This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/F6OndgRkQC8kiB5KGEp75U2oFKw.roa File: F6OndgRkQC8kiB5KGEp75U2oFKw.roa (raw, json) Hash identifier: 8q6QdebdfzXCc07NxKq2sWBztx+KrT6hlkxmMg3ZIuM= Subject key identifier: 17:A3:A7:76:04:64:40:2F:24:88:1E:4A:18:4A:7B:E5:4D:A8:14:AC Certificate issuer: /CN=7a362d783284659dc04eedaf8b8a6fe6e930bd27 Certificate serial: 019B797F25CF8DE56AE18BA6E1E6CECBBE53 Authority key identifier: 7A:36:2D:78:32:84:65:9D:C0:4E:ED:AF:8B:8A:6F:E6:E9:30:BD:27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejYteDKEZZ3ATu2vi4pv5ukwvSc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/F6OndgRkQC8kiB5KGEp75U2oFKw.roa Signing time: Thu 01 Jan 2026 12:18:54 +0000 ROA not before: Thu 01 Jan 2026 12:18:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31727 IP address blocks: 46.175.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.crl rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.mft rsync://rpki.ripe.net/repository/DEFAULT/ejYteDKEZZ3ATu2vi4pv5ukwvSc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 21:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7f:25:cf:8d:e5:6a:e1:8b:a6:e1:e6:ce:cb:be:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a362d783284659dc04eedaf8b8a6fe6e930bd27 Validity Not Before: Jan 1 12:18:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17a3a7760464402f24881e4a184a7be54da814ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:88:ce:9f:8d:3c:77:e3:39:c6:4a:50:5b:b4: 89:17:b6:8e:2e:d6:d4:cd:31:67:a8:b7:9f:c0:ae: f8:73:5a:64:29:90:33:c5:ff:85:5d:c3:74:2d:d6: 9b:b6:93:4f:0c:73:1f:31:f5:02:4b:bb:20:21:f9: 47:75:75:60:72:4e:59:02:4f:dd:41:4c:d9:9c:d7: 56:c2:79:5f:ae:e8:af:84:f5:28:02:e7:11:e8:df: b0:96:e9:ee:b6:37:96:30:7e:48:16:4c:a1:1f:54: 1b:23:9e:f0:f4:b4:5c:9b:3c:52:39:0f:1a:1a:0b: e2:e4:18:97:51:30:0c:99:53:89:b7:6f:60:fa:75: 28:82:47:46:81:92:1a:33:6e:f9:1a:d8:2d:cb:dd: 19:a1:86:ce:e8:ed:09:c9:f6:73:67:9a:b4:15:80: 41:de:a2:3c:d1:82:1b:64:0b:56:ea:42:f1:cf:72: aa:a2:f9:4a:b3:92:12:34:a5:5f:22:9c:de:fc:44: c4:18:f7:1c:52:6d:da:6a:d4:91:67:13:e0:b2:2d: e7:66:fb:51:9a:e8:98:df:5f:d7:24:6b:79:55:c5: ab:09:1a:ff:20:8f:76:ef:5d:8e:3c:eb:bd:05:37: 7f:12:c6:e8:e5:14:26:64:e2:85:3f:89:5e:dd:9b: 01:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:A3:A7:76:04:64:40:2F:24:88:1E:4A:18:4A:7B:E5:4D:A8:14:AC X509v3 Authority Key Identifier: keyid:7A:36:2D:78:32:84:65:9D:C0:4E:ED:AF:8B:8A:6F:E6:E9:30:BD:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejYteDKEZZ3ATu2vi4pv5ukwvSc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/F6OndgRkQC8kiB5KGEp75U2oFKw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/be68b9-9b62-4b3e-a6a4-865031fa0bf7/1/ejYteDKEZZ3ATu2vi4pv5ukwvSc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.175.50.