This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/RBopAdVF60vgkqykUfTCW-bkIG8.roa File: RBopAdVF60vgkqykUfTCW-bkIG8.roa (raw, json) Hash identifier: QhamcW1yECyAqJIZtVxwyJIdNVMOgAFF2TzQ8FAjUVo= Subject key identifier: 44:1A:29:01:D5:45:EB:4B:E0:92:AC:A4:51:F4:C2:5B:E6:E4:20:6F Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c Certificate serial: 019B7910F2FDAB09A25CBA8C295EE8A7181E Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/RBopAdVF60vgkqykUfTCW-bkIG8.roa Signing time: Thu 01 Jan 2026 10:18:32 +0000 ROA not before: Thu 01 Jan 2026 10:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57543 IP address blocks: 46.143.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:f2:fd:ab:09:a2:5c:ba:8c:29:5e:e8:a7:18:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c Validity Not Before: Jan 1 10:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=441a2901d545eb4be092aca451f4c25be6e4206f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:85:cb:bd:e6:c5:57:34:fd:71:4f:87:77:94: 83:5b:5c:0a:04:d0:75:fa:32:a7:0b:fa:d9:ab:1d: 9d:9f:c7:4c:53:32:5b:63:83:f6:e5:02:01:93:ed: 65:3a:1b:31:94:a5:ff:19:bb:5b:2f:9c:b4:96:6c: de:ce:e8:66:32:9d:9e:d8:58:be:c1:72:b7:be:96: 87:29:ef:34:44:00:53:d9:86:9f:1f:d1:0b:94:43: df:0b:a0:fc:35:ff:1a:2b:d9:03:5d:f7:12:f3:31: d3:38:b1:cd:0e:aa:56:9d:53:86:19:52:20:d9:ca: 22:85:61:c0:da:34:c8:d6:f0:4c:d2:b3:fb:05:8b: be:f5:0e:99:ec:69:41:79:67:fa:8c:22:8d:9e:d0: 65:73:c5:c9:ac:d3:27:9c:08:81:a5:f5:49:49:2b: 5a:93:09:cb:a6:e3:de:ff:bd:4a:ef:64:ed:b4:62: ae:04:97:e6:71:a9:a4:bc:73:ac:f6:bf:d3:ea:97: 93:9c:89:bf:81:e6:42:de:d2:17:f2:3b:78:ff:a3: e1:13:78:f5:cb:df:1d:48:fb:43:8f:e3:d8:3d:86: 95:f1:54:e9:a5:6a:3c:9d:cc:5c:90:44:20:76:06: 1f:c3:0f:49:50:3c:7e:49:ab:f7:eb:fa:8f:86:b5: d2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:1A:29:01:D5:45:EB:4B:E0:92:AC:A4:51:F4:C2:5B:E6:E4:20:6F X509v3 Authority Key Identifier: keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/RBopAdVF60vgkqykUfTCW-bkIG8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.143.216.0/21 Signature Algorithm: sha256WithRSAEncryption 99:67:7e:24:f8:bb:ce:41:29:49:9d:2c:85:74:68:56:9b:2a: 59:ab:dc:b0:91:5a:7a:43:58:c6:44:4a:1a:e5:90:dd:7d:29: 38:45:a0:51:40:10:7c:a4:3f:cb:69:77:c4:d2:18:9b:a7:47: d1:0f:49:f2:8a:8f:8f:07:f5:af:1d:5c:47:5e:c7:b1:7b:7d: 97:a9:0d:ef:40:ef:e0:7f:78:d3:ce:ba:b7:69:cf:0f:9e:32: 63:aa:6e:73:f9:94:de:72:74:05:c9:70:23:c3:f7:15:56:4b: 1e:59:4a:2f:8e:9d:a3:f5:56:61:d1:d7:25:8a:7d:c7:1d:d4: c0:a0:fc:cb:c2:b6:7d:1f:3a:45:68:8c:0a:2a:72:11:73:f1: 79:55:22:bd:24:6b:92:de:45:06:2a:67:fe:1a:e4:cf:54:be: b8:3b:01:07:e6:91:b5:13:35:a1:f9:af:1b:bc:2a:ed:ba:fc: e9:b9:dd:ce:26:2b:21:89:14:07:95:d6:a1:40:92:f4:bf:31: 1f:4a:94:58:74:5c:63:65:ee:48:b3:b2:33:0c:77:e3:55:35: a7:8a:a2:c4:6b:e5:d4:1f:13:0f:cd:77:0f:05:40:e2:e6:c8: 10:5e:93:64:d7:5e:4e:44:3d:03:b8:97:34:90:c0:b9:d4:7f: c0:60:29:50 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EPL9qwmiXLqMKV7opxgeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNmRhOWU0MTY4NmQyMWMxMjc5OWM4ZTg0YjI3NGFhODI0 MTUwOGMwHhcNMjYwMTAxMTAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDFhMjkwMWQ1NDVlYjRiZTA5MmFjYTQ1MWY0YzI1YmU2ZTQyMDZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oXLvebFVzT9cU+Hd5SDW1wKBNB1 +jKnC/rZqx2dn8dMUzJbY4P25QIBk+1lOhsxlKX/GbtbL5y0lmzezuhmMp2e2Fi+ wXK3vpaHKe80RABT2YafH9ELlEPfC6D8Nf8aK9kDXfcS8zHTOLHNDqpWnVOGGVIg 2coihWHA2jTI1vBM0rP7BYu+9Q6Z7GlBeWf6jCKNntBlc8XJrNMnnAiBpfVJSSta kwnLpuPe/71K72TttGKuBJfmcamkvHOs9r/T6peTnIm/geZC3tIX8jt4/6PhE3j1 y98dSPtDj+PYPYaV8VTppWo8ncxckEQgdgYfww9JUDx+Sav36/qPhrXS6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEQaKQHVRetL4JKspFH0wlvm5CBvMB8GA1UdIwQY MBaAFO1tqeQWhtIcEnmcjoSydKqCQVCMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYt MjlmMWJlYjJmMjgyLzEvUkJvcEFkVkY2MHZna3F5a1VmVENXLWJrSUc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYtMjlmMWJlYjJmMjgy LzEvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLo/YMA0G CSqGSIb3DQEBCwUAA4IBAQCZZ34k+LvOQSlJnSyFdGhWmypZq9ywkVp6Q1jGREoa 5ZDdfSk4RaBRQBB8pD/LaXfE0hibp0fRD0nyio+PB/WvHVxHXsexe32XqQ3vQO/g f3jTzrq3ac8PnjJjqm5z+ZTecnQFyXAjw/cVVkseWUovjp2j9VZh0dclin3HHdTA oPzLwrZ9HzpFaIwKKnIRc/F5VSK9JGuS3kUGKmf+GuTPVL64OwEH5pG1EzWh+a8b vCrtuvzpud3OJishiRQHldahQJL0vzEfSpRYdFxjZe5Is7IzDHfjVTWniqLEa+XU HxMPzXcPBUDi5sgQXpNk115ORD0DuJc0kMC51H/AYClQ -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:20 2026 by rpki-client