This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/fksKXRKS55Q1EzjRDTMK_vqizsE.roa File: fksKXRKS55Q1EzjRDTMK_vqizsE.roa (raw, json) Hash identifier: ofAdtnCLELO0txtL3rvBXK9EQmnTv0xBnbEG6eay9CA= Subject key identifier: 7E:4B:0A:5D:12:92:E7:94:35:13:38:D1:0D:33:0A:FE:FA:A2:CE:C1 Certificate issuer: /CN=aa44e2e812f09ac4fe2b47e4269ce1a02021ca0e Certificate serial: 019B7759039EFCBCD0F5E3FAB1C35C9EB242 Authority key identifier: AA:44:E2:E8:12:F0:9A:C4:FE:2B:47:E4:26:9C:E1:A0:20:21:CA:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/fksKXRKS55Q1EzjRDTMK_vqizsE.roa Signing time: Thu 01 Jan 2026 02:18:00 +0000 ROA not before: Thu 01 Jan 2026 02:18:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205294 IP address blocks: 46.226.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.mft rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:03:9e:fc:bc:d0:f5:e3:fa:b1:c3:5c:9e:b2:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa44e2e812f09ac4fe2b47e4269ce1a02021ca0e Validity Not Before: Jan 1 02:18:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e4b0a5d1292e794351338d10d330afefaa2cec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9a:21:b7:78:e8:ba:7a:9a:ea:f2:d2:eb:9e: 18:0b:da:04:e0:38:ff:fb:6d:51:a3:8e:28:c0:2d: e9:eb:49:a7:3f:c0:e5:d3:f3:df:36:f8:a6:bb:d0: c5:44:3d:c4:71:5f:f4:cd:f7:ef:a5:3c:21:29:bd: 2e:b4:fa:93:db:dc:09:52:f8:d7:a2:d5:22:7d:79: 1b:8d:cd:be:f4:1b:84:cb:8e:44:4e:c2:8f:85:56: 83:09:16:92:bb:a2:27:69:0d:d1:b8:d5:91:66:2f: 13:25:0a:04:fe:5b:f4:35:d4:79:0d:f2:50:9d:5e: 51:99:0c:d6:7b:c0:99:33:e3:a1:57:e0:60:42:cf: ef:0e:a4:78:04:60:ab:fa:a9:9b:27:86:ab:ee:75: 11:32:b6:06:5b:11:1a:3c:21:04:40:e4:00:4e:d1: be:31:30:fb:b9:33:9b:06:7b:bf:d9:a2:29:33:18: 6b:6a:e7:79:d8:da:49:55:b1:b2:16:04:4e:3e:56: 24:85:04:bd:31:e9:68:4d:cd:49:0b:ff:6c:6a:f9: bb:18:6a:7d:8b:6c:4f:6a:f5:50:6b:3e:9a:f8:d8: 20:a0:45:8d:67:66:e7:71:39:38:bc:62:b8:67:76: f1:63:7b:ca:3f:3d:21:87:85:40:9a:17:ca:38:8b: bc:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:4B:0A:5D:12:92:E7:94:35:13:38:D1:0D:33:0A:FE:FA:A2:CE:C1 X509v3 Authority Key Identifier: keyid:AA:44:E2:E8:12:F0:9A:C4:FE:2B:47:E4:26:9C:E1:A0:20:21:CA:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkTi6BLwmsT-K0fkJpzhoCAhyg4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/fksKXRKS55Q1EzjRDTMK_vqizsE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ea6a24-8075-47de-b1e6-86640fca33bf/1/qkTi6BLwmsT-K0fkJpzhoCAhyg4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.226.216.0/24 Signature Algorithm: