This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/vdROiyfg7Rk7po_ehrTKDQNqa0c.roa File: vdROiyfg7Rk7po_ehrTKDQNqa0c.roa (raw, json) Hash identifier: f6MWESTdiTGixS85Uw99j5VOmLsdp4I0nn/xhtbypIY= Subject key identifier: BD:D4:4E:8B:27:E0:ED:19:3B:A6:8F:DE:86:B4:CA:0D:03:6A:6B:47 Certificate issuer: /CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf Certificate serial: 019B7CEE18BA8929943A8EF45E4CDA4BCEB6 Authority key identifier: 98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/vdROiyfg7Rk7po_ehrTKDQNqa0c.roa Signing time: Fri 02 Jan 2026 04:18:57 +0000 ROA not before: Fri 02 Jan 2026 04:18:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201091 IP address blocks: 46.45.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.mft rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:18:ba:89:29:94:3a:8e:f4:5e:4c:da:4b:ce:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9813e2f6351d3b4d1e61aa4016f1b2cfa62d7cdf Validity Not Before: Jan 2 04:18:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bdd44e8b27e0ed193ba68fde86b4ca0d036a6b47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:79:be:44:ab:e5:79:23:24:ba:ab:f4:ab:b6: ea:e8:7d:fc:4d:13:71:f5:f7:99:21:99:4e:53:f8: 39:1c:2d:a5:b0:60:64:18:fc:b3:38:a1:17:d2:fe: 5f:94:9b:5a:ec:a9:70:f6:c2:25:d9:73:d6:2e:76: 61:e9:d7:e4:a2:08:c8:1a:45:f3:c6:26:71:c8:49: 9e:14:92:80:e0:3b:88:d1:84:24:b5:df:56:48:ac: 3c:64:be:f1:a5:1a:ba:b8:9f:0e:2d:3e:77:64:f5: 2d:9e:97:9d:bb:fe:33:ff:fc:cd:64:b1:42:1e:66: de:9b:b4:08:f0:b9:56:59:69:98:c3:fd:ca:61:80: a0:dd:24:42:75:08:c0:2f:0a:26:7f:50:f6:77:7a: c3:35:77:a3:f0:11:5c:bf:8e:a3:f6:45:e5:64:e5: 72:4e:b2:87:1b:d7:9f:10:da:7e:ef:6b:73:39:ba: a8:c9:a5:2c:df:f8:da:a3:c5:48:82:c9:2c:51:ac: 0a:df:04:58:43:a4:c0:5b:96:2d:9c:85:4f:ed:ad: 4c:6d:89:f1:01:1c:21:59:76:6c:0f:59:ca:32:df: ce:af:c7:f7:c6:f7:23:5b:6b:f9:72:c6:96:4e:3a: 5f:d1:38:df:b0:56:09:32:4a:93:d8:16:e7:12:26: 64:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D4:4E:8B:27:E0:ED:19:3B:A6:8F:DE:86:B4:CA:0D:03:6A:6B:47 X509v3 Authority Key Identifier: keyid:98:13:E2:F6:35:1D:3B:4D:1E:61:AA:40:16:F1:B2:CF:A6:2D:7C:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBPi9jUdO00eYapAFvGyz6YtfN8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/vdROiyfg7Rk7po_ehrTKDQNqa0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f7463-4d4f-41a6-8d72-3951378aa766/1/mBPi9jUdO00eYapAFvGyz6YtfN8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.45.116.