This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/fX3KuGbBaSgozBC8VJSKif-SJWQ.roa File: fX3KuGbBaSgozBC8VJSKif-SJWQ.roa (raw, json) Hash identifier: YvJvbJ8D5DpHd4D9ZPHBQEllNbujWBnvbGsXVYfxrbQ= Subject key identifier: 7D:7D:CA:B8:66:C1:69:28:28:CC:10:BC:54:94:8A:89:FF:92:25:64 Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Certificate serial: 019BA2968E31377BF0DCA96DDDA227771210 Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/fX3KuGbBaSgozBC8VJSKif-SJWQ.roa Signing time: Fri 09 Jan 2026 11:48:54 +0000 ROA not before: Fri 09 Jan 2026 11:48:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41339 IP address blocks: 46.233.56.0/22 maxlen: 24 46.233.60.0/23 maxlen: 24 46.233.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:a2:96:8e:31:37:7b:f0:dc:a9:6d:dd:a2:27:77:12:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Validity Not Before: Jan 9 11:48:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d7dcab866c1692828cc10bc54948a89ff922564 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:26:a2:74:a2:a1:6a:63:c7:73:c8:7a:d7:33: f7:ab:2a:d9:93:62:2e:ea:fe:88:20:06:5d:82:fe: 0d:2b:55:ef:95:5b:66:9d:fb:2f:01:78:f8:cb:53: 21:95:69:8c:9e:42:b9:7a:1d:72:7b:d8:7c:7f:b5: 4a:53:40:ad:3f:49:74:61:14:28:d4:4c:f2:25:97: 61:ec:f0:91:45:2a:75:1f:92:07:03:3d:56:2a:b5: 9c:ca:0a:70:a0:95:94:07:0c:91:a5:ac:5b:0f:1b: 2b:41:2f:fc:cd:e2:8e:85:52:5c:37:63:06:01:8c: b7:19:60:bd:e1:4a:68:24:22:5b:40:04:89:5e:e5: 23:00:37:53:1a:11:99:04:e9:a3:95:1f:40:b3:15: 67:47:69:8e:2d:2f:82:d3:4b:b8:5a:b7:c7:c5:59: 60:96:ac:15:5e:27:94:6c:4f:b0:e4:37:77:91:44: b9:8a:cd:cd:fe:ca:e2:6d:b3:21:31:a7:42:95:fd: 90:81:05:07:5f:e4:77:3d:c6:32:b1:c6:40:6c:25: 98:a9:f5:51:55:0b:4a:9f:dc:9f:8f:5e:40:af:3a: ad:57:13:ef:99:5b:e5:da:b3:da:79:ab:26:a2:58: 39:00:ea:06:23:3d:07:3c:0e:db:46:26:1c:e3:4f: 70:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:7D:CA:B8:66:C1:69:28:28:CC:10:BC:54:94:8A:89:FF:92:25:64 X509v3 Authority Key Identifier: keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/fX3KuGbBaSgozBC8VJSKif-SJWQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.233.56.0-46.233.61.255 46.233.63.0/24 Signature Algorithm: sha256WithRSAEncryption 90:9f:46:2c:ea:0f:0d:71:98:28:f6:31:55:ca:0e:1d:0e:c9: 49:32:00:15:66:34:d1:21:6f:b4:ac:9b:f9:2e:de:a7:77:43: d5:38:92:5e:ef:53:6e:bd:73:0a:f5:05:f6:1a:25:b5:5f:2c: e3:52:3d:fd:69:ec:da:3c:f2:f4:8c:37:0e:5d:3a:a0:fc:38: c4:6d:bd:72:94:28:5e:82:45:71:68:a3:90:3e:a2:df:77:f0: b5:a2:6d:72:dc:b2:b0:35:40:6f:61:34:aa:29:2c:65:bd:ae: f7:f4:d0:1a:42:b8:c2:c4:47:15:3a:75:14:1a:e5:c8:43:c5: 07:42:ab:89:bf:0a:d4:b8:32:90:07:59:06:7e:b5:82:27:4c: 32:93:89:c9:84:23:62:f8:b3:8e:0f:cd:d6:31:32:71:15:d1: 70:7b:83:c7:e1:3c:11:f9:30:85:c0:12:df:f2:57:6c:a1:4b: e2:ca:ba:b2:33:e6:ed:c7:3b:53:e2:d5:de:85:37:eb:c3:46: e8:8e:13:8f:3f:cd:f0:c6:e6:a2:a3:d2:6d:d3:79:a9:f1:22: 0c:28:91:3b:77:9e:6e:81:e4:74:3b:6c:e7:6d:a6:bf:bf:74: 90:1b:f6:7b:bc:5a:27:70:2b:f4:e0:bd:eb:8d:0d:73:09:2f: 13:21:4a:c7 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZuilo4xN3vw3Klt3aIndxIQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1 ZDU2ZjUwHhcNMjYwMTA5MTE0ODU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDdkY2FiODY2YzE2OTI4MjhjYzEwYmM1NDk0OGE4OWZmOTIyNTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1iaidKKhamPHc8h61zP3qyrZk2Iu 6v6IIAZdgv4NK1XvlVtmnfsvAXj4y1MhlWmMnkK5eh1ye9h8f7VKU0CtP0l0YRQo 1EzyJZdh7PCRRSp1H5IHAz1WKrWcygpwoJWUBwyRpaxbDxsrQS/8zeKOhVJcN2MG AYy3GWC94UpoJCJbQASJXuUjADdTGhGZBOmjlR9AsxVnR2mOLS+C00u4WrfHxVlg lqwVXieUbE+w5Dd3kUS5is3N/sribbMhMadClf2QgQUHX+R3PcYyscZAbCWYqfVR VQtKn9yfj15ArzqtVxPvmVvl2rPaeasmolg5AOoGIz0HPA7bRiYc409wGQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFH19yrhmwWkoKMwQvFSUion/kiVkMB8GA1UdIwQY MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt M2MxNmZmODQxYWIyLzEvZlgzS3VHYkJhU2dvekJDOFZKU0tpZi1TSldRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAMu6TgD BAEu6TwDBAAu6T8wDQYJKoZIhvcNAQELBQADggEBAJCfRizqDw1xmCj2MVXKDh0O yUkyABVmNNEhb7Ssm/ku3qd3Q9U4kl7vU269cwr1BfYaJbVfLONSPf1p7No88vSM Nw5dOqD8OMRtvXKUKF6CRXFoo5A+ot938LWibXLcsrA1QG9hNKopLGW9rvf00BpC uMLERxU6dRQa5chDxQdCq4m/CtS4MpAHWQZ+tYInTDKTicmEI2L4s44PzdYxMnEV 0XB7g8fhPBH5MIXAEt/yV2yhS+LKurIz5u3HO1Pi1d6FN+vDRuiOE48/zfDG5qKj 0m3TeanxIgwokTt3nm6B5HQ7bOdtpr+/dJAb9nu8WidwK/TgveuNDXMJLxMhSsc= -----END CERTIFICATE-----Generated at Sun Jan 25 16:54:20 2026 by rpki-client