sha256WithRSAEncryption 59:ed:94:d0:77:b3:5c:3e:f4:61:24:6a:05:45:dc:b9:f6:c0: 84:04:a5:46:f8:ed:01:e8:78:8f:a1:89:ba:05:60:05:27:cd: f3:0a:93:8e:17:0f:ae:ee:d2:d5:1e:29:9f:ba:4a:51:0f:a0: 3a:65:30:ad:82:1f:13:a8:37:62:1b:11:73:97:94:60:ca:03: 1b:f6:5e:7a:87:26:9d:1c:95:d4:f1:e8:c4:af:67:b3:23:fb: bd:b9:0b:fb:d5:e0:7c:ac:ac:02:4a:d3:7c:b2:29:3d:d4:7c: 6a:6d:3b:6f:5c:e6:02:84:da:71:e7:35:3a:8e:22:ff:43:87: 27:03:65:51:64:97:21:4f:84:c8:49:cb:a3:a7:15:57:04:98: 13:89:8a:1c:8e:22:58:65:66:29:2a:dd:3d:df:50:30:63:4a: 08:d0:c1:9f:fe:7b:ce:ef:fe:3d:b7:18:b4:de:18:df:4b:98: 3f:0a:3a:22:2c:ce:c4:c7:81:e0:19:5e:5a:57:92:9e:da:04: ee:5c:f6:6a:ac:03:56:b7:3f:cf:31:fa:51:df:28:81:b0:eb: fc:d2:8e:fe:1f:64:e2:b4:34:7b:58:0f:22:96:81:03:6e:ad: 28:79:82:f8:59:c7:33:9f:62:c6:a1:14:82:af:1c:dc:21:87: e8:a3:ee:56 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WQOe/LzQ9eP6scNcnrJCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFhNDRlMmU4MTJmMDlhYzRmZTJiNDdlNDI2OWNlMWEwMjAy MWNhMGUwHhcNMjYwMTAxMDIxODAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZTRiMGE1ZDEyOTJlNzk0MzUxMzM4ZDEwZDMzMGFmZWZhYTJjZWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZoht3jounqa6vLS654YC9oE4Dj/ +21Ro44owC3p60mnP8Dl0/PfNvimu9DFRD3EcV/0zffvpTwhKb0utPqT29wJUvjX otUifXkbjc2+9BuEy45ETsKPhVaDCRaSu6InaQ3RuNWRZi8TJQoE/lv0NdR5DfJQ nV5RmQzWe8CZM+OhV+BgQs/vDqR4BGCr+qmbJ4ar7nURMrYGWxEaPCEEQOQATtG+ MTD7uTObBnu/2aIpMxhraud52NpJVbGyFgROPlYkhQS9MeloTc1JC/9savm7GGp9 i2xPavVQaz6a+NggoEWNZ2bncTk4vGK4Z3bxY3vKPz0hh4VAmhfKOIu87QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH5LCl0SkueUNRM40Q0zCv76os7BMB8GA1UdIwQY MBaAFKpE4ugS8JrE/itH5Cac4aAgIcoOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcWtUaTZCTHdtc1QtSzBma0pwemhvQ0FoeWc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9lYTZhMjQtODA3NS00N2RlLWIxZTYt ODY2NDBmY2EzM2JmLzEvZmtzS1hSS1M1NVExRXpqUkRUTUtfdnFpenNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi9lYTZhMjQtODA3NS00N2RlLWIxZTYtODY2NDBmY2EzM2Jm LzEvcWtUaTZCTHdtc1QtSzBma0pwemhvQ0FoeWc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALuLYMA0G CSqGSIb3DQEBCwUAA4IBAQBZ7ZTQd7NcPvRhJGoFRdy59sCEBKVG+O0B6HiPoYm6 BWAFJ83zCpOOFw+u7tLVHimfukpRD6A6ZTCtgh8TqDdiGxFzl5RgygMb9l56hyad HJXU8ejEr2ezI/u9uQv71eB8rKwCStN8sik91HxqbTtvXOYChNpx5zU6jiL/Q4cn A2VRZJchT4TIScujpxVXBJgTiYocjiJYZWYpKt0931AwY0oI0MGf/nvO7/49txi0 3hjfS5g/CjoiLM7Ex4HgGV5aV5Ke2gTuXPZqrANWtz/PMfpR3yiBsOv80o7+H2Ti tDR7WA8iloEDbq0oeYL4Wcczn2LGoRSCrxzcIYfoo+5W -----END CERTIFICATE-----Generated at Mon Feb 9 18:21:21 2026 by rpki-client