This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/_K2f6DqGYftLvCgaU9NJUnwx5uI.roa File: _K2f6DqGYftLvCgaU9NJUnwx5uI.roa (raw, json) Hash identifier: +bNWQeR+tOZFOesz+uNPp44EnwcVKTlHLLbRiXOcV/w= Subject key identifier: FC:AD:9F:E8:3A:86:61:FB:4B:BC:28:1A:53:D3:49:52:7C:31:E6:E2 Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541 Certificate serial: 019B7C133881F453C7D352000DA85F183D61 Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/_K2f6DqGYftLvCgaU9NJUnwx5uI.roa Signing time: Fri 02 Jan 2026 00:19:52 +0000 ROA not before: Fri 02 Jan 2026 00:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212477 IP address blocks: 46.226.124.0/24 maxlen: 24 109.234.75.0/24 maxlen: 24 185.138.166.0/24 maxlen: 24 217.119.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:38:81:f4:53:c7:d3:52:00:0d:a8:5f:18:3d:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541 Validity Not Before: Jan 2 00:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fcad9fe83a8661fb4bbc281a53d349527c31e6e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d9:ac:da:db:89:89:e2:97:5c:31:b1:6a:1c: 60:22:2d:88:52:9d:74:56:ca:29:85:62:01:8b:b3: 49:58:f6:93:a6:fb:36:bf:a2:7b:7b:10:ca:5f:65: ff:19:b3:1a:8e:8b:dd:fe:5b:52:d2:84:b5:c8:6c: 6d:3e:af:ff:26:63:15:ef:43:55:1c:6d:cb:bb:51: 79:70:08:25:00:e2:95:8b:94:2f:26:4a:39:14:24: b1:74:43:5e:c7:9a:e8:25:1a:53:ca:16:b2:61:a5: 1f:2b:70:d0:e6:b4:b0:7e:08:65:ab:e9:2d:42:d2: fa:79:64:69:4b:72:17:c5:5e:e3:8d:c5:6e:11:f6: 9c:18:58:16:1a:9f:83:5d:e7:fa:2f:98:d8:cd:4f: 4c:72:90:1c:18:91:06:13:58:52:08:95:a5:22:be: 67:65:c8:81:ce:3f:b8:50:19:27:ab:86:2b:3e:15: 0f:b3:3c:9d:0b:d0:1e:7f:71:a7:32:24:c0:f5:ce: ee:8d:a4:ca:e3:4c:b8:c3:53:74:cb:8a:a2:ba:c2: d6:ba:c2:ea:db:d9:06:1e:b2:aa:8c:6c:f6:1c:fa: e8:29:cd:62:a6:d2:9b:aa:1a:93:1a:7f:4d:f6:73: 1c:6a:ae:26:4d:88:bf:13:8d:b5:8e:c2:5a:06:da: b2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:AD:9F:E8:3A:86:61:FB:4B:BC:28:1A:53:D3:49:52:7C:31:E6:E2 X509v3 Authority Key Identifier: keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/_K2f6DqGYftLvCgaU9NJUnwx5uI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.226.124.0/24 109.234.75.0/24 185.138.166.0/24 217.119.131.0/24 Signature Algorithm: sha256WithRSAEncryption 56:e7:37:8f:01:cf:4d:55:75:01:bd:f5:4e:c8:17:14:50:e5: 9b:ed:d5:3f:4e:d4:c4:72:ae:29:c5:45:06:88:8f:67:d9:5b: 8a:25:d8:85:ca:13:8f:5f:db:a6:85:0c:f0:8b:87:05:a5:8b: 3b:e8:5f:28:0e:0c:ae:d3:fa:2e:8c:65:84:1d:18:fc:e3:cc: 7b:fa:85:55:e1:18:73:58:ad:37:77:55:85:b7:f9:4c:f1:cf: d6:36:7b:e8:f4:06:bc:07:f0:b5:eb:7d:fb:e6:84:58:1d:e3: f8:a3:df:65:f2:9f:2d:17:9d:fb:b9:94:fa:d7:77:ba:44:16: 3f:0c:b7:9d:e7:1b:ea:90:d3:c5:a2:ac:b0:7e:2c:4f:db:7b: c1:92:ac:6b:2a:8d:aa:5b:f6:c4:ab:ec:44:ab:98:6c:56:27: 72:5f:36:f6:37:b0:0c:5d:2f:af:6c:6d:dc:bc:95:2e:42:62: d3:28:d7:74:1a:39:96:70:b4:29:0e:ea:e8:a0:ed:dc:56:08: 6f:f1:df:ec:07:fc:79:ed:53:37:cc:91:4c:ff:cb:35:11:d8: 1e:ec:d3:68:b4:77:01:e6:36:49:0e:5a:11:4a:9a:46:60:0d: 23:a0:32:10:81:89:92:3f:62:38:37:81:6a:a5:1b:20:38:4e: df:c4:aa:a7 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt8EziB9FPH01IADahfGD1hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYzI4YWU5OTM3ZmY3ZTQ5ZWM0ZjEyMzRlNTNkOGI5ZGQ2 OTQ1NDEwHhcNMjYwMTAyMDAxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2FkOWZlODNhODY2MWZiNGJiYzI4MWE1M2QzNDk1MjdjMzFlNmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdms2tuJieKXXDGxahxgIi2IUp10 VsophWIBi7NJWPaTpvs2v6J7exDKX2X/GbMajovd/ltS0oS1yGxtPq//JmMV70NV HG3Lu1F5cAglAOKVi5QvJko5FCSxdENex5roJRpTyhayYaUfK3DQ5rSwfghlq+kt QtL6eWRpS3IXxV7jjcVuEfacGFgWGp+DXef6L5jYzU9McpAcGJEGE1hSCJWlIr5n ZciBzj+4UBknq4YrPhUPszydC9Aef3GnMiTA9c7ujaTK40y4w1N0y4qiusLWusLq 29kGHrKqjGz2HProKc1iptKbqhqTGn9N9nMcaq4mTYi/E421jsJaBtqyaQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFPytn+g6hmH7S7woGlPTSVJ8MebiMB8GA1UdIwQY MBaAFJ3CiumTf/fknsTxI05T2LndaUVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMt MTkyY2JkMDhkYjUxLzEvX0syZjZEcUdZZnRMdkNnYVU5TkpVbnd4NXVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMtMTkyY2JkMDhkYjUx LzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALuJ8AwQA bepLAwQAuYqmAwQA2XeDMA0GCSqGSIb3DQEBCwUAA4IBAQBW5zePAc9NVXUBvfVO yBcUUOWb7dU/TtTEcq4pxUUGiI9n2VuKJdiFyhOPX9umhQzwi4cFpYs76F8oDgyu 0/oujGWEHRj848x7+oVV4RhzWK03d1WFt/lM8c/WNnvo9Aa8B/C163375oRYHeP4 o99l8p8tF537uZT613e6RBY/DLed5xvqkNPFoqywfixP23vBkqxrKo2qW/bEq+xE q5hsVidyXzb2N7AMXS+vbG3cvJUuQmLTKNd0GjmWcLQpDurooO3cVghv8d/sB/x5 7VM3zJFM/8s1Edge7NNotHcB5jZJDloRSppGYA0joDIQgYmSP2I4N4FqpRsgOE7f xKqn -----END CERTIFICATE-----Generated at Sun Jan 11 15:07:46 2026 by rpki-client