This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/fotaW3reFeI2SLYUxkvM2Rp9oWU.roa File: fotaW3reFeI2SLYUxkvM2Rp9oWU.roa (raw, json) Hash identifier: 6ry4szc/4WpgdCqU6mLC/W0kQtFV5fQ4EQEyOj83ctw= Subject key identifier: 7E:8B:5A:5B:7A:DE:15:E2:36:48:B6:14:C6:4B:CC:D9:1A:7D:A1:65 Certificate issuer: /CN=c89c2cc489ebe48f490584ac866fe362c4117e75 Certificate serial: 019B7BA4B9D46BBA4B2D69ECDF81252726A5 Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/fotaW3reFeI2SLYUxkvM2Rp9oWU.roa Signing time: Thu 01 Jan 2026 22:19:11 +0000 ROA not before: Thu 01 Jan 2026 22:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48551 IP address blocks: 46.148.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:b9:d4:6b:ba:4b:2d:69:ec:df:81:25:27:26:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75 Validity Not Before: Jan 1 22:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7e8b5a5b7ade15e23648b614c64bccd91a7da165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:20:76:4d:34:77:68:14:62:15:e1:53:cd:21: cc:4c:52:93:d7:4f:37:4d:9d:d4:c0:18:00:65:7a: d9:cd:4b:ca:0c:c7:81:7b:37:00:53:bc:bf:94:bb: 2a:e8:c4:4e:37:7d:51:a8:d1:ea:21:a3:4b:02:c2: 3e:bb:92:60:e5:2c:9c:69:44:b1:7d:9a:af:8c:b7: fd:c6:80:dc:18:be:d5:90:56:9c:37:dc:2e:2b:5e: 36:6b:3d:db:a4:6b:09:53:c5:b7:aa:71:05:d4:e5: 63:d4:a6:0b:db:38:be:1e:e0:12:73:18:d0:3c:56: 35:fc:dc:24:c5:63:11:24:9e:14:40:c6:93:5c:9c: 93:d7:03:e9:74:7a:f8:4d:de:1c:5e:e9:ad:c2:85: 2f:20:82:5c:df:1f:02:ac:45:4e:da:8f:77:40:21: a5:e7:0e:c5:d4:66:ce:42:7b:54:cd:93:1c:dc:d3: 94:53:c6:a2:12:b7:b5:b1:23:8a:8e:7c:0a:d7:a4: 23:49:20:6f:79:e2:7c:75:cd:ec:56:0c:a9:5d:c5: 7f:d4:ca:c4:63:4e:10:73:8b:7a:76:71:7a:38:47: 36:aa:26:d1:f8:b1:70:ee:ad:a5:2e:af:ab:7f:ae: 15:c4:84:3b:89:13:db:e4:f6:c5:1b:a4:4b:e6:71: dc:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:8B:5A:5B:7A:DE:15:E2:36:48:B6:14:C6:4B:CC:D9:1A:7D:A1:65 X509v3 Authority Key Identifier: keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/fotaW3reFeI2SLYUxkvM2Rp9oWU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.148.39.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:3e:a3:48:1f:b4:ce:81:0d:8d:4e:5a:b2:93:71:57:57:6d: e7:2b:b0:7d:34:08:7f:3e:3c:1e:70:2e:65:dd:d2:a5:2a:02: 12:60:b5:98:ab:bd:13:fd:95:a5:6a:fc:6a:33:7c:07:3e:dc: 8e:76:42:01:ad:c3:4b:55:29:09:9e:0f:84:bf:1b:07:f8:d1: 51:b3:47:d7:f1:4b:61:b2:9c:92:91:c1:ca:66:e3:23:46:aa: 41:e5:13:2a:5c:8c:4c:5c:ab:ce:cc:4a:97:8b:cf:0d:e1:4f: 3d:74:bb:62:2e:e4:b6:71:65:b4:59:f3:6c:ab:ad:97:01:d8: 30:d6:eb:98:f0:06:17:94:95:bb:ba:ba:4f:0d:c6:04:ab:a5: 6a:48:2e:5f:d2:53:8d:43:0b:79:8e:c2:b8:fe:cc:ca:6e:e9: 5c:b8:25:9b:10:8b:44:1b:74:8c:56:df:1a:a4:88:d2:58:65: 35:ad:66:60:8a:64:f1:d0:e0:2d:dc:94:49:01:2c:57:54:64: bf:0c:88:3d:ca:96:8e:c1:e5:8b:42:0d:1b:5f:cb:42:53:56: 22:76:7c:6b:74:f4:95:2d:1c:1a:b4:09:80:e1:13:5c:d5:35: f6:65:1e:07:a3:2e:03:b5:e9:0a:b5:16:a8:d3:72:44:0e:15: 2b:62:39:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pLnUa7pLLWns34ElJyalMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4OWMyY2M0ODllYmU0OGY0OTA1ODRhYzg2NmZlMzYyYzQx MTdlNzUwHhcNMjYwMTAxMjIxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZThiNWE1YjdhZGUxNWUyMzY0OGI2MTRjNjRiY2NkOTFhN2RhMTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCB2TTR3aBRiFeFTzSHMTFKT1083 TZ3UwBgAZXrZzUvKDMeBezcAU7y/lLsq6MRON31RqNHqIaNLAsI+u5Jg5SycaUSx fZqvjLf9xoDcGL7VkFacN9wuK142az3bpGsJU8W3qnEF1OVj1KYL2zi+HuAScxjQ PFY1/NwkxWMRJJ4UQMaTXJyT1wPpdHr4Td4cXumtwoUvIIJc3x8CrEVO2o93QCGl 5w7F1GbOQntUzZMc3NOUU8aiEre1sSOKjnwK16QjSSBveeJ8dc3sVgypXcV/1MrE Y04Qc4t6dnF6OEc2qibR+LFw7q2lLq+rf64VxIQ7iRPb5PbFG6RL5nHcTwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH6LWlt63hXiNki2FMZLzNkafaFlMB8GA1UdIwQY MBaAFMicLMSJ6+SPSQWErIZv42LEEX51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUp3c3hJbnI1STlKQllTc2htX2pZc1FSZm5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hMDBiZTItODc3ZC00MGU3LThhOGEt YWYyY2ZhNjIyZDE4LzEvZm90YVczcmVGZUkyU0xZVXhrdk0yUnA5b1dVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9hMDBiZTItODc3ZC00MGU3LThhOGEtYWYyY2ZhNjIyZDE4 LzEveUp3c3hJbnI1STlKQllTc2htX2pZc1FSZm5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALpQnMA0G CSqGSIb3DQEBCwUAA4IBAQCOPqNIH7TOgQ2NTlqyk3FXV23nK7B9NAh/PjwecC5l 3dKlKgISYLWYq70T/ZWlavxqM3wHPtyOdkIBrcNLVSkJng+EvxsH+NFRs0fX8Uth spySkcHKZuMjRqpB5RMqXIxMXKvOzEqXi88N4U89dLtiLuS2cWW0WfNsq62XAdgw 1uuY8AYXlJW7urpPDcYEq6VqSC5f0lONQwt5jsK4/szKbulcuCWbEItEG3SMVt8a pIjSWGU1rWZgimTx0OAt3JRJASxXVGS/DIg9ypaOweWLQg0bX8tCU1YidnxrdPSV LRwatAmA4RNc1TX2ZR4Hoy4DtekKtRao03JEDhUrYjms -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:21 2026 by rpki-client