This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/3jD0YcizeH8Q1qV2NEPg7xq78Tc.roa File: 3jD0YcizeH8Q1qV2NEPg7xq78Tc.roa (raw, json) Hash identifier: 52GkghurYXZlBw/P3re6oL3xnNmHYgWQ/XfBpyrLrd0= Subject key identifier: DE:30:F4:61:C8:B3:78:7F:10:D6:A5:76:34:43:E0:EF:1A:BB:F1:37 Certificate issuer: /CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f Certificate serial: 019B7C8004E7BDC7D980945EE5D83F6FD077 Authority key identifier: 2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/3jD0YcizeH8Q1qV2NEPg7xq78Tc.roa Signing time: Fri 02 Jan 2026 02:18:43 +0000 ROA not before: Fri 02 Jan 2026 02:18:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57908 IP address blocks: 46.243.16.0/24 maxlen: 24 46.243.17.0/24 maxlen: 24 46.243.18.0/24 maxlen: 24 46.243.19.0/24 maxlen: 24 46.243.20.0/24 maxlen: 24 46.243.21.0/24 maxlen: 24 46.243.22.0/24 maxlen: 24 46.243.23.0/24 maxlen: 24 2a03:6dc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.mft rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:04:e7:bd:c7:d9:80:94:5e:e5:d8:3f:6f:d0:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b928097dc9f89a7a3a8a296a78a4f9d0cbce17f Validity Not Before: Jan 2 02:18:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de30f461c8b3787f10d6a5763443e0ef1abbf137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c3:b6:2e:8c:d3:4a:33:d8:1d:45:0e:eb:32: 25:1b:cf:83:23:7c:1b:08:83:c4:37:c7:9c:7a:23: a5:fd:b9:4b:80:ab:d6:8a:09:2f:c1:8f:2a:49:da: 9b:8a:ce:22:ed:64:85:0a:96:ab:7a:e7:3c:90:5f: 88:85:7e:40:d0:a3:05:0b:e6:52:93:fc:c1:6f:03: 1c:ce:2b:d3:02:77:90:2d:d5:c5:a9:b2:ea:f5:b3: 12:8f:8c:2a:fb:63:22:a8:92:70:a7:8b:2c:6b:da: 29:97:b6:77:90:86:4b:43:de:2b:00:e4:fb:68:0d: 7a:d1:a4:71:c8:7f:f3:04:d2:56:0b:16:9a:3d:9d: 92:79:cb:54:ce:9b:9f:d0:cc:09:a5:6e:a8:1a:92: 69:ae:5d:31:83:38:60:d0:a0:04:90:f0:66:f8:5a: 98:6e:98:3e:0b:34:c3:87:dd:80:a4:65:5a:50:9a: 54:bb:67:db:6e:97:43:14:f0:ef:db:0a:01:03:10: d9:a3:0a:d1:9d:33:bd:55:73:53:8a:2c:59:4e:24: 9a:6e:28:1f:f7:8f:41:1e:4d:0b:db:36:8a:fd:e5: 09:ef:4f:68:56:12:29:65:80:16:83:5c:71:de:4a: a1:8c:82:41:03:d3:10:50:d2:87:96:f8:63:17:3a: 7d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:30:F4:61:C8:B3:78:7F:10:D6:A5:76:34:43:E0:EF:1A:BB:F1:37 X509v3 Authority Key Identifier: keyid:2B:92:80:97:DC:9F:89:A7:A3:A8:A2:96:A7:8A:4F:9D:0C:BC:E1:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5KAl9yfiaejqKKWp4pPnQy84X8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/3jD0YcizeH8Q1qV2NEPg7xq78Tc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/a734a4-143d-461d-bfd6-45caa6ef6700/1/K5KAl9yfiaejqKKWp4pPnQy84X8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.243.16.0/21 