This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/ctn8OcjHsscIiuWYKmIzKXk2VTM.roa File: ctn8OcjHsscIiuWYKmIzKXk2VTM.roa (raw, json) Hash identifier: MIK/LTNuaSONUvFAQ4mc503oI5bKuGPz3d2eDJ+oDhw= Subject key identifier: 72:D9:FC:39:C8:C7:B2:C7:08:8A:E5:98:2A:62:33:29:79:36:55:33 Certificate issuer: /CN=c1233861207a230564ef36f11e0157344731e3f9 Certificate serial: 019B7835030C683217CAE7307CD17151FA64 Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/ctn8OcjHsscIiuWYKmIzKXk2VTM.roa Signing time: Thu 01 Jan 2026 06:18:18 +0000 ROA not before: Thu 01 Jan 2026 06:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201056 IP address blocks: 46.228.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.mft rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 09:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:03:0c:68:32:17:ca:e7:30:7c:d1:71:51:fa:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9 Validity Not Before: Jan 1 06:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72d9fc39c8c7b2c7088ae5982a62332979365533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:36:08:2f:71:5e:d5:56:d7:7b:4f:4a:8e:82: a9:7b:98:8f:62:88:e9:77:79:88:b1:c6:f8:5d:8c: ac:9a:d6:03:52:d9:9d:a4:7f:93:67:3c:9e:4e:c8: 19:e9:47:9a:5b:ee:ed:3b:18:9a:51:8c:4e:a5:fd: bd:dc:7d:af:4f:c0:b9:cb:5f:16:19:ba:f5:68:be: 34:bb:b4:d1:9b:10:33:6c:3c:a5:0e:17:33:40:36: e9:a6:76:44:5c:85:1e:4a:55:a2:7d:70:7a:a2:f8: 92:84:21:80:c1:a7:7c:66:90:01:18:b6:92:86:05: b3:06:c3:46:35:fd:22:b9:c7:2c:82:a0:35:c9:e3: 96:71:41:35:d4:4c:46:ac:43:9c:3a:aa:02:90:ad: 12:dd:80:f6:49:b5:2d:61:02:26:ad:1b:e5:2a:0d: cc:35:9e:a5:72:a4:0b:0c:31:0f:b9:79:f6:8e:19: 89:bc:81:31:30:6e:c0:e9:ed:a8:26:a6:61:3a:fd: 66:2f:b8:65:d4:ba:11:85:22:af:ed:80:11:fb:0f: 1f:71:6e:72:03:45:11:64:b4:eb:dd:b7:5b:c2:de: 99:a6:da:84:c0:9a:40:d8:0e:13:93:70:b1:0d:9e: d5:e1:99:9e:2e:c4:88:83:e3:78:30:ed:6a:02:4c: 92:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:D9:FC:39:C8:C7:B2:C7:08:8A:E5:98:2A:62:33:29:79:36:55:33 X509v3 Authority Key Identifier: keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/ctn8OcjHsscIiuWYKmIzKXk2VTM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.228.140.0/24 Signature Algorithm: sha256WithRSAEncryption 07:9d:6f:49:8d:1e:da:4d:de:7a:c6:1a:9d:9f:34:72:64:25: 8f:2b:aa:6b:42:98:c4:ee:c9:61:9e:eb:03:7e:73:b5:f6:53: fb:d6:cf:e7:ae:37:40:f7:22:88:d7:df:fa:a5:f0:50:48:99: 1e:bc:50:0e:b2:a5:d2:0c:0d:3d:fc:e0:07:64:2a:71:d0:c3: 3c:15:bf:b8:3e:64:5b:0f:64:0b:eb:d9:81:60:a2:32:9a:27: be:dc:ba:d2:e7:f4:86:ff:14:f0:b2:1c:ec:92:8c:e5:81:71: fb:b4:9b:da:8e:6c:64:2a:6d:15:7f:63:0c:af:23:a9:74:a8: 7c:05:92:7e:92:da:a6:95:66:94:53:41:1a:cf:41:2e:fc:05: 3c:c9:76:b1:ca:e9:a3:d4:35:be:7f:26:a4:29:ce:40:0f:c9: 17:e0:25:18:fb:27:87:47:46:24:aa:81:4e:31:65:7a:12:d9: f9:0f:f1:f5:3b:7c:74:9d:a0:21:95:02:b0:cf:9a:26:1c:a5: cc:b4:e8:b5:89:ca:8b:78:51:31:f7:d3:74:c8:a3:c2:56:25: 1a:fa:eb:3f:0e:78:c4:02:1d:96:c6:44:2e:3e:e2:43:12:97: b0:be:33:e5:3b:4e:2e:65:97:af:21:d8:ba:0c:4f:26:24:da: 6e:4e:20:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NQMMaDIXyucwfNFxUfpkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxMjMzODYxMjA3YTIzMDU2NGVmMzZmMTFlMDE1NzM0NDcz MWUzZjkwHhcNMjYwMTAxMDYxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmQ5ZmMzOWM4YzdiMmM3MDg4YWU1OTgyYTYyMzMyOTc5MzY1NTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDYIL3Fe1VbXe09KjoKpe5iPYojp d3mIscb4XYysmtYDUtmdpH+TZzyeTsgZ6UeaW+7tOxiaUYxOpf293H2vT8C5y18W Gbr1aL40u7TRmxAzbDylDhczQDbppnZEXIUeSlWifXB6oviShCGAwad8ZpABGLaS hgWzBsNGNf0iuccsgqA1yeOWcUE11ExGrEOcOqoCkK0S3YD2SbUtYQImrRvlKg3M NZ6lcqQLDDEPuXn2jhmJvIExMG7A6e2oJqZhOv1mL7hl1LoRhSKv7YAR+w8fcW5y A0URZLTr3bdbwt6ZptqEwJpA2A4Tk3CxDZ7V4ZmeLsSIg+N4MO1qAkyS9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHLZ/DnIx7LHCIrlmCpiMyl5NlUzMB8GA1UdIwQY MBaAFMEjOGEgeiMFZO828R4BVzRHMeP5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd1NNNFlTQjZJd1ZrN3pieEhnRlhORWN4NF9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yYzkzMjAtMzhkOS00NjA0LWFkOTIt MWM3YjJiOTFkMzA4LzEvY3RuOE9jakhzc2NJaXVXWUttSXpLWGsyVlRNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC8yYzkzMjAtMzhkOS00NjA0LWFkOTItMWM3YjJiOTFkMzA4 LzEvd1NNNFlTQjZJd1ZrN3pieEhnRlhORWN4NF9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALuSMMA0G CSqGSIb3DQEBCwUAA4IBAQAHnW9JjR7aTd56xhqdnzRyZCWPK6prQpjE7slhnusD fnO19lP71s/nrjdA9yKI19/6pfBQSJkevFAOsqXSDA09/OAHZCpx0MM8Fb+4PmRb D2QL69mBYKIymie+3LrS5/SG/xTwshzskozlgXH7tJvajmxkKm0Vf2MMryOpdKh8 BZJ+ktqmlWaUU0Eaz0Eu/AU8yXaxyumj1DW+fyakKc5AD8kX4CUY+yeHR0YkqoFO MWV6Etn5D/H1O3x0naAhlQKwz5omHKXMtOi1icqLeFEx99N0yKPCViUa+us/DnjE Ah2WxkQuPuJDEpewvjPlO04uZZevIdi6DE8mJNpuTiBh -----END CERTIFICATE-----Generated at Fri Jan 2 14:22:14 2026 by rpki-client