This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/F_Dk1EXyZalcSUrQVrmmhufc-3c.roa File: F_Dk1EXyZalcSUrQVrmmhufc-3c.roa (raw, json) Hash identifier: Bud8p3xLXlXOrM2nbGi5ghblIRWjV7KfIKq7F8d9FoQ= Subject key identifier: 17:F0:E4:D4:45:F2:65:A9:5C:49:4A:D0:56:B9:A6:86:E7:DC:FB:77 Certificate issuer: /CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf Certificate serial: 019B7E3791A7CE4A6C94476CA2EA160398C9 Authority key identifier: CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/F_Dk1EXyZalcSUrQVrmmhufc-3c.roa Signing time: Fri 02 Jan 2026 10:18:49 +0000 ROA not before: Fri 02 Jan 2026 10:18:49 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8280 IP address blocks: 46.227.56.0/21 maxlen: 24 46.227.56.0/24 maxlen: 32 46.227.57.0/24 maxlen: 32 46.227.58.0/24 maxlen: 32 46.227.59.0/24 maxlen: 32 46.227.60.0/24 maxlen: 32 46.227.61.0/24 maxlen: 32 46.227.62.0/24 maxlen: 32 46.227.63.0/24 maxlen: 32 78.108.32.0/20 maxlen: 24 78.108.32.0/24 maxlen: 32 78.108.33.0/24 maxlen: 32 78.108.34.0/24 maxlen: 32 78.108.35.0/24 maxlen: 32 78.108.36.0/24 maxlen: 32 78.108.37.0/24 maxlen: 32 78.108.38.0/24 maxlen: 32 78.108.39.0/24 maxlen: 32 78.108.40.0/24 maxlen: 32 78.108.41.0/24 maxlen: 32 78.108.42.0/24 maxlen: 32 78.108.43.0/24 maxlen: 32 78.108.44.0/24 maxlen: 32 78.108.45.0/24 maxlen: 32 78.108.46.0/24 maxlen: 32 78.108.47.0/24 maxlen: 32 185.51.132.0/22 maxlen: 24 185.51.132.0/24 maxlen: 32 185.51.133.0/24 maxlen: 32 185.51.135.0/24 maxlen: 32 2001:1548::/29 maxlen: 64 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:91:a7:ce:4a:6c:94:47:6c:a2:ea:16:03:98:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf Validity Not Before: Jan 2 10:18:49 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17f0e4d445f265a95c494ad056b9a686e7dcfb77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b9:9c:ae:32:b8:c3:c8:79:0c:ac:2d:27:83: e1:0d:f5:3c:82:83:d8:67:25:e8:0b:82:50:ba:d9: f5:8e:68:41:d3:7a:1c:a3:ad:fa:1c:86:a1:3c:3f: 70:b9:0f:52:bf:9d:7b:2a:aa:e0:77:58:3f:3f:17: 44:f0:bf:60:fa:73:6c:ab:2c:f6:18:7a:71:a8:b4: fb:af:34:ae:11:fd:4f:f4:d5:c1:56:4a:1e:12:8f: 8d:85:fc:d8:1f:55:df:fa:df:34:02:30:72:d2:0a: d0:ee:ee:0e:40:75:16:e0:a6:54:14:97:95:0d:1e: e0:f9:68:e4:ab:4f:8b:e8:1f:e6:3e:4d:fe:ca:d4: f7:7d:97:78:d6:c3:41:41:93:8f:19:12:b9:07:43: a5:ed:47:a2:7b:46:e8:44:f4:a5:7c:9a:8f:f8:90: 49:eb:65:0f:e8:28:15:16:55:95:9e:ef:0a:5f:69: d2:27:fa:9b:1b:82:92:51:27:82:bf:a1:21:33:78: 75:96:48:d0:16:b3:81:41:b1:d8:6e:c9:de:d9:2e: da:5b:3e:96:4d:ec:0e:14:bc:91:30:d8:80:75:eb: f8:91:a3:fa:f0:fd:b1:19:3d:7b:4b:4e:8b:a8:fc: f0:c0:8d:1f:80:08:99:2a:d0:83:d1:ce:26:1f:85: 13:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F0:E4:D4:45:F2:65:A9:5C:49:4A:D0:56:B9:A6:86:E7:DC:FB:77 X509v3 Authority Key Identifier: