This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/sBkvzKMxXQ9VBDYEWnRCPD0PCIA.roa File: sBkvzKMxXQ9VBDYEWnRCPD0PCIA.roa (raw, json) Hash identifier: dT/+BDWG1bJq8gaqPu5N44NgBYblnx5L58QElRDcVlk= Subject key identifier: B0:19:2F:CC:A3:31:5D:0F:55:04:36:04:5A:74:42:3C:3D:0F:08:80 Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Certificate serial: 019B76EAF6ABEC94F08605AF9DC680D91700 Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/sBkvzKMxXQ9VBDYEWnRCPD0PCIA.roa Signing time: Thu 01 Jan 2026 00:17:48 +0000 ROA not before: Thu 01 Jan 2026 00:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142019 IP address blocks: 46.249.104.0/24 maxlen: 24 46.249.105.0/24 maxlen: 24 46.249.106.0/24 maxlen: 24 46.249.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:f6:ab:ec:94:f0:86:05:af:9d:c6:80:d9:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Validity Not Before: Jan 1 00:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0192fcca3315d0f550436045a74423c3d0f0880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:8f:14:5b:f9:9a:ae:59:1d:83:df:d7:74:be: 92:0c:33:ed:46:fa:fb:74:19:50:90:70:5f:5c:7d: c7:af:06:56:59:83:a4:ef:fb:4d:c5:fc:eb:c5:f6: f8:6a:09:78:24:b3:23:f5:42:d3:f9:f2:63:9b:dc: a0:47:38:77:38:e4:1a:8a:d7:88:f0:44:b0:e6:e7: 44:63:1a:6e:cc:02:7e:f9:05:5b:5d:93:31:39:98: ec:e6:69:4e:ad:1e:d0:91:48:2c:93:d5:46:19:36: ce:2e:da:93:79:c3:49:0a:b4:90:9c:12:41:b0:f5: b0:5f:27:25:e4:bd:0a:2c:f1:dc:81:69:08:bf:8f: af:6f:86:0c:ba:f3:0e:c5:93:e7:1a:b5:2a:5c:da: 43:55:1a:15:84:a6:2c:c6:43:f4:0a:39:d1:f3:ab: b2:15:e4:f8:91:d7:72:e4:f5:fb:da:e9:1e:bb:ef: 57:16:87:fe:c7:fa:81:2f:fe:88:08:3d:86:7a:ea: 51:07:19:df:59:23:9c:0c:22:f0:0e:43:52:79:e4: a2:29:37:fe:48:84:52:41:0f:f7:5d:3f:9c:5f:6d: 92:51:3e:60:d2:34:9a:35:b1:fa:65:3f:9b:2e:48: 02:1c:cb:b3:db:c6:74:c0:76:3f:b2:2d:a9:49:4c: 63:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:19:2F:CC:A3:31:5D:0F:55:04:36:04:5A:74:42:3C:3D:0F:08:80 X509v3 Authority Key Identifier: keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/sBkvzKMxXQ9VBDYEWnRCPD0PCIA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.249.104.0/22 Signature Algorithm: sha256WithRSAEncryption ae:24:0a:03:7a:83:1c:a9:6d:ed:65:69:75:3f:f5:df:21:eb: c3:7b:5d:cd:38:95:b7:94:2e:cd:bd:46:4a:ee:69:66:fc:6d: 48:4f:7a:5a:85:00:9a:45:88:b9:91:56:b6:b6:d1:0f:13:5f: 43:b0:8c:98:91:a3:72:ea:3e:0d:ec:ff:8a:8a:90:10:7a:9c: ff:19:78:0f:72:40:40:ee:d8:55:aa:7d:e8:1c:f1:e7:72:b7: ba:27:98:e7:99:67:1f:ca:cc:a9:ce:87:e0:29:1e:48:8d:8a: 5e:ae:2f:83:44:e9:b1:02:1b:df:30:e9:09:3d:05:ca:b5:c6: e9:50:27:30:f9:31:14:da:52:6f:61:90:04:56:3b:29:a1:1a: 25:03:5a:97:b3:e8:74:8f:e8:af:a5:9e:fc:c9:c0:12:16:3f: 13:2a:d6:32:d7:2b:3a:b5:28:d1:47:bb:e5:4d:4e:c1:82:e8: 67:0f:86:15:a2:fb:57:38:e0:d5:48:f8:3f:53:04:8d:19:19: 6b:d1:9a:13:7b:a5:32:a2:c1:74:58:5b:0c:8e:f0:1f:10:aa: c1:67:7a:63:05:40:6c:be:dd:99:4f:02:6e:3d:bf:58:ee:32: 76:96:1b:fc:dc:72:22:0d:62:08:2e:ea:93:d2:23:a0:d9:0f: 9d:9e:2c:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26var7JTwhgWvncaA2RcAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2 NWE0NzgwHhcNMjYwMTAxMDAxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMDE5MmZjY2EzMzE1ZDBmNTUwNDM2MDQ1YTc0NDIzYzNkMGYwODgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzI8UW/marlkdg9/XdL6SDDPtRvr7 dBlQkHBfXH3HrwZWWYOk7/tNxfzrxfb4agl4JLMj9ULT+fJjm9ygRzh3OOQaiteI 8ESw5udEYxpuzAJ++QVbXZMxOZjs5mlOrR7QkUgsk9VGGTbOLtqTecNJCrSQnBJB sPWwXycl5L0KLPHcgWkIv4+vb4YMuvMOxZPnGrUqXNpDVRoVhKYsxkP0CjnR86uy FeT4kddy5PX72ukeu+9XFof+x/qBL/6ICD2GeupRBxnfWSOcDCLwDkNSeeSiKTf+ SIRSQQ/3XT+cX22SUT5g0jSaNbH6ZT+bLkgCHMuz28Z0wHY/si2pSUxjlQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLAZL8yjMV0PVQQ2BFp0Qjw9DwiAMB8GA1UdIwQY MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt ZmUwNjU5MTc2YTU2LzEvc0JrdnpLTXhYUTlWQkRZRVduUkNQRDBQQ0lBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2 LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLvloMA0G CSqGSIb3DQEBCwUAA4IBAQCuJAoDeoMcqW3tZWl1P/XfIevDe13NOJW3lC7NvUZK 7mlm/G1IT3pahQCaRYi5kVa2ttEPE19DsIyYkaNy6j4N7P+KipAQepz/GXgPckBA 7thVqn3oHPHncre6J5jnmWcfysypzofgKR5IjYperi+DROmxAhvfMOkJPQXKtcbp UCcw+TEU2lJvYZAEVjspoRolA1qXs+h0j+ivpZ78ycASFj8TKtYy1ys6tSjRR7vl TU7BguhnD4YVovtXOODVSPg/UwSNGRlr0ZoTe6UyosF0WFsMjvAfEKrBZ3pjBUBs vt2ZTwJuPb9Y7jJ2lhv83HIiDWIILuqT0iOg2Q+dnixt -----END CERTIFICATE-----Generated at Sun Jan 25 17:45:22 2026 by rpki-client