This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/_PydBs1sWRTvUV5cRaL2yTeOV00.roa File: _PydBs1sWRTvUV5cRaL2yTeOV00.roa (raw, json) Hash identifier: 5vv2v2s5YeTFWOeOLBaLL5q8cPQUZNamlvCzhmGZofc= Subject key identifier: FC:FC:9D:06:CD:6C:59:14:EF:51:5E:5C:45:A2:F6:C9:37:8E:57:4D Certificate issuer: /CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0 Certificate serial: 019B7C1332A08993DCE16F248911AF28EAF3 Authority key identifier: C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/_PydBs1sWRTvUV5cRaL2yTeOV00.roa Signing time: Fri 02 Jan 2026 00:19:51 +0000 ROA not before: Fri 02 Jan 2026 00:19:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207114 IP address blocks: 46.33.32.0/21 maxlen: 21 46.33.40.0/22 maxlen: 22 46.33.56.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.mft rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:32:a0:89:93:dc:e1:6f:24:89:11:af:28:ea:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1bf8f3e609072889e74dd0fb4e27f9bac47b3b0 Validity Not Before: Jan 2 00:19:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fcfc9d06cd6c5914ef515e5c45a2f6c9378e574d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:05:c7:5d:11:39:12:10:69:63:d6:55:34:60: c8:82:87:c0:4d:88:a8:19:d5:fd:44:dd:19:a0:0a: 53:ba:d1:4c:fe:30:79:b6:d4:20:c3:d5:63:f7:59: e2:7d:3e:02:ae:54:a5:3c:5c:c1:1b:cc:f6:00:1f: fb:83:1c:cb:60:00:76:dc:31:db:0b:da:69:1f:60: 40:f6:e1:7d:77:26:69:20:1e:15:e4:4d:1e:92:5f: 62:fc:ad:2e:e1:e9:13:54:05:5d:9b:a6:2b:f1:6c: 60:99:ed:89:c9:86:a4:bc:e1:12:e3:c4:5a:cd:a7: 74:8d:af:48:43:3c:30:39:e8:28:b3:8b:3a:54:3c: 30:ef:8d:a1:a4:1c:0f:16:1b:e0:45:9a:8f:ef:8d: 46:e6:ff:e9:cd:3b:86:59:3a:4a:87:df:c9:1e:9b: c4:bb:24:ba:49:f1:bf:e5:6a:73:d3:4a:8e:c9:35: d4:2c:f6:33:41:e0:8b:01:78:f0:c3:4e:60:86:30: a9:8a:13:15:b7:66:fe:41:9d:74:68:d2:30:97:0d: 64:5d:8c:9b:8f:cf:4f:62:ac:c3:44:35:ba:55:fc: 47:fe:e2:c2:b9:ac:e7:fd:41:a6:da:7f:5c:2d:ed: 40:21:cc:4f:9b:ff:73:61:20:71:a1:0f:fa:e6:8d: 66:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:FC:9D:06:CD:6C:59:14:EF:51:5E:5C:45:A2:F6:C9:37:8E:57:4D X509v3 Authority Key Identifier: keyid:C1:BF:8F:3E:60:90:72:88:9E:74:DD:0F:B4:E2:7F:9B:AC:47:B3:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wb-PPmCQcoiedN0PtOJ_m6xHs7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/_PydBs1sWRTvUV5cRaL2yTeOV00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/a1c6c0-e754-479e-851d-0d0da0d10432/1/wb-PPmCQcoiedN0PtOJ_m6xHs7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.33.32.0-46.33.43.255 46.33.56.0/22 Signature