This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/EdFWUcc8IVOoO0eCHGrnGkFmsGg.roa File: EdFWUcc8IVOoO0eCHGrnGkFmsGg.roa (raw, json) Hash identifier: hRMzKjUqKk1WuOs7kzmRaFOXrwrTn6B37s4zIKdomao= Subject key identifier: 11:D1:56:51:C7:3C:21:53:A8:3B:47:82:1C:6A:E7:1A:41:66:B0:68 Certificate issuer: /CN=8bfca7c96e804505a48b99603d9b2124f1dd3702 Certificate serial: 019B7D5C8523F975913DC49BC9A871D4323D Authority key identifier: 8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/EdFWUcc8IVOoO0eCHGrnGkFmsGg.roa Signing time: Fri 02 Jan 2026 06:19:33 +0000 ROA not before: Fri 02 Jan 2026 06:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 36040 IP address blocks: 46.28.246.0/24 maxlen: 24 46.28.247.0/24 maxlen: 24 193.33.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Jan 2026 08:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:85:23:f9:75:91:3d:c4:9b:c9:a8:71:d4:32:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8bfca7c96e804505a48b99603d9b2124f1dd3702 Validity Not Before: Jan 2 06:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=11d15651c73c2153a83b47821c6ae71a4166b068 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:17:2c:c9:f6:4a:0e:66:d6:1a:45:66:97:86: d9:4c:75:6a:12:a6:96:b9:28:b1:70:e5:61:84:e9: 42:b5:d8:a0:9c:d4:73:fd:1c:48:a6:d7:a2:99:dc: 5c:46:0e:ca:ec:e8:fa:fb:6c:5f:7d:c9:fa:a9:66: d0:55:05:eb:b8:99:75:b2:b0:4f:0e:84:2e:30:2e: cb:fb:0a:a8:79:69:a2:09:f7:b3:15:89:9f:2b:5b: 0b:7b:74:af:71:56:23:b3:a4:3e:04:34:47:57:d7: 26:82:e9:31:d4:22:a0:b4:92:16:f0:c9:31:15:96: 0a:b7:e9:a8:60:80:9b:a4:1a:0b:ea:88:48:e5:4f: 41:11:b9:b1:32:61:a4:1d:6b:a1:36:41:c9:bf:c3: 07:67:54:a6:bd:7c:de:1f:64:11:16:f0:d7:19:da: c8:09:9c:54:c7:c5:1a:45:46:de:6e:2b:89:48:29: 94:16:ca:79:94:c0:d5:44:35:f4:dd:d3:e9:11:75: f9:cf:53:97:4b:32:37:37:90:5e:73:64:ca:33:b2: 9c:cf:8d:2a:56:c1:c9:13:d4:3c:e5:5d:81:58:c4: 32:f4:1a:97:35:83:9c:4e:d2:2d:32:93:6b:cc:2c: 20:9a:05:f3:79:0f:1b:8b:f8:2d:cd:16:ca:4f:7c: a9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D1:56:51:C7:3C:21:53:A8:3B:47:82:1C:6A:E7:1A:41:66:B0:68 X509v3 Authority Key Identifier: keyid:8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/EdFWUcc8IVOoO0eCHGrnGkFmsGg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.28.246.0/23 193.33.5.