This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/R6KX3i1jslogvVjCDoWFT1Rmjjk.roa File: R6KX3i1jslogvVjCDoWFT1Rmjjk.roa (raw, json) Hash identifier: 2Q0Js/nufktkQ84upEIwC+0JGgqAMTLNlh1Y/K35COU= Subject key identifier: 47:A2:97:DE:2D:63:B2:5A:20:BD:58:C2:0E:85:85:4F:54:66:8E:39 Certificate issuer: /CN=1cee91296c94992d151a232240e6cf3a176d2039 Certificate serial: 019B7CEE33D3B4E3151034821C9A35F9565E Authority key identifier: 1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/R6KX3i1jslogvVjCDoWFT1Rmjjk.roa Signing time: Fri 02 Jan 2026 04:19:04 +0000 ROA not before: Fri 02 Jan 2026 04:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43110 IP address blocks: 46.172.64.0/24 maxlen: 24 46.172.65.0/24 maxlen: 24 46.172.66.0/24 maxlen: 24 46.172.69.0/24 maxlen: 24 46.172.70.0/24 maxlen: 24 46.172.71.0/24 maxlen: 24 46.172.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:33:d3:b4:e3:15:10:34:82:1c:9a:35:f9:56:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cee91296c94992d151a232240e6cf3a176d2039 Validity Not Before: Jan 2 04:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47a297de2d63b25a20bd58c20e85854f54668e39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a2:eb:87:ec:a9:b7:70:ca:e8:95:13:0a:16: 7b:07:2c:18:54:c4:61:78:4f:1b:b5:b4:83:7f:52: f8:5d:ac:ca:5b:55:92:89:a1:57:8f:cc:fd:33:d9: f5:f1:06:cd:2c:fd:6a:75:8e:e3:4d:33:0d:83:4a: 6c:30:23:68:5f:4f:29:2e:69:ac:26:4d:92:e8:21: 59:ef:d6:88:7e:6f:7f:dc:37:e8:b0:82:16:9a:b6: 0d:9b:19:ed:7b:e3:4d:40:44:dc:b2:e9:b0:0f:b4: 1b:0a:27:d4:5e:ce:60:35:5d:98:77:3e:41:96:85: a4:9d:53:95:5f:01:aa:90:f1:b6:af:36:92:6c:21: af:cb:56:22:df:19:df:a7:22:95:5c:26:4a:fb:f1: 51:b2:da:53:dd:a3:2e:fb:05:a1:6c:39:86:c4:7d: 24:54:98:83:33:d0:50:0d:a8:2f:70:4d:57:bd:0f: c5:61:67:1b:e5:ce:a7:b1:41:83:7b:28:af:a8:29: 7e:c9:78:35:35:df:b8:dc:a2:43:2f:07:65:b0:c0: b9:54:aa:cf:1f:07:56:45:41:93:8c:10:93:84:97: 39:64:99:c0:8c:a0:41:55:a9:d5:88:1d:8e:3d:78: fd:20:c7:01:98:3c:ab:86:3f:92:7a:c5:75:4d:96: e4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A2:97:DE:2D:63:B2:5A:20:BD:58:C2:0E:85:85:4F:54:66:8E:39 X509v3 Authority Key Identifier: keyid:1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/R6KX3i1jslogvVjCDoWFT1Rmjjk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.172.64.0-46.172.66.255 46.172.69.0-46.172.71.255 46.172.92.0/24 Signature Algorithm: