This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/vyNX_G3sd7VABBUb1_l_0mQ1seo.roa File: vyNX_G3sd7VABBUb1_l_0mQ1seo.roa (raw, json) Hash identifier: MzK7zdnu+4qWNgnGDp5G7j7MAy7ijjxyFcd9B9ucLvU= Subject key identifier: BF:23:57:FC:6D:EC:77:B5:40:04:15:1B:D7:F9:7F:D2:64:35:B1:EA Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Certificate serial: 019B7CEDCC84999A3E97A4E19FED928C35AD Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/vyNX_G3sd7VABBUb1_l_0mQ1seo.roa Signing time: Fri 02 Jan 2026 04:18:37 +0000 ROA not before: Fri 02 Jan 2026 04:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201948 IP address blocks: 46.229.58.0/24 maxlen: 24 2a00:1688:7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:cc:84:99:9a:3e:97:a4:e1:9f:ed:92:8c:35:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Validity Not Before: Jan 2 04:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bf2357fc6dec77b54004151bd7f97fd26435b1ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:c0:da:1b:19:59:7c:3a:f6:ef:6a:78:21:ed: c1:a6:cd:7d:59:69:14:ee:cd:c9:63:85:3b:0d:6b: 24:79:75:dd:d6:d2:c3:fe:0a:c2:00:41:b9:b8:5a: e8:c3:5f:ff:62:39:b8:37:0f:3f:0c:88:c6:e0:2f: 74:a9:fb:7c:8d:c7:45:9e:2b:9e:b6:eb:54:5d:33: f1:3a:0e:29:79:82:8d:d7:da:22:0d:93:af:eb:dd: a6:05:c7:bc:a3:6d:33:6d:50:11:db:b1:03:6a:0c: 1e:23:e4:db:15:e1:93:f0:52:bb:f8:f5:3f:54:5f: f7:e2:4a:2d:16:35:41:61:25:7d:7e:bd:c1:c5:65: 68:97:8d:56:80:e2:84:38:0c:ef:15:f6:a4:07:7f: 7d:c7:ae:0a:55:d3:b9:e0:c0:29:7f:32:c7:0e:fa: 36:4a:9a:03:03:26:ab:34:cc:89:25:66:6f:20:a6: 52:af:b0:37:92:00:78:d6:ce:a8:74:2e:12:90:23: 75:d3:9d:4e:fb:d5:35:f1:75:96:2b:cc:88:6d:85: b4:34:b7:7e:ac:3e:19:51:cb:3a:fc:70:c0:55:79: 4d:de:ec:f8:cc:6b:2a:7b:84:24:af:48:aa:4c:ee: 7c:28:79:7e:f2:f1:bd:03:6a:56:b8:87:6c:d2:0c: 2b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:23:57:FC:6D:EC:77:B5:40:04:15:1B:D7:F9:7F:D2:64:35:B1:EA X509v3 Authority Key Identifier: keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/vyNX_G3sd7VABBUb1_l_0mQ1seo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.229.58.0/24 IPv6: 2a00:1688:7::/48 Signature Algorithm: sha256WithRSAEncryption 26:0f:36:28:bf:4f:76:e7:6c:0b:87:04:da:13:99:5a:c7:c8: 0d:74:d6:7c:03:b6:16:72:e8:6e:b9:2e:96:a4:bf:b6:6f:44: f9:75:8c:b0:95:2b:2b:6c:52:93:06:f7:e5:5e:ab:f0:8b:d3: 25:a5:2d:b5:0e:d2:1b:73:d4:21:2f:aa:bc:75:a7:29:e6:54: b7:c4:e6:79:a1:d4:cc:51:18:8c:8e:83:eb:b3:8a:79:08:0a: f9:08:3e:fc:96:cf:85:62:e2:bd:0c:1f:1a:10:fc:91:ed:ef: 3b:6c:95:09:6d:69:e2:82:cd:dc:6a:dd:e3:6a:87:0b:b9:cd: 9b:fc:35:6b:a1:8d:54:e4:1a:c8:99:0d:4f:bd:fa:5c:81:4a: 56:e9:f9:a4:06:e4:c4:f9:e6:2c:e9:20:08:ff:9d:4f:a2:3e: 4f:15:14:30:7d:03:f9:4c:6a:29:0f:85:1b:47:40:e6:7b:ea: 99:12:68:96:bb:45:5c:83:51:40:d0:99:64:c4:bc:58:8e:82: 9b:f8:32:da:ff:ac:01:6e:03:7d:03:06:f7:8b:3c:7e:a9:61: 1c:b5:29:7d:5f:39:75:30:3f:b3:0f:ba:d0:53:22:10:03:f4: c3:4e:5d:ac:5e:d2:6b:08:59:db:00:0f:2f:13:73:81:d3:61: 05:1e:85:24 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt87cyEmZo+l6Thn+2SjDWtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YmNjMTJhZmE0ZjA1NzM5ZjQ1ZjYwNWUyMjFjNjRjM2Mw ZDJlZDYwHhcNMjYwMTAyMDQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiZjIzNTdmYzZkZWM3N2I1NDAwNDE1MWJkN2Y5N2ZkMjY0MzViMWVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA68DaGxlZfDr272p4Ie3Bps19WWkU 7s3JY4U7DWskeXXd1tLD/grCAEG5uFrow1//Yjm4Nw8/DIjG4C90qft8jcdFniue tutUXTPxOg4peYKN19oiDZOv692mBce8o20zbVAR27EDagweI+TbFeGT8FK7+PU/ VF/34kotFjVBYSV9fr3BxWVol41WgOKEOAzvFfakB399x64KVdO54MApfzLHDvo2 SpoDAyarNMyJJWZvIKZSr7A3kgB41s6odC4SkCN1051O+9U18XWWK8yIbYW0NLd+ rD4ZUcs6/HDAVXlN3uz4zGsqe4Qkr0iqTO58KHl+8vG9A2pWuIds0gwrBQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFL8jV/xt7He1QAQVG9f5f9JkNbHqMB8GA1UdIwQY MBaAFKS8wSr6TwVzn0X2BeIhxkw8DS7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2Mt ODhiMDE2YmJkNTgxLzEvdnlOWF9HM3NkN1ZBQkJVYjFfbF8wbVExc2VvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2MtODhiMDE2YmJkNTgx LzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALuU6MA8E AgACMAkDBwAqABaIAAcwDQYJKoZIhvcNAQELBQADggEBACYPNii/T3bnbAuHBNoT mVrHyA101nwDthZy6G65Lpakv7ZvRPl1jLCVKytsUpMG9+Veq/CL0yWlLbUO0htz 1CEvqrx1pynmVLfE5nmh1MxRGIyOg+uzinkICvkIPvyWz4Vi4r0MHxoQ/JHt7zts lQltaeKCzdxq3eNqhwu5zZv8NWuhjVTkGsiZDU+9+lyBSlbp+aQG5MT55izpIAj/ nU+iPk8VFDB9A/lMaikPhRtHQOZ76pkSaJa7RVyDUUDQmWTEvFiOgpv4Mtr/rAFu A30DBveLPH6pYRy1KX1fOXUwP7MPutBTIhAD9MNOXaxe0msIWdsADy8Tc4HTYQUe hSQ= -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:20 2026 by rpki-client