This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/BpTEWFuaVAmDD0gS8GtzltOvrDc.roa File: BpTEWFuaVAmDD0gS8GtzltOvrDc.roa (raw, json) Hash identifier: x9sMNPsZhw4zuQc28bgkmq0CPdL7ikw7lR8SsfIXz9c= Subject key identifier: 06:94:C4:58:5B:9A:54:09:83:0F:48:12:F0:6B:73:96:D3:AF:AC:37 Certificate issuer: /CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e Certificate serial: 019B7AC8A133F96855871628C90EA1CDC70A Authority key identifier: 4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/BpTEWFuaVAmDD0gS8GtzltOvrDc.roa Signing time: Thu 01 Jan 2026 18:18:47 +0000 ROA not before: Thu 01 Jan 2026 18:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42422 IP address blocks: 46.36.35.0/24 maxlen: 24 46.36.36.0/24 maxlen: 24 46.36.37.0/24 maxlen: 24 46.36.38.0/24 maxlen: 24 46.36.39.0/24 maxlen: 24 46.36.40.0/24 maxlen: 24 46.36.41.0/24 maxlen: 24 2a02:25b0:aaaa::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:a1:33:f9:68:55:87:16:28:c9:0e:a1:cd:c7:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e Validity Not Before: Jan 1 18:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0694c4585b9a5409830f4812f06b7396d3afac37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:15:99:1f:8b:a0:7a:3a:db:99:f9:7c:11:36: ef:51:c5:a8:34:03:dd:fe:b8:92:fb:97:48:e5:8d: 95:c9:7d:67:33:f2:19:7d:d9:c6:a3:83:f1:83:80: 09:b5:eb:11:29:b8:5d:83:78:9a:c4:c8:04:40:86: da:e2:26:74:f2:b9:23:6e:1a:9e:07:5b:17:94:69: e6:b8:91:18:e0:52:f8:35:03:d6:3d:71:10:1f:a7: 69:74:7f:68:aa:51:74:4f:97:0d:7d:bb:b2:d5:ee: 4f:dc:7f:56:55:87:5e:82:4f:bc:76:0d:6b:f5:64: 4a:bf:27:a3:cf:76:8a:2f:fb:f0:08:bc:97:79:b9: 10:1a:22:53:45:1c:f1:d0:33:99:de:fa:bc:2b:07: d7:16:a0:ce:a7:19:97:ec:df:67:19:0f:c4:a3:bb: 46:2b:dc:32:0e:4c:f1:c8:41:d2:c7:c4:f0:26:da: 61:04:aa:5d:b5:87:03:1f:36:fa:b2:2b:3d:f9:f0: e4:e9:06:5e:c2:36:a2:56:a1:14:b4:92:a9:9a:66: 42:c4:61:5e:c8:76:b0:9c:56:5c:e5:9d:04:ca:33: 2c:33:48:5c:42:5f:c7:37:04:89:be:fc:59:e5:a7: 9a:6f:7a:bb:85:22:16:65:b2:11:b1:3b:56:42:9f: 64:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:94:C4:58:5B:9A:54:09:83:0F:48:12:F0:6B:73:96:D3:AF:AC:37 X509v3 Authority Key Identifier: keyid:4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/BpTEWFuaVAmDD0gS8GtzltOvrDc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.36.35.0-46.36.41.255 IPv6: 2a02:25b0:aaaa::/48 Signature Algorithm: sha256WithRSAEncryption 45:a0:13:45:4d:af:b7:3b:1f:21:6d:24:3e:b8:bd:14:e7:07: 