This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/tnNeK8eyFtGEZ6KtS9iRT1rj9x0.roa File: tnNeK8eyFtGEZ6KtS9iRT1rj9x0.roa (raw, json) Hash identifier: hS1FbqFllMkEFt76KQZsh5rOUJv0NPZ+gkgJ9YHtZn4= Subject key identifier: B6:73:5E:2B:C7:B2:16:D1:84:67:A2:AD:4B:D8:91:4F:5A:E3:F7:1D Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Certificate serial: 019B76EAEDA8E4C025126F3CE89C5CF9051A Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/tnNeK8eyFtGEZ6KtS9iRT1rj9x0.roa Signing time: Thu 01 Jan 2026 00:17:46 +0000 ROA not before: Thu 01 Jan 2026 00:17:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47750 IP address blocks: 46.249.108.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:ed:a8:e4:c0:25:12:6f:3c:e8:9c:5c:f9:05:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478 Validity Not Before: Jan 1 00:17:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b6735e2bc7b216d18467a2ad4bd8914f5ae3f71d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ce:95:5e:f4:48:2d:88:2d:f7:b8:09:d5:6d: 8b:f0:f9:e1:ee:cf:dd:ad:e9:7b:6e:39:c0:ed:45: e4:b7:47:dd:0c:89:dd:ba:da:36:a5:13:72:f7:af: 7a:d1:c6:08:6f:13:9a:24:b3:2e:51:40:e2:e9:12: ac:ba:f0:11:e7:cb:db:7f:31:ad:c5:04:05:37:a4: 54:93:f5:bc:35:9b:b9:8c:76:61:32:9c:e5:09:84: ce:fa:0c:65:15:8c:44:08:7e:06:ab:8a:79:71:1e: cd:1b:84:d7:4e:41:b4:9e:f8:99:15:33:07:bc:28: 52:46:60:9f:e1:f1:fd:6b:5a:2e:03:19:76:f8:de: 23:54:e5:09:16:7e:08:25:bf:7a:80:fe:d1:94:4b: 4e:f3:d1:03:85:f4:c2:9c:6f:b6:d4:38:6b:7a:84: 5f:ba:8e:e0:45:68:08:34:1c:9d:27:97:6e:e3:99: e3:01:21:1f:f2:83:2f:ff:94:67:ba:78:56:22:a9: d7:3d:b4:34:b2:35:07:9a:57:5f:88:23:c5:e9:9d: 4e:b2:80:e3:7a:86:2b:26:16:aa:e2:48:7d:80:4c: cb:aa:c8:a7:ac:f9:2d:13:b0:a8:19:17:76:9a:0a: 86:e1:23:6a:29:de:e2:8b:8c:fe:1d:15:7a:48:f4: b2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:73:5E:2B:C7:B2:16:D1:84:67:A2:AD:4B:D8:91:4F:5A:E3:F7:1D X509v3 Authority Key Identifier: keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/tnNeK8eyFtGEZ6KtS9iRT1rj9x0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.249.108.0/23 Signature Algorithm: sha256WithRSAEncryption 63:74:f5:b5:4e:68:07:45:c8:f3:c9:e2:1c:a6:5f:c1:6b:fb: d5:b1:94:e7:b9:66:cf:41:cc:c0:d7:01:70:e6:06:b7:65:8d: 7c:92:88:a6:1a:77:f1:28:26:9e:9b:b1:e1:08:db:38:e8:f2: cc:be:f9:63:26:91:8e:9a:90:c8:93:de:78:37:9f:f2:a9:91: d9:f5:18:1f:10:5d:6e:0c:0f:2a:c7:5e:88:4a:39:a6:2c:c3: 6a:6c:11:b5:f0:bb:4b:e2:0d:9d:10:3a:d0:6c:81:29:eb:3b: 9a:7d:45:50:5e:d4:45:67:45:4b:35:68:44:ff:fb:40:4e:d9: a9:88:ec:9a:e9:55:f0:3f:8e:15:ff:85:98:ee:3d:d6:74:ac: 4a:25:c6:e4:39:e4:ed:18:af:0a:f0:9e:fd:7b:80:b3:dc:c8: 25:3e:bc:c1:eb:09:9a:e2:1c:f0:8c:d4:72:d3:f8:99:8c:26: 20:4b:07:90:6e:e4:c2:e6:6a:51:9c:44:d2:db:8c:63:33:92: 60:42:2b:76:c8:5c:72:cc:6e:b3:e0:ad:13:8e:fa:b8:99:16: eb:b9:44:b3:4f:4d:7a:22:73:8a:90:fd:10:51:25:a9:6a:b2: 1f:6f:88:40:69:4d:21:36:42:89:7c:70:d4:b7:58:94:65:ea: b7:8a:87:ac -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26u2o5MAlEm886Jxc+QUaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhYzNkYWExYjE0ODUwZjJlNjFjNTkyYjIxOTE5MTVhNWU2 NWE0NzgwHhcNMjYwMTAxMDAxNzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNjczNWUyYmM3YjIxNmQxODQ2N2EyYWQ0YmQ4OTE0ZjVhZTNmNzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnM6VXvRILYgt97gJ1W2L8Pnh7s/d rel7bjnA7UXkt0fdDInduto2pRNy96960cYIbxOaJLMuUUDi6RKsuvAR58vbfzGt xQQFN6RUk/W8NZu5jHZhMpzlCYTO+gxlFYxECH4Gq4p5cR7NG4TXTkG0nviZFTMH vChSRmCf4fH9a1ouAxl2+N4jVOUJFn4IJb96gP7RlEtO89EDhfTCnG+21DhreoRf uo7gRWgINBydJ5du45njASEf8oMv/5RnunhWIqnXPbQ0sjUHmldfiCPF6Z1OsoDj eoYrJhaq4kh9gEzLqsinrPktE7CoGRd2mgqG4SNqKd7ii4z+HRV6SPSynQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLZzXivHshbRhGeirUvYkU9a4/cdMB8GA1UdIwQY MBaAFCrD2qGxSFDy5hxZKyGRkVpeZaR4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUt ZmUwNjU5MTc2YTU2LzEvdG5OZUs4ZXlGdEdFWjZLdFM5aVJUMXJqOXgwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC80MDViYmQtNTkxMy00ZTk1LThlNzUtZmUwNjU5MTc2YTU2 LzEvS3NQYW9iRklVUExtSEZrcklaR1JXbDVscEhnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLvlsMA0G CSqGSIb3DQEBCwUAA4IBAQBjdPW1TmgHRcjzyeIcpl/Ba/vVsZTnuWbPQczA1wFw 5ga3ZY18koimGnfxKCaem7HhCNs46PLMvvljJpGOmpDIk954N5/yqZHZ9RgfEF1u DA8qx16ISjmmLMNqbBG18LtL4g2dEDrQbIEp6zuafUVQXtRFZ0VLNWhE//tATtmp iOya6VXwP44V/4WY7j3WdKxKJcbkOeTtGK8K8J79e4Cz3MglPrzB6wma4hzwjNRy 0/iZjCYgSweQbuTC5mpRnETS24xjM5JgQit2yFxyzG6z4K0Tjvq4mRbruUSzT016 InOKkP0QUSWparIfb4hAaU0hNkKJfHDUt1iUZeq3ioes -----END CERTIFICATE-----Generated at Sun Jan 25 12:02:43 2026 by rpki-client