This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/bGUUyfn8LV4LZNEEOyMzCvPydbk.roa File: bGUUyfn8LV4LZNEEOyMzCvPydbk.roa (raw, json) Hash identifier: W6x3dQobD8oVvOQzgir4mxsCCqdcG39VNjd49cT8IRw= Subject key identifier: 6C:65:14:C9:F9:FC:2D:5E:0B:64:D1:04:3B:23:33:0A:F3:F2:75:B9 Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce Certificate serial: 019B7C13516C5E69E441A744A70D8A134B48 Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/bGUUyfn8LV4LZNEEOyMzCvPydbk.roa Signing time: Fri 02 Jan 2026 00:19:59 +0000 ROA not before: Fri 02 Jan 2026 00:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 46.34.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 04:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:51:6c:5e:69:e4:41:a7:44:a7:0d:8a:13:4b:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce Validity Not Before: Jan 2 00:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6c6514c9f9fc2d5e0b64d1043b23330af3f275b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:41:96:2d:3e:93:94:2b:9a:eb:e3:04:25:9f: 25:fd:b3:e3:56:2b:5a:cf:d8:c7:75:e5:ec:8d:5a: 9b:66:f0:99:e8:22:6b:bf:63:ee:df:6b:c2:71:0d: cb:48:38:c6:af:5f:5f:c4:86:24:c3:7d:56:3e:5a: bb:95:00:ed:3b:13:92:12:31:dc:4c:39:97:41:eb: 1c:31:19:9f:98:4b:3e:59:78:03:57:cf:cc:b4:48: cb:29:8a:4f:c5:0c:0f:6a:f5:55:c9:53:c8:77:44: 21:a2:5c:7d:81:16:29:4c:f2:d4:d3:0a:ad:0e:4f: f5:6b:93:1b:b8:42:ae:d8:ff:8f:1a:88:0e:94:bc: 7e:8b:35:78:c4:39:ea:60:23:14:70:61:d1:31:52: 74:db:fa:83:7e:6d:ed:0e:71:e6:5d:f5:b9:30:9e: 30:6f:bb:53:ff:72:19:d7:8a:09:88:3e:3d:8a:30: c2:56:a5:e1:d1:e8:fa:08:6d:2a:59:84:14:5e:d5: ec:76:fa:3a:e5:38:d5:1b:70:5c:08:01:6b:ae:42: 9d:55:06:c6:4b:d9:fa:76:1b:6e:11:ae:52:f1:3b: 46:dd:b6:fb:77:63:fc:09:26:c9:58:5a:20:29:8a: 26:e5:56:32:d3:d6:c5:88:90:75:b0:13:fb:39:35: 7e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:65:14:C9:F9:FC:2D:5E:0B:64:D1:04:3B:23:33:0A:F3:F2:75:B9 X509v3 Authority Key Identifier: keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/bGUUyfn8LV4LZNEEOyMzCvPydbk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.34.46.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:77:f8:d0:9d:e2:40:18:8c:11:84:88:23:e0:65:35:d7:c8: 4a:3f:e2:aa:bd:1a:6f:20:75:1c:6a:fb:78:1c:c1:00:9d:42: 51:99:4e:9b:de:b7:36:3c:31:7c:6f:00:d8:2c:f2:79:1d:8b: ef:9d:0c:ef:67:48:f3:75:93:82:44:66:02:7a:f8:69:3a:fd: f8:32:60:c8:3e:89:dd:c8:f3:ee:b2:7b:d6:83:04:eb:71:2b: 26:3e:78:f1:99:a2:a2:7b:81:70:a0:8d:60:fa:2d:d6:11:16: d6:a4:de:94:a4:82:7a:26:59:c9:c0:b1:31:01:c4:71:8b:01: 2d:38:3f:95:ed:6c:db:d2:e8:e4:3d:5e:7b:85:2e:48:0a:2f: f6:e4:eb:36:5a:46:0e:7c:08:3c:7f:9d:56:46:92:30:35:02: e1:b9:2e:f0:60:8f:01:fc:c1:a0:e9:6b:94:4c:63:23:07:8f: ad:e0:af:6b:dc:c9:e6:b8:19:21:7b:69:bd:a7:fe:9f:94:49: c1:b1:d8:93:4f:dd:4b:16:fc:1a:82:8f:cf:8e:ca:5a:0f:b0: 52:d6:36:ef:c4:dd:88:52:ec:af:0e:fb:2f:29:bd:74:4f:a4: 2a:1c:b8:91:bc:7a:00:ab:24:ca:9a:da:88:87:de:4b:28:d7: 87:da:c0:6f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E1FsXmnkQadEpw2KE0tIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw N2VmY2UwHhcNMjYwMTAyMDAxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2YzY1MTRjOWY5ZmMyZDVlMGI2NGQxMDQzYjIzMzMwYWYzZjI3NWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UGWLT6TlCua6+MEJZ8l/bPjVita z9jHdeXsjVqbZvCZ6CJrv2Pu32vCcQ3LSDjGr19fxIYkw31WPlq7lQDtOxOSEjHc TDmXQescMRmfmEs+WXgDV8/MtEjLKYpPxQwPavVVyVPId0Qholx9gRYpTPLU0wqt Dk/1a5MbuEKu2P+PGogOlLx+izV4xDnqYCMUcGHRMVJ02/qDfm3tDnHmXfW5MJ4w b7tT/3IZ14oJiD49ijDCVqXh0ej6CG0qWYQUXtXsdvo65TjVG3BcCAFrrkKdVQbG S9n6dhtuEa5S8TtG3bb7d2P8CSbJWFogKYom5VYy09bFiJB1sBP7OTV+GQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGxlFMn5/C1eC2TRBDsjMwrz8nW5MB8GA1UdIwQY MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt YTZiOTkxZjRmYWY4LzEvYkdVVXlmbjhMVjRMWk5FRU95TXpDdlB5ZGJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4 LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiIuMA0G CSqGSIb3DQEBCwUAA4IBAQB7d/jQneJAGIwRhIgj4GU118hKP+KqvRpvIHUcavt4 HMEAnUJRmU6b3rc2PDF8bwDYLPJ5HYvvnQzvZ0jzdZOCRGYCevhpOv34MmDIPond yPPusnvWgwTrcSsmPnjxmaKie4FwoI1g+i3WERbWpN6UpIJ6JlnJwLExAcRxiwEt OD+V7Wzb0ujkPV57hS5ICi/25Os2WkYOfAg8f51WRpIwNQLhuS7wYI8B/MGg6WuU TGMjB4+t4K9r3MnmuBkhe2m9p/6flEnBsdiTT91LFvwago/PjspaD7BS1jbvxN2I UuyvDvsvKb10T6QqHLiRvHoAqyTKmtqIh95LKNeH2sBv -----END CERTIFICATE-----Generated at Thu Jan 8 12:58:24 2026 by rpki-client