This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/iLauOm2qK9XnqY9ztUU9moKfnvg.roa File: iLauOm2qK9XnqY9ztUU9moKfnvg.roa (raw, json) Hash identifier: MD/6ZVmSej56cLCXyFeTYzesox6xFljqFiihcyr2blE= Subject key identifier: 88:B6:AE:3A:6D:AA:2B:D5:E7:A9:8F:73:B5:45:3D:9A:82:9F:9E:F8 Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Certificate serial: 019B7F8309F49B81E0BACAEFFFF176BD5638 Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/iLauOm2qK9XnqY9ztUU9moKfnvg.roa Signing time: Fri 02 Jan 2026 16:20:52 +0000 ROA not before: Fri 02 Jan 2026 16:20:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48925 IP address blocks: 46.233.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 08:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:09:f4:9b:81:e0:ba:ca:ef:ff:f1:76:bd:56:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Validity Not Before: Jan 2 16:20:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=88b6ae3a6daa2bd5e7a98f73b5453d9a829f9ef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:85:63:25:a5:ea:f1:6d:24:8f:a5:2e:bb:4b: e0:a4:30:52:55:5f:af:bd:76:de:94:c1:39:bf:b0: f5:4b:da:35:09:fb:e1:f7:87:57:77:cd:a5:99:a0: 44:ee:91:91:63:b4:a4:87:c3:2b:b3:e3:5b:cb:41: 8d:b8:67:a1:45:09:25:9d:43:8a:94:6b:33:27:b8: 9d:cf:05:49:44:89:c2:a9:67:ca:28:22:0f:34:d1: cd:a7:ac:3b:1c:8f:94:4c:36:e9:36:37:7e:73:b1: bf:f7:88:8e:d8:0d:c9:df:01:17:04:90:ae:fb:24: 57:51:a4:07:99:22:6d:41:db:97:c8:6f:9f:02:aa: fa:73:10:d5:a2:21:48:b2:96:86:97:11:98:c4:af: d5:33:0d:89:c7:9f:eb:bd:6d:5c:ad:2f:c9:b6:98: d7:ad:3a:a1:49:eb:fb:08:82:49:78:17:14:2b:3f: 35:46:56:06:c9:81:2f:89:82:73:78:c0:a2:d9:95: 4a:c2:3f:b8:50:75:89:8f:15:12:cd:0f:d1:24:1e: 2b:86:a0:e3:e3:28:80:b7:38:52:a3:66:7f:85:71: 8e:85:b8:ed:3c:1b:fb:69:c9:33:fe:29:e0:d7:35: 9b:1a:a3:5b:60:f6:ca:6a:33:37:33:2e:14:fd:4b: d0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B6:AE:3A:6D:AA:2B:D5:E7:A9:8F:73:B5:45:3D:9A:82:9F:9E:F8 X509v3 Authority Key Identifier: keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/iLauOm2qK9XnqY9ztUU9moKfnvg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.233.39.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:f2:a1:63:d1:19:20:cf:91:a3:21:b8:cd:90:27:e1:80:ae: 8a:d7:7a:13:83:83:33:f9:57:8b:27:1c:3e:32:0b:85:a7:a7: dd:81:33:a3:26:e5:06:78:85:4a:8f:a0:b2:a6:f1:3e:55:54: 79:5e:33:e9:88:a9:28:69:76:fc:4e:43:a9:fb:8a:75:fa:59: a4:d1:37:0c:bb:46:32:87:de:ce:d8:73:df:10:9e:62:3d:a3: 80:d8:27:13:ee:ff:26:2a:c5:3a:c9:cf:5b:0b:5d:7e:a5:62: c5:24:b1:11:da:d3:6d:d8:0f:c4:5f:c6:cc:c8:af:b9:7a:81: 36:e3:3e:bc:a8:1c:d8:b7:58:3b:1b:8f:68:91:07:2f:87:6c: fe:d5:75:43:6d:61:2d:2a:8d:27:03:89:2f:55:53:30:15:4c: b9:e9:3b:19:df:80:df:89:99:d8:db:0f:dc:c9:d1:89:85:0b: b2:5b:c3:0e:a3:06:bb:7f:60:ef:71:c5:fc:7a:ba:37:86:9c: f7:05:e3:d0:c1:15:57:e3:52:0d:7c:24:06:38:f3:3d:95:14: c2:cb:7f:dd:1e:8c:8b:40:3a:58:05:6c:2f:50:31:a8:48:cc: 34:b4:4b:a9:b6:d8:ea:6f:8d:58:42:b8:a8:ab:11:4c:1a:11: c0:c8:7a:52 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gwn0m4Hgusrv//F2vVY4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1 ZDU2ZjUwHhcNMjYwMTAyMTYyMDUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4OGI2YWUzYTZkYWEyYmQ1ZTdhOThmNzNiNTQ1M2Q5YTgyOWY5ZWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4VjJaXq8W0kj6Uuu0vgpDBSVV+v vXbelME5v7D1S9o1Cfvh94dXd82lmaBE7pGRY7Skh8Mrs+Nby0GNuGehRQklnUOK lGszJ7idzwVJRInCqWfKKCIPNNHNp6w7HI+UTDbpNjd+c7G/94iO2A3J3wEXBJCu +yRXUaQHmSJtQduXyG+fAqr6cxDVoiFIspaGlxGYxK/VMw2Jx5/rvW1crS/JtpjX rTqhSev7CIJJeBcUKz81RlYGyYEviYJzeMCi2ZVKwj+4UHWJjxUSzQ/RJB4rhqDj 4yiAtzhSo2Z/hXGOhbjtPBv7ackz/ing1zWbGqNbYPbKajM3My4U/UvQdwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIi2rjptqivV56mPc7VFPZqCn574MB8GA1UdIwQY MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt M2MxNmZmODQxYWIyLzEvaUxhdU9tMnFLOVhucVk5enRVVTltb0tmbnZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALuknMA0G CSqGSIb3DQEBCwUAA4IBAQB/8qFj0Rkgz5GjIbjNkCfhgK6K13oTg4Mz+VeLJxw+ MguFp6fdgTOjJuUGeIVKj6CypvE+VVR5XjPpiKkoaXb8TkOp+4p1+lmk0TcMu0Yy h97O2HPfEJ5iPaOA2CcT7v8mKsU6yc9bC11+pWLFJLER2tNt2A/EX8bMyK+5eoE2 4z68qBzYt1g7G49okQcvh2z+1XVDbWEtKo0nA4kvVVMwFUy56TsZ34DfiZnY2w/c ydGJhQuyW8MOowa7f2DvccX8ero3hpz3BePQwRVX41INfCQGOPM9lRTCy3/dHoyL QDpYBWwvUDGoSMw0tEupttjqb41YQrioqxFMGhHAyHpS -----END CERTIFICATE-----Generated at Mon Jan 19 18:03:44 2026 by rpki-client