This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/lzITf7bmOdvZVA80AcSS1I3NVAY.roa File: lzITf7bmOdvZVA80AcSS1I3NVAY.roa (raw, json) Hash identifier: F1iqFLHu9e7lwpyQGB41+XBSS3bALDr+grcLwGFs4dw= Subject key identifier: 97:32:13:7F:B6:E6:39:DB:D9:54:0F:34:01:C4:92:D4:8D:CD:54:06 Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Certificate serial: 019B023D983E921C12552E2D8E8CDBFCD0BB Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/lzITf7bmOdvZVA80AcSS1I3NVAY.roa Signing time: Tue 09 Dec 2025 08:32:29 +0000 ROA not before: Tue 09 Dec 2025 08:32:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 46.233.32.0/24 maxlen: 24 46.233.34.0/23 maxlen: 24 46.233.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 11 Dec 2025 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:02:3d:98:3e:92:1c:12:55:2e:2d:8e:8c:db:fc:d0:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Validity Not Before: Dec 9 08:32:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=9732137fb6e639dbd9540f3401c492d48dcd5406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:10:b6:c0:fd:66:93:b4:5d:d8:a0:c2:89:50: 6d:be:29:57:3f:7b:e2:3a:a4:8c:ad:d8:c7:a5:8a: 25:62:22:5e:12:37:55:c8:f1:0a:d4:c9:0c:02:82: 2c:85:f3:ab:22:ac:3c:37:8e:e0:42:10:6f:da:54: 68:6b:84:10:56:bc:36:55:43:61:db:ff:8c:77:af: 9e:03:2e:24:bb:ad:17:d8:02:ce:6f:82:f5:9c:49: 78:d0:96:c2:ce:04:6b:50:70:93:4f:5c:80:b3:71: 6d:20:3c:f6:e1:8c:54:59:e4:f7:8e:73:92:5d:f7: c7:04:b2:02:8e:b7:c1:f7:22:d0:12:01:29:64:29: 5a:a1:11:11:cd:4f:cf:5b:8a:f8:ec:e4:74:01:b5: 99:4c:34:55:eb:16:94:f4:68:c2:23:22:b1:a8:f0: 8c:79:5b:9f:2b:fd:ab:1b:98:a8:e1:76:31:83:b7: ab:01:6b:04:e3:4f:51:db:41:cb:a7:a9:bb:d9:1d: 57:7e:89:46:58:86:e4:9d:a7:b1:b8:d3:8e:32:62: 1c:f1:3b:d7:e6:e4:30:a4:a2:fa:fa:75:88:ae:60: 48:3f:39:33:15:1d:ee:85:0c:69:e5:a5:a3:f1:1e: 3c:94:c0:98:56:be:3a:0c:cd:6b:a2:5d:02:57:28: b5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:32:13:7F:B6:E6:39:DB:D9:54:0F:34:01:C4:92:D4:8D:CD:54:06 X509v3 Authority Key Identifier: keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/lzITf7bmOdvZVA80AcSS1I3NVAY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.233.32.0/24 46.233.34.0/23 46.233.52.0/24 Signature Algorithm: sha256WithRSAEncryption a4:6f:13:a3:97:e4:f7:14:a0:4e:f6:e0:c8:8b:1c:12:4f:53: 3d:24:5c:8e:64:02:d4:2e:9f:d1:55:e2:6e:32:48:12:e9:75: 28:c6:7a:c4:d3:e8:35:0c:11:27:30:16:90:19:28:4d:57:9f: 11:3b:08:36:aa:49:46:38:74:ce:f4:5c:54:4d:14:ef:9f:00: a6:f6:92:71:f2:1f:35:60:e6:6d:fd:63:c2:71:ad:b0:8e:d0: c2:47:4e:d7:28:52:45:c4:b1:34:eb:65:b6:e9:c6:eb:31:59: ac:4e:80:48:65:e2:d0:07:45:a6:f5:6d:e3:94:30:4c:d1:ce: cc:9e:15:a7:f0:77:7b:26:18:42:91:c9:2f:5d:9e:87:68:90: 06:92:d7:a6:a6:0b:2c:ef:b1:16:53:f4:e1:e6:38:6b:cf:d2: 47:3a:22:eb:74:bb:ca:3f:34:b1:86:54:79:86:20:7d:02:ca: 18:61:97:7a:16:7e:4f:f0:8f:46:12:ac:9d:9a:f7:8b:7a:be: f3:35:a1:25:b4:54:ac:b1:31:04:0e:5d:c1:5b:32:e7:50:48: 53:a9:6a:76:db:7b:f9:f6:02:e3:b8:f8:51:2d:3e:1e:dd:d9: f8:6d:0e:35:f4:eb:72:ce:0e:19:1b:fc:31:5a:81:5a:55:57: 94:14:23:d0 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZsCPZg+khwSVS4tjozb/NC7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1 ZDU2ZjUwHhcNMjUxMjA5MDgzMjI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzMyMTM3ZmI2ZTYzOWRiZDk1NDBmMzQwMWM0OTJkNDhkY2Q1NDA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxC2wP1mk7Rd2KDCiVBtvilXP3vi OqSMrdjHpYolYiJeEjdVyPEK1MkMAoIshfOrIqw8N47gQhBv2lRoa4QQVrw2VUNh 2/+Md6+eAy4ku60X2ALOb4L1nEl40JbCzgRrUHCTT1yAs3FtIDz24YxUWeT3jnOS XffHBLICjrfB9yLQEgEpZClaoRERzU/PW4r47OR0AbWZTDRV6xaU9GjCIyKxqPCM eVufK/2rG5io4XYxg7erAWsE409R20HLp6m72R1XfolGWIbknaexuNOOMmIc8TvX 5uQwpKL6+nWIrmBIPzkzFR3uhQxp5aWj8R48lMCYVr46DM1rol0CVyi10QIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJcyE3+25jnb2VQPNAHEktSNzVQGMB8GA1UdIwQY MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt M2MxNmZmODQxYWIyLzEvbHpJVGY3Ym1PZHZaVkE4MEFjU1MxSTNOVkFZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALukgAwQB LukiAwQALuk0MA0GCSqGSIb3DQEBCwUAA4IBAQCkbxOjl+T3FKBO9uDIixwST1M9 JFyOZALULp/RVeJuMkgS6XUoxnrE0+g1DBEnMBaQGShNV58ROwg2qklGOHTO9FxU TRTvnwCm9pJx8h81YOZt/WPCca2wjtDCR07XKFJFxLE062W26cbrMVmsToBIZeLQ B0Wm9W3jlDBM0c7MnhWn8Hd7JhhCkckvXZ6HaJAGktempgss77EWU/Th5jhrz9JH OiLrdLvKPzSxhlR5hiB9AsoYYZd6Fn5P8I9GEqydmveLer7zNaEltFSssTEEDl3B WzLnUEhTqWp223v59gLjuPhRLT4e3dn4bQ419Otyzg4ZG/wxWoFaVVeUFCPQ -----END CERTIFICATE-----Generated at Wed Dec 10 12:49:23 2025 by rpki-client