This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/U4zW5QS2curvW1WWlXvfaZ-FFgE.roa File: U4zW5QS2curvW1WWlXvfaZ-FFgE.roa (raw, json) Hash identifier: urvPIf0emVxN+h0vEZuEnLmYIlJrl/akSOeGv1xVrhA= Subject key identifier: 53:8C:D6:E5:04:B6:72:EA:EF:5B:55:96:95:7B:DF:69:9F:85:16:01 Certificate issuer: /CN=c1233861207a230564ef36f11e0157344731e3f9 Certificate serial: 019B7835025480098ACB19C354336D882597 Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/U4zW5QS2curvW1WWlXvfaZ-FFgE.roa Signing time: Thu 01 Jan 2026 06:18:18 +0000 ROA not before: Thu 01 Jan 2026 06:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 46.228.131.0/24 maxlen: 24 46.228.135.0/24 maxlen: 24 46.228.136.0/23 maxlen: 24 46.228.140.0/24 maxlen: 24 46.228.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:02:54:80:09:8a:cb:19:c3:54:33:6d:88:25:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9 Validity Not Before: Jan 1 06:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=538cd6e504b672eaef5b5596957bdf699f851601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0a:23:17:1d:2d:be:4d:cd:44:a2:45:a3:7e: 71:58:03:b2:d3:ab:f2:fa:f1:69:c2:ea:c8:53:10: 1e:2f:9e:d6:d3:9d:e9:81:75:6d:9e:d2:9d:5a:d9: a7:66:f4:93:87:df:64:0b:1b:1e:98:e7:ec:53:7e: 2f:b7:e1:76:50:77:13:ff:14:22:2e:d9:d1:cb:cc: 01:32:a9:f9:f2:80:7e:2c:85:fe:8d:7d:d1:5e:b0: 36:39:99:7c:67:37:5c:40:56:ab:c3:90:9c:f7:de: 77:91:51:2a:4d:ec:e5:9a:f8:91:09:c5:74:2d:11: 2e:6a:a8:d1:3a:c4:00:4b:91:8f:64:f6:30:d9:51: 97:55:0b:c6:53:a1:4a:ff:5c:66:76:0e:58:1d:d2: 83:c4:bf:15:ff:09:98:85:c0:98:30:70:e2:eb:fa: 71:c6:76:12:e4:3b:7b:fa:2c:98:d2:03:74:77:6e: 38:ec:83:32:a7:19:e0:23:50:b3:58:c9:28:89:f0: 8c:e1:7d:ce:8c:60:d4:60:0f:5f:5b:7d:84:72:d2: b0:ff:69:3b:af:aa:c9:03:5c:91:51:51:f9:13:c7: 03:fa:34:9d:30:0e:70:00:d9:65:42:24:b6:08:6f: 10:f8:a8:7c:e5:39:50:1d:6d:61:da:d4:9a:b0:78: 7f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:8C:D6:E5:04:B6:72:EA:EF:5B:55:96:95:7B:DF:69:9F:85:16:01 X509v3 Authority Key Identifier: keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/U4zW5QS2curvW1WWlXvfaZ-FFgE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.228.131.0/24 46.228.135.0-46.228.137.255 46.228.140.0/23 Signature Algorithm: sha256WithRSAEncryption 30:f5:70:5e:60:1b:6e:37:13:6a:c8:31:2e:17:3d:61:b3:27: 07:e2:85:ec:df:c9:8d:85:95:6b:d4:bc:b6:8a:5f:e1:ad:3b: d0:c1:fd:67:8c:00:13:fb:25:70:14:b2:e3:86:40:12:8d:ad: 