This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/1-2N7o3rXa2kEXEc9L-KyAvOeqf0.roa File: 1-2N7o3rXa2kEXEc9L-KyAvOeqf0.roa (raw, json) Hash identifier: yUMOwLX6anzQEJQZ/ZLwqV3uE8drjI2D4SrjYJX1k20= Subject key identifier: FB:63:7B:A3:7A:D7:6B:69:04:5C:47:3D:2F:E2:B2:02:F3:9E:A9:FD Certificate issuer: /CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4 Certificate serial: 019B7A5A95CACF917FE76A0A95A3F784C0CB Authority key identifier: F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/1-2N7o3rXa2kEXEc9L-KyAvOeqf0.roa Signing time: Thu 01 Jan 2026 16:18:35 +0000 ROA not before: Thu 01 Jan 2026 16:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8220 IP address blocks: 46.28.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.mft rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 04:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:95:ca:cf:91:7f:e7:6a:0a:95:a3:f7:84:c0:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2b98f584bc1234780a2c47fc88324d49ee0e6f4 Validity Not Before: Jan 1 16:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fb637ba37ad76b69045c473d2fe2b202f39ea9fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:61:af:e0:5e:3a:c3:42:67:f8:fd:f5:11:ea: 2c:43:4b:77:c7:35:45:37:3a:18:63:54:4d:40:48: 32:b0:73:be:f6:ee:b7:e7:4e:53:98:6e:aa:08:ab: ca:52:a4:28:3d:8a:31:1e:86:26:99:53:85:2e:75: f7:61:02:22:75:53:0e:36:94:c7:b0:d4:8e:06:e7: 2c:c5:5a:60:59:e4:43:03:2d:16:1c:ce:b5:dc:05: cc:92:f3:1b:87:a9:f8:2f:72:9c:34:17:af:ac:7e: b9:df:93:c9:17:c7:0e:bf:27:d5:06:d0:36:0b:96: 50:43:d9:8c:f9:ae:58:99:1d:26:85:71:91:b7:1d: 55:b8:64:15:ab:37:3d:03:64:5f:34:c3:e2:fa:8f: c9:98:aa:b2:c1:67:ed:b6:7e:fe:30:c7:68:14:eb: e5:91:09:40:c3:9f:42:d8:f4:10:47:e4:e3:8c:df: 44:14:26:d4:b8:37:66:ff:fb:4b:d3:57:3f:2a:1d: d9:28:36:35:49:28:13:f8:40:5e:30:98:3f:c7:75: 4f:19:17:46:07:eb:ae:87:d8:ac:c9:08:79:52:d2: 1d:ee:4f:f2:0e:e5:19:26:bc:0a:43:91:be:ad:88: 0e:79:64:80:71:1a:14:f8:30:a3:6c:29:b1:93:7b: 46:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:63:7B:A3:7A:D7:6B:69:04:5C:47:3D:2F:E2:B2:02:F3:9E:A9:FD X509v3 Authority Key Identifier: keyid:F2:B9:8F:58:4B:C1:23:47:80:A2:C4:7F:C8:83:24:D4:9E:E0:E6:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8rmPWEvBI0eAosR_yIMk1J7g5vQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/1-2N7o3rXa2kEXEc9L-KyAvOeqf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/ffcb25-145e-4ef8-9046-4ec1abe085ef/1/8rmPWEvBI0eAosR_yIMk1J7g5vQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.28.184.0/24 Signature Algorithm: