This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/n2rh1sLNAvS8TApOyLLtUmfkJtk.roa File: n2rh1sLNAvS8TApOyLLtUmfkJtk.roa (raw, json) Hash identifier: YnymBYUK6ZS+GcYBXKPIPAN5Vh2ciMW3IvH4r+uuS68= Subject key identifier: 9F:6A:E1:D6:C2:CD:02:F4:BC:4C:0A:4E:C8:B2:ED:52:67:E4:26:D9 Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Certificate serial: 019B7CEDCECB5B9C6CA8BFA4CC0E7A8632DB Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/n2rh1sLNAvS8TApOyLLtUmfkJtk.roa Signing time: Fri 02 Jan 2026 04:18:38 +0000 ROA not before: Fri 02 Jan 2026 04:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210050 IP address blocks: 46.229.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:ce:cb:5b:9c:6c:a8:bf:a4:cc:0e:7a:86:32:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Validity Not Before: Jan 2 04:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f6ae1d6c2cd02f4bc4c0a4ec8b2ed5267e426d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:28:52:81:8b:4a:df:4d:11:97:36:90:07:76: 1b:fa:c2:dc:82:34:2a:5c:54:f3:dd:de:1b:49:ad: b5:ef:f5:cd:13:fb:38:f7:62:13:ae:83:ef:c0:03: cf:c3:3b:5d:d7:b4:a2:d0:71:dd:19:bd:64:78:9f: de:aa:f0:0f:7e:2e:6f:0f:b7:c3:b8:5c:e6:1e:8c: 04:51:1b:2c:7b:64:22:9b:cb:01:99:5e:6b:c1:ec: 3f:52:33:5e:a3:ce:0d:13:46:4e:7f:15:22:eb:0d: 8c:0d:18:0a:5b:d3:2d:a7:98:5b:3f:c7:18:fb:4c: 9e:f0:e2:9b:f9:fc:18:46:1f:0d:c9:ff:29:41:b8: 3b:f0:d1:46:3c:0d:a2:da:15:b5:7b:ed:92:61:2a: 73:a6:15:a3:94:58:bc:d6:42:ac:ba:ee:e6:37:e9: 34:da:09:e6:05:e8:a8:a3:68:dd:24:cf:04:aa:30: cd:75:d9:a1:b2:7f:6b:51:f4:36:8f:2f:fc:e6:64: 10:33:9d:8c:c6:f8:55:a1:de:7f:1c:42:db:cb:fb: b0:cd:f8:fe:fa:54:db:60:ab:ac:f3:da:65:bb:0b: 89:51:64:5e:ca:89:c1:3c:71:a3:b6:4b:92:8c:57: 69:5f:6e:47:9b:4d:17:bf:7a:33:13:b5:ca:ad:95: e2:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:6A:E1:D6:C2:CD:02:F4:BC:4C:0A:4E:C8:B2:ED:52:67:E4:26:D9 X509v3 Authority Key Identifier: keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/n2rh1sLNAvS8TApOyLLtUmfkJtk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.229.52.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:4f:3e:88:a9:97:59:d2:d7:f8:5e:42:35:7e:c1:2d:f8:0f: bc:bf:2b:bd:b3:d8:8d:e9:a3:0b:85:a7:86:4b:5c:db:c0:e1: d7:80:be:d0:72:a7:c3:52:c7:1f:cb:88:20:4e:40:48:ca:ce: f4:2f:4b:08:c8:24:a1:b2:7d:e1:15:af:9b:78:e1:4b:cb:59: 1e:14:4a:12:e4:36:fd:e9:7e:10:80:16:a0:56:c7:f9:a5:db: c3:74:df:d6:57:2e:4b:47:b6:1a:ed:13:0f:c1:d3:dd:43:82: 33:d6:ba:15:88:a5:f2:fc:05:e9:71:0f:10:bf:3b:c7:f9:3d: c6:8a:07:8a:94:6c:ca:46:b2:c6:d5:9c:fd:32:36:d0:69:c4: 45:fd:39:34:5c:76:05:db:e4:a1:49:3d:57:ff:d9:c0:01:4b: 96:00:9b:a6:94:d9:39:38:46:aa:c4:37:62:d8:e3:d9:b8:d8: cb:31:73:42:2f:7f:3c:a9:d0:88:79:bf:f5:1f:b9:dd:3b:c9: e5:d1:fc:c5:a7:39:10:b7:15:b0:95:47:8e:65:62:8f:7c:34: f4:77:05:15:9e:1c:4e:ac:fd:79:5f:45:b3:6d:46:cc:2b:1d: aa:89:35:9d:cd:b6:50:2a:d1:01:57:b3:bd:b8:42:fe:7b:b0: 87:9d:b9:1a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87c7LW5xsqL+kzA56hjLbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YmNjMTJhZmE0ZjA1NzM5ZjQ1ZjYwNWUyMjFjNjRjM2Mw ZDJlZDYwHhcNMjYwMTAyMDQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjZhZTFkNmMyY2QwMmY0YmM0YzBhNGVjOGIyZWQ1MjY3ZTQyNmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyhSgYtK300RlzaQB3Yb+sLcgjQq XFTz3d4bSa217/XNE/s492ITroPvwAPPwztd17Si0HHdGb1keJ/eqvAPfi5vD7fD uFzmHowEURsse2Qim8sBmV5rwew/UjNeo84NE0ZOfxUi6w2MDRgKW9Mtp5hbP8cY +0ye8OKb+fwYRh8Nyf8pQbg78NFGPA2i2hW1e+2SYSpzphWjlFi81kKsuu7mN+k0 2gnmBeioo2jdJM8EqjDNddmhsn9rUfQ2jy/85mQQM52MxvhVod5/HELby/uwzfj+ +lTbYKus89pluwuJUWReyonBPHGjtkuSjFdpX25Hm00Xv3ozE7XKrZXiLwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ9q4dbCzQL0vEwKTsiy7VJn5CbZMB8GA1UdIwQY MBaAFKS8wSr6TwVzn0X2BeIhxkw8DS7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2Mt ODhiMDE2YmJkNTgxLzEvbjJyaDFzTE5BdlM4VEFwT3lMTHRVbWZrSnRrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2MtODhiMDE2YmJkNTgx LzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALuU0MA0G CSqGSIb3DQEBCwUAA4IBAQA7Tz6IqZdZ0tf4XkI1fsEt+A+8vyu9s9iN6aMLhaeG S1zbwOHXgL7QcqfDUscfy4ggTkBIys70L0sIyCShsn3hFa+beOFLy1keFEoS5Db9 6X4QgBagVsf5pdvDdN/WVy5LR7Ya7RMPwdPdQ4Iz1roViKXy/AXpcQ8QvzvH+T3G igeKlGzKRrLG1Zz9MjbQacRF/Tk0XHYF2+ShST1X/9nAAUuWAJumlNk5OEaqxDdi 2OPZuNjLMXNCL388qdCIeb/1H7ndO8nl0fzFpzkQtxWwlUeOZWKPfDT0dwUVnhxO rP15X0WzbUbMKx2qiTWdzbZQKtEBV7O9uEL+e7CHnbka -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:22 2026 by rpki-client