sha256WithRSAEncryption 0b:1d:ae:d0:ec:2d:01:53:7f:eb:5e:dd:db:81:27:48:31:4e: 4f:46:f1:df:5d:e2:83:4c:bf:17:83:b6:9e:4a:6c:9d:31:c9: 70:61:96:54:bd:c1:92:70:af:80:4b:6f:87:67:de:b8:9d:7f: 3d:c4:1e:55:04:23:8e:3a:eb:c3:de:0b:38:1d:5d:5d:10:c9: 9b:93:f1:4f:67:dd:f2:da:be:8a:3e:f7:5b:fe:e0:ec:97:c9: c2:63:6b:32:70:29:50:c8:77:2a:62:14:7b:4f:e0:31:ff:49: c5:7e:48:72:61:b5:41:89:72:a1:eb:cd:32:9b:da:8d:ea:b3: 1f:bb:9d:ab:b6:9e:61:33:4d:4b:94:81:55:22:f4:96:bd:6a: a0:82:f2:1f:79:d5:20:05:d5:12:25:21:ab:7e:8c:d0:57:5c: a0:5e:86:02:2d:18:23:56:74:6e:65:86:a2:e0:c9:89:e0:a5: 77:5d:26:5b:bf:6d:cd:56:21:ba:13:49:83:48:65:69:47:44: fa:8a:04:7d:fe:a0:d8:58:75:67:1a:e8:4a:b1:1f:b7:c5:65: de:54:df:9d:2e:83:b7:45:ca:e8:cb:63:2e:eb:bf:b2:7e:aa: 60:52:f4:ff:bc:f4:17:ca:2a:2b:ce:92:2b:4c:dd:26:90:64: 4a:cc:a1:6f -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZt87jPTtOMVEDSCHJo1+VZeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZWU5MTI5NmM5NDk5MmQxNTFhMjMyMjQwZTZjZjNhMTc2 ZDIwMzkwHhcNMjYwMTAyMDQxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0N2EyOTdkZTJkNjNiMjVhMjBiZDU4YzIwZTg1ODU0ZjU0NjY4ZTM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6Lrh+ypt3DK6JUTChZ7BywYVMRh eE8btbSDf1L4XazKW1WSiaFXj8z9M9n18QbNLP1qdY7jTTMNg0psMCNoX08pLmms Jk2S6CFZ79aIfm9/3DfosIIWmrYNmxnte+NNQETcsumwD7QbCifUXs5gNV2Ydz5B loWknVOVXwGqkPG2rzaSbCGvy1Yi3xnfpyKVXCZK+/FRstpT3aMu+wWhbDmGxH0k VJiDM9BQDagvcE1XvQ/FYWcb5c6nsUGDeyivqCl+yXg1Nd+43KJDLwdlsMC5VKrP HwdWRUGTjBCThJc5ZJnAjKBBVanViB2OPXj9IMcBmDyrhj+SesV1TZbkHQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFEeil94tY7JaIL1Ywg6FhU9UZo45MB8GA1UdIwQY MBaAFBzukSlslJktFRojIkDmzzoXbSA5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQt YmFjYWI0NzVlNmNjLzEvUjZLWDNpMWpzbG9ndlZqQ0RvV0ZUMVJtamprLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQtYmFjYWI0NzVlNmNj LzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAYurEAD BAAurEIwDAMEAC6sRQMEAy6sQAMEAC6sXDANBgkqhkiG9w0BAQsFAAOCAQEACx2u 0OwtAVN/617d24EnSDFOT0bx313ig0y/F4O2nkpsnTHJcGGWVL3BknCvgEtvh2fe uJ1/PcQeVQQjjjrrw94LOB1dXRDJm5PxT2fd8tq+ij73W/7g7JfJwmNrMnApUMh3 KmIUe0/gMf9JxX5IcmG1QYlyoevNMpvajeqzH7udq7aeYTNNS5SBVSL0lr1qoILy H3nVIAXVEiUhq36M0FdcoF6GAi0YI1Z0bmWGouDJieCld10mW79tzVYhuhNJg0hl aUdE+ooEff6g2Fh1ZxroSrEft8Vl3lTfnS6Dt0XK6MtjLuu/sn6qYFL0/7z0F8oq K86SK0zdJpBkSsyhbw== -----END CERTIFICATE-----Generated at Mon Jan 26 05:49:39 2026 by rpki-client