This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/7PbDe_nYhvXqWsMtgoEs1cO6pGs.roa File: 7PbDe_nYhvXqWsMtgoEs1cO6pGs.roa (raw, json) Hash identifier: WcP/5CSeIlCcfDT5pjIYJTPyHW6MDY4O9J5J3oJHDm0= Subject key identifier: EC:F6:C3:7B:F9:D8:86:F5:EA:5A:C3:2D:82:81:2C:D5:C3:BA:A4:6B Certificate issuer: /CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0 Certificate serial: 019B7DCB44F030CBD564055E8CE016685528 Authority key identifier: BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/7PbDe_nYhvXqWsMtgoEs1cO6pGs.roa Signing time: Fri 02 Jan 2026 08:20:31 +0000 ROA not before: Fri 02 Jan 2026 08:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 53856 IP address blocks: 46.173.64.0/22 maxlen: 22 46.173.68.0/22 maxlen: 22 46.173.72.0/22 maxlen: 22 46.173.76.0/22 maxlen: 22 46.173.80.0/22 maxlen: 22 46.173.84.0/22 maxlen: 22 46.173.88.0/22 maxlen: 22 46.173.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.mft rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:44:f0:30:cb:d5:64:05:5e:8c:e0:16:68:55:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdac8f33db4a4a0175d8f8ea7ca747507e7e81e0 Validity Not Before: Jan 2 08:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ecf6c37bf9d886f5ea5ac32d82812cd5c3baa46b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:d1:db:84:c8:d6:26:cf:a9:98:ff:85:86:f5: 40:e8:39:43:b2:e9:89:9e:28:d0:9e:6d:82:37:b6: ab:a2:9b:02:3a:df:45:95:7c:7f:21:5c:93:00:67: 1f:ad:f3:a4:bd:6a:86:a8:71:7e:68:2a:bc:80:86: cd:9a:0e:0b:aa:ef:fd:cf:e8:04:a7:bd:71:52:b1: 52:ea:d2:f5:dc:86:24:cb:24:8f:32:7d:41:af:4b: 89:71:7f:03:0f:f3:8a:2f:4c:b5:57:1b:f9:4e:2f: 9b:57:f9:69:d1:c6:fe:7a:d6:9a:ac:6a:f4:15:1e: 4b:6f:19:8d:23:c5:44:6e:3a:aa:69:1a:6c:c6:60: ad:ca:c7:41:c1:fa:ac:68:0e:be:7f:e0:1b:45:b8: 43:23:1f:09:f0:85:d2:c1:da:e9:cc:12:76:6c:07: 30:f2:55:ec:9b:c6:4d:fb:54:8a:66:d8:81:9f:5f: 56:33:47:eb:e2:7b:d5:76:d4:37:e8:a0:3f:fd:17: 26:31:5e:91:24:6a:1c:36:0e:f6:52:92:20:12:ac: 37:e3:b1:96:49:3e:fd:92:1f:1e:83:ba:15:06:9b: 3b:b3:e7:13:3e:84:6c:bb:97:cb:9c:59:89:05:a3: 0f:7f:6b:28:16:00:d0:fd:54:fd:99:bc:99:8b:b4: 3f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:F6:C3:7B:F9:D8:86:F5:EA:5A:C3:2D:82:81:2C:D5:C3:BA:A4:6B X509v3 Authority Key Identifier: keyid:BD:AC:8F:33:DB:4A:4A:01:75:D8:F8:EA:7C:A7:47:50:7E:7E:81:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vayPM9tKSgF12PjqfKdHUH5-geA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/7PbDe_nYhvXqWsMtgoEs1cO6pGs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2e93fb-49b1-4b39-b252-250baf78e30e/1/vayPM9tKSgF12PjqfKdHUH5-geA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.173.64.0/19 