This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/uEioqsfjoD3Xl5Oou54cX2C0S34.roa File: uEioqsfjoD3Xl5Oou54cX2C0S34.roa (raw, json) Hash identifier: go+HYucKqNseQJzP/5n7AMRia6twNmQH+kJ8P+JHx6A= Subject key identifier: B8:48:A8:AA:C7:E3:A0:3D:D7:97:93:A8:BB:9E:1C:5F:60:B4:4B:7E Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Certificate serial: 019B7F830D0709F7C643C0EA6DBDC54AA09A Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/uEioqsfjoD3Xl5Oou54cX2C0S34.roa Signing time: Fri 02 Jan 2026 16:20:53 +0000 ROA not before: Fri 02 Jan 2026 16:20:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212477 IP address blocks: 46.233.44.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 07:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:0d:07:09:f7:c6:43:c0:ea:6d:bd:c5:4a:a0:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Validity Not Before: Jan 2 16:20:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b848a8aac7e3a03dd79793a8bb9e1c5f60b44b7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:16:70:d9:dd:40:d8:d9:2b:8f:9a:23:8a:84: 15:de:34:3c:56:5b:27:28:73:ec:3c:dc:53:c3:87: f6:43:1f:2d:36:4c:3c:d0:30:54:62:ba:ff:86:06: 80:da:19:05:06:b3:2c:c2:c2:3b:68:81:61:5a:f9: ab:e6:b0:64:52:3b:1a:76:c8:7d:d6:a5:b5:ff:82: 81:62:aa:a9:60:67:18:b1:ce:c7:cc:8c:b9:38:cb: 94:3b:dc:cf:af:73:81:7d:44:17:c3:72:75:c5:15: de:d8:65:64:bc:a5:83:a6:d8:0b:30:09:39:89:49: d5:31:c4:78:65:cc:9a:fb:b8:98:43:04:e8:46:87: 8e:49:e7:5b:ce:0a:ae:fe:cf:75:f8:3d:5b:95:de: 1b:e9:2b:91:9f:0a:26:ac:e3:01:20:53:9d:43:3b: c6:99:3d:12:57:c1:ce:e1:45:0d:77:d9:9f:f0:ee: 3e:d6:cb:8b:d7:c8:67:18:5a:3f:a6:e4:5a:48:e7: b5:92:12:55:76:67:07:07:9b:a7:a3:c1:bc:b5:aa: f0:8b:b4:a4:e5:18:a8:9e:7e:ce:83:39:49:11:1f: 93:58:d9:13:94:16:2c:8e:8d:03:5d:ee:67:fc:76: 0a:da:dc:40:39:56:9a:f9:6a:da:2d:d6:2a:fb:7e: 9e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:48:A8:AA:C7:E3:A0:3D:D7:97:93:A8:BB:9E:1C:5F:60:B4:4B:7E X509v3 Authority Key Identifier: keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/uEioqsfjoD3Xl5Oou54cX2C0S34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.233.44.0/23 Signature Algorithm: sha256WithRSAEncryption 49:ce:b7:57:30:0c:05:6f:e4:45:26:d5:bd:e0:f5:60:c9:50: 44:f4:5d:bc:34:5c:46:ef:0e:7d:7e:be:3d:59:4a:92:29:4e: 6e:82:2f:57:e3:b6:9d:a7:09:64:1e:12:c5:5c:97:73:2e:a9: 47:ad:2c:4e:b2:92:5f:64:0b:83:07:23:97:3e:01:37:17:1b: 72:ae:8f:4f:69:4d:70:78:a2:5c:6c:fb:3c:7c:d1:a9:17:b8: ca:67:f0:29:ba:74:46:16:88:82:20:81:4d:be:e3:75:e2:c5: e4:12:3a:db:73:c4:49:dc:6b:8f:ed:5f:90:ba:aa:b9:ca:da: 1e:32:be:f6:a4:dd:55:0e:cf:37:6a:3a:e4:8f:bb:db:8d:8e: 9b:77:30:e8:18:fe:ee:08:3b:a7:c9:b3:dc:be:e9:23:63:85: 1b:85:ac:27:a1:64:72:96:9c:92:c6:10:5a:e5:fc:b0:77:ba: c4:03:98:94:2a:dc:4b:4e:1f:98:15:47:1a:5b:7d:6d:66:af: 64:76:79:f9:1c:62:d3:b7:7b:c1:17:9b:78:5d:00:ac:b4:15: 2d:ba:29:ae:0b:86:89:90:67:cf:f5:d8:56:fa:cc:cf:b7:76: bf:41:34:94:3c:d6:f5:aa:04:dc:e5:31:e4:1b:b7:bd:0a:34: fd:f9:81:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gw0HCffGQ8Dqbb3FSqCaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1 ZDU2ZjUwHhcNMjYwMTAyMTYyMDUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiODQ4YThhYWM3ZTNhMDNkZDc5NzkzYThiYjllMWM1ZjYwYjQ0YjdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxZw2d1A2Nkrj5ojioQV3jQ8Vlsn KHPsPNxTw4f2Qx8tNkw80DBUYrr/hgaA2hkFBrMswsI7aIFhWvmr5rBkUjsadsh9 1qW1/4KBYqqpYGcYsc7HzIy5OMuUO9zPr3OBfUQXw3J1xRXe2GVkvKWDptgLMAk5 iUnVMcR4Zcya+7iYQwToRoeOSedbzgqu/s91+D1bld4b6SuRnwomrOMBIFOdQzvG mT0SV8HO4UUNd9mf8O4+1suL18hnGFo/puRaSOe1khJVdmcHB5uno8G8tarwi7Sk 5Rionn7OgzlJER+TWNkTlBYsjo0DXe5n/HYK2txAOVaa+WraLdYq+36eYQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLhIqKrH46A915eTqLueHF9gtEt+MB8GA1UdIwQY MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt M2MxNmZmODQxYWIyLzEvdUVpb3FzZmpvRDNYbDVPb3U1NGNYMkMwUzM0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLuksMA0G CSqGSIb3DQEBCwUAA4IBAQBJzrdXMAwFb+RFJtW94PVgyVBE9F28NFxG7w59fr49 WUqSKU5ugi9X47adpwlkHhLFXJdzLqlHrSxOspJfZAuDByOXPgE3Fxtyro9PaU1w eKJcbPs8fNGpF7jKZ/ApunRGFoiCIIFNvuN14sXkEjrbc8RJ3GuP7V+Quqq5ytoe Mr72pN1VDs83ajrkj7vbjY6bdzDoGP7uCDunybPcvukjY4UbhawnoWRylpySxhBa 5fywd7rEA5iUKtxLTh+YFUcaW31tZq9kdnn5HGLTt3vBF5t4XQCstBUtuimuC4aJ kGfP9dhW+szPt3a/QTSUPNb1qgTc5THkG7e9CjT9+YHx -----END CERTIFICATE-----Generated at Sun Jan 11 15:07:44 2026 by rpki-client