This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/Sfbe9RJzesGyW2YTVmf55xwp9gs.roa File: Sfbe9RJzesGyW2YTVmf55xwp9gs.roa (raw, json) Hash identifier: 9lWmCQ04joDJG6bg+9iA336mtf6Ooum274GGVbmVenw= Subject key identifier: 49:F6:DE:F5:12:73:7A:C1:B2:5B:66:13:56:67:F9:E7:1C:29:F6:0B Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c Certificate serial: 019A53D5AAEDF10CD37C0E083C21DB993FED Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/Sfbe9RJzesGyW2YTVmf55xwp9gs.roa Signing time: Wed 05 Nov 2025 11:45:03 +0000 ROA not before: Wed 05 Nov 2025 11:45:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 43395 IP address blocks: 46.143.224.0/20 maxlen: 20 46.143.224.0/24 maxlen: 24 46.143.225.0/24 maxlen: 24 46.143.226.0/24 maxlen: 24 46.143.227.0/24 maxlen: 24 46.143.228.0/24 maxlen: 24 46.143.229.0/24 maxlen: 24 46.143.230.0/24 maxlen: 24 46.143.231.0/24 maxlen: 24 46.143.232.0/24 maxlen: 24 46.143.233.0/24 maxlen: 24 46.143.234.0/24 maxlen: 24 46.143.235.0/24 maxlen: 24 46.143.236.0/24 maxlen: 24 46.143.237.0/24 maxlen: 24 46.143.238.0/24 maxlen: 24 46.143.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 04:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:53:d5:aa:ed:f1:0c:d3:7c:0e:08:3c:21:db:99:3f:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c Validity Not Before: Nov 5 11:45:03 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=49f6def512737ac1b25b66135667f9e71c29f60b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:78:94:bd:cb:6c:07:15:54:7a:da:1c:7b:2e: 41:a6:58:a8:18:f4:53:2c:e2:d9:7b:94:1b:4b:39: 39:7a:fe:1e:38:1b:5f:3c:cd:72:8c:b9:c4:66:48: e8:12:9a:07:df:48:0d:c0:a9:7c:f9:08:75:c7:0f: 64:d0:ac:ef:7d:84:d5:0c:81:16:28:ef:99:1e:3e: 96:0a:3d:0a:b0:a5:89:ee:92:08:f6:c2:97:37:01: dd:47:a5:a1:ce:67:26:e4:c4:16:b4:4a:e7:eb:d5: 82:10:ec:1d:f7:0d:bf:be:d4:93:b9:e4:0d:7c:0f: f4:d2:90:a9:9f:5e:c8:59:3d:5d:de:94:ed:74:b7: 8d:8c:21:07:c5:3c:3d:e6:09:13:fa:1f:ab:84:73: a0:c4:2a:16:a7:a6:b7:0f:34:76:6e:db:b5:b4:c4: e2:7d:75:8b:c6:5d:91:41:88:aa:47:e6:16:dd:4d: 8b:3c:c3:90:fa:5f:6c:1b:90:ce:74:20:6d:a5:9b: b8:e4:1b:47:4d:ab:26:44:f9:1c:1a:4f:49:6e:50: 85:24:50:15:b0:7d:6e:d8:53:27:82:95:2c:2a:7c: 39:bd:09:e6:bd:73:9d:84:d0:de:89:2a:bc:1a:8a: b6:1a:c6:b6:22:ab:73:86:b3:f3:17:f9:29:2e:8a: fa:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:F6:DE:F5:12:73:7A:C1:B2:5B:66:13:56:67:F9:E7:1C:29:F6:0B X509v3 Authority Key Identifier: keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/Sfbe9RJzesGyW2YTVmf55xwp9gs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.143.224.0/20 Signature Algorithm: sha256WithRSAEncryption 41:88:06:31:d2:b9:9e:84:54:6a:f1:f2:f9:9f:b1:ff:19:69: 2e:6f:7a:30:b4:d1:a2:2a:42:06:c7:f5:df:34:6b:b5:fb:26: 27:f4:3f:5a:c1:ee:4e:19:03:04:70:6c:b4:23:a9:8a:2e:96: b3:1f:84:fa:07:22:75:60:36:b1:8c:bd:3d:c8:78:32:dc:ab: 51:00:45:00:97:23:dc:5d:bf:e7:2e:d6:1d:27:84:97:ed:b2: d2:8c:e3:6a:06:dc:7f:c9:88:90:c5:39:76:60:11:cf:4d:3f: 48:12:9a:b8:2f:8f:8e:bf:a6:a9:c3:56:06:29:b1:03:85:90: de:75:8e:91:af:35:b8:6d:47:b4:ef:c7:fd:04:a9:c9:b6:c3: e2:12:51:9f:e8:01:ff:30:d9:70:ec:ca:e7:98:5d:c1:0e:31: fd:12:a9:a7:a4:3d:0f:c7:1d:2d:68:ae:a3:47:2b:aa:b9:e8: 1a:fd:12:00:41:99:de:6a:b7:1f:15:8e:bd:a4:78:06:22:1c: c2:e2:e9:61:8a:19:00:8e:57:f7:0a:be:86:e5:c0:6e:ce:e3: 54:df:ce:47:ab:bb:03:dc:0b:f8:5e:26:04:d7:ba:39:02:34: 5a:da:b9:06:96:6f:27:38:77:6f:ee:06:9f:aa:f3:f4:ff:98: cd:47:55:07 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZpT1art8QzTfA4IPCHbmT/tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNmRhOWU0MTY4NmQyMWMxMjc5OWM4ZTg0YjI3NGFhODI0 MTUwOGMwHhcNMjUxMTA1MTE0NTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OWY2ZGVmNTEyNzM3YWMxYjI1YjY2MTM1NjY3ZjllNzFjMjlmNjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXiUvctsBxVUetocey5BplioGPRT LOLZe5QbSzk5ev4eOBtfPM1yjLnEZkjoEpoH30gNwKl8+Qh1xw9k0KzvfYTVDIEW KO+ZHj6WCj0KsKWJ7pII9sKXNwHdR6Whzmcm5MQWtErn69WCEOwd9w2/vtSTueQN fA/00pCpn17IWT1d3pTtdLeNjCEHxTw95gkT+h+rhHOgxCoWp6a3DzR2btu1tMTi fXWLxl2RQYiqR+YW3U2LPMOQ+l9sG5DOdCBtpZu45BtHTasmRPkcGk9JblCFJFAV sH1u2FMngpUsKnw5vQnmvXOdhNDeiSq8Goq2Gsa2IqtzhrPzF/kpLor6pQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEn23vUSc3rBsltmE1Zn+eccKfYLMB8GA1UdIwQY MBaAFO1tqeQWhtIcEnmcjoSydKqCQVCMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYt MjlmMWJlYjJmMjgyLzEvU2ZiZTlSSnplc0d5VzJZVFZtZjU1eHdwOWdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYtMjlmMWJlYjJmMjgy LzEvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELo/gMA0G CSqGSIb3DQEBCwUAA4IBAQBBiAYx0rmehFRq8fL5n7H/GWkub3owtNGiKkIGx/Xf NGu1+yYn9D9awe5OGQMEcGy0I6mKLpazH4T6ByJ1YDaxjL09yHgy3KtRAEUAlyPc Xb/nLtYdJ4SX7bLSjONqBtx/yYiQxTl2YBHPTT9IEpq4L4+Ov6apw1YGKbEDhZDe dY6RrzW4bUe078f9BKnJtsPiElGf6AH/MNlw7MrnmF3BDjH9EqmnpD0Pxx0taK6j Ryuquega/RIAQZnearcfFY69pHgGIhzC4ulhihkAjlf3Cr6G5cBuzuNU385Hq7sD 3Av4XiYE17o5AjRa2rkGlm8nOHdv7gafqvP0/5jNR1UH -----END CERTIFICATE-----Generated at Sat Dec 6 13:13:06 2025 by rpki-client