This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/dHzF4P3tNtzyJNFvhC01ek08kYc.roa File: dHzF4P3tNtzyJNFvhC01ek08kYc.roa (raw, json) Hash identifier: bUI0+2xFTsseXiv/I8zBJZyi3U6hUXamNCOgX/NaEog= Subject key identifier: 74:7C:C5:E0:FD:ED:36:DC:F2:24:D1:6F:84:2D:35:7A:4D:3C:91:87 Certificate issuer: /CN=7b148db42f90e96447bd7f63edd8a7ccbeeaa842 Certificate serial: 019B7A5B8FF392CC83FA744D2E6420B008C4 Authority key identifier: 7B:14:8D:B4:2F:90:E9:64:47:BD:7F:63:ED:D8:A7:CC:BE:EA:A8:42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/dHzF4P3tNtzyJNFvhC01ek08kYc.roa Signing time: Thu 01 Jan 2026 16:19:39 +0000 ROA not before: Thu 01 Jan 2026 16:19:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47254 IP address blocks: 46.30.219.0/24 maxlen: 24 46.30.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 09:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:8f:f3:92:cc:83:fa:74:4d:2e:64:20:b0:08:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b148db42f90e96447bd7f63edd8a7ccbeeaa842 Validity Not Before: Jan 1 16:19:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=747cc5e0fded36dcf224d16f842d357a4d3c9187 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:cc:3b:4a:90:ba:a5:7a:64:74:a0:b2:e3:7e: d1:95:77:b6:46:db:a5:da:02:24:c8:96:8d:93:b4: 55:76:77:68:6d:7e:b9:ef:9d:b0:2e:56:01:66:c7: db:85:5e:cb:b4:ce:48:34:34:13:58:d0:07:90:85: e3:b1:3d:ef:fb:a5:86:b0:a4:5e:db:7b:68:f3:90: bb:86:a1:f6:44:67:6c:93:10:c7:92:53:90:57:b9: 6e:dc:c8:9a:25:d7:dd:ae:46:9a:5d:ee:70:07:b0: f2:aa:d0:97:48:9c:a6:bc:5c:e4:9c:70:e5:25:9c: 5e:c5:9c:46:63:26:1b:c4:16:ac:b0:57:5c:48:18: 88:b5:ac:91:13:1d:57:63:0d:e0:cd:ce:93:ac:c9: 20:7a:96:1c:cc:13:f1:47:c4:66:3d:70:fa:c0:d7: ad:53:74:f6:4b:66:7f:86:31:79:5e:c8:c7:b4:81: 5d:56:c8:32:aa:6e:43:a6:41:c7:74:e4:e3:74:4f: 0f:91:05:39:65:2d:5e:21:ac:29:cf:ba:8d:27:57: dc:57:cd:83:fe:c0:4c:2b:ba:ab:ba:c6:94:9c:31: f4:ad:c1:db:77:f5:2f:73:91:f2:96:d4:00:c5:43: 4f:39:d6:37:9f:98:7a:6d:63:ed:3a:c9:44:29:ec: b9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:7C:C5:E0:FD:ED:36:DC:F2:24:D1:6F:84:2D:35:7A:4D:3C:91:87 X509v3 Authority Key Identifier: keyid:7B:14:8D:B4:2F:90:E9:64:47:BD:7F:63:ED:D8:A7:CC:BE:EA:A8:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/dHzF4P3tNtzyJNFvhC01ek08kYc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.30.219.0/24 46.30.221.