This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/u3JKV-adkwKGsv5hodSaNbHzPB4.roa File: u3JKV-adkwKGsv5hodSaNbHzPB4.roa (raw, json) Hash identifier: c3YsJQeJHhLtbxb9inM4xaKttWXYOVN6+JQXx5fxGOs= Subject key identifier: BB:72:4A:57:E6:9D:93:02:86:B2:FE:61:A1:D4:9A:35:B1:F3:3C:1E Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Certificate serial: 019B7D5D266B20F6712AA0C87AE1D807E569 Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/u3JKV-adkwKGsv5hodSaNbHzPB4.roa Signing time: Fri 02 Jan 2026 06:20:15 +0000 ROA not before: Fri 02 Jan 2026 06:20:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212807 IP address blocks: 46.107.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.mft rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:26:6b:20:f6:71:2a:a0:c8:7a:e1:d8:07:e5:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b Validity Not Before: Jan 2 06:20:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb724a57e69d930286b2fe61a1d49a35b1f33c1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:75:1e:4c:c7:8c:f0:24:36:c4:d3:67:62:83: fe:f6:a6:a6:f3:b5:f2:21:43:aa:58:d2:19:64:a3: 53:4f:8e:dd:46:2a:d6:85:b2:ec:f1:90:4e:29:76: a7:aa:9e:69:0b:41:25:e9:ed:cf:7a:a2:62:d6:07: f3:d4:5c:4d:d7:91:10:ea:26:31:06:78:64:08:6a: 10:7f:f4:5c:b7:7c:22:ee:58:2c:c2:33:63:47:dc: 51:52:a3:c4:c7:d1:d6:e1:eb:db:89:bc:80:33:e2: 9f:e2:4b:10:b5:69:df:b0:35:0e:08:4c:70:fe:03: 0e:26:f0:08:6f:91:90:15:98:52:00:db:2c:32:72: d1:5f:3e:46:ef:0a:34:7e:e7:3b:b3:8c:cc:04:0b: 5c:ae:6b:10:ae:37:ed:96:99:1b:52:0d:e3:23:a0: 6d:c6:89:14:a3:32:8e:07:cc:ea:eb:a3:7a:16:90: c1:8f:7d:c1:ee:78:89:be:85:0c:61:57:34:9a:a6: 16:9b:c3:85:c2:7f:c5:79:64:2f:3e:02:b7:c0:d8: aa:95:7b:f1:55:ab:f5:b1:86:e6:b0:e7:ef:09:b1: 79:eb:26:38:29:da:2c:f6:43:42:48:ad:46:b4:d2: a7:45:f3:08:79:a8:80:3d:9a:63:53:5e:2f:c5:89: 6a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:72:4A:57:E6:9D:93:02:86:B2:FE:61:A1:D4:9A:35:B1:F3:3C:1E X509v3 Authority Key Identifier: keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/u3JKV-adkwKGsv5hodSaNbHzPB4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.107.220.0/24 Signature Algorithm: sha256WithRSAEncryption 83:87:81:18:a6:6c:af:e1:e2:88:6c:76:1d:84:c1:c1:42:b2: 17:32:8b:e4:05:c6:6d:cb:c0:cd:02:05:37:48:06:d9:1c:4b: d4:53:50:b1:06:74:e9:5b:66:61:b6:cb:d7:c1:33:9c:32:20: fd:f5:60:32:75:44:f0:ae:28:18:ed:f9:de:c1:35:54:a4:a0: 5b:91:1f:b9:6a:f3:e4:26:05:25:aa:52:7c:16:96:02:45:a1: f2:d9:20:58:5a:46:fe:95:94:ad:24:64:ce:9b:d0:67:69:13: 27:a9:ff:d0:7f:cb:36:76:21:ce:5e:20:04:15:0b:72:6e:36: d8:24:3d:70:c0:d5:7e:b8:cb:41:09:03:c9:22:9e:ce:52:78: 24:27:e0:5d:b7:e0:ee:0b:97:6b:5f:e7:f6:1e:d6:cf:34:20: f0:7d:00:ba:40:13:27:96:68:f1:9b:20:c2:7c:12:a4:31:fd: 18:23:4c:51:f4:3e:3b:11:7b:97:de:fc:c3:b3:e0:5e:47:02: 3c:f3:00:9a:ed:26:24:2e:c0:5d:b7:56:07:9c:38:97:9e:58: 44:93:d0:df:37:39:35:99:a1:ec:d7:98:ec:e2:3c:94:e1:3d: 3c:f1:c3:f2:b5:00:7a:1a:a1:8c:ec:46:ab:dc:06:54:4a:81: 13:41:ca:26 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XSZrIPZxKqDIeuHYB+VpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMmRhYzYwNWY0NjU5NzE4YzBhMTVlMWY3MzJjYmQ0ZjQ4 YWFlN2IwHhcNMjYwMTAyMDYyMDE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjcyNGE1N2U2OWQ5MzAyODZiMmZlNjFhMWQ0OWEzNWIxZjMzYzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HUeTMeM8CQ2xNNnYoP+9qam87Xy IUOqWNIZZKNTT47dRirWhbLs8ZBOKXanqp5pC0El6e3PeqJi1gfz1FxN15EQ6iYx BnhkCGoQf/Rct3wi7lgswjNjR9xRUqPEx9HW4evbibyAM+Kf4ksQtWnfsDUOCExw /gMOJvAIb5GQFZhSANssMnLRXz5G7wo0fuc7s4zMBAtcrmsQrjftlpkbUg3jI6Bt xokUozKOB8zq66N6FpDBj33B7niJvoUMYVc0mqYWm8OFwn/FeWQvPgK3wNiqlXvx Vav1sYbmsOfvCbF56yY4Kdos9kNCSK1GtNKnRfMIeaiAPZpjU14vxYlqnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLtySlfmnZMChrL+YaHUmjWx8zweMB8GA1UdIwQY MBaAFPAtrGBfRllxjAoV4fcyy9T0iq57MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYt MjkyYWU0NmU2MzAyLzEvdTNKS1YtYWRrd0tHc3Y1aG9kU2FOYkh6UEI0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZC9lOTA5NzYtM2RkMS00NzE2LWJiZjYtMjkyYWU0NmU2MzAy LzEvOEMyc1lGOUdXWEdNQ2hYaDl6TEwxUFNLcm5zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALmvcMA0G CSqGSIb3DQEBCwUAA4IBAQCDh4EYpmyv4eKIbHYdhMHBQrIXMovkBcZty8DNAgU3 SAbZHEvUU1CxBnTpW2ZhtsvXwTOcMiD99WAydUTwrigY7fnewTVUpKBbkR+5avPk JgUlqlJ8FpYCRaHy2SBYWkb+lZStJGTOm9BnaRMnqf/Qf8s2diHOXiAEFQtybjbY JD1wwNV+uMtBCQPJIp7OUngkJ+Bdt+DuC5drX+f2HtbPNCDwfQC6QBMnlmjxmyDC fBKkMf0YI0xR9D47EXuX3vzDs+BeRwI88wCa7SYkLsBdt1YHnDiXnlhEk9DfNzk1 maHs15js4jyU4T088cPytQB6GqGM7Ear3AZUSoETQcom -----END CERTIFICATE-----Generated at Sun Jan 25 15:36:22 2026 by rpki-client