This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/yX_yhv_jUUfVVPMPnlpzUI5cFxs.roa File: yX_yhv_jUUfVVPMPnlpzUI5cFxs.roa (raw, json) Hash identifier: bg6ibEfMDVCBPduOQFB/gGWqEjD+qw8SCbixEdu1S7Q= Subject key identifier: C9:7F:F2:86:FF:E3:51:47:D5:54:F3:0F:9E:5A:73:50:8E:5C:17:1B Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Certificate serial: 019C09B0D82EEBBFA4412A60585456748A3D Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/yX_yhv_jUUfVVPMPnlpzUI5cFxs.roa Signing time: Thu 29 Jan 2026 12:18:30 +0000 ROA not before: Thu 29 Jan 2026 12:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29802 IP address blocks: 46.233.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 30 Jan 2026 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:09:b0:d8:2e:eb:bf:a4:41:2a:60:58:54:56:74:8a:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Validity Not Before: Jan 29 12:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c97ff286ffe35147d554f30f9e5a73508e5c171b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:71:72:f7:b4:23:65:44:c1:6b:bc:9d:5c:39: 49:72:ce:9f:b1:94:61:a1:36:3b:fd:df:fa:67:0a: b9:42:99:9f:bc:db:2a:30:30:e2:83:2d:36:36:a4: 5a:70:1f:e0:87:c0:17:d0:fe:a4:02:41:38:ca:06: 5d:5c:11:08:a7:d3:8c:06:3b:e8:9b:4f:ce:98:48: 90:74:b6:96:b3:9b:3f:c6:77:cc:f1:34:ce:a1:f2: 54:dd:48:4e:1a:4f:25:81:64:04:be:d3:52:5b:44: cd:b6:bd:64:8c:ad:a9:57:cd:3a:3a:a1:0d:64:65: 03:e5:ef:b1:16:27:d2:0e:85:92:d3:ef:77:47:1c: 47:63:49:49:ba:f3:12:f1:bb:77:88:38:32:2a:78: 05:15:ba:c6:37:78:91:75:c7:cf:6a:5a:b1:df:f2: 58:3d:6c:7d:cc:12:3a:5f:b4:4b:e7:dd:c0:a7:f7: e1:ca:f9:25:78:bf:7f:34:33:84:b3:6f:b6:86:41: d2:f2:69:b9:ff:18:95:99:28:38:bd:66:cd:f2:d0: fd:66:67:30:f0:23:e2:6b:39:b9:99:b4:7f:85:e5: 3f:25:72:94:f3:34:dc:c2:29:50:8d:ad:2c:2b:84: ea:e5:2f:3d:94:ff:e4:46:11:35:b2:75:eb:45:cf: 80:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:7F:F2:86:FF:E3:51:47:D5:54:F3:0F:9E:5A:73:50:8E:5C:17:1B X509v3 Authority Key Identifier: keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/yX_yhv_jUUfVVPMPnlpzUI5cFxs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.233.43.0/24 Signature Algorithm: sha256WithRSAEncryption 22:71:fa:86:87:de:62:07:a4:da:7b:b4:1d:e9:f1:76:da:10: 5b:0e:64:95:3c:dd:04:5c:82:24:2d:79:34:8c:ab:8f:41:4d: 11:8f:c7:49:12:71:d1:6a:2f:61:08:a1:32:36:ee:78:77:c3: 64:c2:50:e8:7b:04:24:cf:e5:6f:42:a4:61:ba:bc:e0:57:e4: 0b:d3:82:44:c9:67:6c:85:74:1e:f2:39:da:40:be:d8:5a:b3: cf:57:b1:10:e6:b8:ee:c8:cb:ac:31:6b:c6:4c:2a:2a:53:c1: e6:a9:23:ca:95:df:4a:b6:b0:75:13:ad:74:3e:15:c5:97:57: fb:66:26:c6:4d:e2:62:e3:f0:02:87:84:b6:91:6b:26:01:90: 7f:e9:bc:f9:83:7d:fd:32:4e:03:89:2f:03:e8:42:5a:65:cf: ab:65:42:b0:7a:42:de:e9:e3:a4:26:90:5d:6e:c4:c1:24:ba: 62:e4:6b:94:3f:af:ee:75:d1:25:f0:c8:fd:2d:b5:5f:ef:1a: 99:05:c1:c0:6c:c0:4f:16:61:19:d7:fa:0c:bd:fe:d2:6e:5f: fb:eb:5c:ac:58:5c:60:27:d0:3d:f6:b9:d1:8d:eb:c2:bb:95: fd:65:cc:08:bd:30:19:38:12:47:42:7b:6d:8c:42:89:24:87: 18:4f:fd:98 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZwJsNgu67+kQSpgWFRWdIo9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1 ZDU2ZjUwHhcNMjYwMTI5MTIxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTdmZjI4NmZmZTM1MTQ3ZDU1NGYzMGY5ZTVhNzM1MDhlNWMxNzFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nFy97QjZUTBa7ydXDlJcs6fsZRh oTY7/d/6Zwq5QpmfvNsqMDDigy02NqRacB/gh8AX0P6kAkE4ygZdXBEIp9OMBjvo m0/OmEiQdLaWs5s/xnfM8TTOofJU3UhOGk8lgWQEvtNSW0TNtr1kjK2pV806OqEN ZGUD5e+xFifSDoWS0+93RxxHY0lJuvMS8bt3iDgyKngFFbrGN3iRdcfPalqx3/JY PWx9zBI6X7RL593Ap/fhyvkleL9/NDOEs2+2hkHS8mm5/xiVmSg4vWbN8tD9Zmcw 8CPiazm5mbR/heU/JXKU8zTcwilQja0sK4Tq5S89lP/kRhE1snXrRc+A6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMl/8ob/41FH1VTzD55ac1COXBcbMB8GA1UdIwQY MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt M2MxNmZmODQxYWIyLzEveVhfeWh2X2pVVWZWVlBNUG5scHpVSTVjRnhzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALukrMA0G CSqGSIb3DQEBCwUAA4IBAQAicfqGh95iB6Tae7Qd6fF22hBbDmSVPN0EXIIkLXk0 jKuPQU0Rj8dJEnHRai9hCKEyNu54d8NkwlDoewQkz+VvQqRhurzgV+QL04JEyWds hXQe8jnaQL7YWrPPV7EQ5rjuyMusMWvGTCoqU8HmqSPKld9KtrB1E610PhXFl1f7 ZibGTeJi4/ACh4S2kWsmAZB/6bz5g339Mk4DiS8D6EJaZc+rZUKwekLe6eOkJpBd bsTBJLpi5GuUP6/uddEl8Mj9LbVf7xqZBcHAbMBPFmEZ1/oMvf7Sbl/761ysWFxg J9A99rnRjevCu5X9ZcwIvTAZOBJHQnttjEKJJIcYT/2Y -----END CERTIFICATE-----Generated at Thu Jan 29 17:47:40 2026 by rpki-client