sha256WithRSAEncryption 75:f7:86:b0:7d:46:99:d3:4b:dd:f6:a0:f7:d0:1f:b2:a1:c8: ab:16:3d:3f:96:bc:95:56:5f:52:a0:ba:63:16:ae:5e:1e:ad: 8c:81:a9:f8:98:5c:f4:1a:2c:a4:9a:9d:67:74:3a:fa:73:ce: 9f:0b:b2:6e:29:87:cf:eb:8f:bf:25:d6:76:71:44:e9:99:54: fd:53:e5:80:29:7a:0c:50:f0:38:97:76:1f:6d:a5:40:58:a5: 2a:54:c0:cc:57:02:36:de:47:c2:c2:2e:e4:cf:f9:90:14:48: b9:0d:a4:be:80:62:2e:f0:f0:bf:87:19:6f:84:aa:be:8e:19: d8:d7:55:8c:a1:0f:c6:ec:d3:f6:a3:7c:51:aa:45:dd:11:30: 29:16:97:7d:f3:8c:3b:f0:e9:d2:10:a5:1e:e7:a8:4c:fb:fe: a9:03:7f:08:2e:ca:c6:a1:19:26:99:e6:2f:e4:6e:4f:75:70: a7:a6:c5:c9:5e:75:1a:01:48:92:e6:53:58:12:90:b9:47:fa: b3:32:f7:a1:f5:02:d8:cc:64:16:f0:a2:7b:66:5b:dd:b9:32: b2:f8:58:23:3a:2e:8c:3b:26:84:fe:e1:70:ad:c8:32:9b:b3: 2a:50:7e:3b:a7:99:c7:2f:84:0a:0b:f2:31:4a:d8:71:34:5c: 32:d4:b6:14 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt6WpXKz5F/52oKlaP3hMDLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYyYjk4ZjU4NGJjMTIzNDc4MGEyYzQ3ZmM4ODMyNGQ0OWVl MGU2ZjQwHhcNMjYwMTAxMTYxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYjYzN2JhMzdhZDc2YjY5MDQ1YzQ3M2QyZmUyYjIwMmYzOWVhOWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWGv4F46w0Jn+P31EeosQ0t3xzVF NzoYY1RNQEgysHO+9u63505TmG6qCKvKUqQoPYoxHoYmmVOFLnX3YQIidVMONpTH sNSOBucsxVpgWeRDAy0WHM613AXMkvMbh6n4L3KcNBevrH6535PJF8cOvyfVBtA2 C5ZQQ9mM+a5YmR0mhXGRtx1VuGQVqzc9A2RfNMPi+o/JmKqywWfttn7+MMdoFOvl kQlAw59C2PQQR+TjjN9EFCbUuDdm//tL01c/Kh3ZKDY1SSgT+EBeMJg/x3VPGRdG B+uuh9isyQh5UtId7k/yDuUZJrwKQ5G+rYgOeWSAcRoU+DCjbCmxk3tGYwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPtje6N612tpBFxHPS/isgLznqn9MB8GA1UdIwQY MBaAFPK5j1hLwSNHgKLEf8iDJNSe4Ob0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOHJtUFdFdkJJMGVBb3NSX3lJTWsxSjdnNXZRLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9mZmNiMjUtMTQ1ZS00ZWY4LTkwNDYt NGVjMWFiZTA4NWVmLzEvMS0yTjdvM3JYYTJrRVhFYzlMLUt5QXZPZXFmMC5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYjcvZmZjYjI1LTE0NWUtNGVmOC05MDQ2LTRlYzFhYmUwODVl Zi8xLzhybVBXRXZCSTBlQW9zUl95SU1rMUo3ZzV2US5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC4cuDAN BgkqhkiG9w0BAQsFAAOCAQEAdfeGsH1GmdNL3fag99AfsqHIqxY9P5a8lVZfUqC6 YxauXh6tjIGp+Jhc9BospJqdZ3Q6+nPOnwuybimHz+uPvyXWdnFE6ZlU/VPlgCl6 DFDwOJd2H22lQFilKlTAzFcCNt5HwsIu5M/5kBRIuQ2kvoBiLvDwv4cZb4Sqvo4Z 2NdVjKEPxuzT9qN8UapF3REwKRaXffOMO/Dp0hClHueoTPv+qQN/CC7KxqEZJpnm L+RuT3Vwp6bFyV51GgFIkuZTWBKQuUf6szL3ofUC2MxkFvCie2Zb3bkysvhYIzou jDsmhP7hcK3IMpuzKlB+O6eZxy+ECgvyMUrYcTRcMtS2FA== -----END CERTIFICATE-----Generated at Wed Jan 21 12:18:52 2026 by rpki-client