This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/2Wp3YnKolCKlk8ttOD4thTqnK8s.roa File: 2Wp3YnKolCKlk8ttOD4thTqnK8s.roa (raw, json) Hash identifier: AqwDEsgdXjCQtmMemZbnyoQLvLWRfHb/l/ITgYIXcT0= Subject key identifier: D9:6A:77:62:72:A8:94:22:A5:93:CB:6D:38:3E:2D:85:3A:A7:2B:CB Certificate issuer: /CN=bf533ddba1f8a76de2ef4971fcd52f9441ce0989 Certificate serial: 019B797E14E5187FEDA7B235BEF6A05EB5BA Authority key identifier: BF:53:3D:DB:A1:F8:A7:6D:E2:EF:49:71:FC:D5:2F:94:41:CE:09:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/2Wp3YnKolCKlk8ttOD4thTqnK8s.roa Signing time: Thu 01 Jan 2026 12:17:44 +0000 ROA not before: Thu 01 Jan 2026 12:17:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47168 IP address blocks: 46.31.67.0/24 maxlen: 24 92.255.73.0/24 maxlen: 24 92.255.74.0/23 maxlen: 23 92.255.74.0/24 maxlen: 24 92.255.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.mft rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:14:e5:18:7f:ed:a7:b2:35:be:f6:a0:5e:b5:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf533ddba1f8a76de2ef4971fcd52f9441ce0989 Validity Not Before: Jan 1 12:17:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d96a776272a89422a593cb6d383e2d853aa72bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ec:a7:e8:0a:1e:91:7e:34:9d:ba:c4:fc:5b: 03:c5:0b:31:45:3f:09:ef:48:fd:34:29:0b:7c:f3: 15:9f:d6:c4:f1:dc:97:a0:09:cd:8f:92:55:e4:0c: 2c:18:9e:83:23:70:37:49:3c:91:5d:cd:f2:d4:21: 96:64:1e:3c:16:d5:d8:22:45:7d:16:8b:0d:74:68: 02:df:b4:06:42:9a:4f:99:b5:e5:60:d4:45:9f:02: da:17:fd:d2:71:e4:07:68:a3:8d:62:d5:7d:9c:95: 39:04:62:7d:2e:a9:fb:b0:49:5c:dc:03:98:29:b6: 7a:14:b7:15:dd:de:fc:4a:e0:d8:67:1a:99:6a:cc: a9:24:a8:0c:fe:09:27:ed:61:2a:d9:f7:26:4c:a9: d4:ba:f5:12:99:9d:4c:cc:f3:ba:0b:0b:f4:01:be: 79:c9:a5:a2:b6:e6:94:10:2f:42:39:58:e5:5b:57: fe:54:69:87:c1:15:b4:40:80:a0:26:12:75:e1:9b: 6c:4a:1e:08:fb:18:c8:8a:ec:7a:6c:47:a0:22:47: 31:7b:46:f3:9e:8a:95:10:aa:59:66:c1:93:52:f5: fa:b4:7a:e3:6d:4a:13:61:39:19:25:9b:99:c1:7d: f0:f6:d6:1e:77:0f:89:6f:cf:d4:c7:2c:03:39:55: c2:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:6A:77:62:72:A8:94:22:A5:93:CB:6D:38:3E:2D:85:3A:A7:2B:CB X509v3 Authority Key Identifier: keyid:BF:53:3D:DB:A1:F8:A7:6D:E2:EF:49:71:FC:D5:2F:94:41:CE:09:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1M926H4p23i70lx_NUvlEHOCYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/2Wp3YnKolCKlk8ttOD4thTqnK8s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/73d9a5-1c4f-44e0-a958-167191a117ee/1/v1M926H4p23i70lx_NUvlEHOCYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.31.67.0/24 