This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/ecc6eb-e8a1-4418-9e86-12bf90e3de47/1/_PItdQNrcNm4PTVCBKFfHD-HVBk.roa File: _PItdQNrcNm4PTVCBKFfHD-HVBk.roa (raw, json) Hash identifier: 00+ux3tcX9ZjPok2cc22xATkEP1ejAcZkRKoEuUA304= Subject key identifier: FC:F2:2D:75:03:6B:70:D9:B8:3D:35:42:04:A1:5F:1C:3F:87:54:19 Certificate issuer: /CN=be54a8eae25ae0f68b3452c4685d9439e7d1c5fd Certificate serial: 019B7C8057BE95F054C13C211BBE8D7D19B0 Authority key identifier: BE:54:A8:EA:E2:5A:E0:F6:8B:34:52:C4:68:5D:94:39:E7:D1:C5:FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlSo6uJa4PaLNFLEaF2UOefRxf0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/ecc6eb-e8a1-4418-9e86-12bf90e3de47/1/_PItdQNrcNm4PTVCBKFfHD-HVBk.roa Signing time: Fri 02 Jan 2026 02:19:04 +0000 ROA not before: Fri 02 Jan 2026 02:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48285 IP address blocks: 46.255.120.0/23 maxlen: 23 46.255.123.0/24 maxlen: 24 46.255.124.0/24 maxlen: 24 46.255.125.0/24 maxlen: 24 46.255.127.0/24 maxlen: 24 2a00:9c00:101::/48 maxlen: 48 2a00:9c00:120::/48 maxlen: 48 2a00:9c00:123::/48 maxlen: 48 2a00:9c00:124::/48 maxlen: 48 2a00:9c00:125::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/ecc6eb-e8a1-4418-9e86-12bf90e3de47/1/vlSo6uJa4PaLNFLEaF2UOefRxf0.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/ecc6eb-e8a1-4418-9e86-12bf90e3de47/1/vlSo6uJa4PaLNFLEaF2UOefRxf0.mft rsync://rpki.ripe.net/repository/DEFAULT/vlSo6uJa4PaLNFLEaF2UOefRxf0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 11 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:57:be:95:f0:54:c1:3c:21:1b:be:8d:7d:19:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be54a8eae25ae0f68b3452c4685d9439e7d1c5fd Validity Not Before: Jan 2 02:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fcf22d75036b70d9b83d354204a15f1c3f875419 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:14:83:0e:be:31:82:00:a7:ca:16:15:c1:e7: 8c:0e:2a:4e:8b:22:d5:f1:2f:48:1e:8d:dc:7f:bb: c0:12:e8:1e:16:fe:53:a4:d0:f5:8c:78:58:c0:a4: a5:bf:2a:4f:5f:17:cf:d1:c6:5b:61:18:9f:f3:29: 9e:11:c8:7b:92:7e:29:8d:76:38:33:83:93:38:3c: 5f:4a:8d:f0:f6:23:af:8d:ff:a5:53:60:b5:3a:ee: 1d:17:45:e0:5b:de:18:8c:c0:72:86:5c:ca:ef:ca: 7d:ad:7c:4d:46:71:09:f8:23:79:60:b6:74:90:44: 8d:2c:6a:a4:bd:48:98:f4:03:e6:6f:dc:1d:4b:08: 0c:51:aa:50:f1:01:40:1e:ab:54:d8:cc:1f:c1:c9: 58:33:c2:2e:6a:92:fa:aa:01:b0:21:08:37:88:25: bd:59:eb:7d:76:21:4c:be:b0:ab:f3:21:24:4e:68: 16:30:5d:fe:20:73:11:e4:e2:c7:cf:55:40:b0:d6: 3c:0a:4a:b7:ec:6b:ff:e2:af:7b:17:93:d5:1d:1a: 5c:e3:09:16:ce:12:dd:e0:db:34:69:8e:34:3d:14: 90:e5:49:37:dc:04:5c:54:93:6d:ee:38:bf:25:ca: e0:f9:88:0f:6b:32:2e:86:96:e1:f2:88:8a:33:c8: b5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:F2:2D:75:03:6B:70:D9:B8:3D:35:42:04:A1:5F:1C:3F:87:54:19 X509v3 Authority Key Identifier: