate issuer: /CN=719e59b5017bfe634411949eff2d70ba0a07c540 Certificate serial: 019B7D5AE8CBEDE7E1DCFE8D9C15F271204E Authority key identifier: 71:9E:59:B5:01:7B:FE:63:44:11:94:9E:FF:2D:70:BA:0A:07:C5:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/2d80ICWvEy2H06WqwwbbUkHjd9Q.roa Signing time: Fri 02 Jan 2026 06:17:48 +0000 ROA not before: Fri 02 Jan 2026 06:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 46.28.58.0/24 maxlen: 24 46.28.59.0/24 maxlen: 24 46.28.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:e8:cb:ed:e7:e1:dc:fe:8d:9c:15:f2:71:20:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=719e59b5017bfe634411949eff2d70ba0a07c540 Validity Not Before: Jan 2 06:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9df342025af132d87d3a5aac306db5241e377d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:01:cb:59:5e:fe:79:c0:81:a7:41:e3:4b:c2: ee:b2:91:42:fe:78:76:57:cd:6b:b7:ac:db:0e:82: e9:e5:66:92:e8:46:54:f7:41:3b:8c:3f:dc:30:c2: 27:f2:48:4f:18:38:57:75:b9:93:b7:38:66:cc:d6: 0f:b0:e5:a9:07:4f:20:4e:6d:1c:1f:d8:d0:78:40: 7a:2c:3f:fd:f4:94:17:a2:41:02:fc:d0:10:a8:60: ce:28:af:bb:12:64:e4:32:d3:78:59:f9:83:b7:14: fe:b2:c2:fb:15:72:c4:8e:bf:98:e1:5e:2a:cd:8b: a6:45:e7:5e:fe:fb:9d:3b:10:17:fe:af:e2:13:f3: d0:66:50:b9:97:c1:d2:bc:1f:8e:bd:b2:be:c8:91: 68:6a:82:f9:15:37:92:47:5b:86:80:25:75:3c:a7: 27:99:20:fb:1b:73:da:11:34:68:26:f3:0b:67:d7: 73:67:c9:39:e7:0e:26:07:4d:98:57:73:3a:64:93: b0:d1:2c:31:61:4c:d0:90:c4:e9:02:ac:79:c2:33: 1a:07:ae:3f:91:4b:c5:0f:fb:f6:32:54:f2:46:61: ae:fc:71:e3:0e:36:ed:4e:e6:03:0b:e7:ef:17:4e: 3c:df:26:05:cd:e7:fb:d4:c3:7a:ec:94:7b:8c:7a: 3f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:DF:34:20:25:AF:13:2D:87:D3:A5:AA:C3:06:DB:52:41:E3:77:D4 X509v3 Authority Key Identifier: keyid:71:9E:59:B5:01:7B:FE:63:44:11:94:9E:FF:2D:70:BA:0A:07:C5:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/2d80ICWvEy2H06WqwwbbUkHjd9Q.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.28.58.0/23 46.28.63.0/24 Signature Algorithm: sha256WithRSAEncryption 97:a6:b6:aa:ba:ae:66:d1:df:5f:72:66:6d:48:51:bc:36:fc: 49:a7:5d:59:ea:06:8e:3c:d7:8d:c8:db:8c:39:f8:7f:b4:8e: 58:a3:4b:2f:f0:f0:52:a3:16:9e:f7:4d:6b:24:64:7c:96:56: 6c:d9:cf:45:75:16:a9:57:4a:83:20:3e:aa:00:9f:1f:0a:75: f5:3d:d6:8a:55:16:ef:48:bd:35:29:1e:cd:74:06:2a:3f:29: 9f:8b:5d:4e:01:50:25:70:18:c5:25:1e:9b:a4:37:8c:9a:17: f2:88:71:ec:e4:a6:0a:85:7c:f4:3d:78:23:4b:ba:d1:d1:12: 4e:4c:7c:0b:5f:bd:77:0f:84:0a:0a:cc:16:0d:0c:ca:dd:2e: 95:e0:1c:97:d5:12:e8:2a:d1:b3:1e:fb:7b:1e:35:20:ec:5a: 7a:30:66:22:5b:3c:e6:e3:76:f7:fe:e7:72:65:00:89:a5:cd: 4c:ad:77:ff:de:d2:a8:a9:e1:5a:91:e5:30:13:65:ba:4c:3f: b3:c8:6b:38:3b:e5:81:ea:80:b8:b3:74:7c:f2:b2:d2:57:d3: 7c:cc:6e:35:6e:71:05:8b:98:7e:f4:e0:a7:dc:4b:b0:11:29: fe:b7:d9:e5:4a:9e:36:ec:87:2e:fc:2e:00:ed:79:83:26:17: 3e:35:c5:de -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9WujL7efh3P6NnBXycSBOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxOWU1OWI1MDE3YmZlNjM0NDExOTQ5ZWZmMmQ3MGJhMGEw N2M1NDAwHhcNMjYwMTAyMDYxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWRmMzQyMDI1YWYxMzJkODdkM2E1YWFjMzA2ZGI1MjQxZTM3N2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApAHLWV7+ecCBp0HjS8LuspFC/nh2 V81rt6zbDoLp5WaS6EZU90E7jD/cMMIn8khPGDhXdbmTtzhmzNYPsOWpB08gTm0c H9jQeEB6LD/99JQXokEC/NAQqGDOKK+7EmTkMtN4WfmDtxT+ssL7FXLEjr+Y4V4q zYumRede/vudOxAX/q/iE/PQZlC5l8HSvB+OvbK+yJFoaoL5FTeSR1uGgCV1PKcn mSD7G3PaETRoJvMLZ9dzZ8k55w4mB02YV3M6ZJOw0SwxYUzQkMTpAqx5wjMaB64/ kUvFD/v2MlTyRmGu/HHjDjbtTuYDC+fvF0483yYFzef71MN67JR7jHo/SQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNnfNCAlrxMth9OlqsMG21JB43fUMB8GA1UdIwQY MBaAFHGeWbUBe/5jRBGUnv8tcLoKB8VAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1o1WnRRRjdfbU5FRVpTZV95MXd1Z29IeFVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8xZjllNmMtZTZiOC00YWQ0LTk5NDEt ZjQ2ZjlkNjc0ZjZjLzEvMmQ4MElDV3ZFeTJIMDZXcXd3YmJVa0hqZDlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8xZjllNmMtZTZiOC00YWQ0LTk5NDEtZjQ2ZjlkNjc0ZjZj LzEvY1o1WnRRRjdfbU5FRVpTZV95MXd1Z29IeFVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLhw6AwQA Lhw/MA0GCSqGSIb3DQEBCwUAA4IBAQCXpraquq5m0d9fcmZtSFG8NvxJp11Z6gaO PNeNyNuMOfh/tI5Yo0sv8PBSoxae901rJGR8llZs2c9FdRapV0qDID6qAJ8fCnX1 PdaKVRbvSL01KR7NdAYqPymfi11OAVAlcBjFJR6bpDeMmhfyiHHs5KYKhXz0PXgj S7rR0RJOTHwLX713D4QKCswWDQzK3S6V4ByX1RLoKtGzHvt7HjUg7Fp6MGYiWzzm 43b3/udyZQCJpc1MrXf/3tKoqeFakeUwE2W6TD+zyGs4O+WB6oC4s3R88rLSV9N8 zG41bnEFi5h+9OCn3EuwESn+t9nlSp427Icu/C4A7XmDJhc+NcXe -----END CERTIFICATE-----Generated at Wed Jan 7 23:47:42 2026 by rpki-client