This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/C46FZGhG2X5Nx2Iv-7yi3sbxZnY.roa File: C46FZGhG2X5Nx2Iv-7yi3sbxZnY.roa (raw, json) Hash identifier: B34d2p77+B66jN6Am9ioz0IrGKVKuaBXb571jLLG784= Subject key identifier: 0B:8E:85:64:68:46:D9:7E:4D:C7:62:2F:FB:BC:A2:DE:C6:F1:66:76 Certificate issuer: /CN=10a8c6e9308bb00083100171e00dbb6140f4f580 Certificate serial: 019B7C11D70139DAD4573807880C6765EA1E Authority key identifier: 10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/C46FZGhG2X5Nx2Iv-7yi3sbxZnY.roa Signing time: Fri 02 Jan 2026 00:18:22 +0000 ROA not before: Fri 02 Jan 2026 00:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210017 IP address blocks: 2.57.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.crl rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.mft rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:d7:01:39:da:d4:57:38:07:88:0c:67:65:ea:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10a8c6e9308bb00083100171e00dbb6140f4f580 Validity Not Before: Jan 2 00:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0b8e85646846d97e4dc7622ffbbca2dec6f16676 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:34:e8:c5:ce:13:aa:1c:ff:3e:84:e1:06:4e: a2:9f:73:9a:76:0a:d2:ca:e4:70:2b:99:59:9c:54: 32:cb:be:5b:6e:52:6b:50:42:46:ca:c4:1d:88:e7: 7f:53:c0:43:c6:03:2c:58:ee:9d:27:f9:f7:71:1d: 0b:6d:31:80:0e:ee:53:18:3c:51:3a:0e:e3:16:76: 7b:9a:ec:6f:76:52:ba:e5:1d:35:d7:ce:d2:f7:dc: fd:d2:7a:9c:e9:75:40:7f:dc:f3:21:54:c4:0d:a3: 5e:ab:d7:76:d8:70:4a:1d:06:79:a8:ea:d1:a2:72: 70:22:b6:30:57:96:7e:29:0f:8f:f1:c0:25:e6:20: 5e:54:58:02:e8:d8:40:b3:51:f5:66:62:2d:e7:32: bd:b5:2c:54:0f:95:5c:c0:75:90:53:41:5a:9d:5d: 09:3e:48:a4:56:1b:c9:ab:c7:9d:98:c9:65:a5:8c: e7:7a:19:b7:2f:8b:b4:16:6a:03:18:6b:9d:51:d7: 9a:7f:26:10:a2:14:11:0d:b7:0f:67:2c:e0:e6:97: cb:62:41:82:55:6f:8c:1a:df:f7:0c:9e:09:8c:b9: 63:48:35:63:ba:6d:e0:fc:be:d5:a4:4a:e6:00:73: 92:52:be:00:11:d6:d1:ca:9c:0b:97:9c:fb:65:a5: d0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:8E:85:64:68:46:D9:7E:4D:C7:62:2F:FB:BC:A2:DE:C6:F1:66:76 X509v3 Authority Key Identifier: keyid:10:A8:C6:E9:30:8B:B0:00:83:10:01:71:E0:0D:BB:61:40:F4:F5:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EKjG6TCLsACDEAFx4A27YUD09YA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/C46FZGhG2X5Nx2Iv-7yi3sbxZnY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/237947-70c2-4661-a36f-6b497b2c0b38/1/EKjG6TCLsACDEAFx4A27YUD09YA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.57.43.0/24 Signature