This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/dxVo7YHMzgIxFZBbhwQlubQeF-g.roa File: dxVo7YHMzgIxFZBbhwQlubQeF-g.roa (raw, json) Hash identifier: LuKbLHod4PNd+lSaZPVKjIB6zGkTGS0cV3mEzX0X0E0= Subject key identifier: 77:15:68:ED:81:CC:CE:02:31:15:90:5B:87:04:25:B9:B4:1E:17:E8 Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Certificate serial: 019B7BA490CF76E07B62A294DAF990D73482 Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/dxVo7YHMzgIxFZBbhwQlubQeF-g.roa Signing time: Thu 01 Jan 2026 22:19:01 +0000 ROA not before: Thu 01 Jan 2026 22:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43201 IP address blocks: 46.16.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 10:02:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:90:cf:76:e0:7b:62:a2:94:da:f9:90:d7:34:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5 Validity Not Before: Jan 1 22:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=771568ed81ccce023115905b870425b9b41e17e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:04:3a:6a:fa:48:5d:5d:60:ac:fe:f7:ac:61: 91:11:a6:cf:d2:1f:db:c9:00:4d:45:55:f4:9c:32: 3a:d3:07:b9:43:ef:8d:1c:cc:2c:a7:9c:c9:2c:08: 53:aa:45:03:84:ed:48:94:a7:f6:62:22:ad:de:10: 67:1c:6f:f4:44:5a:be:2c:d7:8b:69:67:07:7b:01: 4c:44:db:7e:7c:27:dd:66:b3:0d:e1:89:32:15:0a: 09:64:dc:d4:3d:e4:c1:bb:e6:21:6a:4b:5e:2b:0c: 05:28:88:c4:f8:3a:2d:26:da:f3:3d:ba:ca:63:8a: 2c:f7:b3:00:5d:d6:a5:8e:48:56:6b:ae:3e:c9:ac: 88:e1:7d:45:96:92:35:0d:fa:37:84:07:e3:88:fb: ca:6f:3c:52:70:d4:84:f5:81:cc:15:f3:1c:0c:68: 4a:d0:ab:1f:a8:a2:3f:7a:bf:d7:0f:0b:3f:cb:8d: 11:49:12:1a:ff:22:bc:96:5d:e9:b6:48:ae:da:11: 41:33:ca:50:f2:fc:a5:15:c6:16:a3:69:8e:56:4b: 4a:6a:c0:30:f3:95:3a:5e:aa:f5:63:28:af:18:63: be:9a:a9:06:24:a0:e8:05:34:ba:3f:50:5d:52:2b: c4:cb:cc:17:a6:a7:64:89:03:4e:64:43:22:49:4c: a2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:15:68:ED:81:CC:CE:02:31:15:90:5B:87:04:25:B9:B4:1E:17:E8 X509v3 Authority Key Identifier: keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/dxVo7YHMzgIxFZBbhwQlubQeF-g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.16.33.0/24 Signature Algorithm: sha256WithRSAEncryption 75:52:7b:5f:2d:e4:8a:b0:0c:95:ed:8e:0c:78:24:66:ec:a7: a8:ca:5e:62:ef:6d:ae:0d:39:b4:f3:e8:23:3d:0f:40:0d:bb: 98:27:7f:6b:79:ad:43:ed:14:e9:5e:3e:fd:1b:cf:93:f8:d4: 93:71:07:bc:fa:db:de:34:bd:ee:b3:8d:38:7b:0b:2d:4e:07: c9:3c:d2:ff:09:37:d2:d1:30:24:4d:5a:53:2f:6e:b4:28:5a: 0d:8b:53:b2:ad:56:76:cf:ff:2a:b0:13:3f:3b:5e:22:a6:dd: 29:89:32:37:b6:60:50:d7:55:07:e0:29:a7:cf:ba:b3:a7:90: fa:8c:79:96:d1:8f:90:27:97:9c:dd:1e:54:0a:73:5d:a4:7f: 79:49:86:bd:fa:94:74:c5:7c:d4:74:5a:44:ad:3d:2f:45:e4: 40:f4:94:37:f7:2f:f6:05:34:b0:21:3d:10:c1:34:58:40:07: 1d:4a:b9:a2:a7:8a:44:a8:86:71:b7:a3:bb:37:55:3d:81:34: c4:cf:31:c0:11:b6:d0:3e:d0:a9:75:b5:b0:e3:74:7d:6d:10: 81:ec:8e:7c:3e:71:a5:d5:d2:00:ba:8f:32:89:52:6d:54:ae: fe:7f:80:3d:9a:d4:75:2f:08:58:51:95:ea:eb:f8:3f:01:02: 24:77:3b:64 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pJDPduB7YqKU2vmQ1zSCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4 YWJjYzUwHhcNMjYwMTAxMjIxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NzE1NjhlZDgxY2NjZTAyMzExNTkwNWI4NzA0MjViOWI0MWUxN2U4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwQ6avpIXV1grP73rGGREabP0h/b yQBNRVX0nDI60we5Q++NHMwsp5zJLAhTqkUDhO1IlKf2YiKt3hBnHG/0RFq+LNeL aWcHewFMRNt+fCfdZrMN4YkyFQoJZNzUPeTBu+YhakteKwwFKIjE+DotJtrzPbrK Y4os97MAXdaljkhWa64+yayI4X1FlpI1Dfo3hAfjiPvKbzxScNSE9YHMFfMcDGhK 0KsfqKI/er/XDws/y40RSRIa/yK8ll3ptkiu2hFBM8pQ8vylFcYWo2mOVktKasAw 85U6Xqr1YyivGGO+mqkGJKDoBTS6P1BdUivEy8wXpqdkiQNOZEMiSUyi4wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHcVaO2BzM4CMRWQW4cEJbm0HhfoMB8GA1UdIwQY MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt NmZlOWJmNjA1NjFjLzEvZHhWbzdZSE16Z0l4RlpCYmh3UWx1YlFlRi1nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALhAhMA0G CSqGSIb3DQEBCwUAA4IBAQB1UntfLeSKsAyV7Y4MeCRm7Keoyl5i722uDTm08+gj PQ9ADbuYJ39rea1D7RTpXj79G8+T+NSTcQe8+tveNL3us404ewstTgfJPNL/CTfS 0TAkTVpTL260KFoNi1OyrVZ2z/8qsBM/O14ipt0piTI3tmBQ11UH4Cmnz7qzp5D6 jHmW0Y+QJ5ec3R5UCnNdpH95SYa9+pR0xXzUdFpErT0vReRA9JQ39y/2BTSwIT0Q wTRYQAcdSrmip4pEqIZxt6O7N1U9gTTEzzHAEbbQPtCpdbWw43R9bRCB7I58PnGl 1dIAuo8yiVJtVK7+f4A9mtR1LwhYUZXq6/g/AQIkdztk -----END CERTIFICATE-----Generated at Thu Jan 15 17:01:09 2026 by rpki-client