IPv6: 2a03:6dc0::/32 Signature Algorithm: sha256WithRSAEncryption 93:50:2c:56:d7:28:34:3f:d0:98:37:33:5f:c6:b4:ac:e9:96: dc:0a:eb:ea:d5:17:fe:0a:da:00:78:ff:43:1f:07:aa:76:e4: a5:92:c3:63:2c:1d:bf:19:75:fd:99:bf:9e:10:80:c2:96:80: bd:70:44:87:aa:3b:8e:ec:24:3f:2e:dc:fd:fb:82:da:f9:b2: 46:b3:05:91:f1:7a:ae:1d:87:05:de:06:08:26:a2:17:1e:60: 45:2f:e3:a0:50:4c:30:40:f6:3d:9e:4f:6d:89:7e:78:68:a9: 40:45:ed:2a:9a:fb:d5:4b:47:ff:46:00:bb:80:ca:23:d0:66: 4d:0e:a5:ae:d6:b5:6d:00:38:cf:67:94:6b:ac:2f:66:e5:b0: f1:36:05:f8:90:0d:57:a5:19:63:05:06:dc:4a:66:28:1c:7c: 15:ec:39:8c:92:b2:5f:29:10:33:e2:90:a9:34:48:a5:ab:f5: 05:9f:25:03:c6:cc:00:d3:28:0e:51:a4:52:23:e4:0a:4f:95: d2:fe:a6:bf:4f:33:dc:9e:f9:35:44:ec:70:3b:05:7d:ed:48: 4f:95:ce:1e:27:c7:c5:ba:67:61:5a:c0:81:bd:13:02:17:c5: e8:87:5a:eb:ad:78:16:6f:85:15:2e:ad:ae:37:55:b9:be:77: 6e:56:bf:bd -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt8gATnvcfZgJRe5dg/b9B3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJiOTI4MDk3ZGM5Zjg5YTdhM2E4YTI5NmE3OGE0ZjlkMGNi Y2UxN2YwHhcNMjYwMTAyMDIxODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTMwZjQ2MWM4YjM3ODdmMTBkNmE1NzYzNDQzZTBlZjFhYmJmMTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsO2LozTSjPYHUUO6zIlG8+DI3wb CIPEN8eceiOl/blLgKvWigkvwY8qSdqbis4i7WSFCpareuc8kF+IhX5A0KMFC+ZS k/zBbwMczivTAneQLdXFqbLq9bMSj4wq+2MiqJJwp4ssa9opl7Z3kIZLQ94rAOT7 aA160aRxyH/zBNJWCxaaPZ2SectUzpuf0MwJpW6oGpJprl0xgzhg0KAEkPBm+FqY bpg+CzTDh92ApGVaUJpUu2fbbpdDFPDv2woBAxDZowrRnTO9VXNTiixZTiSabigf 949BHk0L2zaK/eUJ709oVhIpZYAWg1xx3kqhjIJBA9MQUNKHlvhjFzp9NQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFN4w9GHIs3h/ENaldjRD4O8au/E3MB8GA1UdIwQY MBaAFCuSgJfcn4mno6iilqeKT50MvOF/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSzVLQWw5eWZpYWVqcUtLV3A0cFBuUXk4NFg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9hNzM0YTQtMTQzZC00NjFkLWJmZDYt NDVjYWE2ZWY2NzAwLzEvM2pEMFljaXplSDhRMXFWMk5FUGc3eHE3OFRjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNi9hNzM0YTQtMTQzZC00NjFkLWJmZDYtNDVjYWE2ZWY2NzAw LzEvSzVLQWw5eWZpYWVqcUtLV3A0cFBuUXk4NFg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDLvMQMA0E AgACMAcDBQAqA23AMA0GCSqGSIb3DQEBCwUAA4IBAQCTUCxW1yg0P9CYNzNfxrSs 6ZbcCuvq1Rf+CtoAeP9DHweqduSlksNjLB2/GXX9mb+eEIDCloC9cESHqjuO7CQ/ Ltz9+4La+bJGswWR8XquHYcF3gYIJqIXHmBFL+OgUEwwQPY9nk9tiX54aKlARe0q mvvVS0f/RgC7gMoj0GZNDqWu1rVtADjPZ5RrrC9m5bDxNgX4kA1XpRljBQbcSmYo HHwV7DmMkrJfKRAz4pCpNEilq/UFnyUDxswA0ygOUaRSI+QKT5XS/qa/TzPcnvk1 ROxwOwV97UhPlc4eJ8fFumdhWsCBvRMCF8Xoh1rrrXgWb4UVLq2uN1W5vnduVr+9 -----END CERTIFICATE-----Generated at Mon Jan 26 00:37:24 2026 by rpki-client