This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b4JEVE3QPzkNygQLlI0iBGroxU0.roa File: b4JEVE3QPzkNygQLlI0iBGroxU0.roa (raw, json) Hash identifier: GbTRuy5jkEUqjUNqE8oi/B2zDg7qLzkinV68BhIMhV0= Subject key identifier: 6F:82:44:54:4D:D0:3F:39:0D:CA:04:0B:94:8D:22:04:6A:E8:C5:4D Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Certificate serial: 019B7F830901FE921CAF35A5C07D4CBDF03A Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b4JEVE3QPzkNygQLlI0iBGroxU0.roa Signing time: Fri 02 Jan 2026 16:20:52 +0000 ROA not before: Fri 02 Jan 2026 16:20:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42831 IP address blocks: 46.233.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 17:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:09:01:fe:92:1c:af:35:a5:c0:7d:4c:bd:f0:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Validity Not Before: Jan 2 16:20:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6f8244544dd03f390dca040b948d22046ae8c54d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:70:8d:57:b7:2b:39:bb:b8:a8:2d:ab:07:09: 7d:88:01:75:f3:3e:d5:12:20:10:e9:4a:f1:d2:36: 65:c2:19:89:5e:a6:d0:b4:92:e3:30:a0:8e:f3:05: 44:9d:db:dc:61:f9:72:57:8b:34:97:66:bb:41:67: 09:fe:06:f2:11:b1:2c:71:b6:49:b6:c3:cd:9c:06: b7:c6:41:ec:50:6b:9d:c7:31:b5:b9:7e:ca:e7:2f: 7a:56:d9:6e:d6:3a:9c:52:95:14:eb:60:5b:b4:5e: d3:01:3e:2e:78:a3:1d:af:c6:a5:3e:9e:03:0c:bd: a9:93:45:43:b7:62:16:6e:d0:7c:2a:7e:54:18:3e: cf:5f:e0:3c:94:d7:d5:78:bf:2a:27:e8:3d:32:be: 06:05:4b:b2:11:94:3e:24:58:c7:3e:b5:4f:75:76: 89:34:bb:5d:83:3d:5f:f4:88:70:d6:29:0b:93:09: 08:03:5d:a8:b4:52:ef:46:f7:25:41:44:ea:07:99: 47:71:55:cc:f0:35:5c:88:49:55:c1:99:5e:b1:d1: 92:a6:86:43:51:1c:fd:0e:23:e0:54:07:83:8b:d1: 8d:13:0d:39:94:79:a5:bf:f3:51:f2:f6:e5:fb:2e: 16:e3:d0:dc:ef:5e:84:f7:b1:b7:ac:31:b8:ef:84: 4c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:82:44:54:4D:D0:3F:39:0D:CA:04:0B:94:8D:22:04:6A:E8:C5:4D X509v3 Authority Key Identifier: keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b4JEVE3QPzkNygQLlI0iBGroxU0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.233.38.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:76:43:1b:f8:ab:1a:f7:52:0a:58:27:8a:ba:cf:77:43:71: c6:cc:94:e4:6a:96:94:63:b2:2f:2b:63:40:2b:f9:f2:e5:d9: d7:92:7c:49:65:0b:e4:89:47:17:0f:94:89:74:c4:6b:ea:f1: 6d:59:e7:5f:3a:05:33:0f:76:17:eb:63:20:b0:30:8b:a1:7f: e9:95:af:e3:0f:0e:de:98:ab:e8:85:0f:6d:eb:7e:45:5a:ed: 0e:25:8d:aa:8a:58:64:3b:8c:d4:c7:60:f1:80:83:14:ce:2e: a6:3d:58:bd:95:6a:70:81:fa:01:14:b5:38:02:a8:03:bd:77: 6d:fc:3e:3c:32:61:78:3c:d8:6b:79:d1:9f:67:24:85:d5:7f: c6:b6:05:30:4a:9a:53:9e:5a:8f:70:87:f6:ca:4f:ed:13:80: 09:fe:5d:31:87:84:fc:99:d3:5c:86:d1:54:9b:73:9c:83:6e: ad:a0:c6:53:6a:7b:9d:90:86:34:5f:86:3d:52:83:76:59:fb: 4c:67:23:23:a2:dc:1d:a2:df:04:c9:a7:53:98:4f:07:ec:20: f7:5c:a9:3a:37:5d:1a:09:e9:e7:ea:81:ff:70:3e:89:18:0a: e7:09:01:d6:19:2f:0b:a5:10:41:6e:c8:fd:ea:d2:3d:70:ea: 65:79:c3:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gwkB/pIcrzWlwH1MvfA6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1 ZDU2ZjUwHhcNMjYwMTAyMTYyMDUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZjgyNDQ1NDRkZDAzZjM5MGRjYTA0MGI5NDhkMjIwNDZhZThjNTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43CNV7crObu4qC2rBwl9iAF18z7V EiAQ6Urx0jZlwhmJXqbQtJLjMKCO8wVEndvcYflyV4s0l2a7QWcJ/gbyEbEscbZJ tsPNnAa3xkHsUGudxzG1uX7K5y96Vtlu1jqcUpUU62BbtF7TAT4ueKMdr8alPp4D DL2pk0VDt2IWbtB8Kn5UGD7PX+A8lNfVeL8qJ+g9Mr4GBUuyEZQ+JFjHPrVPdXaJ NLtdgz1f9Ihw1ikLkwkIA12otFLvRvclQUTqB5lHcVXM8DVciElVwZlesdGSpoZD URz9DiPgVAeDi9GNEw05lHmlv/NR8vbl+y4W49Dc716E97G3rDG474RMWwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFG+CRFRN0D85DcoEC5SNIgRq6MVNMB8GA1UdIwQY MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt M2MxNmZmODQxYWIyLzEvYjRKRVZFM1FQemtOeWdRTGxJMGlCR3JveFUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALukmMA0G CSqGSIb3DQEBCwUAA4IBAQAsdkMb+Ksa91IKWCeKus93Q3HGzJTkapaUY7IvK2NA K/ny5dnXknxJZQvkiUcXD5SJdMRr6vFtWedfOgUzD3YX62MgsDCLoX/pla/jDw7e mKvohQ9t635FWu0OJY2qilhkO4zUx2DxgIMUzi6mPVi9lWpwgfoBFLU4AqgDvXdt /D48MmF4PNhredGfZySF1X/GtgUwSppTnlqPcIf2yk/tE4AJ/l0xh4T8mdNchtFU m3Ocg26toMZTanudkIY0X4Y9UoN2WftMZyMjotwdot8EyadTmE8H7CD3XKk6N10a Cenn6oH/cD6JGArnCQHWGS8LpRBBbsj96tI9cOplecOE -----END CERTIFICATE-----Generated at Mon Jan 19 23:21:44 2026 by rpki-client