keyid:BE:54:A8:EA:E2:5A:E0:F6:8B:34:52:C4:68:5D:94:39:E7:D1:C5:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlSo6uJa4PaLNFLEaF2UOefRxf0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ecc6eb-e8a1-4418-9e86-12bf90e3de47/1/_PItdQNrcNm4PTVCBKFfHD-HVBk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ecc6eb-e8a1-4418-9e86-12bf90e3de47/1/vlSo6uJa4PaLNFLEaF2UOefRxf0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.255.120.0/23 46.255.123.0-46.255.125.255 46.255.127.0/24 IPv6: 2a00:9c00:101::/48 2a00:9c00:120::/48 2a00:9c00:123::-2a00:9c00:125:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 5e:82:7f:c6:6f:b0:04:60:0b:1f:66:28:dd:2e:38:43:f2:d4: b3:85:2a:2d:a3:b0:34:d7:d5:10:7a:41:40:a3:d0:cc:18:71: 03:5c:ae:27:d4:d5:10:14:b9:7d:36:f8:6e:a3:d7:d5:92:5c: 1e:3e:e0:7d:c6:4b:d1:c3:42:4c:64:23:a6:b1:6f:ae:31:79: 95:2f:19:d3:a4:05:ea:b1:d7:68:aa:8e:26:22:99:cc:a8:20: ae:ae:df:19:a7:3e:d1:5d:d7:08:a1:1f:46:05:10:f6:ab:c6: 13:7c:62:11:2c:cd:20:5b:61:07:ba:86:d9:40:25:75:12:a8: e1:9d:0d:4e:3a:45:3d:e1:57:7f:c4:56:ea:94:d7:7c:ab:7d: 14:9c:06:cd:02:de:33:f8:ff:17:3c:26:65:48:21:6f:ac:30: c0:80:56:74:3a:72:9e:70:93:88:3c:79:b7:63:cf:e2:4c:28: 9c:1d:61:d8:7b:63:6b:21:2d:b0:32:70:e8:61:b5:6f:db:90: 38:34:f2:80:08:03:ea:0e:b3:d3:65:81:a0:d8:65:0a:cc:02: d1:ec:d4:86:4d:1d:a9:1e:e1:64:a7:b7:bf:b6:6d:52:71:33: 66:00:89:9b:2d:68:fb:66:85:19:d9:b2:ee:57:e3:c8:31:92: 71:5a:61:42 -----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgISAZt8gFe+lfBUwTwhG76NfRmwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNTRhOGVhZTI1YWUwZjY4YjM0NTJjNDY4NWQ5NDM5ZTdk MWM1ZmQwHhcNMjYwMTAyMDIxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2YyMmQ3NTAzNmI3MGQ5YjgzZDM1NDIwNGExNWYxYzNmODc1NDE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RSDDr4xggCnyhYVweeMDipOiyLV 8S9IHo3cf7vAEugeFv5TpND1jHhYwKSlvypPXxfP0cZbYRif8ymeEch7kn4pjXY4 M4OTODxfSo3w9iOvjf+lU2C1Ou4dF0XgW94YjMByhlzK78p9rXxNRnEJ+CN5YLZ0 kESNLGqkvUiY9APmb9wdSwgMUapQ8QFAHqtU2MwfwclYM8IuapL6qgGwIQg3iCW9 Wet9diFMvrCr8yEkTmgWMF3+IHMR5OLHz1VAsNY8Ckq37Gv/4q97F5PVHRpc4wkW zhLd4Ns0aY40PRSQ5Uk33ARcVJNt7ji/Jcrg+YgPazIuhpbh8oiKM8i1UwIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFPzyLXUDa3DZuD01QgShXxw/h1QZMB8GA1UdIwQY MBaAFL5UqOriWuD2izRSxGhdlDnn0cX9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmxTbzZ1SmE0UGFMTkZMRWFGMlVPZWZSeGYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9lY2M2ZWItZThhMS00NDE4LTllODYt MTJiZjkwZTNkZTQ3LzEvX1BJdGRRTnJjTm00UFRWQ0JLRmZIRC1IVkJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9lY2M2ZWItZThhMS00NDE4LTllODYtMTJiZjkwZTNkZTQ3 LzEvdmxTbzZ1SmE0UGFMTkZMRWFGMlVPZWZSeGYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDAgBAIAATAaAwQBLv94MAwD BAAu/3sDBAEu/3wDBAAu/38wLAQCAAIwJgMHACoAnAABAQMHACoAnAABIDASAwcA KgCcAAEjAwcBKgCcAAEkMA0GCSqGSIb3DQEBCwUAA4IBAQBegn/Gb7AEYAsfZijd LjhD8tSzhSoto7A019UQekFAo9DMGHEDXK4n1NUQFLl9Nvhuo9fVklwePuB9xkvR w0JMZCOmsW+uMXmVLxnTpAXqsddoqo4mIpnMqCCurt8Zpz7RXdcIoR9GBRD2q8YT fGIRLM0gW2EHuobZQCV1EqjhnQ1OOkU94Vd/xFbqlNd8q30UnAbNAt4z+P8XPCZl SCFvrDDAgFZ0OnKecJOIPHm3Y8/iTCicHWHYe2NrIS2wMnDoYbVv25A4NPKACAPq DrPTZYGg2GUKzALR7NSGTR2pHuFkp7e/tm1ScTNmAImbLWj7ZoUZ2bLuV+PIMZJx WmFC -----END CERTIFICATE-----Generated at Tue Feb 10 08:37:18 2026 by rpki-client