Signature Algorithm: sha256WithRSAEncryption 4d:22:b2:92:21:f6:32:d9:f1:19:37:c9:10:a2:e8:ae:75:6f: 2b:7b:1d:9b:20:b8:2b:e0:37:25:ea:ce:58:93:ed:f1:ac:be: 04:00:5a:cb:ef:32:f2:50:a1:5e:a5:ac:12:a8:eb:d1:c3:75: 3f:18:cd:8f:77:a2:b0:31:38:17:48:6c:89:cd:c3:fe:d3:0b: 25:8f:47:76:32:28:e0:78:6b:33:38:12:1b:84:b9:86:e8:2b: 14:01:93:72:ec:70:0d:92:13:90:8c:d6:25:cd:35:00:85:88: 39:ad:21:ea:c0:2d:95:b1:df:54:ae:76:b0:b2:57:af:2f:ab: ab:4a:47:bc:ba:d6:34:be:9f:2d:f5:99:58:bb:6e:e4:23:97: 86:fb:ac:90:b2:f8:b6:cf:04:cf:8c:ac:0f:d8:9b:ea:6e:02: d2:18:d6:63:3d:2b:97:a5:16:78:c5:cd:7c:81:34:84:15:3f: 0c:a2:d9:6a:3c:b8:b5:68:cb:f1:47:ec:87:2e:65:9d:67:a4: a4:b3:bf:12:59:39:7b:64:df:68:63:d4:d4:cf:ea:5f:9e:69: 64:1a:10:b6:f9:8b:2a:18:7c:d7:01:24:75:d5:61:35:c6:ed: 34:01:22:66:54:2b:74:b4:ab:42:91:b5:dc:8e:6b:11:09:2d: 9b:ef:a7:26 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9y0TwMMvVZAVejOAWaFUoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJkYWM4ZjMzZGI0YTRhMDE3NWQ4ZjhlYTdjYTc0NzUwN2U3 ZTgxZTAwHhcNMjYwMTAyMDgyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlY2Y2YzM3YmY5ZDg4NmY1ZWE1YWMzMmQ4MjgxMmNkNWMzYmFhNDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dHbhMjWJs+pmP+FhvVA6DlDsumJ nijQnm2CN7aropsCOt9FlXx/IVyTAGcfrfOkvWqGqHF+aCq8gIbNmg4Lqu/9z+gE p71xUrFS6tL13IYkyySPMn1Br0uJcX8DD/OKL0y1Vxv5Ti+bV/lp0cb+etaarGr0 FR5LbxmNI8VEbjqqaRpsxmCtysdBwfqsaA6+f+AbRbhDIx8J8IXSwdrpzBJ2bAcw 8lXsm8ZN+1SKZtiBn19WM0fr4nvVdtQ36KA//RcmMV6RJGocNg72UpIgEqw347GW ST79kh8eg7oVBps7s+cTPoRsu5fLnFmJBaMPf2soFgDQ/VT9mbyZi7Q/SQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOz2w3v52Ib16lrDLYKBLNXDuqRrMB8GA1UdIwQY MBaAFL2sjzPbSkoBddj46nynR1B+foHgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdmF5UE05dEtTZ0YxMlBqcWZLZEhVSDUtZ2VBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yZTkzZmItNDliMS00YjM5LWIyNTIt MjUwYmFmNzhlMzBlLzEvN1BiRGVfbllodlhxV3NNdGdvRXMxY082cEdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8yZTkzZmItNDliMS00YjM5LWIyNTItMjUwYmFmNzhlMzBl LzEvdmF5UE05dEtTZ0YxMlBqcWZLZEhVSDUtZ2VBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLq1AMA0G CSqGSIb3DQEBCwUAA4IBAQBNIrKSIfYy2fEZN8kQouiudW8rex2bILgr4Dcl6s5Y k+3xrL4EAFrL7zLyUKFepawSqOvRw3U/GM2Pd6KwMTgXSGyJzcP+0wslj0d2Mijg eGszOBIbhLmG6CsUAZNy7HANkhOQjNYlzTUAhYg5rSHqwC2Vsd9UrnawslevL6ur Ske8utY0vp8t9ZlYu27kI5eG+6yQsvi2zwTPjKwP2JvqbgLSGNZjPSuXpRZ4xc18 gTSEFT8MotlqPLi1aMvxR+yHLmWdZ6Sks78SWTl7ZN9oY9TUz+pfnmlkGhC2+Ysq GHzXASR11WE1xu00ASJmVCt0tKtCkbXcjmsRCS2b76cm -----END CERTIFICATE-----Generated at Mon Jan 26 01:15:52 2026 by rpki-client