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:6e:8f:a5:ad:20:92:68:75:e4:f4:1b:ff:6d:98:f8:42:8f: 0d:ee:4d:6e:34:be:b8:6b:df:ab:99:f1:fe:38:50:8c:27:ac: be:05:6a:b3:37:60:ab:fa:4c:3f:de:b1:25:85:da:34:1b:f9: c1:87:41:7e:7c:d6:f2:d9:32:eb:ec:88:2e:60:37:54:fa:d4: 3a:06:1c:60:dc:e3:a3:44:59:ea:59:e7:7d:2d:2a:6d:bd:d1: ba:a2:40:66:64:a4:76:c7:64:a5:a3:04:da:fc:e3:a2:19:5e: 82:04:28:0f:6c:05:a2:e4:3d:37:22:8c:a7:f4:8b:36:c0:35: e7:ee:a2:7d:ed:dd:6d:68:dc:d7:d2:3e:42:62:f6:af:ce:2a: b1:7d:44:6d:91:8f:b2:e5:a6:43:77:2e:e8:26:ed:e1:da:c4: 43:0e:7a:2a:c3:06:3a:de:ce:32:d2:48:f1:9d:b4:2e:83:48: aa:43:94:5b:eb:7a:8c:75:a6:72:45:5b:f9:56:90:1e:75:aa: ed:62:17:5d:6a:f7:71:60:2b:ae:90:04:7a:de:34:0d:37:58: 40:ed:06:6e:a4:d3:6e:3e:8f:f6:cb:ab:64:b9:4e:98:c6:47: 68:d7:44:c0:e0:a5:d7:84:06:c0:c3:af:7d:cb:44:a6:07:0d: 6e:ff:6f:bd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87hi6iSmUOo70XkzaS862MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4MTNlMmY2MzUxZDNiNGQxZTYxYWE0MDE2ZjFiMmNmYTYy ZDdjZGYwHhcNMjYwMTAyMDQxODU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZGQ0NGU4YjI3ZTBlZDE5M2JhNjhmZGU4NmI0Y2EwZDAzNmE2YjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXm+RKvleSMkuqv0q7bq6H38TRNx 9feZIZlOU/g5HC2lsGBkGPyzOKEX0v5flJta7Klw9sIl2XPWLnZh6dfkogjIGkXz xiZxyEmeFJKA4DuI0YQktd9WSKw8ZL7xpRq6uJ8OLT53ZPUtnpedu/4z//zNZLFC Hmbem7QI8LlWWWmYw/3KYYCg3SRCdQjALwomf1D2d3rDNXej8BFcv46j9kXlZOVy TrKHG9efENp+72tzObqoyaUs3/jao8VIgsksUawK3wRYQ6TAW5YtnIVP7a1MbYnx ARwhWXZsD1nKMt/Or8f3xvcjW2v5csaWTjpf0TjfsFYJMkqT2BbnEiZkHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFL3UTosn4O0ZO6aP3oa0yg0DamtHMB8GA1UdIwQY MBaAFJgT4vY1HTtNHmGqQBbxss+mLXzfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUJQaTlqVWRPMDBlWWFwQUZ2R3l6Nll0Zk44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8zZjc0NjMtNGQ0Zi00MWE2LThkNzIt Mzk1MTM3OGFhNzY2LzEvdmRST2l5Zmc3Ums3cG9fZWhyVEtEUU5xYTBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi8zZjc0NjMtNGQ0Zi00MWE2LThkNzItMzk1MTM3OGFhNzY2 LzEvbUJQaTlqVWRPMDBlWWFwQUZ2R3l6Nll0Zk44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALi10MA0G CSqGSIb3DQEBCwUAA4IBAQA9bo+lrSCSaHXk9Bv/bZj4Qo8N7k1uNL64a9+rmfH+ OFCMJ6y+BWqzN2Cr+kw/3rElhdo0G/nBh0F+fNby2TLr7IguYDdU+tQ6Bhxg3OOj RFnqWed9LSptvdG6okBmZKR2x2SlowTa/OOiGV6CBCgPbAWi5D03Ioyn9Is2wDXn 7qJ97d1taNzX0j5CYvavziqxfURtkY+y5aZDdy7oJu3h2sRDDnoqwwY63s4y0kjx nbQug0iqQ5Rb63qMdaZyRVv5VpAedartYhddavdxYCuukAR63jQNN1hA7QZupNNu Po/2y6tkuU6Yxkdo10TA4KXXhAbAw699y0SmBw1u/2+9 -----END CERTIFICATE-----Generated at Mon Feb 9 22:36:59 2026 by rpki-client