This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/xlsFyDdwgZeZV5xnjDclge-AA8U.roa File: xlsFyDdwgZeZV5xnjDclge-AA8U.roa (raw, json) Hash identifier: TXOJJRDjmANYnvqhNdlEFYN20qaFGtzeMxtt4daAeOs= Subject key identifier: C6:5B:05:C8:37:70:81:97:99:57:9C:67:8C:37:25:81:EF:80:03:C5 Certificate issuer: /CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc Certificate serial: 019B7BA37B81A761EE29463C8D81A2383FFC Authority key identifier: DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/xlsFyDdwgZeZV5xnjDclge-AA8U.roa Signing time: Thu 01 Jan 2026 22:17:50 +0000 ROA not before: Thu 01 Jan 2026 22:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 16509 IP address blocks: 212.46.57.0/24 maxlen: 24 2a12:fc0::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.mft rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:7b:81:a7:61:ee:29:46:3c:8d:81:a2:38:3f:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dac32632aa9154253c6dcd2331e9ad6920b6bdcc Validity Not Before: Jan 1 22:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c65b05c83770819799579c678c372581ef8003c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c9:30:99:40:a6:7e:d0:76:11:75:95:3f:5c: f9:c1:3f:8c:d9:ad:00:90:ce:03:77:34:8b:13:45: a3:40:07:3b:ec:39:cf:46:a9:42:4f:01:71:e6:c1: 58:96:07:4a:70:05:ab:84:87:cd:8a:e4:bb:84:e8: 5c:4a:9f:df:34:5b:7d:68:3b:8f:71:7e:ea:a1:4d: ed:76:ba:64:31:ce:97:b9:95:ff:7f:0a:46:95:d1: a4:56:14:9f:7d:55:de:01:d2:e2:1e:5e:9d:12:75: ed:20:08:a5:cc:8a:a0:85:cb:ef:77:a7:a9:52:3c: 7d:da:0f:a5:4c:7f:75:05:cf:4b:cc:5a:0d:4b:49: 62:01:d9:23:0a:bd:f7:14:f5:72:43:d3:12:60:c2: 95:94:84:c6:8d:04:f4:6c:1d:7c:2d:73:18:3d:fc: d8:76:2e:89:6b:97:6e:ef:42:bd:6b:12:e1:10:f6: 63:5f:60:c3:a8:99:c7:97:df:84:87:c6:8e:10:01: d8:f2:f5:e1:4e:a6:84:eb:42:bb:5c:ee:eb:98:e6: af:2d:c5:05:17:b0:ba:c7:74:25:e8:1f:a4:42:b9: f5:ed:ea:5a:18:d0:ca:33:9f:eb:7d:39:fe:59:b8: 89:83:29:dd:5e:0d:01:5a:59:3d:0f:ed:a4:db:bc: c1:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:5B:05:C8:37:70:81:97:99:57:9C:67:8C:37:25:81:EF:80:03:C5 X509v3 Authority Key Identifier: keyid:DA:C3:26:32:AA:91:54:25:3C:6D:CD:23:31:E9:AD:69:20:B6:BD:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2sMmMqqRVCU8bc0jMemtaSC2vcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/xlsFyDdwgZeZV5xnjDclge-AA8U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/49424a-aa5f-4b9f-a627-24654e941c12/1/2sMmMqqRVCU8bc0jMemtaSC2vcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.46.57.0/24 IPv6: 2a12:fc0::/44 Signature Algorithm: sha256WithRSAEncryption 2b:56:fb:4f:b8:d0:b2:fb:f3:98:2a:4b:1d:bb:f7:2e:8d:39: b4:71:fa:4c:75:65:6d:98:d1:4c:c0:2c:ab:bc:3f:a5:d2:18: 4f:28:b8:89:e9:8d:63:84:db:4a:e0:94:5e:33:d0:80:90:49: 2d:27:4e:97:31:e9:d3:4f:5d:04:99:1a:9c:83:2d:25:71:b1: f8:14:17:0a:a6:e5:07:86:58:97:20:27:7c:ab:6e:aa:d1:61: f5:5b:c5:d9:8f:15:d7:d6:20:6c:98:d1:a8:ac:80:06:37:c8: 48:c3:45:f3:28:0d:5e:47:71:b3:5d:40:b3:93:ba:37:9f:cb: 58:81:28:39:51:47:bb:ad:d8:99:e1:34:2f:dd:42:c5:15:9f: 74:ca:1c:f0:d5:22:e1:09:b7:27:3d:a5:37:c9:43:08:1c:34: 0b:26:63:df:ec:f2:f0:85:fe:26:d0:55:72:9b:5c:91:2d:bc: 0d:d9:2d:d6:7b:cc:6c:91:40:d9:f3:7b:5b:f8:2e:64:a5:f3: b7:f1:e8:a7:fc:cb:57:c8:dd:d8:fc:20:d8:44:cc:27:a8:37: c2:3a:9e:b7:0e:46:76:78:18:e3:d0:c2:14:1b:a4:e6:47:b9: 2b:e5:70:c8:26:3c:d8:33:59:33:fb:a3:a9:2f:b4:08:63:f3: d7:06:b7:d3 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt7o3uBp2HuKUY8jYGiOD/8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYzMyNjMyYWE5MTU0MjUzYzZkY2QyMzMxZTlhZDY5MjBi NmJkY2MwHhcNMjYwMTAxMjIxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNjViMDVjODM3NzA4MTk3OTk1NzljNjc4YzM3MjU4MWVmODAwM2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqskwmUCmftB2EXWVP1z5wT+M2a0A kM4DdzSLE0WjQAc77DnPRqlCTwFx5sFYlgdKcAWrhIfNiuS7hOhcSp/fNFt9aDuP cX7qoU3tdrpkMc6XuZX/fwpGldGkVhSffVXeAdLiHl6dEnXtIAilzIqghcvvd6ep Ujx92g+lTH91Bc9LzFoNS0liAdkjCr33FPVyQ9MSYMKVlITGjQT0bB18LXMYPfzY di6Ja5du70K9axLhEPZjX2DDqJnHl9+Eh8aOEAHY8vXhTqaE60K7XO7rmOavLcUF F7C6x3Ql6B+kQrn17epaGNDKM5/rfTn+WbiJgyndXg0BWlk9D+2k27zBwwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFMZbBcg3cIGXmVecZ4w3JYHvgAPFMB8GA1UdIwQY MBaAFNrDJjKqkVQlPG3NIzHprWkgtr3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnNNbU1xcVJWQ1U4YmMwak1lbXRhU0MydmN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi80OTQyNGEtYWE1Zi00YjlmLWE2Mjct MjQ2NTRlOTQxYzEyLzEveGxzRnlEZHdnWmVaVjV4bmpEY2xnZS1BQThVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi80OTQyNGEtYWE1Zi00YjlmLWE2MjctMjQ2NTRlOTQxYzEy LzEvMnNNbU1xcVJWQ1U4YmMwak1lbXRhU0MydmN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA1C45MA8E AgACMAkDBwQqEg/AAAAwDQYJKoZIhvcNAQELBQADggEBACtW+0+40LL785gqSx27 9y6NObRx+kx1ZW2Y0UzALKu8P6XSGE8ouInpjWOE20rglF4z0ICQSS0nTpcx6dNP XQSZGpyDLSVxsfgUFwqm5QeGWJcgJ3yrbqrRYfVbxdmPFdfWIGyY0aisgAY3yEjD RfMoDV5HcbNdQLOTujefy1iBKDlRR7ut2JnhNC/dQsUVn3TKHPDVIuEJtyc9pTfJ QwgcNAsmY9/s8vCF/ibQVXKbXJEtvA3ZLdZ7zGyRQNnze1v4LmSl87fx6Kf8y1fI 3dj8INhEzCeoN8I6nrcORnZ4GOPQwhQbpOZHuSvlcMgmPNgzWTP7o6kvtAhj89cG t9M= -----END CERTIFICATE-----Generated at Fri Jan 2 09:27:10 2026 by rpki-client