This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/cD9ySG4bqEJ1ROV9i0H_K-67hRo.roa File: cD9ySG4bqEJ1ROV9i0H_K-67hRo.roa (raw, json) Hash identifier: wElLaEyJyWXk8vVJhm6jYnRTfJPfZCnd1smCig2WwnI= Subject key identifier: 70:3F:72:48:6E:1B:A8:42:75:44:E5:7D:8B:41:FF:2B:EE:BB:85:1A Certificate issuer: /CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe Certificate serial: 019B77C7408409EAAAFF135B8610AF70780F Authority key identifier: FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/cD9ySG4bqEJ1ROV9i0H_K-67hRo.roa Signing time: Thu 01 Jan 2026 04:18:25 +0000 ROA not before: Thu 01 Jan 2026 04:18:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 196881 IP address blocks: 46.30.137.0/24 maxlen: 24 46.30.138.0/23 maxlen: 23 46.30.138.0/24 maxlen: 24 46.30.139.0/24 maxlen: 24 185.156.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.mft rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:40:84:09:ea:aa:ff:13:5b:86:10:af:70:78:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd0c6b2bd29d3168487c9ec5fde4c3fc42d9cfbe Validity Not Before: Jan 1 04:18:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=703f72486e1ba8427544e57d8b41ff2beebb851a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:df:0b:0c:6e:30:e3:bc:30:f8:aa:25:ed:d3: 02:74:06:94:fe:6b:41:8c:b0:5d:f0:6f:12:9d:35: 5c:3d:89:f3:dc:19:b5:8e:e4:11:8e:79:86:70:2d: 75:0d:7e:83:fe:a2:a6:06:ce:65:0b:ad:a2:74:58: de:13:5d:3e:5f:91:5d:81:71:7c:8d:0b:46:8f:85: 1a:b4:b2:5f:9b:f2:f2:92:45:07:5d:1a:20:64:07: f1:68:64:f1:4c:af:37:7b:f7:16:f5:31:09:f7:fa: 47:ce:a7:52:78:7a:f2:b8:06:9f:18:d0:51:e9:4b: 5e:c4:b4:6a:5e:b7:1c:1e:03:3b:f6:20:20:65:58: 99:8a:b8:9a:c1:74:c8:fd:1b:d3:d0:a3:92:12:1c: 8c:cf:d7:42:5e:b6:95:e7:e6:35:e3:ce:82:9e:e5: 28:42:e0:45:8a:77:41:61:bf:8a:fe:e5:f8:5e:04: 92:c6:9e:f7:7c:15:57:91:e2:dc:91:be:c2:fd:fe: 62:47:f4:a0:8d:13:6d:0a:d1:64:e2:44:95:40:93: cb:c0:1f:bc:ff:e4:76:cf:44:98:b4:a1:90:4d:37: 53:31:58:39:2c:3d:44:b5:49:bc:9f:64:4b:8b:47: 27:d3:4e:5e:4f:69:e5:eb:7c:da:9e:02:b8:9b:77: e5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:3F:72:48:6E:1B:A8:42:75:44:E5:7D:8B:41:FF:2B:EE:BB:85:1A X509v3 Authority Key Identifier: keyid:FD:0C:6B:2B:D2:9D:31:68:48:7C:9E:C5:FD:E4:C3:FC:42:D9:CF:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QxrK9KdMWhIfJ7F_eTD_ELZz74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/cD9ySG4bqEJ1ROV9i0H_K-67hRo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/435d88-371e-4f86-a90a-cfbbc14671a3/1/_QxrK9KdMWhIfJ7F_eTD_ELZz74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.30.137.0-46.30.139.255 