This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yhTiQ6aF_riEAT4eOqJDdkaQDgQ.roa File: yhTiQ6aF_riEAT4eOqJDdkaQDgQ.roa (raw, json) Hash identifier: uZrw316MsEk/l2BZfI6IcKecY27h3x31Etnd61KuR2o= Subject key identifier: CA:14:E2:43:A6:85:FE:B8:84:01:3E:1E:3A:A2:43:76:46:90:0E:04 Certificate issuer: /CN=c89c2cc489ebe48f490584ac866fe362c4117e75 Certificate serial: 019B7BA4BA36A9A7FD5901A7EC4522E31734 Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yhTiQ6aF_riEAT4eOqJDdkaQDgQ.roa Signing time: Thu 01 Jan 2026 22:19:11 +0000 ROA not before: Thu 01 Jan 2026 22:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51788 IP address blocks: 46.148.33.0/24 maxlen: 24 46.148.34.0/24 maxlen: 24 46.148.37.0/24 maxlen: 24 46.148.41.0/24 maxlen: 24 46.148.42.0/24 maxlen: 24 46.148.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:ba:36:a9:a7:fd:59:01:a7:ec:45:22:e3:17:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75 Validity Not Before: Jan 1 22:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ca14e243a685feb884013e1e3aa2437646900e04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:50:d0:73:69:94:ad:d4:04:30:72:37:51:d6: 11:03:80:5f:bc:7d:0a:10:e2:cc:c9:17:9e:f1:d4: 82:27:a5:a0:37:d6:d9:62:f6:39:ad:53:b4:fb:30: 31:cb:7d:3c:ca:fd:3f:c4:0a:85:ba:70:dc:85:5f: 6c:8e:53:ce:a9:ae:d9:fe:77:ee:4e:9c:0e:3e:b3: 2f:12:9a:66:c8:9a:33:cf:0d:c4:62:ab:ed:91:de: 18:52:50:3d:43:3d:43:95:91:e9:6d:2e:f6:c8:bf: ce:f2:07:24:ba:c2:7b:42:33:93:c8:b8:c9:36:63: 5a:66:51:05:3a:7b:ea:92:af:f6:f4:46:43:35:72: fc:fe:3e:ec:88:c5:4e:fe:ae:19:b1:4b:37:7f:0a: cc:39:2a:28:a6:6d:8d:d6:55:f6:e6:9c:a5:d0:ba: f5:63:c7:8f:d2:6b:b0:3d:2b:07:a0:64:97:e0:25: 7f:4c:be:4c:1a:2a:bf:4f:5a:1b:0e:e2:35:8b:a1: d2:cb:53:47:22:2b:58:36:bd:07:8e:07:6e:3d:3d: 8f:bc:fc:27:80:0c:a5:f6:ba:c8:3b:69:55:8a:4c: 93:70:62:77:53:a2:16:62:25:3d:cd:bd:cb:e4:54: cc:a5:84:67:d4:5b:3b:49:3c:97:fe:76:c8:81:b7: 6b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:14:E2:43:A6:85:FE:B8:84:01:3E:1E:3A:A2:43:76:46:90:0E:04 X509v3 Authority Key Identifier: keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yhTiQ6aF_riEAT4eOqJDdkaQDgQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.148.33.0-46.148.34.255 46.148.37.0/24 46.148.41.0-46.148.42.255 46.148.47.0/24 Signature Algorithm: sha256WithRSAEncryption 82:1a:c8:49:f1:3c:62:e2:52:64:8c:49:b2:28:1a:73:48:28: b4:ed:ab:7a:64:27:a2:d9:04:eb:9a:16:8f:f2:04:bf:b5:90: 