This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/rTtt56NfQI-lBnNEdQL00IimlXg.roa File: rTtt56NfQI-lBnNEdQL00IimlXg.roa (raw, json) Hash identifier: elzHYHG1W6pODNLfxqrVQakPGCFbm00DmqEvkVjcxRY= Subject key identifier: AD:3B:6D:E7:A3:5F:40:8F:A5:06:73:44:75:02:F4:D0:88:A6:95:78 Certificate issuer: /CN=66f90e75df98afb43019ce750350e769b99fbc13 Certificate serial: 019B7CED4E002D183A55AE7369E472F61BD5 Authority key identifier: 66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/rTtt56NfQI-lBnNEdQL00IimlXg.roa Signing time: Fri 02 Jan 2026 04:18:05 +0000 ROA not before: Fri 02 Jan 2026 04:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197465 IP address blocks: 46.23.240.0/20 maxlen: 20 46.23.241.0/24 maxlen: 24 46.23.242.0/24 maxlen: 24 46.23.244.0/24 maxlen: 24 46.23.245.0/24 maxlen: 24 46.23.248.0/24 maxlen: 24 46.23.249.0/24 maxlen: 24 2a02:5000::/32 maxlen: 32 2a02:5000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:4e:00:2d:18:3a:55:ae:73:69:e4:72:f6:1b:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66f90e75df98afb43019ce750350e769b99fbc13 Validity Not Before: Jan 2 04:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad3b6de7a35f408fa50673447502f4d088a69578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:4c:65:48:0c:ed:f5:a5:f1:7e:b6:41:f6:cb: 4b:5d:b2:b3:e9:99:4c:7f:c9:a4:9b:6d:c6:30:e9: 67:1b:9a:e9:8d:56:81:99:be:3b:dc:a6:fd:a3:46: e5:88:87:f7:cc:85:72:2f:f5:d0:22:b0:b5:05:4b: c7:9b:cd:fd:e5:93:41:46:3a:ce:b1:84:7f:de:90: 8d:92:02:97:12:d6:c1:c9:a5:39:cf:98:2b:93:ce: 63:74:1e:62:fb:89:82:31:29:2e:d7:03:49:c3:de: 20:1d:91:72:07:ba:d0:e5:8e:6c:2b:29:b0:aa:75: 6b:5e:43:25:5f:08:fb:d1:81:63:bc:2c:87:72:a9: dd:1d:db:aa:61:6c:18:c0:23:bf:a8:37:43:81:7a: 5b:c2:64:7b:4d:f0:5b:c5:ac:9c:6c:cf:f4:8b:50: 44:6d:45:d9:08:19:d8:56:53:51:e8:60:33:f5:13: 86:27:b4:26:28:78:c1:c2:34:9e:c3:a9:e9:8e:ee: 9d:fb:df:31:4d:a2:fe:b1:94:90:96:b9:bf:31:f2: a5:d2:fc:ac:a9:63:75:63:0f:fb:25:d3:8c:25:3f: e1:90:99:af:bf:76:d5:3d:86:ce:f7:96:69:bd:9b: ef:ab:0c:19:7f:96:8c:71:44:e9:8d:d6:42:bb:e6: 80:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:3B:6D:E7:A3:5F:40:8F:A5:06:73:44:75:02:F4:D0:88:A6:95:78 X509v3 Authority Key Identifier: keyid:66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/rTtt56NfQI-lBnNEdQL00IimlXg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.23.240.0/20 IPv6: 2a02:5000::/32 Signature Algorithm: sha256WithRSAEncryption 22:a6:14:6a:ae:c6:05:8a:08:85:56:17:24:ff:8f:7f:dd:45: 