This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/oBn8NIdRfMZZpm_iynqTQu6nc38.roa File: oBn8NIdRfMZZpm_iynqTQu6nc38.roa (raw, json) Hash identifier: D3Bz4QySZ6wj7xhT4hW/fF4crmIqCiPNU7hJ9/zZtR4= Subject key identifier: A0:19:FC:34:87:51:7C:C6:59:A6:6F:E2:CA:7A:93:42:EE:A7:73:7F Certificate issuer: /CN=b62d4cec783305923e3497ed884f1c445b4e78fb Certificate serial: 019B78A35A4F8BE1B8B277E285AE03613514 Authority key identifier: B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/oBn8NIdRfMZZpm_iynqTQu6nc38.roa Signing time: Thu 01 Jan 2026 08:18:49 +0000 ROA not before: Thu 01 Jan 2026 08:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47802 IP address blocks: 46.253.0.0/24 maxlen: 24 46.253.1.0/24 maxlen: 24 193.43.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 08:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a3:5a:4f:8b:e1:b8:b2:77:e2:85:ae:03:61:35:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b62d4cec783305923e3497ed884f1c445b4e78fb Validity Not Before: Jan 1 08:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a019fc3487517cc659a66fe2ca7a9342eea7737f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c9:ec:d5:3f:15:74:6b:ff:a8:c7:76:ee:95: 38:34:2a:b8:0e:48:2b:ae:bf:bb:1c:28:24:d8:71: 37:be:4f:c8:15:92:52:f1:82:b4:c9:a2:a3:da:73: bc:09:6e:24:ef:98:fc:ba:cc:76:62:f4:bb:8e:be: 4a:96:f7:ee:a8:df:61:5e:a5:17:15:59:6b:68:04: 77:ec:98:99:b0:a9:b7:6c:fe:4d:96:37:41:0e:18: ec:99:9c:e4:94:c2:66:df:02:20:8e:4a:94:ed:da: 1d:4a:9c:be:2d:b6:64:58:3e:c6:b3:dd:db:ab:20: 2a:0b:8c:0b:cf:a6:09:98:39:e2:82:e0:ef:b8:91: 4a:7d:a5:79:7e:76:05:32:3e:18:2f:09:e8:a1:00: 23:4b:f3:7e:50:46:ef:df:a7:43:77:ef:83:44:c7: 40:b3:a2:21:3e:6f:e3:7e:a0:fb:b2:ac:24:22:80: 22:54:23:f4:3a:ff:44:cc:10:2e:e4:b3:c3:0c:57: ab:76:ca:27:62:07:f7:e7:37:e5:04:ad:90:8f:b8: e5:de:13:eb:73:61:b3:e7:9b:13:04:10:a5:3e:f1: 97:5e:0d:e7:3f:14:0c:9f:a1:30:e2:98:91:72:a2: b9:5a:1e:b3:3f:b8:0b:75:1e:c9:f1:6a:ff:33:2c: 86:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:19:FC:34:87:51:7C:C6:59:A6:6F:E2:CA:7A:93:42:EE:A7:73:7F X509v3 Authority Key Identifier: keyid:B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/oBn8NIdRfMZZpm_iynqTQu6nc38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.253.0.0/23 193.43.105.0/24 Signature Algorithm: sha256WithRSAEncryption 72:89:92:3a:e2:14:0a:fd:07:39:ce:46:66:60:5f:c8:60:50: 27:80:c4:c8:16:2f:bf:c0:bf:9a:f8:06:9f:f9:4b:02:0d:d5: