This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/AA6JRB20zD3bhyDEw0JdE4qfpRE.roa File: AA6JRB20zD3bhyDEw0JdE4qfpRE.roa (raw, json) Hash identifier: NE+ebZXCyUrXLaALOJ7nNGAfCvZOOcobnlPAP7fEK1U= Subject key identifier: 00:0E:89:44:1D:B4:CC:3D:DB:87:20:C4:C3:42:5D:13:8A:9F:A5:11 Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Certificate serial: 019ADE1A7930F56150500DF80C3C583C9D5E Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/AA6JRB20zD3bhyDEw0JdE4qfpRE.roa Signing time: Tue 02 Dec 2025 08:07:48 +0000 ROA not before: Tue 02 Dec 2025 08:07:48 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 834 IP address blocks: 46.233.34.0/23 maxlen: 24 46.233.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 11:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:de:1a:79:30:f5:61:50:50:0d:f8:0c:3c:58:3c:9d:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Validity Not Before: Dec 2 08:07:48 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=000e89441db4cc3ddb8720c4c3425d138a9fa511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:98:50:0a:7c:9d:c2:db:b8:0c:d0:8a:16:bf: 97:7a:46:19:96:ba:0e:eb:92:f2:26:09:b5:3f:c3: 03:9a:ff:1c:c0:02:c7:ed:48:8f:a6:88:c3:a0:8b: ee:48:44:45:5b:b8:d2:0c:40:cb:63:1b:95:fe:ca: b4:9b:7c:d2:c0:2b:60:1f:6b:2a:b4:ba:18:39:f1: e6:20:05:7f:42:d5:e9:fb:d9:9f:ae:fb:33:c4:0b: 45:14:96:78:10:ec:65:a5:2b:b7:5e:ff:9e:31:b0: d9:7b:c7:f6:90:fc:5a:5a:60:5c:52:1c:d7:49:82: ae:13:61:d3:16:d9:06:59:77:19:fc:d2:54:39:54: 88:80:1b:2b:80:29:72:1b:13:96:a5:59:d3:d5:a4: 13:9a:e4:ee:cd:6f:b2:36:3a:66:77:a4:10:9f:fb: 3d:ad:00:cb:df:8e:27:c3:53:92:41:31:7c:5d:45: de:9c:81:fd:45:df:53:f4:28:d6:b8:22:cf:f3:fc: 14:ea:ca:98:32:03:cb:f4:68:59:97:08:1e:e0:7b: c0:44:9f:bf:aa:20:8a:e3:28:7a:4b:f5:ba:c1:4a: 16:81:a0:f9:b2:80:2b:f7:09:94:d9:5a:25:b8:f7: 6f:6b:c3:2b:5b:7f:66:1e:0a:49:e1:81:c2:46:c3: 34:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:0E:89:44:1D:B4:CC:3D:DB:87:20:C4:C3:42:5D:13:8A:9F:A5:11 X509v3 Authority Key Identifier: keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/AA6JRB20zD3bhyDEw0JdE4qfpRE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.233.34.0/23 46.233.52.0/24 Signature Algorithm: sha256WithRSAEncryption 35:a8:2c:7e:80:00:70:31:ce:6d:b9:4e:73:2c:ac:27:97:c8: 6f:4a:a1:e4:1e:67:c9:e5:17:36:9c:71:04:12:05:df:53:ee: e9:36:13:02:97:21:5b:57:80:32:7b:63:3d:e2:20:02:ac:90: d3:99:24:b2:15:66:ab:65:bd:f5:e1:fc:4e:3f:b4:11:e7:75: cc:16:58:92:ee:88:64:b7:46:2e:54:70:a9:25:2b:59:4f:e2: 73:15:f3:af:37:72:72:13:a4:79:ec:dc:65:6d:c8:78:91:76: 07:23:64:15:9e:02:2e:43:65:03:c4:79:bc:c7:34:d2:1a:21: ab:50:84:76:52:2a:ea:3b:a7:10:55:3d:85:ba:91:33:d0:ff: 0e:10:2c:14:cf:35:e6:b6:6c:d2:52:82:81:ca:33:a5:28:37: 96:de:3c:63:76:aa:5b:c0:ce:4d:c9:38:b3:57:74:cb:b2:ac: a6:c5:59:95:5d:02:bc:0f:c7:ec:42:c6:fb:78:d2:ac:3e:09: 9f:2e:d1:98:57:9c:ba:f9:a5:8d:16:96:c7:5c:8b:07:2d:92: 10:fc:3a:2d:dd:e7:e2:04:21:57:79:88:1b:26:01:55:e7:b2: 7e:63:8c:97:2b:01:6e:9e:d0:34:ef:e0:d2:fc:56:8e:84:28: b2:5b:77:57 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZreGnkw9WFQUA34DDxYPJ1eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1 ZDU2ZjUwHhcNMjUxMjAyMDgwNzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMDBlODk0NDFkYjRjYzNkZGI4NzIwYzRjMzQyNWQxMzhhOWZhNTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25hQCnydwtu4DNCKFr+XekYZlroO 65LyJgm1P8MDmv8cwALH7UiPpojDoIvuSERFW7jSDEDLYxuV/sq0m3zSwCtgH2sq tLoYOfHmIAV/QtXp+9mfrvszxAtFFJZ4EOxlpSu3Xv+eMbDZe8f2kPxaWmBcUhzX SYKuE2HTFtkGWXcZ/NJUOVSIgBsrgClyGxOWpVnT1aQTmuTuzW+yNjpmd6QQn/s9 rQDL344nw1OSQTF8XUXenIH9Rd9T9CjWuCLP8/wU6sqYMgPL9GhZlwge4HvARJ+/ qiCK4yh6S/W6wUoWgaD5soAr9wmU2VoluPdva8MrW39mHgpJ4YHCRsM0MQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFAAOiUQdtMw924cgxMNCXROKn6URMB8GA1UdIwQY MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt M2MxNmZmODQxYWIyLzEvQUE2SlJCMjB6RDNiaHlERXcwSmRFNHFmcFJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLukiAwQA Luk0MA0GCSqGSIb3DQEBCwUAA4IBAQA1qCx+gABwMc5tuU5zLKwnl8hvSqHkHmfJ 5Rc2nHEEEgXfU+7pNhMClyFbV4Aye2M94iACrJDTmSSyFWarZb314fxOP7QR53XM FliS7ohkt0YuVHCpJStZT+JzFfOvN3JyE6R57Nxlbch4kXYHI2QVngIuQ2UDxHm8 xzTSGiGrUIR2UirqO6cQVT2FupEz0P8OECwUzzXmtmzSUoKByjOlKDeW3jxjdqpb wM5NyTizV3TLsqymxVmVXQK8D8fsQsb7eNKsPgmfLtGYV5y6+aWNFpbHXIsHLZIQ /Dot3efiBCFXeYgbJgFV57J+Y4yXKwFuntA07+DS/FaOhCiyW3dX -----END CERTIFICATE-----Generated at Sat Dec 6 20:00:15 2025 by rpki-client