2f:89:8b:fd:07:3c:2f:bd:ce:29:09:05:a4:5f:5c:55:8d:f3: f5:0d:0c:f3:ce:33:f0:57:c7:cc:68:11:cd:3b:f7:3c:6b:b4: e6:fb:19:4b:28:0e:fe:47:62:e3:1d:be:51:31:ea:7f:75:b0: 09:fe:8d:0e:47:2c:53:d9:78:b6:b8:07:25:77:05:f9:a4:86: ae:dc:21:26:f3:03:fa:a4:cf:8d:29:52:2c:b3:72:92:3b:86: 65:45:43:6d:f6:f8:01:d4:88:6b:ee:f4:08:30:8d:bf:c4:85: 92:55:4d:c5:ae:72:c4:9c:dd:7b:4a:0a:85:e9:f4:84:5a:39: d0:09:b8:2e:9c:6b:73:49:88:fb:a5:6a:56:89:99:42:e0:5e: ca:94:31:8b:46:77:a3:3c:a1:bd:81:83:c5:ec:f6:88:8b:ee: 67:2c:db:f1:da:f7:de:88:e8:fb:40:cd:68:89:f5:76:2c:00: ec:c9:45:11:af:49:10:78:45:75:5d:40:9b:d5:19:15:4f:da: 96:a8:e8:68:d4:dd:f3:f5:93:f4:4f:d9:51:9c:76:f1:c9:f7: 3d:02:d0:ce:1f:98:8a:bd:e4:d5:da:fb:f3:01:d4:4f:fd:98: b7:5b:29:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt6yKEz+WhVhxYoyQ6hzccKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjOTg4YjkzYWI3YTI5OTlhMzI1NWVlYWU0ZTE4YWIyM2Iy ZTBmM2UwHhcNMjYwMTAxMTgxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNjk0YzQ1ODViOWE1NDA5ODMwZjQ4MTJmMDZiNzM5NmQzYWZhYzM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBWZH4ugejrbmfl8ETbvUcWoNAPd /riS+5dI5Y2VyX1nM/IZfdnGo4Pxg4AJtesRKbhdg3iaxMgEQIba4iZ08rkjbhqe B1sXlGnmuJEY4FL4NQPWPXEQH6dpdH9oqlF0T5cNfbuy1e5P3H9WVYdegk+8dg1r 9WRKvyejz3aKL/vwCLyXebkQGiJTRRzx0DOZ3vq8KwfXFqDOpxmX7N9nGQ/Eo7tG K9wyDkzxyEHSx8TwJtphBKpdtYcDHzb6sis9+fDk6QZewjaiVqEUtJKpmmZCxGFe yHawnFZc5Z0EyjMsM0hcQl/HNwSJvvxZ5aeab3q7hSIWZbIRsTtWQp9kSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAaUxFhbmlQJgw9IEvBrc5bTr6w3MB8GA1UdIwQY MBaAFEyYi5OreimZoyVe6uThirI7Lg8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEppTGs2dDZLWm1qSlY3cTVPR0tzanN1RHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80YzFmNTktMGMxMi00MTUzLWExNWMt NzE1ZjljZDYzMDg2LzEvQnBURVdGdWFWQW1ERDBnUzhHdHpsdE92ckRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC80YzFmNTktMGMxMi00MTUzLWExNWMtNzE1ZjljZDYzMDg2 LzEvVEppTGs2dDZLWm1qSlY3cTVPR0tzanN1RHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBAAuJCMD BAEuJCgwDwQCAAIwCQMHACoCJbCqqjANBgkqhkiG9w0BAQsFAAOCAQEARaATRU2v tzsfIW0kPri9FOcHL4mL/Qc8L73OKQkFpF9cVY3z9Q0M884z8FfHzGgRzTv3PGu0 5vsZSygO/kdi4x2+UTHqf3WwCf6NDkcsU9l4trgHJXcF+aSGrtwhJvMD+qTPjSlS LLNykjuGZUVDbfb4AdSIa+70CDCNv8SFklVNxa5yxJzde0oKhen0hFo50Am4Lpxr c0mI+6VqVomZQuBeypQxi0Z3ozyhvYGDxez2iIvuZyzb8dr33ojo+0DNaIn1diwA 7MlFEa9JEHhFdV1Am9UZFU/alqjoaNTd8/WT9E/ZUZx28cn3PQLQzh+Yir3k1dr7 8wHUT/2Yt1spmg== -----END CERTIFICATE-----Generated at Mon Jan 26 16:59:10 2026 by rpki-client