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:33:5a:61:b1:f4:76:3a:9c:8d:cf:3e:38:4f:b5:db:2d:d2: a0:b3:b1:5b:a5:3c:b7:93:90:9a:9d:d2:08:72:09:2d:67:05: ba:93:ea:0f:fc:8d:65:a4:5a:d0:be:10:57:70:6d:58:c5:fc: 05:3e:5c:c3:df:b3:07:9d:45:56:63:52:1a:62:a7:a1:ad:19: 16:df:37:35:27:d1:97:2c:73:98:4b:d4:89:e2:51:54:1a:21: 0c:b1:f1:b1:63:4e:8f:fa:2d:8c:a7:df:76:5c:67:11:4a:f1: 2c:a9:18:01:d9:0b:4b:7b:83:fa:45:8b:65:50:3b:ad:a9:fa: 5c:40:85:3d:1d:32:df:61:ea:84:a3:fe:83:06:14:da:55:d9: 13:01:72:d9:d5:33:74:21:cf:7d:5d:a0:02:82:7f:23:97:6e: 93:3d:8c:a7:bf:de:f3:e5:e0:d0:b0:76:f0:67:8f:61:15:c9: 06:19:33:f8:3e:39:86:42:75:8c:7b:72:93:ef:23:db:20:6e: 80:65:03:2e:48:8a:53:15:00:6d:f5:7c:96:d0:5d:34:9f:45: b7:e9:1c:f0:82:bb:bf:98:c4:6f:14:59:f7:83:d3:ac:f0:22: dd:2c:87:9b:3b:6d:5e:ac:05:a4:2d:c1:d0:8a:0c:5d:de:6a: 41:24:c1:de -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fyXPjeVq4Yum4ebOy75TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdhMzYyZDc4MzI4NDY1OWRjMDRlZWRhZjhiOGE2ZmU2ZTkz MGJkMjcwHhcNMjYwMTAxMTIxODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2EzYTc3NjA0NjQ0MDJmMjQ4ODFlNGExODRhN2JlNTRkYTgxNGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4jOn408d+M5xkpQW7SJF7aOLtbU zTFnqLefwK74c1pkKZAzxf+FXcN0LdabtpNPDHMfMfUCS7sgIflHdXVgck5ZAk/d QUzZnNdWwnlfruivhPUoAucR6N+wlunutjeWMH5IFkyhH1QbI57w9LRcmzxSOQ8a Ggvi5BiXUTAMmVOJt29g+nUogkdGgZIaM275Gtgty90ZoYbO6O0JyfZzZ5q0FYBB 3qI80YIbZAtW6kLxz3KqovlKs5ISNKVfIpze/ETEGPccUm3aatSRZxPgsi3nZvtR muiY31/XJGt5VcWrCRr/II92712OPOu9BTd/Esbo5RQmZOKFP4le3ZsB9QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBejp3YEZEAvJIgeShhKe+VNqBSsMB8GA1UdIwQY MBaAFHo2LXgyhGWdwE7tr4uKb+bpML0nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZWpZdGVES0VaWjNBVHUydmk0cHY1dWt3dlNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9iZTY4YjktOWI2Mi00YjNlLWE2YTQt ODY1MDMxZmEwYmY3LzEvRjZPbmRnUmtRQzhraUI1S0dFcDc1VTJvRkt3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi9iZTY4YjktOWI2Mi00YjNlLWE2YTQtODY1MDMxZmEwYmY3 LzEvZWpZdGVES0VaWjNBVHUydmk0cHY1dWt3dlNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALq8yMA0G CSqGSIb3DQEBCwUAA4IBAQANM1phsfR2OpyNzz44T7XbLdKgs7FbpTy3k5CandII cgktZwW6k+oP/I1lpFrQvhBXcG1YxfwFPlzD37MHnUVWY1IaYqehrRkW3zc1J9GX LHOYS9SJ4lFUGiEMsfGxY06P+i2Mp992XGcRSvEsqRgB2QtLe4P6RYtlUDutqfpc QIU9HTLfYeqEo/6DBhTaVdkTAXLZ1TN0Ic99XaACgn8jl26TPYynv97z5eDQsHbw Z49hFckGGTP4PjmGQnWMe3KT7yPbIG6AZQMuSIpTFQBt9XyW0F00n0W36Rzwgru/ mMRvFFn3g9Os8CLdLIebO21erAWkLcHQigxd3mpBJMHe -----END CERTIFICATE-----Generated at Mon Jan 26 06:19:38 2026 by rpki-client