This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/7OvMfMdZMoxoXbVwcG3vdsD0emA.roa File: 7OvMfMdZMoxoXbVwcG3vdsD0emA.roa (raw, json) Hash identifier: EMD+bundCUSTuwY2sg618ZEWmpfQlcn6nadBIwBXs08= Subject key identifier: EC:EB:CC:7C:C7:59:32:8C:68:5D:B5:70:70:6D:EF:76:C0:F4:7A:60 Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Certificate serial: 019BF49CB95AD804E6830A25DF737660790D Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/7OvMfMdZMoxoXbVwcG3vdsD0emA.roa Signing time: Sun 25 Jan 2026 10:04:30 +0000 ROA not before: Sun 25 Jan 2026 10:04:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 46.233.32.0/24 maxlen: 24 46.233.34.0/23 maxlen: 24 46.233.42.0/24 maxlen: 24 46.233.52.0/24 maxlen: 24 46.233.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:04:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:9c:b9:5a:d8:04:e6:83:0a:25:df:73:76:60:79:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Validity Not Before: Jan 25 10:04:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ecebcc7cc759328c685db570706def76c0f47a60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:95:52:7b:72:e9:57:62:ab:1f:4c:7b:73:91: ab:77:e7:a2:54:57:24:34:da:18:bf:b4:9e:8e:13: cf:b2:00:da:c7:4c:45:2f:c1:89:4e:73:c6:79:b5: 3a:08:1d:78:2a:90:5f:0a:a3:f7:24:98:51:c9:d6: 38:46:ff:fd:ae:45:da:1d:68:68:3d:e8:e1:9f:fc: 17:a1:5d:6c:ed:8e:77:52:1f:86:34:80:3e:77:fe: d8:a1:1e:5b:a6:45:51:38:44:a7:3b:39:a2:13:2c: 18:13:d5:b1:b4:0a:78:c8:9d:b5:4c:bd:eb:18:8e: 13:cc:9c:78:a1:ad:44:ce:c9:65:77:f3:8e:5a:f7: e4:16:ac:e8:9d:c1:6e:e3:38:bf:2b:22:d2:bd:5f: aa:d5:58:ef:cb:35:d2:12:ea:c6:6b:8b:76:f3:51: 08:27:0f:23:73:54:03:d8:bd:14:cf:a1:ad:c4:63: b9:a7:69:8a:ab:d7:94:b9:0b:b6:b1:62:18:f8:e6: 9c:89:f2:a9:54:c4:68:53:02:2a:c3:13:27:ae:a1: 71:ec:50:ed:c1:b9:f3:9d:ab:41:52:56:b2:c9:a2: dd:ba:b7:e4:85:c2:13:b1:12:fd:67:12:85:bd:c1: 52:48:48:fa:9e:9a:73:3b:e1:6c:26:18:05:95:7b: 87:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:EB:CC:7C:C7:59:32:8C:68:5D:B5:70:70:6D:EF:76:C0:F4:7A:60 X509v3 Authority Key Identifier: keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/7OvMfMdZMoxoXbVwcG3vdsD0emA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.233.32.0/24 46.233.34.0/23 46.233.42.0/24 46.233.52.0/24 46.233.62.0/24 Signature Algorithm: sha256WithRSAEncryption 34:71:d6:2f:dd:78:a3:c9:73:60:b2:ba:97:5e:df:f2:8c:d3: 56:7c:d3:21:71:cf:50:68:95:ad:ac:f4:b3:5f:1f:1e:ee:3b: ab:26:15:22:cb:ff:54:36:10:c4:7d:59:83:41:12:77:f5:7f: f1:5c:a8:11:45:2d:e2:a2:a7:b4:dc:5a:08:c5:b5:51:77:b0: 75:92:6d:77:fd:76:ea:ef:4d:c3:5c:04:45:c3:42:43:98:cd: 94:0e:59:a6:8f:d0:62:44:6e:64:9c:98:78:41:41:e3:85:af: ec:d3:36:b1:b0:82:3c:35:ed:aa:08:77:6b:91:2d:22:11:42: 40:58:28:07:a0:92:4a:df:bb:14:a4:2e:3f:b8:f4:6f:e2:a1: c7:f4:01:d6:76:88:68:9d:35:f5:ca:12:7a:95:bb:bc:e6:14: 6a:1f:b3:37:29:2f:25:08:4a:62:53:06:f1:71:15:4c:55:2b: a0:43:2c:f5:8d:dc:bd:b4:2f:f2:41:48:3d:88:91:16:64:42: c3:6b:f0:1d:9b:ad:e3:d5:51:bc:9b:34:26:e7:08:da:69:5f: cf:b9:e8:c5:74:fb:67:02:cd:51:95:06:40:e0:03:c3:48:6d: 97:c9:04:10:d8:08:8d:56:58:65:b7:93:e2:96:f7:0a:84:0a: 54:a2:46:e6 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZv0nLla2ATmgwol33N2YHkNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1 ZDU2ZjUwHhcNMjYwMTI1MTAwNDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlY2ViY2M3Y2M3NTkzMjhjNjg1ZGI1NzA3MDZkZWY3NmMwZjQ3YTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5VSe3LpV2KrH0x7c5Grd+eiVFck NNoYv7SejhPPsgDax0xFL8GJTnPGebU6CB14KpBfCqP3JJhRydY4Rv/9rkXaHWho Pejhn/wXoV1s7Y53Uh+GNIA+d/7YoR5bpkVROESnOzmiEywYE9WxtAp4yJ21TL3r GI4TzJx4oa1Ezslld/OOWvfkFqzoncFu4zi/KyLSvV+q1VjvyzXSEurGa4t281EI Jw8jc1QD2L0Uz6GtxGO5p2mKq9eUuQu2sWIY+OacifKpVMRoUwIqwxMnrqFx7FDt wbnznatBUlayyaLdurfkhcITsRL9ZxKFvcFSSEj6nppzO+FsJhgFlXuHQQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFOzrzHzHWTKMaF21cHBt73bA9HpgMB8GA1UdIwQY MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt M2MxNmZmODQxYWIyLzEvN092TWZNZFpNb3hvWGJWd2NHM3Zkc0QwZW1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQALukgAwQB LukiAwQALukqAwQALuk0AwQALuk+MA0GCSqGSIb3DQEBCwUAA4IBAQA0cdYv3Xij yXNgsrqXXt/yjNNWfNMhcc9QaJWtrPSzXx8e7jurJhUiy/9UNhDEfVmDQRJ39X/x XKgRRS3ioqe03FoIxbVRd7B1km13/Xbq703DXARFw0JDmM2UDlmmj9BiRG5knJh4 QUHjha/s0zaxsII8Ne2qCHdrkS0iEUJAWCgHoJJK37sUpC4/uPRv4qHH9AHWdoho nTX1yhJ6lbu85hRqH7M3KS8lCEpiUwbxcRVMVSugQyz1jdy9tC/yQUg9iJEWZELD a/Adm63j1VG8mzQm5wjaaV/PuejFdPtnAs1RlQZA4APDSG2XyQQQ2AiNVlhlt5Pi lvcKhApUokbm -----END CERTIFICATE-----Generated at Sun Jan 25 19:59:04 2026 by rpki-client