3d:5d:f9:c8:63:1a:71:9c:91:aa:39:a4:3c:e5:a9:9f:94:ea: 18:e8:2e:44:85:be:05:e5:ae:48:86:6e:f1:7a:da:6d:f4:a9: 7a:b6:b9:e0:bc:ef:5b:64:a4:ac:93:e2:a4:c4:ce:08:75:9b: 51:cf:24:3a:01:2a:80:8b:38:be:6e:f8:e7:10:68:00:d5:ca: a0:66:5b:ad:7c:b0:c3:e1:6f:5b:fa:33:62:a6:f8:13:05:5d: 51:96:e8:d4:88:82:df:51:6a:ef:0e:ce:cd:8f:c2:f1:3f:f9: 60:2e:00:4c:97:56:ef:f7:36:57:29:8d:b7:6f:4d:d4:5c:3f: ca:a3:cf:ec:e3:c2:e4:89:6f:63:13:db:d8:13:48:0e:d5:35: 20:35:cf:48:1f:12:ab:72:54:d0:27:e3:04:5f:af:bb:47:17: 11:57:99:90:2f:41:10:f3:13:13:bf:81:0d:ab:bd:c7:c6:90: 89:1e:6b:06:e5:4a:23:6b:6e:91:e8:92:5c:c0:7b:1a:21:19: 13:22:98:a4 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt4NQJUgAmKyxnDVDNtiCWXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMjMzODYxMjA3YTIzMDU2NGVmMzZmMTFlMDE1NzM0NDcz MWUzZjkwHhcNMjYwMTAxMDYxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzhjZDZlNTA0YjY3MmVhZWY1YjU1OTY5NTdiZGY2OTlmODUxNjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygojFx0tvk3NRKJFo35xWAOy06vy +vFpwurIUxAeL57W053pgXVtntKdWtmnZvSTh99kCxsemOfsU34vt+F2UHcT/xQi LtnRy8wBMqn58oB+LIX+jX3RXrA2OZl8ZzdcQFarw5Cc9953kVEqTezlmviRCcV0 LREuaqjROsQAS5GPZPYw2VGXVQvGU6FK/1xmdg5YHdKDxL8V/wmYhcCYMHDi6/px xnYS5Dt7+iyY0gN0d2447IMypxngI1CzWMkoifCM4X3OjGDUYA9fW32EctKw/2k7 r6rJA1yRUVH5E8cD+jSdMA5wANllQiS2CG8Q+Kh85TlQHW1h2tSasHh/FQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFFOM1uUEtnLq71tVlpV732mfhRYBMB8GA1UdIwQY MBaAFMEjOGEgeiMFZO828R4BVzRHMeP5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1NNNFlTQjZJd1ZrN3pieEhnRlhORWN4NF9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yYzkzMjAtMzhkOS00NjA0LWFkOTIt MWM3YjJiOTFkMzA4LzEvVTR6VzVRUzJjdXJ2VzFXV2xYdmZhWi1GRmdFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8yYzkzMjAtMzhkOS00NjA0LWFkOTItMWM3YjJiOTFkMzA4 LzEvd1NNNFlTQjZJd1ZrN3pieEhnRlhORWN4NF9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQALuSDMAwD BAAu5IcDBAEu5IgDBAEu5IwwDQYJKoZIhvcNAQELBQADggEBADD1cF5gG243E2rI MS4XPWGzJwfihezfyY2FlWvUvLaKX+GtO9DB/WeMABP7JXAUsuOGQBKNrT1d+chj GnGckao5pDzlqZ+U6hjoLkSFvgXlrkiGbvF62m30qXq2ueC871tkpKyT4qTEzgh1 m1HPJDoBKoCLOL5u+OcQaADVyqBmW618sMPhb1v6M2Km+BMFXVGW6NSIgt9Rau8O zs2PwvE/+WAuAEyXVu/3NlcpjbdvTdRcP8qjz+zjwuSJb2MT29gTSA7VNSA1z0gf EqtyVNAn4wRfr7tHFxFXmZAvQRDzExO/gQ2rvcfGkIkeawblSiNrbpHoklzAexoh GRMimKQ= -----END CERTIFICATE-----Generated at Fri Jan 2 11:03:56 2026 by rpki-client