This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/RsnrJKwmL8cQaNh398zcQEeUvVY.roa File: RsnrJKwmL8cQaNh398zcQEeUvVY.roa (raw, json) Hash identifier: LNyFYXYZiYI7HKKoks5EZWi0DK28Q+wkZrR9sNh6HOA= Subject key identifier: 46:C9:EB:24:AC:26:2F:C7:10:68:D8:77:F7:CC:DC:40:47:94:BD:56 Certificate issuer: /CN=6613d9c856444a7096e3a8508cae307fdebc0cd4 Certificate serial: 019B7E37F7EA628499BBDFD422FF9BFF5ED7 Authority key identifier: 66:13:D9:C8:56:44:4A:70:96:E3:A8:50:8C:AE:30:7F:DE:BC:0C:D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/RsnrJKwmL8cQaNh398zcQEeUvVY.roa Signing time: Fri 02 Jan 2026 10:19:15 +0000 ROA not before: Fri 02 Jan 2026 10:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60501 IP address blocks: 46.149.102.0/24 maxlen: 24 2a10:2400::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:f7:ea:62:84:99:bb:df:d4:22:ff:9b:ff:5e:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6613d9c856444a7096e3a8508cae307fdebc0cd4 Validity Not Before: Jan 2 10:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46c9eb24ac262fc71068d877f7ccdc404794bd56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:71:17:64:34:25:ee:71:3b:26:8a:b8:66:52: e4:c5:e5:52:42:fa:2b:b5:65:5d:05:f3:7a:c9:e0: 8c:10:11:f8:32:56:e6:82:9c:6d:d4:9b:1b:17:f4: 35:ab:fb:f3:fc:78:8d:aa:ae:6f:ba:91:29:99:68: b3:e9:9f:b2:98:04:13:be:93:64:3a:19:79:ff:72: a0:ac:a1:22:c0:e4:6c:5f:4c:d8:f1:cc:c1:b4:c9: b6:22:ab:5a:42:40:76:36:e9:89:31:f5:9d:71:49: 06:31:a2:02:2d:b6:05:e8:56:6b:6d:9e:d6:6a:7c: a1:1b:e8:59:85:15:e6:b7:d7:21:43:11:49:4f:1b: f5:a5:a9:36:28:6f:1b:f2:4c:ae:47:57:65:2f:7c: 5f:17:ed:d4:ea:6e:d3:a2:ad:5b:36:ed:22:98:0a: b1:df:9c:57:b5:c6:be:c9:bd:2d:30:08:a9:9a:de: 8c:c6:72:5b:aa:4b:4a:3c:07:4a:cb:3a:2c:46:3a: bb:db:9c:df:02:91:c9:35:7c:81:38:2c:67:49:b4: 77:52:ca:dd:6c:bf:e8:6d:eb:ed:97:55:73:8d:31: c5:42:50:9f:a9:91:ad:48:95:04:0f:fb:89:29:0f: 0f:6b:68:45:21:b7:82:e3:0f:5c:7e:b7:fb:14:e3: a5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C9:EB:24:AC:26:2F:C7:10:68:D8:77:F7:CC:DC:40:47:94:BD:56 X509v3 Authority Key Identifier: keyid:66:13:D9:C8:56:44:4A:70:96:E3:A8:50:8C:AE:30:7F:DE:BC:0C:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhPZyFZESnCW46hQjK4wf968DNQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/RsnrJKwmL8cQaNh398zcQEeUvVY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8b5f1e-4190-48b6-bdc5-7d05f9888e98/1/ZhPZyFZESnCW46hQjK4wf968DNQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.149.102.0/24 IPv6: 2a10:2400::/29 Signature Algorithm: