This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/kBfphV_NlnIRn08U3ZzmPDQsiEk.roa File: kBfphV_NlnIRn08U3ZzmPDQsiEk.roa (raw, json) Hash identifier: adGaQmWHR5w0ipHaezwd5XxfPVo+NR/7FMBFJ/8xYUE= Subject key identifier: 90:17:E9:85:5F:CD:96:72:11:9F:4F:14:DD:9C:E6:3C:34:2C:88:49 Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA762000D98B7C6D0F25045B31FBA47 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/kBfphV_NlnIRn08U3ZzmPDQsiEk.roa Signing time: Fri 02 Jan 2026 12:20:57 +0000 ROA not before: Fri 02 Jan 2026 12:20:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 21403 IP address blocks: 46.61.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:62:00:0d:98:b7:c6:d0:f2:50:45:b3:1f:ba:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:20:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9017e9855fcd9672119f4f14dd9ce63c342c8849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:67:7d:f1:93:08:b2:10:73:a6:62:b4:60:33: d4:66:f3:f7:9b:8f:0d:be:c1:d7:ef:ca:17:d1:81: 37:82:94:cd:90:04:41:77:0e:fb:e6:3c:28:23:29: 72:a7:a6:a9:26:76:2d:58:c4:a5:ed:fb:44:eb:10: 9d:3f:49:3f:bb:8e:26:62:0b:7a:8c:9e:d7:94:c7: 39:aa:5f:e2:10:ff:31:81:03:eb:20:0d:18:62:c0: 8d:8a:80:8c:84:c5:39:aa:23:01:2f:b9:f8:37:00: 17:19:11:ae:d2:fe:07:27:7b:0d:b4:be:3d:e4:a3: 95:63:76:20:b2:40:98:5c:91:60:f0:85:78:54:ca: fe:13:62:ce:3b:84:62:b3:0f:e2:cd:87:6a:02:f5: 96:26:31:f1:25:1c:2c:0e:93:da:7e:34:36:ca:46: bb:d3:80:82:ed:e2:46:5e:e1:43:e5:d3:2f:93:1d: 0a:56:54:66:a2:9e:71:7a:40:13:4a:c8:1e:a2:d7: d9:90:c9:be:c6:9e:9b:57:25:5d:38:56:53:68:9a: 97:be:22:f4:c7:32:23:52:3a:6a:00:f8:69:d1:5b: 32:db:85:b2:58:b0:2f:bf:85:3a:e8:c2:f8:a0:84: 47:c8:45:01:b5:5a:1d:31:37:b0:d4:83:a1:38:fa: 45:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:17:E9:85:5F:CD:96:72:11:9F:4F:14:DD:9C:E6:3C:34:2C:88:49 X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/kBfphV_NlnIRn08U3ZzmPDQsiEk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.61.137.0/24 Signature Algorithm: sha256WithRSAEncryption 0a:58:14:5c:f6:42:57:f8:f8:c8:ba:19:4a:0e:0d:d4:ab:33: 0d:e4:86:fd:41:3e:05:0a:15:3f:8b:df:57:4d:f6:4a:52:80: fa:80:85:ec:21:52:d6:18:e3:94:57:6a:45:87:84:30:fe:2b: 94:2a:cf:71:47:97:f5:f0:61:59:b5:e6:32:c8:96:4a:b2:77: 60:23:0f:22:e0:4e:fb:27:9c:21:57:3e:f4:f0:e4:41:77:77: 2b:66:40:bb:22:8b:4a:c9:14:90:d8:0c:ea:c5:ee:4f:a7:46: a9:88:fb:a7:ff:06:4b:f2:be:fb:cf:c6:9b:02:7b:97:73:a5: 94:e4:4c:4e:d3:75:30:d9:00:df:b7:32:01:44:1c:69:4e:92: 33:e2:5c:e1:88:d9:99:ad:d8:80:4a:b4:77:0f:17:80:5c:a2: 60:07:57:7c:62:78:f4:13:25:92:0a:1c:33:f7:16:64:46:1c: 53:24:44:a8:14:c1:c2:a1:99:e4:89:7c:3b:6e:f0:50:50:dd: 1e:26:38:b9:1d:ed:8c:f6:68:20:95:6b:41:07:b9:ad:54:e9: 5d:40:8f:39:dd:b4:46:a8:b2:d6:7f:f9:f1:00:0f:af:9d:62: 03:69:c6:8f:72:cb:74:1e:02:8f:d4:a6:7d:b6:ec:06:db:90: 6f:e2:1c:79 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p2IADZi3xtDyUEWzH7pHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMDU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5MDE3ZTk4NTVmY2Q5NjcyMTE5ZjRmMTRkZDljZTYzYzM0MmM4ODQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGd98ZMIshBzpmK0YDPUZvP3m48N vsHX78oX0YE3gpTNkARBdw775jwoIylyp6apJnYtWMSl7ftE6xCdP0k/u44mYgt6 jJ7XlMc5ql/iEP8xgQPrIA0YYsCNioCMhMU5qiMBL7n4NwAXGRGu0v4HJ3sNtL49 5KOVY3YgskCYXJFg8IV4VMr+E2LOO4Risw/izYdqAvWWJjHxJRwsDpPafjQ2yka7 04CC7eJGXuFD5dMvkx0KVlRmop5xekATSsgeotfZkMm+xp6bVyVdOFZTaJqXviL0 xzIjUjpqAPhp0Vsy24WyWLAvv4U66ML4oIRHyEUBtVodMTew1IOhOPpFZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJAX6YVfzZZyEZ9PFN2c5jw0LIhJMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEva0JmcGhWX05sbklSbjA4VTNaem1QRFFzaUVrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALj2JMA0G CSqGSIb3DQEBCwUAA4IBAQAKWBRc9kJX+PjIuhlKDg3UqzMN5Ib9QT4FChU/i99X TfZKUoD6gIXsIVLWGOOUV2pFh4Qw/iuUKs9xR5f18GFZteYyyJZKsndgIw8i4E77 J5whVz708ORBd3crZkC7IotKyRSQ2Azqxe5Pp0apiPun/wZL8r77z8abAnuXc6WU 5ExO03Uw2QDftzIBRBxpTpIz4lzhiNmZrdiASrR3DxeAXKJgB1d8Ynj0EyWSChwz 9xZkRhxTJESoFMHCoZnkiXw7bvBQUN0eJji5He2M9mgglWtBB7mtVOldQI853bRG qLLWf/nxAA+vnWIDacaPcst0HgKP1KZ9tuwG25Bv4hx5 -----END CERTIFICATE-----Generated at Mon Jan 26 10:13:41 2026 by rpki-client