This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/LyZiTz1VH8kyF5AmjQaEjp0W6sE.roa File: LyZiTz1VH8kyF5AmjQaEjp0W6sE.roa (raw, json) Hash identifier: AelnLJhdvd0PiZ/B/iw8zmXPaSYCUu42XLVsyGcWPKo= Subject key identifier: 2F:26:62:4F:3D:55:1F:C9:32:17:90:26:8D:06:84:8E:9D:16:EA:C1 Certificate issuer: /CN=ff8dd5fe4179e8bda28532561919f6d07877c63d Certificate serial: 019B7BA4C803781B3D5C01DC6274F267991F Authority key identifier: FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/LyZiTz1VH8kyF5AmjQaEjp0W6sE.roa Signing time: Thu 01 Jan 2026 22:19:15 +0000 ROA not before: Thu 01 Jan 2026 22:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204957 IP address blocks: 46.149.140.0/24 maxlen: 24 46.149.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.crl rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:c8:03:78:1b:3d:5c:01:dc:62:74:f2:67:99:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff8dd5fe4179e8bda28532561919f6d07877c63d Validity Not Before: Jan 1 22:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2f26624f3d551fc9321790268d06848e9d16eac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ce:2f:98:a6:f4:55:28:2c:6a:54:5a:91:e4: 47:a7:e5:0f:e9:dc:34:a2:0e:58:34:43:ff:c5:d3: 4f:fe:56:b7:4e:67:8b:ee:c8:f8:bb:69:0f:30:9d: b4:78:1b:c8:5c:cb:f0:60:c0:2e:ce:11:67:da:bd: 0b:26:04:3b:50:e8:a6:86:25:0b:71:e4:d8:7f:53: db:0e:95:a1:75:5a:c0:af:91:70:02:07:f2:b0:94: 56:94:60:dd:7d:ab:5e:fc:23:5f:84:d9:45:66:ae: 3f:f9:e6:88:4c:5d:d1:72:b7:69:ad:a4:68:e6:10: f3:68:37:9b:cc:7b:5c:64:2a:2a:fb:75:78:7f:0a: 44:76:15:8b:60:45:6e:11:03:dd:fb:93:1a:b2:b1: df:42:2b:ad:c5:57:8c:c4:77:85:7e:cc:91:69:3c: 06:68:ff:a7:2d:2c:97:b6:24:0e:d3:f1:5d:ee:c4: 5d:fe:05:83:5d:96:04:f3:44:19:29:d7:20:bb:51: 51:d4:ca:d9:45:e3:c1:1e:b7:db:85:1b:4f:a6:55: 63:3a:23:90:4a:97:34:52:07:af:4e:db:e2:ca:52: 7e:da:31:94:f1:0a:dd:7c:c3:d5:9e:f5:8c:3f:f8: 00:5f:f3:d3:8c:d4:85:77:e2:c6:e8:a2:ef:6b:35: 62:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:26:62:4F:3D:55:1F:C9:32:17:90:26:8D:06:84:8E:9D:16:EA:C1 X509v3 Authority Key Identifier: keyid:FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/LyZiTz1VH8kyF5AmjQaEjp0W6sE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.149.140.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:79:e8:85:f6:5e:5a:ad:c6:3f:bb:20:bf:9c:25:7a:54:38: 41:63:b4:01:67:38:25:5e:74:e8:fe:7c:f2:2f:6e:4f:17:22: ec:f3:da:88:69:b4:16:c4:6b:71:9b:70:5d:1b:5b:5c:ef:0c: cd:a1:70:2d:60:e9:5a:36:1e:35:41:3b:4d:17:49:4d:fe:ab: 8a:8f:64:55:1a:60:c9:ef:7a:a6:86:da:29:a9:24:0d:43:d9: ac:6d:4f:a9:3b:ff:e6:42:06:1f:d7:83:c1:06:7e:3d:c9:d5: 7d:28:94:a1:fd:54:f3:8a:27:10:ae:3e:ab:db:54:88:be:d7: 2e:95:ff:19:91:38:99:ff:8d:c4:b9:23:72:ba:2f:36:c5:00: ad:c0:22:c1:73:dc:2a:5c:a0:3c:f7:9d:81:57:ca:13:d5:00: db:08:b2:5c:91:48:6f:d9:f8:30:ea:5e:45:d8:28:51:bf:fb: f3:c7:ba:f4:4c:90:23:85:64:c5:9f:02:b5:24:ea:2a:b3:51: a6:f8:ba:8b:79:f2:42:12:1e:59:7c:e5:e2:12:82:cc:04:9e: 97:21:6a:75:9a:47:fa:08:50:38:fa:01:af:65:a2:d4:3c:32: 0a:42:48:05:a6:f7:8e:c3:56:8c:95:3b:a3:00:18:08:f6:b5: 18:85:22:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pMgDeBs9XAHcYnTyZ5kfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmOGRkNWZlNDE3OWU4YmRhMjg1MzI1NjE5MTlmNmQwNzg3 N2M2M2QwHhcNMjYwMTAxMjIxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZjI2NjI0ZjNkNTUxZmM5MzIxNzkwMjY4ZDA2ODQ4ZTlkMTZlYWMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuc4vmKb0VSgsalRakeRHp+UP6dw0 og5YNEP/xdNP/la3TmeL7sj4u2kPMJ20eBvIXMvwYMAuzhFn2r0LJgQ7UOimhiUL ceTYf1PbDpWhdVrAr5FwAgfysJRWlGDdfate/CNfhNlFZq4/+eaITF3RcrdpraRo 5hDzaDebzHtcZCoq+3V4fwpEdhWLYEVuEQPd+5MasrHfQiutxVeMxHeFfsyRaTwG aP+nLSyXtiQO0/Fd7sRd/gWDXZYE80QZKdcgu1FR1MrZRePBHrfbhRtPplVjOiOQ Spc0UgevTtviylJ+2jGU8QrdfMPVnvWMP/gAX/PTjNSFd+LG6KLvazVimQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFC8mYk89VR/JMheQJo0GhI6dFurBMB8GA1UdIwQY MBaAFP+N1f5Beei9ooUyVhkZ9tB4d8Y9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzQzVl9rRjU2TDJpaFRKV0dSbjIwSGgzeGowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80YjJmODgtM2UyMC00YWZhLWI3NTQt MDZhNDA0NDM1ZTUwLzEvTHlaaVR6MVZIOGt5RjVBbWpRYUVqcDBXNnNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS80YjJmODgtM2UyMC00YWZhLWI3NTQtMDZhNDA0NDM1ZTUw LzEvXzQzVl9rRjU2TDJpaFRKV0dSbjIwSGgzeGowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLpWMMA0G CSqGSIb3DQEBCwUAA4IBAQBfeeiF9l5arcY/uyC/nCV6VDhBY7QBZzglXnTo/nzy L25PFyLs89qIabQWxGtxm3BdG1tc7wzNoXAtYOlaNh41QTtNF0lN/quKj2RVGmDJ 73qmhtopqSQNQ9msbU+pO//mQgYf14PBBn49ydV9KJSh/VTziicQrj6r21SIvtcu lf8ZkTiZ/43EuSNyui82xQCtwCLBc9wqXKA8952BV8oT1QDbCLJckUhv2fgw6l5F 2ChRv/vzx7r0TJAjhWTFnwK1JOoqs1Gm+LqLefJCEh5ZfOXiEoLMBJ6XIWp1mkf6 CFA4+gGvZaLUPDIKQkgFpveOw1aMlTujABgI9rUYhSKE -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:36 2026 by rpki-client