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:e7:a6:16:a6:fb:5f:e9:68:cf:14:f0:aa:8b:d5:7f:48:5d: 0b:21:d0:b0:16:0e:4e:e9:6c:23:54:51:ce:cc:ed:7f:4d:b7: 64:21:59:29:08:c3:cf:18:62:4a:72:3b:91:d5:8f:18:59:28: 67:de:8e:7c:b5:a9:c8:f8:9e:02:87:d3:75:cb:92:3e:90:06: 43:09:9d:06:30:51:6c:11:01:2f:95:34:c6:ae:1c:f6:16:23: 0d:98:69:d1:65:88:f9:ee:97:55:77:99:60:01:97:3b:86:f0: 70:1c:f4:0f:11:ef:4b:7e:15:ea:54:02:86:64:77:9c:5f:5d: 09:d2:81:e6:8f:d4:ca:fa:ba:98:24:44:70:71:3e:0f:ca:e6: e8:56:22:e1:19:98:54:34:2c:bb:5b:65:34:f0:87:36:db:d2: 2d:92:78:65:18:74:76:ce:41:23:cb:e5:61:21:af:f0:32:a9: 9d:31:85:44:d9:07:1c:19:8d:33:f8:1a:a4:3f:b3:bb:82:4a: 1f:32:41:97:5d:b9:1e:b6:2d:20:9c:f5:5b:d6:9e:5f:31:06: 60:0f:66:d5:ed:58:7e:95:d3:65:1e:89:7e:f5:64:2f:0e:6d: 48:91:8e:cb:3d:46:e7:ed:1c:ad:7e:0f:f4:1b:e1:e2:a1:a9: d8:a8:38:22 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9XIUj+XWRPcSbyahx1DI9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhiZmNhN2M5NmU4MDQ1MDVhNDhiOTk2MDNkOWIyMTI0ZjFk ZDM3MDIwHhcNMjYwMTAyMDYxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMWQxNTY1MWM3M2MyMTUzYTgzYjQ3ODIxYzZhZTcxYTQxNjZiMDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hcsyfZKDmbWGkVml4bZTHVqEqaW uSixcOVhhOlCtdignNRz/RxIpteimdxcRg7K7Oj6+2xffcn6qWbQVQXruJl1srBP DoQuMC7L+wqoeWmiCfezFYmfK1sLe3SvcVYjs6Q+BDRHV9cmgukx1CKgtJIW8Mkx FZYKt+moYICbpBoL6ohI5U9BEbmxMmGkHWuhNkHJv8MHZ1SmvXzeH2QRFvDXGdrI CZxUx8UaRUbebiuJSCmUFsp5lMDVRDX03dPpEXX5z1OXSzI3N5Bec2TKM7Kcz40q VsHJE9Q85V2BWMQy9BqXNYOcTtItMpNrzCwgmgXzeQ8bi/gtzRbKT3ypDwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBHRVlHHPCFTqDtHghxq5xpBZrBoMB8GA1UdIwQY MBaAFIv8p8lugEUFpIuZYD2bISTx3TcCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaV95bnlXNkFSUVdraTVsZ1Bac2hKUEhkTndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy84ZjNiNmYtZTg2Zi00NjdkLWFhOTAt MThiMWE5MzdhNTY3LzEvRWRGV1VjYzhJVk9vTzBlQ0hHcm5Ha0Ztc0dnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy84ZjNiNmYtZTg2Zi00NjdkLWFhOTAtMThiMWE5MzdhNTY3 LzEvaV95bnlXNkFSUVdraTVsZ1Bac2hKUEhkTndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLhz2AwQA wSEFMA0GCSqGSIb3DQEBCwUAA4IBAQB/56YWpvtf6WjPFPCqi9V/SF0LIdCwFg5O 6WwjVFHOzO1/TbdkIVkpCMPPGGJKcjuR1Y8YWShn3o58tanI+J4Ch9N1y5I+kAZD CZ0GMFFsEQEvlTTGrhz2FiMNmGnRZYj57pdVd5lgAZc7hvBwHPQPEe9LfhXqVAKG ZHecX10J0oHmj9TK+rqYJERwcT4PyuboViLhGZhUNCy7W2U08Ic229ItknhlGHR2 zkEjy+VhIa/wMqmdMYVE2QccGY0z+BqkP7O7gkofMkGXXbketi0gnPVb1p5fMQZg D2bV7Vh+ldNlHol+9WQvDm1IkY7LPUbn7Rytfg/0G+HioanYqDgi -----END CERTIFICATE-----Generated at Sat Jan 3 18:31:40 2026 by rpki-client