This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/l46NNfdll0CkF-GyTagj6nVywQA.roa File: l46NNfdll0CkF-GyTagj6nVywQA.roa (raw, json) Hash identifier: Bz8PpZZscQ882ZYbIbT/ZfP7vpdnPTaRcDmY5jTgHws= Subject key identifier: 97:8E:8D:35:F7:65:97:40:A4:17:E1:B2:4D:A8:23:EA:75:72:C1:00 Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Certificate serial: 019B7F824848A1CE7A7752ABBB7D2F741B32 Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/l46NNfdll0CkF-GyTagj6nVywQA.roa Signing time: Fri 02 Jan 2026 16:20:03 +0000 ROA not before: Fri 02 Jan 2026 16:20:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48910 IP address blocks: 31.186.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:82:48:48:a1:ce:7a:77:52:ab:bb:7d:2f:74:1b:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Validity Not Before: Jan 2 16:20:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=978e8d35f7659740a417e1b24da823ea7572c100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:13:69:01:b7:88:1a:a8:8f:3a:84:ed:d9:c7: 3e:f1:aa:51:87:ba:7f:2e:b4:17:9d:00:f2:89:d4: 25:0b:ad:c8:79:6b:98:39:73:e2:e4:49:90:67:7f: 63:23:e7:82:e9:5e:13:43:ea:59:94:de:52:ec:0a: bc:6c:d1:60:cc:48:19:c6:b3:af:6c:c8:23:e9:dd: 4e:fa:90:74:f8:16:d5:ee:a9:83:99:04:63:6b:5e: e6:76:04:c2:d0:92:6a:2a:28:29:03:42:7f:31:fc: b7:3a:3b:d4:bb:2f:bd:9b:12:03:67:f8:d4:cf:86: 2a:cd:05:55:5f:3d:a4:74:3e:07:fe:0b:b7:9e:28: 74:bf:2a:e6:70:24:22:61:d8:5c:2e:08:11:ab:0c: 4e:de:1c:1c:a6:c3:30:91:e6:6e:e2:4f:07:dc:c0: 8b:5f:6e:b6:30:57:f6:ff:bf:36:fb:0b:8d:33:47: 46:1e:ae:85:5f:a2:f0:63:83:38:7c:39:ec:05:31: 7c:8f:10:1b:99:c3:d1:87:40:59:9f:b7:22:b2:b7: bc:10:32:fb:7d:79:98:0c:4b:75:57:bd:60:c0:e3: 89:37:6c:27:73:f2:ac:e0:bb:68:46:a6:5e:f1:72: ff:06:45:66:cb:f9:96:6d:89:7a:09:17:f4:98:57: dd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:8E:8D:35:F7:65:97:40:A4:17:E1:B2:4D:A8:23:EA:75:72:C1:00 X509v3 Authority Key Identifier: keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/l46NNfdll0CkF-GyTagj6nVywQA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.186.250.0/23 Signature Algorithm: sha256WithRSAEncryption b4:71:9a:5d:25:6e:b6:3e:08:e7:e2:1e:6c:d2:79:11:a0:c9: ab:b8:8d:01:35:27:38:94:a5:d1:e5:e1:55:a2:82:96:79:45: 7e:7b:a0:39:b0:d9:f9:91:67:8d:9e:eb:86:0e:e3:80:ef:f6: bb:c2:69:13:e3:58:c3:ed:03:83:55:29:7e:5d:db:b6:92:6a: 39:6d:9e:dd:a7:0a:e5:bc:ec:86:7a:d8:64:49:ed:cf:52:01: c2:3f:2a:30:0c:f7:59:5f:59:0f:ac:31:e7:88:ed:2f:8c:44: 70:7c:19:a0:97:a4:a8:c5:33:e4:10:b8:44:b5:96:68:dc:74: 91:70:3a:f9:94:0e:74:46:bc:c2:3b:de:41:ab:47:d4:7e:86: a7:23:7b:91:11:e4:f2:df:c8:21:9d:cb:61:2f:04:b7:51:a4: 5d:67:55:c6:33:bd:5b:5a:70:67:8a:4d:ba:0b:bb:3b:e0:2e: e1:dd:40:3b:ea:c5:2f:61:ac:4e:a2:c3:aa:39:74:ba:13:c3: 08:a3:84:67:a3:60:ee:ef:f4:6e:37:f3:28:75:d6:3e:0e:c0: 8b:9f:20:ec:22:80:7b:d7:19:22:43:3a:c2:4f:ca:ad:4f:dd: 3c:64:0b:23:4a:b3:1b:25:9e:3b:a9:f0:9b:04:75:51:04:62: 36:5c:fe:31 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gkhIoc56d1Kru30vdBsyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZGFlZWE5MTE3YTFkNWNjYzMyMDIyMjk1NWEwOWZhYTA3 OThmZDkwHhcNMjYwMTAyMTYyMDAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5NzhlOGQzNWY3NjU5NzQwYTQxN2UxYjI0ZGE4MjNlYTc1NzJjMTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRNpAbeIGqiPOoTt2cc+8apRh7p/ LrQXnQDyidQlC63IeWuYOXPi5EmQZ39jI+eC6V4TQ+pZlN5S7Aq8bNFgzEgZxrOv bMgj6d1O+pB0+BbV7qmDmQRja17mdgTC0JJqKigpA0J/Mfy3OjvUuy+9mxIDZ/jU z4YqzQVVXz2kdD4H/gu3nih0vyrmcCQiYdhcLggRqwxO3hwcpsMwkeZu4k8H3MCL X262MFf2/782+wuNM0dGHq6FX6LwY4M4fDnsBTF8jxAbmcPRh0BZn7cisre8EDL7 fXmYDEt1V71gwOOJN2wnc/Ks4LtoRqZe8XL/BkVmy/mWbYl6CRf0mFfdQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJeOjTX3ZZdApBfhsk2oI+p1csEAMB8GA1UdIwQY MBaAFK7a7qkReh1czDICIpVaCfqgeY/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEt OTk4NjhjNTEzMjlhLzEvbDQ2Tk5mZGxsMENrRi1HeVRhZ2o2blZ5d1FBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEtOTk4NjhjNTEzMjlh LzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBH7r6MA0G CSqGSIb3DQEBCwUAA4IBAQC0cZpdJW62Pgjn4h5s0nkRoMmruI0BNSc4lKXR5eFV ooKWeUV+e6A5sNn5kWeNnuuGDuOA7/a7wmkT41jD7QODVSl+Xdu2kmo5bZ7dpwrl vOyGethkSe3PUgHCPyowDPdZX1kPrDHniO0vjERwfBmgl6SoxTPkELhEtZZo3HSR cDr5lA50RrzCO95Bq0fUfoanI3uREeTy38ghncthLwS3UaRdZ1XGM71bWnBnik26 C7s74C7h3UA76sUvYaxOosOqOXS6E8MIo4Rno2Du7/RuN/ModdY+DsCLnyDsIoB7 1xkiQzrCT8qtT908ZAsjSrMbJZ47qfCbBHVRBGI2XP4x -----END CERTIFICATE-----Generated at Mon Jan 26 01:16:12 2026 by rpki-client