This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/TRd3PwWjN2N6i0kSV548d4vlbt0.roa File: TRd3PwWjN2N6i0kSV548d4vlbt0.roa (raw, json) Hash identifier: ZKnbwzmBAX2zhMCQGg8pdlTxO8b68gKUxXEWzkBH4eI= Subject key identifier: 4D:17:77:3F:05:A3:37:63:7A:8B:49:12:57:9E:3C:77:8B:E5:6E:DD Certificate issuer: /CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf Certificate serial: 019B7CEE19F48B7AA74BE21B4048BBAF4501 Authority key identifier: 98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/TRd3PwWjN2N6i0kSV548d4vlbt0.roa Signing time: Fri 02 Jan 2026 04:18:57 +0000 ROA not before: Fri 02 Jan 2026 04:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208066 IP address blocks: 46.45.64.0/20 maxlen: 20 46.45.64.0/22 maxlen: 22 46.45.68.0/22 maxlen: 22 46.45.72.0/22 maxlen: 22 46.45.76.0/22 maxlen: 22 2a03:24c0:ffcf::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:19:f4:8b:7a:a7:4b:e2:1b:40:48:bb:af:45:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf Validity Not Before: Jan 2 04:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4d17773f05a337637a8b4912579e3c778be56edd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6b:bc:a7:d1:94:c9:01:5b:9d:b2:03:78:19: 4b:86:e7:1d:37:5e:7a:15:6c:91:63:55:2e:bb:20: 3a:c3:78:c4:fd:dd:9d:5f:6c:58:cb:fe:a3:4e:86: 4e:09:bc:88:55:a6:3a:47:af:ef:c3:bf:4f:85:3b: 2f:83:c6:88:8a:26:ef:a0:1f:7b:7c:39:7a:14:2c: 70:b6:b4:9f:18:00:a2:b5:73:f2:a7:46:95:e3:6b: 71:64:37:12:fa:19:ff:26:9b:89:07:db:74:58:8a: 4d:3c:c9:1d:66:5f:30:49:ff:a4:0c:51:dd:ab:93: 0a:88:84:d5:9a:07:98:9d:b8:cb:1e:c6:a0:c5:a0: 15:79:13:3f:41:a6:50:90:2f:d5:cd:41:1b:09:16: 38:8e:62:2b:5e:99:33:29:c9:59:a2:a0:4b:34:0f: 74:ae:e0:8d:f4:2d:50:81:bd:9d:e1:22:68:73:eb: 9c:79:e5:f9:d1:80:92:7a:97:96:cd:29:d8:a2:ec: 0b:d8:a5:20:a3:16:96:63:be:96:4b:4c:4d:f2:2d: 33:45:a2:6a:56:77:ea:2f:c1:27:97:2b:7a:0a:7a: 51:19:66:20:14:7b:7d:a8:c6:7f:74:17:3a:68:f8: 41:ce:41:4f:7a:86:0e:76:f6:c9:83:20:d5:9e:be: 80:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:17:77:3F:05:A3:37:63:7A:8B:49:12:57:9E:3C:77:8B:E5:6E:DD X509v3 Authority Key Identifier: keyid:98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/TRd3PwWjN2N6i0kSV548d4vlbt0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.45.64.0/20 IPv6: 2a03:24c0:ffcf::/48 Signature Algorithm: sha256WithRSAEncryption 95:22:61:90:22:86:e3:52:32:47:09:1e:54:cd:fd:36:5f:05: ca:36:2b:a1:c7:d8:4b:4a:b7:db:e8:38:04:49:4e:ae:95:4e: 