This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/rKU1mC3UrxRCEsXb-l25oaEBhJw.roa File: rKU1mC3UrxRCEsXb-l25oaEBhJw.roa (raw, json) Hash identifier: 4jepadulIWtRtacZBukRLsOXuyzRr5YeactatRKpnlE= Subject key identifier: AC:A5:35:98:2D:D4:AF:14:42:12:C5:DB:FA:5D:B9:A1:A1:01:84:9C Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Certificate serial: 019B7F830DDD3CC0618F288D88BB1C27A037 Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/rKU1mC3UrxRCEsXb-l25oaEBhJw.roa Signing time: Fri 02 Jan 2026 16:20:53 +0000 ROA not before: Fri 02 Jan 2026 16:20:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215348 IP address blocks: 46.233.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:0d:dd:3c:c0:61:8f:28:8d:88:bb:1c:27:a0:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Validity Not Before: Jan 2 16:20:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aca535982dd4af144212c5dbfa5db9a1a101849c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:58:d8:81:f2:e3:12:90:7c:bd:b3:28:b6:f1: d8:bc:77:64:3d:8c:bf:70:f6:a4:9f:a8:45:f6:af: 3a:14:45:cd:54:ef:55:d2:cc:a4:59:51:4b:d5:96: f2:26:b1:b8:90:da:bb:57:6c:55:54:ff:19:d8:8d: c4:3f:de:8e:e8:0a:6c:24:f9:70:f5:1c:8a:df:c4: c9:9f:bc:87:6e:46:01:c0:39:82:17:98:15:b3:f4: 1f:a7:a4:5f:be:4d:d1:95:91:69:fe:6f:ca:10:9a: c0:e3:f4:50:9b:ed:19:46:bd:a3:f8:91:ac:b5:90: 6d:2c:89:70:06:98:38:6f:6f:5f:5b:ab:28:74:29: 21:66:d4:c0:aa:f1:68:b2:ad:6b:bf:e9:98:e0:8a: ee:38:07:f8:db:47:d8:f6:37:3f:7a:94:2a:f4:ba: 7d:f6:ac:cf:a4:db:84:f4:d8:bf:91:ff:23:bf:3f: 0f:33:2d:73:08:16:0a:7d:9f:d6:b1:a2:aa:af:5b: e2:a7:9c:ce:08:b4:ca:c2:3e:f8:53:78:82:96:39: cb:0a:fa:b7:99:39:82:be:c1:b3:f2:2d:6f:02:5e: 37:a9:d7:57:c2:d5:ec:99:b2:dd:4d:81:78:a4:6d: 92:5f:e2:35:4b:d9:9e:b1:74:13:3d:d1:c4:bd:31: 9f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A5:35:98:2D:D4:AF:14:42:12:C5:DB:FA:5D:B9:A1:A1:01:84:9C X509v3 Authority Key Identifier: keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/rKU1mC3UrxRCEsXb-l25oaEBhJw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.233.53.0/24 Signature Algorithm: sha256WithRSAEncryption 63:ed:03:f6:27:46:32:0e:1b:98:42:d8:a4:01:56:fd:16:95: c8:85:c7:af:7f:03:75:16:6b:ad:08:7c:f9:8b:ca:25:55:e4: f1:eb:6b:ad:57:8b:6b:15:9a:48:0c:ca:88:b3:e8:b0:ff:62: 60:56:bf:9d:c9:d2:77:a6:19:8d:32:6d:19:ba:03:a7:a1:59: e6:89:4a:d1:ed:e9:66:ab:76:44:ed:54:b6:a4:1a:68:b2:5c: ce:38:86:85:ad:24:a4:95:9c:c6:9c:17:b5:f1:ce:ae:a6:ff: a7:ae:7d:bd:aa:5a:12:90:d9:28:cb:28:dc:72:29:ca:a4:48: 55:a4:82:8e:72:59:bc:81:5a:ba:32:5f:94:f6:6d:ba:3d:79: b8:d6:c1:16:8f:62:83:4c:36:c7:a0:e5:64:c7:99:25:2e:9c: 79:48:a5:03:1c:aa:75:a0:00:af:ff:80:62:17:be:98:84:86: a4:e1:0a:df:1e:ef:90:5d:ae:5d:84:cb:b4:f1:1d:c7:cc:bf: b4:6e:73:e6:7b:e9:c7:88:75:fb:da:79:88:ad:d9:5e:0b:ae: 26:84:cd:15:80:13:83:b6:33:1d:db:06:bd:82:99:fa:b8:f9: 16:cd:5d:3f:c5:fd:16:31:96:4f:33:ef:d0:82:4d:d8:fd:4e: ba:c5:bf:05 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/gw3dPMBhjyiNiLscJ6A3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1 ZDU2ZjUwHhcNMjYwMTAyMTYyMDUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2E1MzU5ODJkZDRhZjE0NDIxMmM1ZGJmYTVkYjlhMWExMDE4NDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ljYgfLjEpB8vbMotvHYvHdkPYy/ cPakn6hF9q86FEXNVO9V0sykWVFL1ZbyJrG4kNq7V2xVVP8Z2I3EP96O6ApsJPlw 9RyK38TJn7yHbkYBwDmCF5gVs/Qfp6Rfvk3RlZFp/m/KEJrA4/RQm+0ZRr2j+JGs tZBtLIlwBpg4b29fW6sodCkhZtTAqvFosq1rv+mY4IruOAf420fY9jc/epQq9Lp9 9qzPpNuE9Ni/kf8jvz8PMy1zCBYKfZ/WsaKqr1vip5zOCLTKwj74U3iCljnLCvq3 mTmCvsGz8i1vAl43qddXwtXsmbLdTYF4pG2SX+I1S9mesXQTPdHEvTGfzQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKylNZgt1K8UQhLF2/pduaGhAYScMB8GA1UdIwQY MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt M2MxNmZmODQxYWIyLzEvcktVMW1DM1VyeFJDRXNYYi1sMjVvYUVCaEp3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALuk1MA0G CSqGSIb3DQEBCwUAA4IBAQBj7QP2J0YyDhuYQtikAVb9FpXIhcevfwN1FmutCHz5 i8olVeTx62utV4trFZpIDMqIs+iw/2JgVr+dydJ3phmNMm0ZugOnoVnmiUrR7elm q3ZE7VS2pBposlzOOIaFrSSklZzGnBe18c6upv+nrn29qloSkNkoyyjccinKpEhV pIKOclm8gVq6Ml+U9m26PXm41sEWj2KDTDbHoOVkx5klLpx5SKUDHKp1oACv/4Bi F76YhIak4QrfHu+QXa5dhMu08R3HzL+0bnPme+nHiHX72nmIrdleC64mhM0VgBOD tjMd2wa9gpn6uPkWzV0/xf0WMZZPM+/Qgk3Y/U66xb8F -----END CERTIFICATE-----Generated at Sun Jan 25 17:40:29 2026 by rpki-client