This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/fwIX4p6uDI8a1ig_uNG57F-CyyQ.roa File: fwIX4p6uDI8a1ig_uNG57F-CyyQ.roa (raw, json) Hash identifier: sPu4yXxTGRc2nkq1SBHu8c/xRYRB8YjHSE2w/qhSkXw= Subject key identifier: 7F:02:17:E2:9E:AE:0C:8F:1A:D6:28:3F:B8:D1:B9:EC:5F:82:CB:24 Certificate issuer: /CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Certificate serial: 019B7910A883CDE811F78603ACA3576B4542 Authority key identifier: 9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/fwIX4p6uDI8a1ig_uNG57F-CyyQ.roa Signing time: Thu 01 Jan 2026 10:18:13 +0000 ROA not before: Thu 01 Jan 2026 10:18:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214190 IP address blocks: 46.231.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:a8:83:cd:e8:11:f7:86:03:ac:a3:57:6b:45:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Validity Not Before: Jan 1 10:18:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f0217e29eae0c8f1ad6283fb8d1b9ec5f82cb24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:51:bc:78:99:8e:4a:a1:8b:d1:93:0e:88:7e: 7d:fe:f5:9f:b9:a1:d2:62:6b:c3:88:39:2a:88:6e: 2a:e6:13:d0:3a:79:2a:33:20:55:34:a2:2a:b7:23: 2e:bd:56:76:26:ad:98:63:2f:c3:89:11:08:83:18: 47:df:c1:96:6d:d9:b4:f3:72:d6:1a:fc:c5:ff:70: 93:58:01:8b:55:c4:02:48:2a:19:c9:de:dc:29:d9: 3f:2c:19:6e:b0:df:98:df:49:a9:ea:1c:e7:39:e5: f0:6d:55:9f:12:23:d2:2f:e6:75:09:db:68:13:58: 3f:4f:33:60:84:58:42:4c:c2:b1:0e:18:54:84:9b: cc:33:f7:23:5b:d6:1f:e0:77:8f:0c:12:04:6c:4a: ea:5e:a2:7f:99:4f:3d:10:58:dc:1b:92:c3:37:6f: 2d:80:de:71:3d:ea:b1:f0:d5:60:ad:19:ce:68:cb: 86:22:15:25:03:3c:96:38:23:81:0c:b7:89:7e:79: 56:1e:e0:a5:c9:b0:24:4b:b6:77:30:41:8c:f3:3b: 12:08:33:42:c6:54:8a:c5:f8:58:c8:cc:05:30:ab: d8:78:eb:9e:0d:1e:9e:f3:1b:13:bb:77:7c:3d:1a: 09:16:33:92:20:8b:f9:66:c0:df:18:24:e1:ee:fc: 25:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:02:17:E2:9E:AE:0C:8F:1A:D6:28:3F:B8:D1:B9:EC:5F:82:CB:24 X509v3 Authority Key Identifier: keyid:9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/fwIX4p6uDI8a1ig_uNG57F-CyyQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.231.224.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:e9:89:89:de:92:84:66:37:8c:a3:f0:3b:e8:1b:d2:3e:a5: 1d:75:7f:63:72:1a:0c:fe:2f:e3:92:4c:21:fa:d4:b3:a6:f9: 80:d1:2b:38:f1:36:2c:ca:35:75:53:98:0b:19:3f:f1:76:6d: d1:f1:7c:5f:a0:d7:06:7b:a1:d8:37:e6:ba:1a:05:c3:9e:52: 5c:61:b8:c0:3e:08:56:74:d7:b8:83:77:f2:b8:13:9a:1f:d4: 1c:b8:11:d9:e2:da:6c:11:16:28:e9:18:72:00:ed:fd:03:d0: 99:2c:83:c6:92:d2:50:89:70:e3:a0:53:ce:81:72:22:60:34: 6b:73:07:fe:ef:20:59:e7:16:1b:ec:36:4e:e6:49:9c:fc:4a: dd:2c:a8:c7:b9:e4:c0:ae:7c:1f:95:09:8f:53:13:78:c6:9b: 5a:41:50:31:ba:79:e0:4b:2d:e9:38:b4:9d:3c:13:b9:6f:39: a8:65:eb:aa:a3:15:7f:1d:bc:52:a1:79:8b:2b:30:42:b1:c0: d7:a1:a2:ab:43:d6:07:0f:50:7f:3d:15:47:8d:af:55:ec:37: f2:bd:ad:cd:72:5e:91:1a:bd:22:79:21:b3:9b:bf:1c:c2:f5: 87:8b:50:53:e7:94:92:7f:4f:fe:38:3a:26:ea:aa:41:be:66: cd:19:af:63 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EKiDzegR94YDrKNXa0VCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkOTg5YjM5OThlMTlmYzAwZjg2NzBjZjZjOWQ3NDAxNzE1 Y2YzNGYwHhcNMjYwMTAxMTAxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjAyMTdlMjllYWUwYzhmMWFkNjI4M2ZiOGQxYjllYzVmODJjYjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01G8eJmOSqGL0ZMOiH59/vWfuaHS YmvDiDkqiG4q5hPQOnkqMyBVNKIqtyMuvVZ2Jq2YYy/DiREIgxhH38GWbdm083LW GvzF/3CTWAGLVcQCSCoZyd7cKdk/LBlusN+Y30mp6hznOeXwbVWfEiPSL+Z1Cdto E1g/TzNghFhCTMKxDhhUhJvMM/cjW9Yf4HePDBIEbErqXqJ/mU89EFjcG5LDN28t gN5xPeqx8NVgrRnOaMuGIhUlAzyWOCOBDLeJfnlWHuClybAkS7Z3MEGM8zsSCDNC xlSKxfhYyMwFMKvYeOueDR6e8xsTu3d8PRoJFjOSIIv5ZsDfGCTh7vwlKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH8CF+KergyPGtYoP7jRuexfgsskMB8GA1UdIwQY MBaAFJ2YmzmY4Z/AD4Zwz2yddAFxXPNPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2It YzdjY2Q3OTQzMTA2LzEvZndJWDRwNnVESThhMWlnX3VORzU3Ri1DeXlRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2ItYzdjY2Q3OTQzMTA2 LzEvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALufgMA0G CSqGSIb3DQEBCwUAA4IBAQB76YmJ3pKEZjeMo/A76BvSPqUddX9jchoM/i/jkkwh +tSzpvmA0Ss48TYsyjV1U5gLGT/xdm3R8XxfoNcGe6HYN+a6GgXDnlJcYbjAPghW dNe4g3fyuBOaH9QcuBHZ4tpsERYo6RhyAO39A9CZLIPGktJQiXDjoFPOgXIiYDRr cwf+7yBZ5xYb7DZO5kmc/ErdLKjHueTArnwflQmPUxN4xptaQVAxunngSy3pOLSd PBO5bzmoZeuqoxV/HbxSoXmLKzBCscDXoaKrQ9YHD1B/PRVHja9V7Dfyva3Ncl6R Gr0ieSGzm78cwvWHi1BT55SSf0/+ODom6qpBvmbNGa9j -----END CERTIFICATE-----Generated at Tue Feb 10 02:33:35 2026 by rpki-client