This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/kEgukI4x5ATV385AVFHglji0HH0.roa File: kEgukI4x5ATV385AVFHglji0HH0.roa (raw, json) Hash identifier: 7W67j4OKnAJPYfKA7VB2yMPYazX4qvOU73e4/HvQ//o= Subject key identifier: 90:48:2E:90:8E:31:E4:04:D5:DF:CE:40:54:51:E0:96:38:B4:1C:7D Certificate issuer: /CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Certificate serial: 019B7910A43225F43EF3106AA6A9FF08DBAA Authority key identifier: 9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/kEgukI4x5ATV385AVFHglji0HH0.roa Signing time: Thu 01 Jan 2026 10:18:12 +0000 ROA not before: Thu 01 Jan 2026 10:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39361 IP address blocks: 46.231.227.0/24 maxlen: 24 46.231.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:a4:32:25:f4:3e:f3:10:6a:a6:a9:ff:08:db:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Validity Not Before: Jan 1 10:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=90482e908e31e404d5dfce405451e09638b41c7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3a:72:3a:16:5b:4a:62:bf:75:cd:53:b4:00: df:17:cd:be:42:ea:7e:5c:a5:73:7b:83:0a:9d:39: 3b:68:65:fb:9b:83:bb:eb:89:d6:47:cb:34:09:01: 0a:64:57:a3:d6:13:e6:5d:00:c7:92:7e:3a:59:c8: 6e:88:cd:28:30:40:60:a2:82:cb:1f:a8:3c:43:4a: d4:4c:c3:c6:26:ba:1c:d1:41:62:37:26:74:82:4f: e4:f5:20:29:7e:f0:96:83:dd:02:3f:2f:65:51:0f: cd:1c:ef:51:4a:1c:5e:3f:79:b1:bd:b7:ee:20:ba: 6f:f5:09:e8:48:f2:24:3e:95:21:e2:ed:e0:62:51: 08:66:ec:57:f9:a4:86:69:a8:d8:c9:c4:8f:1f:98: bb:5c:05:52:24:e5:e1:64:65:ed:42:ff:f1:c1:e6: 49:51:d8:7b:9c:71:c9:59:02:80:a3:71:7f:30:c5: 35:e3:a8:a6:2f:f4:21:2e:a9:a9:20:a0:fb:2b:5d: c6:b2:73:4b:b5:7f:cc:03:f3:99:c3:d0:2c:ea:ad: 14:7f:a3:e9:c4:49:bd:91:79:c8:ff:83:be:9c:59: 33:71:d1:96:fa:38:66:cd:41:d7:62:a5:19:ac:20: 55:a3:0f:9e:a7:ad:34:4f:5a:dd:38:f7:2e:22:4c: c9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:48:2E:90:8E:31:E4:04:D5:DF:CE:40:54:51:E0:96:38:B4:1C:7D X509v3 Authority Key Identifier: keyid:9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/kEgukI4x5ATV385AVFHglji0HH0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.231.227.0/24 46.231.229.0/24 Signature Algorithm: sha256WithRSAEncryption 88:60:9e:0d:de:18:99:2f:9b:7b:63:65:c7:03:51:c0:92:6b: f0:84:f7:48:81:a0:a8:f5:98:51:01:c6:a9:1f:ed:b4:93:a2: 4a:4e:46:ea:04:a3:b6:ea:e9:a9:64:f8:55:1a:a0:4b:db:af: 4f:90:c2:86:11:32:22:82:90:31:11:e9:c8:8b:92:de:b0:81: e4:05:45:17:b3:ab:e2:06:39:a9:77:4b:fc:4f:a0:e9:1b:78: 9b:72:c5:10:6b:d2:bd:48:50:6c:eb:dc:5f:fc:58:2f:12:58: 46:f7:82:52:62:85:e6:05:14:bc:34:32:c7:95:d3:c8:25:20: 3b:21:e3:ad:de:4f:a7:f9:fa:d0:d5:17:e1:cd:2c:14:3c:eb: 0c:9a:e9:8c:b3:33:88:97:39:26:de:32:bf:f9:ec:f6:3e:d8: de:f3:b3:a3:af:30:95:de:80:e3:d3:24:47:9c:ce:e3:a5:12: 07:03:d8:12:f4:ac:52:08:81:d3:10:b2:59:f2:a7:db:60:5b: 4b:7c:b1:39:97:a7:e4:b2:ce:f2:12:f2:c8:25:bf:17:ee:d8: 25:9c:1f:8b:0a:5d:43:1a:6e:9f:d8:35:60:46:32:bd:4a:0f: c8:aa:16:24:2a:20:a9:b3:7d:68:0a:f0:0e:0b:70:f9:a2:8c: 67:25:d6:2d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EKQyJfQ+8xBqpqn/CNuqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkOTg5YjM5OThlMTlmYzAwZjg2NzBjZjZjOWQ3NDAxNzE1 Y2YzNGYwHhcNMjYwMTAxMTAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDQ4MmU5MDhlMzFlNDA0ZDVkZmNlNDA1NDUxZTA5NjM4YjQxYzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujpyOhZbSmK/dc1TtADfF82+Qup+ XKVze4MKnTk7aGX7m4O764nWR8s0CQEKZFej1hPmXQDHkn46WchuiM0oMEBgooLL H6g8Q0rUTMPGJroc0UFiNyZ0gk/k9SApfvCWg90CPy9lUQ/NHO9RShxeP3mxvbfu ILpv9QnoSPIkPpUh4u3gYlEIZuxX+aSGaajYycSPH5i7XAVSJOXhZGXtQv/xweZJ Udh7nHHJWQKAo3F/MMU146imL/QhLqmpIKD7K13GsnNLtX/MA/OZw9As6q0Uf6Pp xEm9kXnI/4O+nFkzcdGW+jhmzUHXYqUZrCBVow+ep600T1rdOPcuIkzJjQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJBILpCOMeQE1d/OQFRR4JY4tBx9MB8GA1UdIwQY MBaAFJ2YmzmY4Z/AD4Zwz2yddAFxXPNPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2It YzdjY2Q3OTQzMTA2LzEva0VndWtJNHg1QVRWMzg1QVZGSGdsamkwSEgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2ItYzdjY2Q3OTQzMTA2 LzEvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALufjAwQA LuflMA0GCSqGSIb3DQEBCwUAA4IBAQCIYJ4N3hiZL5t7Y2XHA1HAkmvwhPdIgaCo 9ZhRAcapH+20k6JKTkbqBKO26umpZPhVGqBL269PkMKGETIigpAxEenIi5LesIHk BUUXs6viBjmpd0v8T6DpG3ibcsUQa9K9SFBs69xf/FgvElhG94JSYoXmBRS8NDLH ldPIJSA7IeOt3k+n+frQ1RfhzSwUPOsMmumMszOIlzkm3jK/+ez2Ptje87OjrzCV 3oDj0yRHnM7jpRIHA9gS9KxSCIHTELJZ8qfbYFtLfLE5l6fkss7yEvLIJb8X7tgl nB+LCl1DGm6f2DVgRjK9Sg/IqhYkKiCps31oCvAOC3D5ooxnJdYt -----END CERTIFICATE-----Generated at Mon Feb 9 23:56:15 2026 by rpki-client