This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/hS05mveN2aMKs32vgPN62OxZyU4.roa File: hS05mveN2aMKs32vgPN62OxZyU4.roa (raw, json) Hash identifier: ppIsNge7NuGGbn+pU/a2PkG/ZsHka3x0Ag4o3/gijLY= Subject key identifier: 85:2D:39:9A:F7:8D:D9:A3:0A:B3:7D:AF:80:F3:7A:D8:EC:59:C9:4E Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Certificate serial: 019B7F83083BF754A6336450894BE31A8AE8 Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/hS05mveN2aMKs32vgPN62OxZyU4.roa Signing time: Fri 02 Jan 2026 16:20:52 +0000 ROA not before: Fri 02 Jan 2026 16:20:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42410 IP address blocks: 46.233.48.0/22 maxlen: 24 46.233.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:08:3b:f7:54:a6:33:64:50:89:4b:e3:1a:8a:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Validity Not Before: Jan 2 16:20:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=852d399af78dd9a30ab37daf80f37ad8ec59c94e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a6:1a:9e:1f:2b:64:c8:13:93:8f:d7:29:6e: d4:b5:81:6c:ef:e4:d3:5a:04:c7:31:ca:eb:ba:3f: 6d:ac:70:c0:47:b4:43:5c:1a:21:32:ea:a7:25:25: 30:9d:c3:30:5b:13:13:bb:ef:28:e4:54:1c:4d:27: 74:57:65:d0:ab:9b:0a:16:49:85:91:c8:49:49:04: 08:39:39:6b:42:6b:06:66:d4:e7:98:95:20:b3:ef: eb:1a:bf:00:64:ce:4f:15:4a:af:77:67:81:02:16: ff:27:81:dd:8b:06:f7:fd:f3:0e:cc:8b:8d:63:d0: d3:ac:6a:b0:de:5e:48:fe:f9:be:e7:44:ae:cb:e5: 6d:a0:0f:5d:25:24:dd:42:78:4b:3c:52:8f:35:fc: 98:2e:4b:7a:80:31:55:26:8b:05:28:98:b5:46:e1: da:ae:6b:ec:c3:8b:e0:49:52:59:36:a6:41:05:ae: 46:1a:df:8b:9d:7a:2e:94:6c:ad:c7:68:6b:c0:07: 21:60:33:4e:bc:a9:99:3e:34:aa:1c:5d:a5:20:fb: 3e:ee:b6:54:93:c5:2c:4b:dd:26:b4:c5:ba:6a:4f: 42:7c:f9:59:dd:40:dc:a7:b8:19:a2:7f:30:f3:bb: 03:ba:f6:44:ca:a1:63:78:63:68:b5:8f:98:88:1d: 21:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:2D:39:9A:F7:8D:D9:A3:0A:B3:7D:AF:80:F3:7A:D8:EC:59:C9:4E X509v3 Authority Key Identifier: keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/hS05mveN2aMKs32vgPN62OxZyU4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.233.48.0/22 46.233.54.0/24 Signature Algorithm: sha256WithRSAEncryption 2d:b3:ed:10:42:83:2c:6c:f4:9f:04:58:17:06:4b:bc:52:aa: ee:51:99:75:97:44:b6:26:77:bc:94:42:0a:d4:61:d7:7e:88: f7:b2:37:83:2f:9d:fd:df:1c:69:20:fd:32:aa:a7:96:2c:fd: 11:9f:5f:a5:d9:1d:10:e1:a9:26:62:ee:48:b9:e5:cb:0d:b3: d0:1e:e8:6a:5b:b1:79:f9:ef:6d:87:09:65:f5:8a:cb:be:8a: 67:d1:65:9b:b4:a2:d4:bc:27:a5:26:97:d9:5e:e5:49:7f:6e: c1:bc:c2:8d:39:ff:b9:ac:3c:34:c3:2b:e6:ee:87:94:13:30: fb:23:2b:c8:85:d9:00:12:7e:5d:46:3c:30:08:22:d8:63:fd: f1:e8:93:4a:60:2c:bd:37:79:4d:f4:4c:40:d2:47:b1:e1:81: 26:25:b6:28:bc:77:9d:ea:23:c2:10:68:65:6a:24:36:9c:d8: e9:f8:c0:8c:29:10:05:c3:92:a1:79:b8:82:8a:b6:6b:19:ee: ad:0b:24:29:c9:ef:5f:7e:99:19:20:79:df:93:b1:58:1f:37: 67:ac:35:e6:1e:b2:d8:6e:a4:19:65:24:17:25:6f:8a:93:85: f1:5c:20:47:c6:53:5f:86:ac:0c:09:00:2d:7d:09:b0:9c:f7: 6b:95:7e:b1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/gwg791SmM2RQiUvjGoroMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1 ZDU2ZjUwHhcNMjYwMTAyMTYyMDUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTJkMzk5YWY3OGRkOWEzMGFiMzdkYWY4MGYzN2FkOGVjNTljOTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6Yanh8rZMgTk4/XKW7UtYFs7+TT WgTHMcrruj9trHDAR7RDXBohMuqnJSUwncMwWxMTu+8o5FQcTSd0V2XQq5sKFkmF kchJSQQIOTlrQmsGZtTnmJUgs+/rGr8AZM5PFUqvd2eBAhb/J4Hdiwb3/fMOzIuN Y9DTrGqw3l5I/vm+50Suy+VtoA9dJSTdQnhLPFKPNfyYLkt6gDFVJosFKJi1RuHa rmvsw4vgSVJZNqZBBa5GGt+LnXoulGytx2hrwAchYDNOvKmZPjSqHF2lIPs+7rZU k8UsS90mtMW6ak9CfPlZ3UDcp7gZon8w87sDuvZEyqFjeGNotY+YiB0hQQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFIUtOZr3jdmjCrN9r4DzetjsWclOMB8GA1UdIwQY MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt M2MxNmZmODQxYWIyLzEvaFMwNW12ZU4yYU1LczMydmdQTjYyT3haeVU0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCLukwAwQA Luk2MA0GCSqGSIb3DQEBCwUAA4IBAQAts+0QQoMsbPSfBFgXBku8UqruUZl1l0S2 Jne8lEIK1GHXfoj3sjeDL5393xxpIP0yqqeWLP0Rn1+l2R0Q4akmYu5IueXLDbPQ HuhqW7F5+e9thwll9YrLvopn0WWbtKLUvCelJpfZXuVJf27BvMKNOf+5rDw0wyvm 7oeUEzD7IyvIhdkAEn5dRjwwCCLYY/3x6JNKYCy9N3lN9ExA0kex4YEmJbYovHed 6iPCEGhlaiQ2nNjp+MCMKRAFw5KhebiCirZrGe6tCyQpye9ffpkZIHnfk7FYHzdn rDXmHrLYbqQZZSQXJW+Kk4XxXCBHxlNfhqwMCQAtfQmwnPdrlX6x -----END CERTIFICATE-----Generated at Sun Jan 25 15:29:04 2026 by rpki-client