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:08:9d:d9:1a:38:e4:53:47:e9:c7:97:f6:d0:1f:37:ec:a1: 9d:3c:36:86:4d:b2:42:48:c3:20:ed:4b:d1:71:89:c7:2e:44: 84:e6:cc:74:a3:05:6c:95:49:5a:4f:7c:c4:2d:a5:dc:5e:88: 5f:ea:07:81:2e:56:67:47:66:7b:1a:b5:c9:2c:87:26:5c:f6: 98:6d:32:4e:49:6e:63:a2:9e:38:03:49:30:87:c3:05:af:8d: 94:31:67:9b:ef:32:70:39:c2:0b:a4:1f:ef:70:f1:be:6f:a8: 8f:65:d1:f6:08:70:50:1f:bc:4b:76:13:4e:40:49:89:a5:73: 7e:86:b1:2a:c6:ec:1f:8d:71:dc:5f:39:9b:74:60:62:b1:7d: 3a:00:74:db:20:79:cd:4a:fc:28:13:4f:f7:77:ad:ca:3f:93: 40:08:15:cc:11:35:28:a3:3d:0c:8e:6b:b7:60:a6:7d:64:1f: 08:9a:29:5b:79:14:9e:b2:30:7b:b0:a8:0c:4c:c3:4f:60:67: b4:d9:5a:57:aa:d6:d5:57:e2:32:c3:33:f7:0f:4f:c9:af:ba: c8:f1:66:a2:ba:e2:a6:5c:40:93:cc:ab:fd:12:a0:3d:a4:89: 35:1a:b9:69:4a:54:65:22:c7:d8:67:67:f0:f1:7d:e6:9a:ea: 07:69:37:9c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt6W4/zksyD+nRNLmQgsAjEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiMTQ4ZGI0MmY5MGU5NjQ0N2JkN2Y2M2VkZDhhN2NjYmVl YWE4NDIwHhcNMjYwMTAxMTYxOTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NDdjYzVlMGZkZWQzNmRjZjIyNGQxNmY4NDJkMzU3YTRkM2M5MTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA48w7SpC6pXpkdKCy437RlXe2Rtul 2gIkyJaNk7RVdndobX65752wLlYBZsfbhV7LtM5INDQTWNAHkIXjsT3v+6WGsKRe 23to85C7hqH2RGdskxDHklOQV7lu3MiaJdfdrkaaXe5wB7DyqtCXSJymvFzknHDl JZxexZxGYyYbxBassFdcSBiItayREx1XYw3gzc6TrMkgepYczBPxR8RmPXD6wNet U3T2S2Z/hjF5XsjHtIFdVsgyqm5DpkHHdOTjdE8PkQU5ZS1eIawpz7qNJ1fcV82D /sBMK7qrusaUnDH0rcHbd/Uvc5HyltQAxUNPOdY3n5h6bWPtOslEKey54QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHR8xeD97Tbc8iTRb4QtNXpNPJGHMB8GA1UdIwQY MBaAFHsUjbQvkOlkR71/Y+3Yp8y+6qhCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZXhTTnRDLVE2V1JIdlg5ajdkaW56TDdxcUVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9mMjQ4ODUtYTRkYi00ZmExLWE3MmQt ODZkNmMxMzA1MzU3LzEvZEh6RjRQM3ROdHp5Sk5GdmhDMDFlazA4a1ljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9mMjQ4ODUtYTRkYi00ZmExLWE3MmQtODZkNmMxMzA1MzU3 LzEvZXhTTnRDLVE2V1JIdlg5ajdkaW56TDdxcUVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALh7bAwQA Lh7dMA0GCSqGSIb3DQEBCwUAA4IBAQAuCJ3ZGjjkU0fpx5f20B837KGdPDaGTbJC SMMg7UvRcYnHLkSE5sx0owVslUlaT3zELaXcXohf6geBLlZnR2Z7GrXJLIcmXPaY bTJOSW5jop44A0kwh8MFr42UMWeb7zJwOcILpB/vcPG+b6iPZdH2CHBQH7xLdhNO QEmJpXN+hrEqxuwfjXHcXzmbdGBisX06AHTbIHnNSvwoE0/3d63KP5NACBXMETUo oz0Mjmu3YKZ9ZB8ImilbeRSesjB7sKgMTMNPYGe02VpXqtbVV+IywzP3D0/Jr7rI 8WaiuuKmXECTzKv9EqA9pIk1GrlpSlRlIsfYZ2fw8X3mmuoHaTec -----END CERTIFICATE-----Generated at Mon Jan 26 14:21:45 2026 by rpki-client