Algorithm: sha256WithRSAEncryption b2:9d:a5:70:be:b7:00:16:41:36:3d:23:e7:e4:f5:43:c9:58: 09:aa:18:57:e3:33:d5:cb:e3:11:52:28:a2:a7:4e:69:d2:30: 81:90:52:e7:68:e2:79:d2:b9:ed:49:b8:ec:20:76:a9:b2:96: 84:57:16:30:91:19:33:4e:39:86:e1:f2:1a:68:6a:57:ac:de: 50:20:f5:58:bd:14:7c:40:6e:c2:95:7c:e8:4f:d0:c8:56:4e: 3d:36:6e:79:85:5f:f4:d0:c2:4f:4d:eb:19:b1:98:e6:af:1b: 46:dc:13:2d:7f:e9:25:f1:96:c1:59:65:22:83:20:4c:64:63: d3:f1:cd:87:97:26:39:9d:9f:1a:86:86:7a:c5:bc:aa:32:58: 84:78:79:ff:16:59:7e:d3:30:83:f9:13:9a:fa:74:69:44:06: 51:83:45:4f:93:96:3d:e2:df:42:f6:d3:aa:5b:16:fc:06:2c: 8d:8e:eb:d8:ae:e4:1e:fd:16:b5:70:d7:91:4e:b7:36:13:bd: 22:33:b3:4e:8f:c3:a9:c2:18:ef:89:e0:5e:d0:ac:23:67:a9: 1f:55:5a:3f:be:bf:9c:1c:a9:66:c0:37:39:73:48:12:9e:77: ab:56:97:d9:73:7f:93:8f:3b:6f:11:d6:40:cd:bb:07:cb:99: 65:fa:c2:9f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EdcBOdrUVzgHiAxnZeoeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwYThjNmU5MzA4YmIwMDA4MzEwMDE3MWUwMGRiYjYxNDBm NGY1ODAwHhcNMjYwMTAyMDAxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYjhlODU2NDY4NDZkOTdlNGRjNzYyMmZmYmJjYTJkZWM2ZjE2Njc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TToxc4Tqhz/PoThBk6in3OadgrS yuRwK5lZnFQyy75bblJrUEJGysQdiOd/U8BDxgMsWO6dJ/n3cR0LbTGADu5TGDxR Og7jFnZ7muxvdlK65R01187S99z90nqc6XVAf9zzIVTEDaNeq9d22HBKHQZ5qOrR onJwIrYwV5Z+KQ+P8cAl5iBeVFgC6NhAs1H1ZmIt5zK9tSxUD5VcwHWQU0FanV0J PkikVhvJq8edmMllpYznehm3L4u0FmoDGGudUdeafyYQohQRDbcPZyzg5pfLYkGC VW+MGt/3DJ4JjLljSDVjum3g/L7VpErmAHOSUr4AEdbRypwLl5z7ZaXQtwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAuOhWRoRtl+TcdiL/u8ot7G8WZ2MB8GA1UdIwQY MBaAFBCoxukwi7AAgxABceANu2FA9PWAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUtqRzZUQ0xzQUNERUFGeDRBMjdZVUQwOVlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yMzc5NDctNzBjMi00NjYxLWEzNmYt NmI0OTdiMmMwYjM4LzEvQzQ2RlpHaEcyWDVOeDJJdi03eWkzc2J4Wm5ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8yMzc5NDctNzBjMi00NjYxLWEzNmYtNmI0OTdiMmMwYjM4 LzEvRUtqRzZUQ0xzQUNERUFGeDRBMjdZVUQwOVlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjkrMA0G CSqGSIb3DQEBCwUAA4IBAQCynaVwvrcAFkE2PSPn5PVDyVgJqhhX4zPVy+MRUiii p05p0jCBkFLnaOJ50rntSbjsIHapspaEVxYwkRkzTjmG4fIaaGpXrN5QIPVYvRR8 QG7ClXzoT9DIVk49Nm55hV/00MJPTesZsZjmrxtG3BMtf+kl8ZbBWWUigyBMZGPT 8c2HlyY5nZ8ahoZ6xbyqMliEeHn/Fll+0zCD+ROa+nRpRAZRg0VPk5Y94t9C9tOq Wxb8BiyNjuvYruQe/Ra1cNeRTrc2E70iM7NOj8OpwhjvieBe0KwjZ6kfVVo/vr+c HKlmwDc5c0gSnnerVpfZc3+TjztvEdZAzbsHy5ll+sKf -----END CERTIFICATE-----Generated at Sun Jan 25 14:38:50 2026 by rpki-client