This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/_hFABtqDrMHoR6yceaa4n6HnFLY.roa File: _hFABtqDrMHoR6yceaa4n6HnFLY.roa (raw, json) Hash identifier: RUYxYGOzRDiabfY65jWe0OVYiku/zny/wdDlEwYqRXU= Subject key identifier: FE:11:40:06:DA:83:AC:C1:E8:47:AC:9C:79:A6:B8:9F:A1:E7:14:B6 Certificate issuer: /CN=4e984a5a4b7808bb4ea32d310bdd07ecc9575113 Certificate serial: 019B7834DC488781DAC39D549F269377ACFF Authority key identifier: 4E:98:4A:5A:4B:78:08:BB:4E:A3:2D:31:0B:DD:07:EC:C9:57:51:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/_hFABtqDrMHoR6yceaa4n6HnFLY.roa Signing time: Thu 01 Jan 2026 06:18:08 +0000 ROA not before: Thu 01 Jan 2026 06:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1136 IP address blocks: 46.231.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 20:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:dc:48:87:81:da:c3:9d:54:9f:26:93:77:ac:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e984a5a4b7808bb4ea32d310bdd07ecc9575113 Validity Not Before: Jan 1 06:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fe114006da83acc1e847ac9c79a6b89fa1e714b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:0c:46:96:7e:4e:3c:b1:2b:90:ff:40:a5:0e: cb:df:93:ab:63:8b:57:e6:fa:8c:1b:6a:a9:22:65: df:c8:07:9c:f7:68:e2:3b:43:ee:79:4e:97:38:ac: 33:b8:5c:b9:d0:dd:f2:6c:31:9a:e8:09:a7:47:49: a9:b0:03:e6:97:1f:77:08:72:5e:49:39:d3:97:18: 78:9b:8a:72:df:db:65:28:dc:c4:79:eb:80:49:e7: 05:40:96:92:49:f5:8c:17:fa:e9:01:e3:28:6e:24: 20:5e:0c:63:39:23:12:ed:53:6a:5c:af:47:a3:79: 96:ea:bd:ec:3f:7d:3d:8d:1c:ad:4b:f2:df:63:49: 76:22:cb:4b:af:dd:7c:68:94:0d:6a:e6:60:d3:76: 93:f0:aa:e0:ba:d8:a4:26:af:19:15:bc:d3:ff:a0: b7:78:04:c2:e3:80:2f:ff:87:f5:d9:6d:70:28:57: fb:95:bb:aa:93:09:3d:17:59:84:35:0f:bf:7d:b5: e1:9f:64:83:32:47:a3:18:e5:5f:c9:82:76:ff:df: 3c:c3:da:9d:82:7c:1b:1f:ac:3e:49:9a:bc:c2:d2: 2e:f1:a9:92:79:69:c3:5e:46:c4:98:08:02:b1:bf: 33:d9:5b:7d:95:ee:2a:ff:f3:bb:60:c7:da:ff:07: 09:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:11:40:06:DA:83:AC:C1:E8:47:AC:9C:79:A6:B8:9F:A1:E7:14:B6 X509v3 Authority Key Identifier: keyid:4E:98:4A:5A:4B:78:08:BB:4E:A3:2D:31:0B:DD:07:EC:C9:57:51:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/_hFABtqDrMHoR6yceaa4n6HnFLY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.231.255.0/24 Signature Algorithm: sha256WithRSAEncryption 99:5d:87:35:ac:2e:c6:9d:cd:09:81:9c:68:2a:56:79:68:78: b5:61:50:c0:9f:c6:b9:56:82:9b:9b:87:a6:a9:68:d6:68:41: ac:08:3f:fc:45:29:87:5b:6a:07:5f:38:e3:84:30:80:05:c7: 8f:fa:24:8d:0d:ff:47:0e:77:f1:eb:b2:41:73:14:ba:d2:7b: e8:6c:a9:27:9c:d0:35:47:8d:26:a7:75:a4:33:1a:0f:ba:c0: 33:c9:8e:eb:5e:c9:44:e3:b6:82:85:66:14:2f:13:d3:8b:de: 6a:16:f1:1b:92:b3:cd:e4:e3:17:c1:6e:5b:ad:6d:a4:7c:cc: 28:13:bb:37:66:2a:38:c0:34:2b:25:f9:5b:88:1b:ff:37:f0: f9:a3:1e:22:44:9e:dc:d4:75:99:08:7e:47:f5:70:df:4a:36: df:5c:4f:17:5b:b4:22:d9:46:93:75:eb:ea:fd:fd:f9:6e:a7: db:7a:fa:64:0d:a9:d0:3e:ef:3d:40:98:58:11:b7:6f:c7:b9: e2:22:8d:6f:11:77:a7:58:47:77:84:e0:36:a1:1a:d5:f6:06: 5c:04:2f:ec:94:32:c4:fd:38:83:9b:92:79:28:af:73:e7:5f: c5:8d:cb:a6:63:70:6b:15:9d:ce:14:a4:13:f9:21:12:a4:4b: 7a:32:7e:49 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NNxIh4Haw51UnyaTd6z/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRlOTg0YTVhNGI3ODA4YmI0ZWEzMmQzMTBiZGQwN2VjYzk1 NzUxMTMwHhcNMjYwMTAxMDYxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZTExNDAwNmRhODNhY2MxZTg0N2FjOWM3OWE2Yjg5ZmExZTcxNGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4QxGln5OPLErkP9ApQ7L35OrY4tX 5vqMG2qpImXfyAec92jiO0PueU6XOKwzuFy50N3ybDGa6AmnR0mpsAPmlx93CHJe STnTlxh4m4py39tlKNzEeeuASecFQJaSSfWMF/rpAeMobiQgXgxjOSMS7VNqXK9H o3mW6r3sP309jRytS/LfY0l2IstLr918aJQNauZg03aT8KrgutikJq8ZFbzT/6C3 eATC44Av/4f12W1wKFf7lbuqkwk9F1mENQ+/fbXhn2SDMkejGOVfyYJ2/988w9qd gnwbH6w+SZq8wtIu8amSeWnDXkbEmAgCsb8z2Vt9le4q//O7YMfa/wcJBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP4RQAbag6zB6EesnHmmuJ+h5xS2MB8GA1UdIwQY MBaAFE6YSlpLeAi7TqMtMQvdB+zJV1ETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVHBoS1drdDRDTHRPb3kweEM5MEg3TWxYVVJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC80MWRlYzEtMWViMS00OWM3LTlkNTAt Y2E1OTVlMzRkNWFjLzEvX2hGQUJ0cURyTUhvUjZ5Y2VhYTRuNkhuRkxZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC80MWRlYzEtMWViMS00OWM3LTlkNTAtY2E1OTVlMzRkNWFj LzEvVHBoS1drdDRDTHRPb3kweEM5MEg3TWxYVVJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALuf/MA0G CSqGSIb3DQEBCwUAA4IBAQCZXYc1rC7Gnc0JgZxoKlZ5aHi1YVDAn8a5VoKbm4em qWjWaEGsCD/8RSmHW2oHXzjjhDCABceP+iSNDf9HDnfx67JBcxS60nvobKknnNA1 R40mp3WkMxoPusAzyY7rXslE47aChWYULxPTi95qFvEbkrPN5OMXwW5brW2kfMwo E7s3Zio4wDQrJflbiBv/N/D5ox4iRJ7c1HWZCH5H9XDfSjbfXE8XW7Qi2UaTdevq /f35bqfbevpkDanQPu89QJhYEbdvx7niIo1vEXenWEd3hOA2oRrV9gZcBC/slDLE /TiDm5J5KK9z51/FjcumY3BrFZ3OFKQT+SESpEt6Mn5J -----END CERTIFICATE-----Generated at Tue Jan 27 05:32:59 2026 by rpki-client