45:5b:e4:59:34:53:fd:aa:c0:87:63:0b:09:43:1e:22:5c:c4: 07:81:a8:4b:ca:84:07:b1:2a:f9:b3:7f:2b:f9:91:58:77:3d: 3d:93:c3:9b:2f:ce:eb:9e:0d:be:1e:41:a6:29:4c:c3:1a:b4: ff:60:80:a8:83:49:a7:47:46:f1:b3:ee:03:c0:42:af:31:c0: bd:2d:d2:88:1c:0f:d5:10:bb:c0:e1:06:4b:eb:f3:1e:82:65: 7f:0d:2a:e5:2f:77:3a:30:bd:e9:b1:6c:68:e4:0b:99:e8:b4: 60:d1:a8:a7:8f:d2:7a:bd:c2:bc:cc:ea:4c:2a:69:22:d9:94: 04:c5:d5:6e:2c:15:3e:1b:1e:1b:49:ca:ac:89:62:81:93:6e: fc:77:f1:6b:6b:18:5c:d9:a9:05:51:b6:4b:fa:f4:06:71:46: 03:40:03:ea:59:97:38:91:6e:17:bd:c0:54:4e:5a:f0:e2:2c: 2c:97:fb:76:f5:b3:c1:f2:65:c8:44:50:16:69:1f:08:62:48: 0e:50:d8:9b:19:04:0f:7f:49:ea:5d:d0:98:40:95:02:65:f9: d7:6c:6c:1b:14:6f:3b:df:40:98:9d:f4:b7:34:b1:48:70:36: 5c:ad:b0:bf -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt87U4ALRg6Va5zaeRy9hvVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZjkwZTc1ZGY5OGFmYjQzMDE5Y2U3NTAzNTBlNzY5Yjk5 ZmJjMTMwHhcNMjYwMTAyMDQxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDNiNmRlN2EzNWY0MDhmYTUwNjczNDQ3NTAyZjRkMDg4YTY5NTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokxlSAzt9aXxfrZB9stLXbKz6ZlM f8mkm23GMOlnG5rpjVaBmb473Kb9o0bliIf3zIVyL/XQIrC1BUvHm8395ZNBRjrO sYR/3pCNkgKXEtbByaU5z5grk85jdB5i+4mCMSku1wNJw94gHZFyB7rQ5Y5sKymw qnVrXkMlXwj70YFjvCyHcqndHduqYWwYwCO/qDdDgXpbwmR7TfBbxaycbM/0i1BE bUXZCBnYVlNR6GAz9ROGJ7QmKHjBwjSew6npju6d+98xTaL+sZSQlrm/MfKl0vys qWN1Yw/7JdOMJT/hkJmvv3bVPYbO95ZpvZvvqwwZf5aMcUTpjdZCu+aAdwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFK07beejX0CPpQZzRHUC9NCIppV4MB8GA1UdIwQY MBaAFGb5DnXfmK+0MBnOdQNQ52m5n7wTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnZrT2RkLVlyN1F3R2M1MUExRG5hYm1mdkJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS81YTY5OGQtOTk4YS00OGJhLThkYzUt MzMzZjBjOTkyNzllLzEvclR0dDU2TmZRSS1sQm5ORWRRTDAwSWltbFhnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS81YTY5OGQtOTk4YS00OGJhLThkYzUtMzMzZjBjOTkyNzll LzEvWnZrT2RkLVlyN1F3R2M1MUExRG5hYm1mdkJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQELhfwMA0E AgACMAcDBQAqAlAAMA0GCSqGSIb3DQEBCwUAA4IBAQAiphRqrsYFigiFVhck/49/ 3UVFW+RZNFP9qsCHYwsJQx4iXMQHgahLyoQHsSr5s38r+ZFYdz09k8ObL87rng2+ HkGmKUzDGrT/YICog0mnR0bxs+4DwEKvMcC9LdKIHA/VELvA4QZL6/MegmV/DSrl L3c6ML3psWxo5AuZ6LRg0ainj9J6vcK8zOpMKmki2ZQExdVuLBU+Gx4bScqsiWKB k278d/Fraxhc2akFUbZL+vQGcUYDQAPqWZc4kW4XvcBUTlrw4iwsl/t29bPB8mXI RFAWaR8IYkgOUNibGQQPf0nqXdCYQJUCZfnXbGwbFG8730CYnfS3NLFIcDZcrbC/ -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:28 2026 by rpki-client