Algorithm: sha256WithRSAEncryption 15:9a:9b:37:e1:3e:49:35:cd:5e:ce:9f:4b:3d:4d:b9:d1:63: b4:8e:f1:09:5b:5d:ff:3c:ed:2c:bf:6e:55:e1:04:38:08:0d: 87:e2:fd:e8:cf:44:c4:90:44:d2:61:69:7e:be:ef:d0:9f:7a: 5b:98:09:7f:40:fd:65:03:15:9b:da:a1:e7:a9:6a:a7:8d:b9: e6:02:49:03:67:b3:bb:df:f2:eb:a0:fc:8e:ef:26:db:70:36: 9a:a2:16:bd:0e:98:86:5b:3d:ee:c7:a2:68:a7:09:0d:fb:d2: fc:ed:c3:2b:87:bf:5e:da:11:7e:8f:e0:5c:a7:c6:e3:a2:04: 4d:0f:bd:93:05:c4:f7:30:31:0a:90:be:35:b0:f3:5d:c1:c6: c2:06:15:64:9c:03:fd:4a:70:73:f2:56:ad:64:d5:b1:ea:8c: 8e:e3:5c:a8:d3:d4:f3:34:a1:52:87:81:94:f1:a2:44:71:78: c4:a0:0f:77:fe:0f:7d:22:ed:ce:29:5a:33:15:80:c2:01:75: f3:c6:8d:4b:51:21:ef:93:3e:58:64:ab:8c:b1:50:d4:ed:6b: 9e:1b:72:d2:44:56:81:73:77:37:df:67:d2:c6:47:00:2b:21: 46:03:84:0c:7d:52:fc:69:6f:5f:38:a9:fa:8a:23:25:b2:86: e5:15:ac:91 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt8EzKgiZPc4W8kiRGvKOrzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMxYmY4ZjNlNjA5MDcyODg5ZTc0ZGQwZmI0ZTI3ZjliYWM0 N2IzYjAwHhcNMjYwMTAyMDAxOTUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmY2ZjOWQwNmNkNmM1OTE0ZWY1MTVlNWM0NWEyZjZjOTM3OGU1NzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgXHXRE5EhBpY9ZVNGDIgofATYio GdX9RN0ZoApTutFM/jB5ttQgw9Vj91nifT4CrlSlPFzBG8z2AB/7gxzLYAB23DHb C9ppH2BA9uF9dyZpIB4V5E0ekl9i/K0u4ekTVAVdm6Yr8Wxgme2JyYakvOES48Ra zad0ja9IQzwwOegos4s6VDww742hpBwPFhvgRZqP741G5v/pzTuGWTpKh9/JHpvE uyS6SfG/5Wpz00qOyTXULPYzQeCLAXjww05ghjCpihMVt2b+QZ10aNIwlw1kXYyb j89PYqzDRDW6VfxH/uLCuazn/UGm2n9cLe1AIcxPm/9zYSBxoQ/65o1maQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFPz8nQbNbFkU71FeXEWi9sk3jldNMB8GA1UdIwQY MBaAFMG/jz5gkHKInnTdD7Tif5usR7OwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd2ItUFBtQ1Fjb2llZE4wUHRPSl9tNnhIczdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9hMWM2YzAtZTc1NC00NzllLTg1MWQt MGQwZGEwZDEwNDMyLzEvX1B5ZEJzMXNXUlR2VVY1Y1JhTDJ5VGVPVjAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9hMWM2YzAtZTc1NC00NzllLTg1MWQtMGQwZGEwZDEwNDMy LzEvd2ItUFBtQ1Fjb2llZE4wUHRPSl9tNnhIczdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAUuISAD BAIuISgDBAIuITgwDQYJKoZIhvcNAQELBQADggEBABWamzfhPkk1zV7On0s9TbnR Y7SO8QlbXf887Sy/blXhBDgIDYfi/ejPRMSQRNJhaX6+79CfeluYCX9A/WUDFZva oeepaqeNueYCSQNns7vf8uug/I7vJttwNpqiFr0OmIZbPe7HominCQ370vztwyuH v17aEX6P4FynxuOiBE0PvZMFxPcwMQqQvjWw813BxsIGFWScA/1KcHPyVq1k1bHq jI7jXKjT1PM0oVKHgZTxokRxeMSgD3f+D30i7c4pWjMVgMIBdfPGjUtRIe+TPlhk q4yxUNTta54bctJEVoFzdzffZ9LGRwArIUYDhAx9Uvxpb184qfqKIyWyhuUVrJE= -----END CERTIFICATE-----Generated at Mon Jan 26 00:24:34 2026 by rpki-client