92.255.73.0-92.255.75.255 Signature Algorithm: sha256WithRSAEncryption 89:40:fa:e6:b5:a2:ad:f7:7b:a2:c9:e3:83:65:7c:be:06:0f: 85:f4:79:8a:7e:00:b6:17:96:d8:af:cc:53:5e:b9:8b:be:2b: 5d:19:fb:17:22:63:8b:2f:8a:e9:da:7d:0a:60:86:7d:3f:d5: cd:e8:25:04:1d:17:2a:ba:55:1a:2b:2c:4d:a8:9b:be:0a:40: e5:5d:75:a0:3c:7b:98:df:35:3b:31:a8:82:1b:31:67:ce:e4: 59:83:f9:78:d5:d9:7f:c5:7d:37:f7:fd:27:df:30:a6:75:78: 2f:b7:2c:5f:66:ea:94:c7:32:1b:56:6f:2b:2c:5f:25:16:ac: 68:0f:fb:ac:82:b9:13:e4:0d:8d:84:10:68:16:8d:20:5d:c1: 61:d8:cc:a6:26:aa:2b:c7:fa:1d:79:7f:89:cd:e4:a2:e4:6a: e1:2b:fe:ae:72:5e:90:4a:4b:e3:b4:12:f9:bf:d2:80:66:a2: fd:cb:aa:b8:d0:44:0b:07:ca:db:14:f0:fa:f5:e0:3d:eb:80: d8:c2:30:7b:a6:ca:a9:e0:65:90:55:ea:c6:8b:41:c5:4a:4e: 4c:96:56:8a:c3:b3:5c:a1:0a:1f:61:77:2e:9b:99:cc:66:ba: 78:d9:ea:0e:45:89:e9:f6:d2:4a:8f:89:79:98:6c:31:0f:63: 11:e4:16:44 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt5fhTlGH/tp7I1vvagXrW6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmNTMzZGRiYTFmOGE3NmRlMmVmNDk3MWZjZDUyZjk0NDFj ZTA5ODkwHhcNMjYwMTAxMTIxNzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOTZhNzc2MjcyYTg5NDIyYTU5M2NiNmQzODNlMmQ4NTNhYTcyYmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreyn6AoekX40nbrE/FsDxQsxRT8J 70j9NCkLfPMVn9bE8dyXoAnNj5JV5AwsGJ6DI3A3STyRXc3y1CGWZB48FtXYIkV9 FosNdGgC37QGQppPmbXlYNRFnwLaF/3SceQHaKONYtV9nJU5BGJ9Lqn7sElc3AOY KbZ6FLcV3d78SuDYZxqZasypJKgM/gkn7WEq2fcmTKnUuvUSmZ1MzPO6Cwv0Ab55 yaWituaUEC9COVjlW1f+VGmHwRW0QICgJhJ14ZtsSh4I+xjIiux6bEegIkcxe0bz noqVEKpZZsGTUvX6tHrjbUoTYTkZJZuZwX3w9tYedw+Jb8/UxywDOVXCtQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFNlqd2JyqJQipZPLbTg+LYU6pyvLMB8GA1UdIwQY MBaAFL9TPduh+Kdt4u9JcfzVL5RBzgmJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjFNOTI2SDRwMjNpNzBseF9OVXZsRUhPQ1lrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83M2Q5YTUtMWM0Zi00NGUwLWE5NTgt MTY3MTkxYTExN2VlLzEvMldwM1luS29sQ0tsazh0dE9ENHRoVHFuSzhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy83M2Q5YTUtMWM0Zi00NGUwLWE5NTgtMTY3MTkxYTExN2Vl LzEvdjFNOTI2SDRwMjNpNzBseF9OVXZsRUhPQ1lrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQALh9DMAwD BABc/0kDBAJc/0gwDQYJKoZIhvcNAQELBQADggEBAIlA+ua1oq33e6LJ44NlfL4G D4X0eYp+ALYXltivzFNeuYu+K10Z+xciY4sviunafQpghn0/1c3oJQQdFyq6VRor LE2om74KQOVddaA8e5jfNTsxqIIbMWfO5FmD+XjV2X/FfTf3/SffMKZ1eC+3LF9m 6pTHMhtWbyssXyUWrGgP+6yCuRPkDY2EEGgWjSBdwWHYzKYmqivH+h15f4nN5KLk auEr/q5yXpBKS+O0Evm/0oBmov3LqrjQRAsHytsU8Pr14D3rgNjCMHumyqngZZBV 6saLQcVKTkyWVorDs1yhCh9hdy6bmcxmunjZ6g5Fien20kqPiXmYbDEPYxHkFkQ= -----END CERTIFICATE-----Generated at Tue Feb 10 02:48:03 2026 by rpki-client