This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/F7PZgP7t82h6F20Vy_-BdW4k4HI.roa File: F7PZgP7t82h6F20Vy_-BdW4k4HI.roa (raw, json) Hash identifier: PDnck6jLnuX/ShD8EfhI7N+MWbemsKl0J6d5JzXqIKA= Subject key identifier: 17:B3:D9:80:FE:ED:F3:68:7A:17:6D:15:CB:FF:81:75:6E:24:E0:72 Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Certificate serial: 019B76EAF1A05B2E2AA5261684293CC1B690 Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/F7PZgP7t82h6F20Vy_-BdW4k4HI.roa Signing time: Thu 01 Jan 2026 00:17:47 +0000 ROA not before: Thu 01 Jan 2026 00:17:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57043 IP address blocks: 46.249.109.0/24 maxlen: 24 82.115.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f1:a0:5b:2e:2a:a5:26:16:84:29:3c:c1:b6:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Validity Not Before: Jan 1 00:17:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17b3d980feedf3687a176d15cbff81756e24e072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:15:19:d3:91:51:ed:ed:af:87:57:29:3a:d9: 01:be:f7:09:46:27:31:71:e1:83:0d:cb:0a:a8:93: 18:7a:62:96:94:25:02:c9:07:7f:b1:9c:86:f4:d7: 06:a1:d9:7e:46:7d:35:57:b8:84:2a:d2:da:22:58: ee:66:23:88:f8:d6:ad:02:e2:c0:98:ec:f2:38:b8: c7:7f:e0:4d:e7:c2:d9:1c:43:6f:c8:34:4c:08:43: 7a:c5:6a:65:7c:e6:d7:4f:5a:43:db:4c:de:95:1e: be:aa:43:dc:20:28:d4:77:43:e5:6c:17:55:54:d4: 78:52:10:b7:86:9a:ff:f4:ac:cc:9d:86:08:19:2f: 8a:d1:87:44:ae:e2:85:e2:3a:26:87:56:57:4c:67: 0b:d2:37:2d:82:e4:1e:eb:7e:96:b1:71:8c:a0:7b: 48:5f:b2:69:59:18:7e:0e:ee:9a:be:cd:0e:75:e9: 23:e4:39:66:80:83:87:da:b4:cb:ea:98:73:ef:62: e4:66:e6:cb:f4:24:b2:c1:03:d6:bf:bf:26:e7:c2: 4a:a0:83:16:c5:ed:41:ba:e4:71:0f:a2:2e:eb:2c: 78:de:93:3c:39:37:18:c6:2b:28:5f:08:95:09:bc: d7:71:71:46:fd:44:f8:7c:98:1b:15:1b:56:fc:e5: f2:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B3:D9:80:FE:ED:F3:68:7A:17:6D:15:CB:FF:81:75:6E:24:E0:72 X509v3 Authority Key Identifier: keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/F7PZgP7t82h6F20Vy_-BdW4k4HI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.249.109.0/24 82.115.28.0/24 Signature Algorithm: sha256WithRSAEncryption 32:8e:e6:a7:f3:ed:a8:5f:52:92:22:c8:b5:ea:e0:14:01:87: 04:eb:f0:4e:5c:44:4e:43:9c:1d:b0:a9:ed:f9:fd:37:4d:0c: 3f:a5:ad:80:b2:00:b3:b3:4d:3a:d4:15:b0:e2:0e:08:34:b1: ee:52:c5:e5:66:0e:b0:f2:6c:d1:da:b4:ee:b1:94:6f:36:07: 5c:db:12:c5:f9:30:bc:91:8d:fc:51:f9:62:49:ac:a7:05:8a: 26:cb:b1:d3:df:ed:d5:32:68:72:af:a7:24:5b:ed:6c:19:31: dc:fb:bd:5d:8c:35:0c:29:fc:4b:59:58:06:a7:4f:55:52:9e: c2:95:a8:20:4c:2e:12:e4:52:ad:2d:2b:67:d7:41:97:4e:f3: 28:22:e4:d5:8c:2f:ea:36:2f:c3:72:74:42:ce:f5:c0:d4:41: 61:4c:5a:b6:7f:a9:e0:ee:c3:30:1c:66:be:d2:8b:95:e6:67: 98:f7:ac:df:51:b9:1a:d8:94:0b:6d:8a:ca:70:b8:20:21:c0: a6:06:d0:f0:00:6d:cc:16:e5:88:97:ce:04:dc:d9:5c:0c:38: ad:86:54:2e:b3:a4:d4:bb:0c:cf:de:a8:fb:35:f7:bf:1c:58: a8:2e:76:81:50:9f:39:78:8a:c8:4b:4a:6d:74:ff:a9:e6:da: d0:07:f1:4a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt26vGgWy4qpSYWhCk8wbaQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2 NWE0NzgwHhcNMjYwMTAxMDAxNzQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2IzZDk4MGZlZWRmMzY4N2ExNzZkMTVjYmZmODE3NTZlMjRlMDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRUZ05FR7e2vh1cpOtkBvvcJRicx ceGDDcsKqJMYemKWlCUCyQd/sZyG9NcGodl+Rn01V7iEKtLaIljuZiOI+NatAuLA mOzyOLjHf+BN58LZHENvyDRMCEN6xWplfObXT1pD20zelR6+qkPcICjUd0PlbBdV VNR4UhC3hpr/9KzMnYYIGS+K0YdEruKF4jomh1ZXTGcL0jctguQe636WsXGMoHtI X7JpWRh+Du6avs0Odekj5DlmgIOH2rTL6phz72LkZubL9CSywQPWv78m58JKoIMW xe1BuuRxD6Iu6yx43pM8OTcYxisoXwiVCbzXcXFG/UT4fJgbFRtW/OXyhQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBez2YD+7fNoehdtFcv/gXVuJOByMB8GA1UdIwQY MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt ZmUwNjU5MTc2YTU2LzEvRjdQWmdQN3Q4Mmg2RjIwVnlfLUJkVzRrNEhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2 LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALvltAwQA UnMcMA0GCSqGSIb3DQEBCwUAA4IBAQAyjuan8+2oX1KSIsi16uAUAYcE6/BOXERO Q5wdsKnt+f03TQw/pa2AsgCzs0061BWw4g4INLHuUsXlZg6w8mzR2rTusZRvNgdc 2xLF+TC8kY38UfliSaynBYomy7HT3+3VMmhyr6ckW+1sGTHc+71djDUMKfxLWVgG p09VUp7ClaggTC4S5FKtLStn10GXTvMoIuTVjC/qNi/DcnRCzvXA1EFhTFq2f6ng 7sMwHGa+0ouV5meY96zfUbka2JQLbYrKcLggIcCmBtDwAG3MFuWIl84E3NlcDDit hlQus6TUuwzP3qj7Nfe/HFioLnaBUJ85eIrIS0ptdP+p5trQB/FK -----END CERTIFICATE-----Generated at Sun Jan 25 12:02:53 2026 by rpki-client