This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/wKCBiDDf1e8BicVavixrgdQZibE.roa File: wKCBiDDf1e8BicVavixrgdQZibE.roa (raw, json) Hash identifier: MHYVnslYQOZS9IPfWLJkmMuhLwMjuzTKosW1ejMPRAQ= Subject key identifier: C0:A0:81:88:30:DF:D5:EF:01:89:C5:5A:BE:2C:6B:81:D4:19:89:B1 Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Certificate serial: 019B7CEDCD96179BE918ED7A8EA545CD34A4 Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/wKCBiDDf1e8BicVavixrgdQZibE.roa Signing time: Fri 02 Jan 2026 04:18:37 +0000 ROA not before: Fri 02 Jan 2026 04:18:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204294 IP address blocks: 46.229.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:cd:96:17:9b:e9:18:ed:7a:8e:a5:45:cd:34:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Validity Not Before: Jan 2 04:18:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c0a0818830dfd5ef0189c55abe2c6b81d41989b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:23:c3:84:b5:04:d4:ba:88:fe:02:55:2f:47: 71:06:27:d3:3a:3c:e3:e0:1b:2a:8e:c6:af:26:db: 81:9b:80:5c:88:f6:5f:94:a3:15:31:fe:97:0a:b6: 62:16:b0:9b:e8:a0:e5:9e:fc:00:ea:b6:3d:c8:ed: 12:b3:1c:09:78:62:1a:0c:be:10:85:4d:09:44:e0: 6a:9d:71:b5:02:43:00:d8:33:b1:ba:f2:08:a0:e9: 34:ef:90:cd:c0:76:19:c5:4c:d7:60:13:99:01:83: 6e:87:08:64:45:3d:4d:56:c4:46:59:e8:35:9c:3c: 1c:40:f7:c7:69:d8:75:45:d0:f8:92:d1:73:0c:a6: 82:0f:28:0e:cc:c4:eb:a7:09:b7:73:0f:9f:42:34: 74:45:85:a7:59:d7:a5:0a:32:c2:ec:08:5b:6b:a2: 7c:fb:bd:a2:49:79:6c:d4:78:34:85:21:a5:23:d1: 29:96:33:5f:66:49:d1:84:ee:73:55:16:75:85:42: a9:1a:15:d7:48:3a:72:5f:b8:9c:51:1b:e7:21:33: 39:2e:88:b4:ca:29:b5:49:23:e9:09:a5:ca:ea:77: 7a:7d:d7:ff:de:51:0a:6b:e0:0d:6e:bc:2c:8c:40: 94:32:96:39:4a:a0:31:17:a2:ac:9c:00:2c:ce:52: 9d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A0:81:88:30:DF:D5:EF:01:89:C5:5A:BE:2C:6B:81:D4:19:89:B1 X509v3 Authority Key Identifier: keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/wKCBiDDf1e8BicVavixrgdQZibE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.229.57.0/24 Signature Algorithm: sha256WithRSAEncryption 65:8c:f0:be:d3:b6:9d:08:bd:ec:f4:8b:f0:7e:d0:34:9d:92: 32:45:91:ea:39:48:57:74:94:17:0a:f3:28:8a:bb:ca:bb:78: 20:46:c0:b5:99:ce:fd:8d:04:46:aa:88:69:e3:6c:7a:22:15: 0a:f8:10:91:c8:af:27:be:96:44:cd:9a:ab:b1:4c:05:5c:a5: 0f:f4:3a:8f:d9:a7:04:e4:0c:f2:d5:06:40:a8:60:5e:a7:14: 7d:01:19:28:03:eb:e3:06:1a:e4:20:d5:c5:2f:d4:72:15:0e: 8f:76:3e:f7:c7:7f:52:06:b0:5a:04:7b:7b:ad:b2:16:79:95: 98:71:e2:87:e9:84:de:33:65:fc:dd:6b:59:75:24:6d:2f:4c: 8d:cc:13:8d:2b:67:82:93:0f:a9:6d:9e:c9:92:41:b2:0b:d7: 10:22:e2:ed:8d:99:ea:b4:f2:26:56:46:66:12:5e:ec:72:6d: b0:b2:8d:8c:ab:05:71:de:ad:8d:4b:49:8d:31:b9:e3:3c:91: 55:04:35:c5:65:4c:8a:3f:0e:25:03:28:6c:b0:88:5a:cb:54: 53:65:c1:b3:87:5b:e3:a4:6c:5b:9f:49:e4:c1:70:42:0d:05: 1d:b5:50:48:4f:ef:08:d6:d3:81:58:00:44:90:bb:0d:ab:29: 07:bb:a3:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87c2WF5vpGO16jqVFzTSkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YmNjMTJhZmE0ZjA1NzM5ZjQ1ZjYwNWUyMjFjNjRjM2Mw ZDJlZDYwHhcNMjYwMTAyMDQxODM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMGEwODE4ODMwZGZkNWVmMDE4OWM1NWFiZTJjNmI4MWQ0MTk4OWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyPDhLUE1LqI/gJVL0dxBifTOjzj 4BsqjsavJtuBm4BciPZflKMVMf6XCrZiFrCb6KDlnvwA6rY9yO0SsxwJeGIaDL4Q hU0JROBqnXG1AkMA2DOxuvIIoOk075DNwHYZxUzXYBOZAYNuhwhkRT1NVsRGWeg1 nDwcQPfHadh1RdD4ktFzDKaCDygOzMTrpwm3cw+fQjR0RYWnWdelCjLC7Ahba6J8 +72iSXls1Hg0hSGlI9EpljNfZknRhO5zVRZ1hUKpGhXXSDpyX7icURvnITM5Loi0 yim1SSPpCaXK6nd6fdf/3lEKa+ANbrwsjECUMpY5SqAxF6KsnAAszlKdjQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMCggYgw39XvAYnFWr4sa4HUGYmxMB8GA1UdIwQY MBaAFKS8wSr6TwVzn0X2BeIhxkw8DS7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2Mt ODhiMDE2YmJkNTgxLzEvd0tDQmlERGYxZThCaWNWYXZpeHJnZFFaaWJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2MtODhiMDE2YmJkNTgx LzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALuU5MA0G CSqGSIb3DQEBCwUAA4IBAQBljPC+07adCL3s9IvwftA0nZIyRZHqOUhXdJQXCvMo irvKu3ggRsC1mc79jQRGqohp42x6IhUK+BCRyK8nvpZEzZqrsUwFXKUP9DqP2acE 5Azy1QZAqGBepxR9ARkoA+vjBhrkINXFL9RyFQ6Pdj73x39SBrBaBHt7rbIWeZWY ceKH6YTeM2X83WtZdSRtL0yNzBONK2eCkw+pbZ7JkkGyC9cQIuLtjZnqtPImVkZm El7scm2wso2MqwVx3q2NS0mNMbnjPJFVBDXFZUyKPw4lAyhssIhay1RTZcGzh1vj pGxbn0nkwXBCDQUdtVBIT+8I1tOBWABEkLsNqykHu6PO -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:12 2026 by rpki-client