sha256WithRSAEncryption 20:33:df:72:5e:af:9b:20:29:dc:d5:ff:76:26:49:fc:55:ef: 0e:44:71:e0:7b:4b:c2:5b:7a:e6:f0:f3:58:1a:f4:ca:48:4c: 2b:20:92:79:bb:c6:27:37:2c:73:fa:92:a6:69:f1:69:b7:5c: 9b:0d:eb:78:0f:ff:17:9d:95:66:e4:39:92:c6:f5:8c:d6:83: f5:52:dd:5d:17:77:00:12:cb:3d:78:5a:f4:e2:7b:63:31:9a: cd:f2:f7:83:99:27:3d:71:f6:76:ef:7b:57:06:25:a5:4e:f4: e9:2f:92:3e:3d:b9:94:3a:13:49:52:83:1e:cd:79:c9:c4:23: e5:fb:71:7c:95:18:c9:0b:e1:f4:98:ce:6e:43:d1:c2:75:04: 79:eb:66:93:59:64:eb:29:01:b2:e2:2d:6a:ca:cd:73:1d:c2: 5b:e7:ed:74:77:d9:ee:5e:2e:0d:c3:f7:b5:85:c2:c1:70:08: b5:df:9f:70:f1:a0:bd:04:f9:ed:a0:20:8d:fe:94:98:30:cf: b1:b7:1f:bf:64:14:b1:ca:85:e9:d7:d6:dd:c9:cc:db:75:72: c3:0c:fe:7c:49:ab:d4:16:ba:d6:0c:8c:71:55:2c:e9:ce:5e: 1e:67:8a:ae:70:f7:8f:06:16:b4:9c:8e:2d:7b:3b:63:3d:00: e3:f6:b8:44 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+N/fqYoSZu9/UIv+b/17XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2MTNkOWM4NTY0NDRhNzA5NmUzYTg1MDhjYWUzMDdmZGVi YzBjZDQwHhcNMjYwMTAyMTAxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmM5ZWIyNGFjMjYyZmM3MTA2OGQ4NzdmN2NjZGM0MDQ3OTRiZDU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHEXZDQl7nE7Joq4ZlLkxeVSQvor tWVdBfN6yeCMEBH4Mlbmgpxt1JsbF/Q1q/vz/HiNqq5vupEpmWiz6Z+ymAQTvpNk Ohl5/3KgrKEiwORsX0zY8czBtMm2IqtaQkB2NumJMfWdcUkGMaICLbYF6FZrbZ7W anyhG+hZhRXmt9chQxFJTxv1pak2KG8b8kyuR1dlL3xfF+3U6m7Toq1bNu0imAqx 35xXtca+yb0tMAipmt6MxnJbqktKPAdKyzosRjq725zfApHJNXyBOCxnSbR3Usrd bL/obevtl1VzjTHFQlCfqZGtSJUED/uJKQ8Pa2hFIbeC4w9cfrf7FOOl+QIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEbJ6ySsJi/HEGjYd/fM3EBHlL1WMB8GA1UdIwQY MBaAFGYT2chWREpwluOoUIyuMH/evAzUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmhQWnlGWkVTbkNXNDZoUWpLNHdmOTY4RE5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84YjVmMWUtNDE5MC00OGI2LWJkYzUt N2QwNWY5ODg4ZTk4LzEvUnNuckpLd21MOGNRYU5oMzk4emNRRWVVdlZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy84YjVmMWUtNDE5MC00OGI2LWJkYzUtN2QwNWY5ODg4ZTk4 LzEvWmhQWnlGWkVTbkNXNDZoUWpLNHdmOTY4RE5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALpVmMA0E AgACMAcDBQMqECQAMA0GCSqGSIb3DQEBCwUAA4IBAQAgM99yXq+bICnc1f92Jkn8 Ve8ORHHge0vCW3rm8PNYGvTKSEwrIJJ5u8YnNyxz+pKmafFpt1ybDet4D/8XnZVm 5DmSxvWM1oP1Ut1dF3cAEss9eFr04ntjMZrN8veDmSc9cfZ273tXBiWlTvTpL5I+ PbmUOhNJUoMezXnJxCPl+3F8lRjJC+H0mM5uQ9HCdQR562aTWWTrKQGy4i1qys1z HcJb5+10d9nuXi4Nw/e1hcLBcAi1359w8aC9BPntoCCN/pSYMM+xtx+/ZBSxyoXp 19bdyczbdXLDDP58SavUFrrWDIxxVSzpzl4eZ4qucPePBha0nI4teztjPQDj9rhE -----END CERTIFICATE-----Generated at Mon Jan 26 21:05:57 2026 by rpki-client