This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/E8Dq6b1_iT2pjSVqisC1G3r0_Sg.roa File: E8Dq6b1_iT2pjSVqisC1G3r0_Sg.roa (raw, json) Hash identifier: aZesuL1kEe2OW5HrJCbkkpREyKjdhx6K40wSnDcwXlI= Subject key identifier: 13:C0:EA:E9:BD:7F:89:3D:A9:8D:25:6A:8A:C0:B5:1B:7A:F4:FD:28 Certificate issuer: /CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0 Certificate serial: 019B7C133103AC8F96491E8E3091C07486BB Authority key identifier: C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/E8Dq6b1_iT2pjSVqisC1G3r0_Sg.roa Signing time: Fri 02 Jan 2026 00:19:51 +0000 ROA not before: Fri 02 Jan 2026 00:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44668 IP address blocks: 46.33.44.0/22 maxlen: 22 46.33.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:31:03:ac:8f:96:49:1e:8e:30:91:c0:74:86:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0 Validity Not Before: Jan 2 00:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=13c0eae9bd7f893da98d256a8ac0b51b7af4fd28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:40:36:33:83:4a:5d:00:93:7c:1d:74:22:8c: 2d:9a:12:c2:d3:89:e3:2b:79:7b:0e:38:f5:f3:70: a9:3d:09:21:d5:46:2b:d5:87:7a:25:bf:66:ab:b7: f1:22:1d:7e:54:56:a4:52:03:a5:dc:5a:f0:5c:0a: a2:4c:38:a8:7d:60:c1:79:3f:33:d9:d3:4c:71:70: 05:74:12:99:2a:3b:4b:ad:f7:c6:4e:28:74:4b:38: e0:24:e7:20:c3:c6:66:a6:78:71:20:a0:57:d5:5f: 05:4a:44:28:0e:fa:b8:b1:33:b0:e7:6b:5b:4c:dc: b7:f1:23:65:d5:c7:15:46:cb:cc:35:64:d0:55:90: 96:6e:ce:98:5c:b9:d2:21:b5:a2:9d:a6:ee:b7:de: 8b:db:30:ed:63:a7:b0:a7:05:cf:59:b9:74:39:82: b4:a7:9e:85:e3:f4:56:93:b3:15:77:6d:ac:9c:95: 17:92:55:77:1b:b5:94:2a:46:2d:48:41:a8:a5:67: f6:00:bf:e7:c3:64:ac:13:5a:50:d4:76:8e:de:03: 37:16:ca:c7:77:5b:b4:66:c0:bb:98:ee:64:65:ee: 2f:e1:b2:12:33:1b:b3:0d:e9:19:38:fb:a4:f2:6f: 60:58:66:1a:e6:de:1f:46:27:82:be:5a:1e:c7:18: 15:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C0:EA:E9:BD:7F:89:3D:A9:8D:25:6A:8A:C0:B5:1B:7A:F4:FD:28 X509v3 Authority Key Identifier: keyid:C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/E8Dq6b1_iT2pjSVqisC1G3r0_Sg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.33.44.0/22 Signature Algorithm: sha256WithRSAEncryption 6f:a6:8b:79:fb:06:c4:cc:8a:ba:8c:02:df:02:81:d7:5d:13: fe:1f:fd:22:b2:dd:83:0b:88:6b:04:4b:ae:4b:08:50:0c:1b: e6:d1:c2:bd:5a:aa:cf:5e:a5:f3:8a:97:c7:b6:b1:05:da:54: af:e4:28:14:01:25:ee:12:53:9a:57:11:29:27:c9:b8:24:89: 3c:a0:27:5e:d5:fd:16:e9:b5:07:e7:df:fd:2c:ea:90:94:6c: a3:74:88:8c:c9:84:64:57:87:cf:6b:b0:47:c3:de:d9:cc:cf: e8:41:4e:d2:56:8c:38:84:20:6f:2e:95:b2:62:a3:1b:6c:3e: 94:4b:32:64:89:41:09:b2:cb:03:f8:c9:48:53:8b:fc:7c:b0: 13:52:56:9d:68:ad:df:d7:60:c1:5c:d7:47:42:3a:80:f2:4f: e3:ab:e6:34:a2:d9:37:ff:0d:2c:88:4c:f4:63:45:df:a5:72: 85:b1:ed:03:06:2a:00:b0:73:c7:9f:9a:9e:eb:35:75:31:4e: 56:97:46:03:8a:36:9d:cf:d8:4c:53:e7:bc:1b:cf:8f:d3:19: 04:e2:c5:0a:93:03:65:da:c1:0b:86:db:e2:d1:ef:cc:55:8b: eb:c1:2c:24:d6:6b:ba:74:b7:26:4c:d3:5b:c3:92:6b:e1:fa: ce:3a:32:46 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EzEDrI+WSR6OMJHAdIa7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYmY4ZjNlNjA5MDcyODg5ZTc0ZGQwZmI0ZTI3ZjliYWM0 N2IzYjAwHhcNMjYwMTAyMDAxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxM2MwZWFlOWJkN2Y4OTNkYTk4ZDI1NmE4YWMwYjUxYjdhZjRmZDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUA2M4NKXQCTfB10IowtmhLC04nj K3l7Djj183CpPQkh1UYr1Yd6Jb9mq7fxIh1+VFakUgOl3FrwXAqiTDiofWDBeT8z 2dNMcXAFdBKZKjtLrffGTih0SzjgJOcgw8ZmpnhxIKBX1V8FSkQoDvq4sTOw52tb TNy38SNl1ccVRsvMNWTQVZCWbs6YXLnSIbWinabut96L2zDtY6ewpwXPWbl0OYK0 p56F4/RWk7MVd22snJUXklV3G7WUKkYtSEGopWf2AL/nw2SsE1pQ1HaO3gM3FsrH d1u0ZsC7mO5kZe4v4bISMxuzDekZOPuk8m9gWGYa5t4fRieCvloexxgVDQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFBPA6um9f4k9qY0laorAtRt69P0oMB8GA1UdIwQY MBaAFMG/jz5gkHKInnTdD7Tif5usR7OwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2ItUFBtQ1Fjb2llZE4wUHRPSl9tNnhIczdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9hMWM2YzAtZTc1NC00NzllLTg1MWQt MGQwZGEwZDEwNDMyLzEvRThEcTZiMV9pVDJwalNWcWlzQzFHM3IwX1NnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9hMWM2YzAtZTc1NC00NzllLTg1MWQtMGQwZGEwZDEwNDMy LzEvd2ItUFBtQ1Fjb2llZE4wUHRPSl9tNnhIczdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLiEsMA0G CSqGSIb3DQEBCwUAA4IBAQBvpot5+wbEzIq6jALfAoHXXRP+H/0ist2DC4hrBEuu SwhQDBvm0cK9WqrPXqXzipfHtrEF2lSv5CgUASXuElOaVxEpJ8m4JIk8oCde1f0W 6bUH59/9LOqQlGyjdIiMyYRkV4fPa7BHw97ZzM/oQU7SVow4hCBvLpWyYqMbbD6U SzJkiUEJsssD+MlIU4v8fLATUladaK3f12DBXNdHQjqA8k/jq+Y0otk3/w0siEz0 Y0XfpXKFse0DBioAsHPHn5qe6zV1MU5Wl0YDijadz9hMU+e8G8+P0xkE4sUKkwNl 2sELhtvi0e/MVYvrwSwk1mu6dLcmTNNbw5Jr4frOOjJG -----END CERTIFICATE-----Generated at Mon Jan 26 00:25:00 2026 by rpki-client