89:32:da:65:c7:67:9c:b7:54:ca:3c:50:32:c3:4f:67:cb:c1: cf:b2:7d:fa:5f:1d:8a:53:a1:d2:53:a5:ff:a7:d1:1e:f1:18: 96:5c:9b:de:c5:5f:8a:40:ef:08:c3:6c:ef:1b:a0:8e:0b:a8: 9d:23:d1:1e:6d:b5:b9:65:13:84:db:e2:5e:94:99:7b:ad:04: ce:71:56:b8:d1:e5:a2:67:d2:80:91:79:a5:37:93:96:c7:76: 4e:f2:c1:9d:b9:2e:97:d1:fb:b6:4b:89:5b:47:9a:7a:06:8f: b7:a4:25:25:ff:80:45:b1:dd:6d:d4:e8:9f:43:28:7b:ab:24: 0f:81:29:64:2d:fe:96:01:7e:6a:d2:e5:9f:9d:65:97:f2:f9: 8c:42:99:a6:a8:bb:19:6f:b5:e0:55:a1:4a:8b:eb:4b:61:e2: 9a:b5:85:44:c9:ad:46:57:73:b7:d7:7e:a3:b3:f5:f4:ba:1c: b0:a9:e6:c7:5f:00:c2:3a:6d:41:01:57:93:4a:ff:24:c9:1a: 83:2b:6d:56:de:e2:a4:51:e1:87:e1:33:51:c3:f7:04:d4:f3: 96:cf:fb:90 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt87hn0i3qnS+IbQEi7r0UBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MTNlMmY2MzUxZDNiNGQxZTYxYWE0MDE2ZjFiMmNmYTYy ZDdjZGYwHhcNMjYwMTAyMDQxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZDE3NzczZjA1YTMzNzYzN2E4YjQ5MTI1NzllM2M3NzhiZTU2ZWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWu8p9GUyQFbnbIDeBlLhucdN156 FWyRY1UuuyA6w3jE/d2dX2xYy/6jToZOCbyIVaY6R6/vw79PhTsvg8aIiibvoB97 fDl6FCxwtrSfGACitXPyp0aV42txZDcS+hn/JpuJB9t0WIpNPMkdZl8wSf+kDFHd q5MKiITVmgeYnbjLHsagxaAVeRM/QaZQkC/VzUEbCRY4jmIrXpkzKclZoqBLNA90 ruCN9C1Qgb2d4SJoc+uceeX50YCSepeWzSnYouwL2KUgoxaWY76WS0xN8i0zRaJq VnfqL8Enlyt6CnpRGWYgFHt9qMZ/dBc6aPhBzkFPeoYOdvbJgyDVnr6A3QIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFE0Xdz8FozdjeotJEleePHeL5W7dMB8GA1UdIwQY MBaAFJgT4vY1HTtNHmGqQBbxss+mLXzfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUJQaTlqVWRPMDBlWWFwQUZ2R3l6Nll0Zk44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8zZjc0NjMtNGQ0Zi00MWE2LThkNzIt Mzk1MTM3OGFhNzY2LzEvVFJkM1B3V2pOMk42aTBrU1Y1NDhkNHZsYnQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8zZjc0NjMtNGQ0Zi00MWE2LThkNzItMzk1MTM3OGFhNzY2 LzEvbUJQaTlqVWRPMDBlWWFwQUZ2R3l6Nll0Zk44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQELi1AMA8E AgACMAkDBwAqAyTA/88wDQYJKoZIhvcNAQELBQADggEBAJUiYZAihuNSMkcJHlTN /TZfBco2K6HH2EtKt9voOARJTq6VToky2mXHZ5y3VMo8UDLDT2fLwc+yffpfHYpT odJTpf+n0R7xGJZcm97FX4pA7wjDbO8boI4LqJ0j0R5ttbllE4Tb4l6UmXutBM5x VrjR5aJn0oCReaU3k5bHdk7ywZ25LpfR+7ZLiVtHmnoGj7ekJSX/gEWx3W3U6J9D KHurJA+BKWQt/pYBfmrS5Z+dZZfy+YxCmaaouxlvteBVoUqL60th4pq1hUTJrUZX c7fXfqOz9fS6HLCp5sdfAMI6bUEBV5NK/yTJGoMrbVbe4qRR4YfhM1HD9wTU85bP +5A= -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:42 2026 by rpki-client