This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/2fnNi2RG50nUnV2NcaaKxkNfurs.roa File: 2fnNi2RG50nUnV2NcaaKxkNfurs.roa (raw, json) Hash identifier: YjCnMRPFuN3k5TRvL6rGrwmbFWVhQVPPpGvWD61uUkg= Subject key identifier: D9:F9:CD:8B:64:46:E7:49:D4:9D:5D:8D:71:A6:8A:C6:43:5F:BA:BB Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c Certificate serial: 019B7910F34853614080913F0E951AA594BB Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/2fnNi2RG50nUnV2NcaaKxkNfurs.roa Signing time: Thu 01 Jan 2026 10:18:32 +0000 ROA not before: Thu 01 Jan 2026 10:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61008 IP address blocks: 46.143.240.0/20 maxlen: 20 2a05:a380::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f3:48:53:61:40:80:91:3f:0e:95:1a:a5:94:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c Validity Not Before: Jan 1 10:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d9f9cd8b6446e749d49d5d8d71a68ac6435fbabb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a5:67:15:78:27:09:b0:a2:4f:87:17:a7:2e: 18:b4:84:37:20:11:a7:a9:9c:06:78:52:20:01:2c: 40:6d:75:57:06:8e:86:bb:89:d0:5a:2c:29:f7:ab: 73:a1:f3:03:c3:06:b3:e7:cc:c6:c2:88:ab:e1:20: 70:b7:57:e4:cb:2b:a5:d6:bc:db:79:20:b8:4b:50: 4a:c5:66:15:d8:a2:d2:a4:40:f7:2b:56:d6:fb:13: d7:79:8e:4f:83:ff:3f:34:13:d5:81:65:7f:1e:12: 78:f1:1e:6f:8b:ab:e0:a4:f3:f8:b4:1e:25:6f:66: 10:8b:2c:e6:9e:04:ba:c0:5f:23:13:06:89:1e:3b: bf:f1:3f:e8:dd:c3:04:20:44:6a:d7:a5:57:a7:49: d4:f5:8d:9f:41:76:c5:28:41:74:26:fc:2c:a8:db: cd:2b:57:c4:29:77:e6:99:88:ac:d7:24:81:67:db: 1f:dd:8c:70:1c:3c:a6:a9:e3:41:9c:b7:09:48:0b: 50:b6:e1:33:d7:ce:97:d2:0c:90:c5:d0:ac:fc:22: cb:27:8e:6b:85:46:95:75:6a:71:c4:34:78:48:47: 5f:67:c7:c7:45:70:ed:7e:cb:d9:86:2b:ec:74:ce: e2:69:09:2a:35:db:11:7b:78:11:dc:df:e5:1d:1f: 18:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F9:CD:8B:64:46:E7:49:D4:9D:5D:8D:71:A6:8A:C6:43:5F:BA:BB X509v3 Authority Key Identifier: keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/2fnNi2RG50nUnV2NcaaKxkNfurs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.143.240.0/20 IPv6: 2a05:a380::/29 Signature Algorithm: sha256WithRSAEncryption 72:97:b6:28:8d:87:c8:31:5b:d2:fe:b2:a2:03:c6:2e:a3:d7: ca:b1:0a:16:a6:4e:49:14:48:4c:07:41:3c:93:cc:93:72:b6: 3b:54:41:1d:11:fe:90:16:ff:35:18:d9:69:75:1a:28:ff:58: a0:b9:9d:6f:79:7c:87:ff:36:14:25:66:11:e5:cc:dd:e6:aa: 7a:67:60:b3:ed:c7:11:eb:19:03:d4:43:5d:44:1c:0a:5a:f0: 02:08:3a:df:c9:36:96:92:67:6b:ed:f6:9f:08:64:20:91:fc: 7f:ec:09:21:d6:69:fe:f5:ef:98:3f:7a:57:46:39:a9:3b:76: 73:15:a1:2c:a5:fd:dc:78:8a:d8:43:ab:67:a6:f1:34:e5:6c: 39:1a:1f:48:2f:2d:79:a9:34:55:3e:1a:90:27:cb:57:71:26: 1a:d3:01:4b:bc:b3:16:9c:50:77:a6:87:99:8a:d5:99:0b:42: bf:b1:0c:96:86:a9:28:53:11:bc:ad:69:1b:f1:90:01:ca:2d: df:91:eb:18:d9:5e:e6:fa:d1:52:2f:e1:2a:a3:0c:77:89:7a: e7:76:6a:c4:fe:46:58:75:d9:41:0f:eb:34:83:a7:8d:0a:27: 3c:64:88:f3:29:2c:01:b0:9c:c6:89:f5:0d:7d:9a:38:d0:a5: 6c:98:6f:41 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EPNIU2FAgJE/DpUapZS7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNmRhOWU0MTY4NmQyMWMxMjc5OWM4ZTg0YjI3NGFhODI0 MTUwOGMwHhcNMjYwMTAxMTAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkOWY5Y2Q4YjY0NDZlNzQ5ZDQ5ZDVkOGQ3MWE2OGFjNjQzNWZiYWJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqVnFXgnCbCiT4cXpy4YtIQ3IBGn qZwGeFIgASxAbXVXBo6Gu4nQWiwp96tzofMDwwaz58zGwoir4SBwt1fkyyul1rzb eSC4S1BKxWYV2KLSpED3K1bW+xPXeY5Pg/8/NBPVgWV/HhJ48R5vi6vgpPP4tB4l b2YQiyzmngS6wF8jEwaJHju/8T/o3cMEIERq16VXp0nU9Y2fQXbFKEF0JvwsqNvN K1fEKXfmmYis1ySBZ9sf3YxwHDymqeNBnLcJSAtQtuEz186X0gyQxdCs/CLLJ45r hUaVdWpxxDR4SEdfZ8fHRXDtfsvZhivsdM7iaQkqNdsRe3gR3N/lHR8YowIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFNn5zYtkRudJ1J1djXGmisZDX7q7MB8GA1UdIwQY MBaAFO1tqeQWhtIcEnmcjoSydKqCQVCMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYt MjlmMWJlYjJmMjgyLzEvMmZuTmkyUkc1MG5VblYyTmNhYUt4a05mdXJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYtMjlmMWJlYjJmMjgy LzEvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQELo/wMA0E AgACMAcDBQMqBaOAMA0GCSqGSIb3DQEBCwUAA4IBAQByl7YojYfIMVvS/rKiA8Yu o9fKsQoWpk5JFEhMB0E8k8yTcrY7VEEdEf6QFv81GNlpdRoo/1iguZ1veXyH/zYU JWYR5czd5qp6Z2Cz7ccR6xkD1ENdRBwKWvACCDrfyTaWkmdr7fafCGQgkfx/7Akh 1mn+9e+YP3pXRjmpO3ZzFaEspf3ceIrYQ6tnpvE05Ww5Gh9ILy15qTRVPhqQJ8tX cSYa0wFLvLMWnFB3poeZitWZC0K/sQyWhqkoUxG8rWkb8ZAByi3fkesY2V7m+tFS L+Eqowx3iXrndmrE/kZYddlBD+s0g6eNCic8ZIjzKSwBsJzGifUNfZo40KVsmG9B -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:21 2026 by rpki-client