185.156.104.0/24 Signature Algorithm: sha256WithRSAEncryption 37:b1:85:fc:6a:da:0e:fa:2d:1f:eb:4b:fb:d8:2c:95:ce:0f: b3:71:b1:4b:87:1f:55:8c:ec:70:75:c4:a0:17:ca:18:fe:de: bb:41:9e:76:40:1a:de:df:eb:91:47:93:51:ae:09:60:45:7b: ab:48:95:dc:18:1a:7c:1e:15:a0:0d:71:cd:cd:6c:22:4e:c6: 12:9b:d6:d0:df:6d:f5:81:06:da:54:e4:d1:a7:72:e1:e6:d9: 6f:ab:08:be:1f:69:f4:ad:df:8c:9b:58:69:78:c0:6f:9a:c1: 47:c5:d7:d9:fc:8e:0f:91:a0:95:ab:55:96:37:9a:bd:85:c4: fc:54:1b:3e:e5:d6:2a:3b:3e:00:a4:b7:d4:d0:b8:0b:0c:f1: 6b:4f:fb:fc:dc:32:3c:96:1c:68:81:bd:8f:f4:57:62:91:d9: 27:96:93:de:ee:3d:1a:ca:d1:b0:cf:42:26:32:25:6c:2e:77: 69:23:0b:20:45:3e:b1:88:2f:b6:bd:79:b1:83:51:e1:d6:fa: 43:d5:47:46:88:11:e4:c1:fd:5d:c8:83:81:6a:04:d5:99:99: 09:86:0e:04:79:45:c8:76:3e:9b:01:d7:43:9b:91:61:17:9e: 73:e7:0a:b3:4b:39:a3:36:2d:58:4a:28:f9:3e:21:4e:9c:7a: 7a:57:13:da -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt3x0CECeqq/xNbhhCvcHgPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMGM2YjJiZDI5ZDMxNjg0ODdjOWVjNWZkZTRjM2ZjNDJk OWNmYmUwHhcNMjYwMTAxMDQxODI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDNmNzI0ODZlMWJhODQyNzU0NGU1N2Q4YjQxZmYyYmVlYmI4NTFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd8LDG4w47ww+Kol7dMCdAaU/mtB jLBd8G8SnTVcPYnz3Bm1juQRjnmGcC11DX6D/qKmBs5lC62idFjeE10+X5FdgXF8 jQtGj4UatLJfm/LykkUHXRogZAfxaGTxTK83e/cW9TEJ9/pHzqdSeHryuAafGNBR 6UtexLRqXrccHgM79iAgZViZiriawXTI/RvT0KOSEhyMz9dCXraV5+Y1486CnuUo QuBFindBYb+K/uX4XgSSxp73fBVXkeLckb7C/f5iR/SgjRNtCtFk4kSVQJPLwB+8 /+R2z0SYtKGQTTdTMVg5LD1EtUm8n2RLi0cn005eT2nl63zangK4m3flSwIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFHA/ckhuG6hCdUTlfYtB/yvuu4UaMB8GA1UdIwQY MBaAFP0MayvSnTFoSHyexf3kw/xC2c++MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1F4cks5S2RNV2hJZko3Rl9lVERfRUxaejc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi80MzVkODgtMzcxZS00Zjg2LWE5MGEt Y2ZiYmMxNDY3MWEzLzEvY0Q5eVNHNGJxRUoxUk9WOWkwSF9LLTY3aFJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi80MzVkODgtMzcxZS00Zjg2LWE5MGEtY2ZiYmMxNDY3MWEz LzEvX1F4cks5S2RNV2hJZko3Rl9lVERfRUxaejc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAAuHokD BAIuHogDBAC5nGgwDQYJKoZIhvcNAQELBQADggEBADexhfxq2g76LR/rS/vYLJXO D7NxsUuHH1WM7HB1xKAXyhj+3rtBnnZAGt7f65FHk1GuCWBFe6tIldwYGnweFaAN cc3NbCJOxhKb1tDfbfWBBtpU5NGncuHm2W+rCL4fafSt34ybWGl4wG+awUfF19n8 jg+RoJWrVZY3mr2FxPxUGz7l1io7PgCkt9TQuAsM8WtP+/zcMjyWHGiBvY/0V2KR 2SeWk97uPRrK0bDPQiYyJWwud2kjCyBFPrGIL7a9ebGDUeHW+kPVR0aIEeTB/V3I g4FqBNWZmQmGDgR5Rch2PpsB10ObkWEXnnPnCrNLOaM2LVhKKPk+IU6cenpXE9o= -----END CERTIFICATE-----Generated at Mon Jan 26 09:23:36 2026 by rpki-client