keyid:CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/F_Dk1EXyZalcSUrQVrmmhufc-3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.227.56.0/21 78.108.32.0/20 185.51.132.0/22 IPv6: 2001:1548::/29 Signature Algorithm: sha256WithRSAEncryption 78:ca:29:82:9c:cd:27:f7:07:4c:36:9e:92:bd:50:3d:b1:8c: d1:09:ad:17:0d:fd:05:b1:ab:8c:db:67:63:3d:2c:dd:cb:61: 3b:28:20:1e:2e:3c:f2:c6:20:23:57:80:31:a8:a6:bc:7e:5b: d6:5b:bf:78:35:4e:11:b6:13:0a:91:1f:31:99:b7:94:23:c5: 30:c8:d0:92:9d:84:a8:1d:b4:87:b0:87:60:f1:c5:c1:ec:b9: 4e:a6:6c:83:7c:2d:03:0f:bf:6a:11:36:66:fc:ff:f5:bc:7b: b7:84:93:ea:75:6a:98:13:00:88:94:8e:5b:72:cd:86:d1:55: 4f:59:ba:71:45:3a:02:99:5c:00:8c:c2:df:e6:28:c1:a2:3e: 0d:47:26:44:93:88:67:de:e7:cd:10:8e:8a:53:b8:1f:f7:79: 38:43:77:38:86:aa:10:9a:88:1e:b4:56:72:72:41:56:48:d9: fb:c7:cc:c5:d8:31:f0:92:f7:bd:46:9c:30:69:ad:fa:89:96: 81:fb:59:8a:8c:a3:fb:f0:9f:1d:17:2b:8a:89:ad:dc:d9:e5: 42:0d:d5:4f:11:a2:b4:a9:df:38:2a:14:71:cc:b5:ce:fe:0f: 18:2e:29:ff:26:e1:8b:39:1f:86:6a:51:9d:70:bf:02:7d:13: 77:db:9b:7b -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt+N5GnzkpslEdsouoWA5jJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNDBmZGQ4MmEwZmRmM2I3MGJlMTgyMjFlZWJhNjBkODAx ZWQ3YmYwHhcNMjYwMTAyMTAxODQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2YwZTRkNDQ1ZjI2NWE5NWM0OTRhZDA1NmI5YTY4NmU3ZGNmYjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbmcrjK4w8h5DKwtJ4PhDfU8goPY ZyXoC4JQutn1jmhB03oco636HIahPD9wuQ9Sv517Kqrgd1g/PxdE8L9g+nNsqyz2 GHpxqLT7rzSuEf1P9NXBVkoeEo+NhfzYH1Xf+t80AjBy0grQ7u4OQHUW4KZUFJeV DR7g+Wjkq0+L6B/mPk3+ytT3fZd41sNBQZOPGRK5B0Ol7Ueie0boRPSlfJqP+JBJ 62UP6CgVFlWVnu8KX2nSJ/qbG4KSUSeCv6EhM3h1lkjQFrOBQbHYbsne2S7aWz6W TewOFLyRMNiAdev4kaP68P2xGT17S06LqPzwwI0fgAiZKtCD0c4mH4UT4wIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFBfw5NRF8mWpXElK0Fa5pobn3Pt3MB8GA1UdIwQY MBaAFM9A/dgqD987cL4YIh7rpg2AHte/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejBEOTJDb1AzenR3dmhnaUh1dW1EWUFlMTc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS83OTI3MzctNmEwMi00MjRiLTgyY2It YTI5Y2U3ZGExMGZkLzEvRl9EazFFWHlaYWxjU1VyUVZybW1odWZjLTNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS83OTI3MzctNmEwMi00MjRiLTgyY2ItYTI5Y2U3ZGExMGZk LzEvejBEOTJDb1AzenR3dmhnaUh1dW1EWUFlMTc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDLuM4AwQE TmwgAwQCuTOEMA0EAgACMAcDBQMgARVIMA0GCSqGSIb3DQEBCwUAA4IBAQB4yimC nM0n9wdMNp6SvVA9sYzRCa0XDf0FsauM22djPSzdy2E7KCAeLjzyxiAjV4AxqKa8 flvWW794NU4RthMKkR8xmbeUI8UwyNCSnYSoHbSHsIdg8cXB7LlOpmyDfC0DD79q ETZm/P/1vHu3hJPqdWqYEwCIlI5bcs2G0VVPWbpxRToCmVwAjMLf5ijBoj4NRyZE k4hn3ufNEI6KU7gf93k4Q3c4hqoQmogetFZyckFWSNn7x8zF2DHwkve9Rpwwaa36 iZaB+1mKjKP78J8dFyuKia3c2eVCDdVPEaK0qd84KhRxzLXO/g8YLin/JuGLOR+G alGdcL8CfRN325t7 -----END CERTIFICATE-----Generated at Sun Jan 25 22:30:01 2026 by rpki-client