95:07:c1:db:cc:1c:d2:d4:ed:7e:6d:2a:89:84:12:2e:bf:bd: 1e:a1:b1:90:40:4f:ba:85:bb:63:8b:eb:18:1f:49:b2:ba:68: db:4b:93:29:f5:af:88:db:83:fe:93:dc:76:b5:15:d2:df:dd: 24:79:74:00:a9:3a:32:93:ce:28:71:d4:a1:51:e7:57:33:17: c0:4e:f6:c1:71:00:ed:c9:00:26:92:5b:28:07:3c:94:83:73: 8e:71:da:46:6e:57:e1:5e:ec:05:a7:25:3d:46:be:c3:63:c3: 54:d6:c5:f3:91:40:dd:19:e2:fb:6b:7e:0f:56:85:2c:78:ac: a3:94:51:4c:96:e2:fe:a5:6b:b9:ec:16:3f:ee:69:d9:26:fd: 27:57:32:bd:ed:51:0b:7a:89:85:60:b4:a3:aa:ee:6f:68:e9: 3e:af:4a:7b:94:23:ab:ea:d8:7f:08:f7:9a:41:36:47:5a:04: 90:3e:3c:10:93:b2:88:da:27:38:fc:be:15:2b:8c:c9:69:cd: b5:f6:27:7f:a7:fc:f7:7b:c2:ef:9d:a2:60:a1:52:ba:40:3c: bf:95:14:c0 -----BEGIN CERTIFICATE----- MIIFHzCCBAegAwIBAgISAZt7pLo2qaf9WQGn7EUi4xc0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4OWMyY2M0ODllYmU0OGY0OTA1ODRhYzg2NmZlMzYyYzQx MTdlNzUwHhcNMjYwMTAxMjIxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjYTE0ZTI0M2E2ODVmZWI4ODQwMTNlMWUzYWEyNDM3NjQ2OTAwZTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVDQc2mUrdQEMHI3UdYRA4BfvH0K EOLMyRee8dSCJ6WgN9bZYvY5rVO0+zAxy308yv0/xAqFunDchV9sjlPOqa7Z/nfu TpwOPrMvEppmyJozzw3EYqvtkd4YUlA9Qz1DlZHpbS72yL/O8gckusJ7QjOTyLjJ NmNaZlEFOnvqkq/29EZDNXL8/j7siMVO/q4ZsUs3fwrMOSoopm2N1lX25pyl0Lr1 Y8eP0muwPSsHoGSX4CV/TL5MGiq/T1obDuI1i6HSy1NHIitYNr0HjgduPT2PvPwn gAyl9rrIO2lVikyTcGJ3U6IWYiU9zb3L5FTMpYRn1Fs7STyX/nbIgbdrRwIDAQAB o4ICKzCCAicwHQYDVR0OBBYEFMoU4kOmhf64hAE+HjqiQ3ZGkA4EMB8GA1UdIwQY MBaAFMicLMSJ6+SPSQWErIZv42LEEX51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUp3c3hJbnI1STlKQllTc2htX2pZc1FSZm5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hMDBiZTItODc3ZC00MGU3LThhOGEt YWYyY2ZhNjIyZDE4LzEveWhUaVE2YUZfcmlFQVQ0ZU9xSkRka2FRRGdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9hMDBiZTItODc3ZC00MGU3LThhOGEtYWYyY2ZhNjIyZDE4 LzEveUp3c3hJbnI1STlKQllTc2htX2pZc1FSZm5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAAulCED BAAulCIDBAAulCUwDAMEAC6UKQMEAC6UKgMEAC6ULzANBgkqhkiG9w0BAQsFAAOC AQEAghrISfE8YuJSZIxJsigac0gotO2remQnotkE65oWj/IEv7WQlQfB28wc0tTt fm0qiYQSLr+9HqGxkEBPuoW7Y4vrGB9Jsrpo20uTKfWviNuD/pPcdrUV0t/dJHl0 AKk6MpPOKHHUoVHnVzMXwE72wXEA7ckAJpJbKAc8lINzjnHaRm5X4V7sBaclPUa+ w2PDVNbF85FA3Rni+2t+D1aFLHiso5RRTJbi/qVruewWP+5p2Sb9J1cyve1RC3qJ hWC0o6rub2jpPq9Ke5Qjq+rYfwj3mkE2R1oEkD48EJOyiNonOPy+FSuMyWnNtfYn f6f893vC752iYKFSukA8v5UUwA== -----END CERTIFICATE-----Generated at Mon Jan 26 05:48:42 2026 by rpki-client