d1:d5:95:07:0c:59:cf:8c:1b:64:5b:cb:57:bc:b4:25:dd:dd: 61:0a:b2:d0:20:3d:0c:5d:e7:ee:59:c2:07:9d:36:47:c7:54: d3:75:e1:30:9a:69:b4:76:bc:1f:95:04:ad:55:70:7e:2a:df: bf:1c:10:9a:24:e1:8e:73:4b:6b:40:7d:82:f0:ef:1d:7e:c4: 6a:88:e1:5a:de:70:47:dd:3e:a6:72:4c:94:51:5c:d2:43:2c: a4:7d:64:73:68:b4:92:47:ec:56:48:85:b4:47:5d:65:09:6c: c0:06:c4:59:46:de:20:da:1b:eb:9a:df:ca:59:90:7b:a7:3d: 9f:b2:a9:05:b4:90:5d:9b:2b:a3:77:7a:36:3e:2a:29:70:91: 71:7c:2e:84:ec:37:d5:62:90:a5:bc:c0:7d:9f:65:03:be:97: 16:64:d9:4c:6a:53:8c:6f:50:83:0c:2b:e4:34:36:1e:49:b3: a6:1e:7e:d4:f7:b5:fd:02:a3:f2:a9:57:b7:a1:42:99:be:18: 00:64:63:8d:9a:fa:46:2f:e5:59:35:fc:ef:fd:e9:20:f2:19: 6e:75:2d:f3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt4o1pPi+G4snfiha4DYTUUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2MmQ0Y2VjNzgzMzA1OTIzZTM0OTdlZDg4NGYxYzQ0NWI0 ZTc4ZmIwHhcNMjYwMTAxMDgxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMDE5ZmMzNDg3NTE3Y2M2NTlhNjZmZTJjYTdhOTM0MmVlYTc3MzdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8ns1T8VdGv/qMd27pU4NCq4Dkgr rr+7HCgk2HE3vk/IFZJS8YK0yaKj2nO8CW4k75j8usx2YvS7jr5KlvfuqN9hXqUX FVlraAR37JiZsKm3bP5NljdBDhjsmZzklMJm3wIgjkqU7dodSpy+LbZkWD7Gs93b qyAqC4wLz6YJmDniguDvuJFKfaV5fnYFMj4YLwnooQAjS/N+UEbv36dDd++DRMdA s6IhPm/jfqD7sqwkIoAiVCP0Ov9EzBAu5LPDDFerdsonYgf35zflBK2Qj7jl3hPr c2Gz55sTBBClPvGXXg3nPxQMn6Ew4piRcqK5Wh6zP7gLdR7J8Wr/MyyGlQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKAZ/DSHUXzGWaZv4sp6k0Lup3N/MB8GA1UdIwQY MBaAFLYtTOx4MwWSPjSX7YhPHERbTnj7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdGkxTTdIZ3pCWkktTkpmdGlFOGNSRnRPZVBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mMWIzZGEtYmViZi00NGIwLWFiMTIt ZDMyZTI3ZmI3ZTU5LzEvb0JuOE5JZFJmTVpacG1faXlucVRRdTZuYzM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9mMWIzZGEtYmViZi00NGIwLWFiMTItZDMyZTI3ZmI3ZTU5 LzEvdGkxTTdIZ3pCWkktTkpmdGlFOGNSRnRPZVBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLv0AAwQA wStpMA0GCSqGSIb3DQEBCwUAA4IBAQByiZI64hQK/Qc5zkZmYF/IYFAngMTIFi+/ wL+a+Aaf+UsCDdXR1ZUHDFnPjBtkW8tXvLQl3d1hCrLQID0MXefuWcIHnTZHx1TT deEwmmm0drwflQStVXB+Kt+/HBCaJOGOc0trQH2C8O8dfsRqiOFa3nBH3T6mckyU UVzSQyykfWRzaLSSR+xWSIW0R11lCWzABsRZRt4g2hvrmt/KWZB7pz2fsqkFtJBd myujd3o2PiopcJFxfC6E7DfVYpClvMB9n2UDvpcWZNlMalOMb1CDDCvkNDYeSbOm Hn7U97X9AqPyqVe3oUKZvhgAZGONmvpGL+VZNfzv/ekg8hludS3z -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:19 2026 by rpki-client