This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/6knPf4Z_Yom73fZwtAX7TGmnwWI.roa File: 6knPf4Z_Yom73fZwtAX7TGmnwWI.roa (raw, json) Hash identifier: uMucpBFGP9VTEQFIpmoToKJaaBVJ7Z0HhGQfxWsojaw= Subject key identifier: EA:49:CF:7F:86:7F:62:89:BB:DD:F6:70:B4:05:FB:4C:69:A7:C1:62 Certificate issuer: /CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33 Certificate serial: 019B7C12BFE5318D7787FFCC8202F7B842D8 Authority key identifier: 89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/6knPf4Z_Yom73fZwtAX7TGmnwWI.roa Signing time: Fri 02 Jan 2026 00:19:22 +0000 ROA not before: Fri 02 Jan 2026 00:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60788 IP address blocks: 46.227.48.0/21 maxlen: 21 185.47.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:bf:e5:31:8d:77:87:ff:cc:82:02:f7:b8:42:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33 Validity Not Before: Jan 2 00:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ea49cf7f867f6289bbddf670b405fb4c69a7c162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8d:8f:a9:0a:85:e1:03:b5:60:0c:0a:2e:15: 0c:6c:b9:d6:ec:da:12:b6:c3:4f:d9:23:64:7d:4c: e3:d8:08:bb:28:71:a0:83:54:0a:f2:dc:64:ef:b3: 23:13:24:78:44:8e:59:e2:dc:5b:b5:bc:bc:d3:78: 27:ce:44:11:4b:7f:28:6a:47:69:ac:18:8a:7f:fe: 44:2a:c0:6e:c6:d7:ea:e0:b3:f6:2e:c0:09:e9:b1: 3b:27:b8:e4:8b:61:80:d7:34:41:b7:ec:63:dd:60: c0:0f:f6:0d:4e:0f:d6:ee:95:f2:29:10:84:7b:3e: fc:61:5f:59:26:45:cc:90:b9:3a:d0:14:39:36:31: 1b:36:55:fc:55:d7:ef:8b:12:b2:50:08:03:cd:84: 9d:72:6f:99:bb:a2:e3:3b:a7:33:9f:02:a5:e3:59: d2:9c:ca:26:4a:b0:ce:e5:ad:5c:83:b6:67:ed:af: 77:41:8e:bb:be:cb:58:b1:db:74:18:c0:cc:35:1c: 79:ce:57:b1:16:fd:61:05:fc:af:70:b9:0b:e0:f9: b5:f3:12:25:cb:ed:e1:11:dc:6d:27:b1:6e:13:f5: 99:74:b0:30:dc:5e:79:8b:9e:80:e2:f6:37:92:7f: cb:3c:d7:d8:d6:f2:b7:13:4b:c2:aa:2c:a7:6c:69: 34:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:49:CF:7F:86:7F:62:89:BB:DD:F6:70:B4:05:FB:4C:69:A7:C1:62 X509v3 Authority Key Identifier: keyid:89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/6knPf4Z_Yom73fZwtAX7TGmnwWI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.227.48.0/21 185.47.104.0/22 Signature Algorithm: sha256WithRSAEncryption 24:8d:7d:24:5a:61:a8:ae:f2:3d:9f:d1:61:e6:cd:65:6f:74: ad:8f:3e:8a:fc:9d:54:da:be:7d:ff:19:19:1e:e4:1c:b5:7c: cd:a4:47:aa:6d:c9:0e:dc:2a:c9:cd:1c:7e:3f:b7:94:72:6a: 16:44:e2:a5:0c:89:b1:f0:5d:ac:ff:c8:ef:2f:8d:21:fa:18: cd:94:98:d7:8a:e6:b9:11:e4:7d:54:05:e3:92:2d:e0:6b:62: c3:c6:59:04:0a:5a:f9:37:ba:a4:30:48:85:79:00:77:83:cc: cc:99:25:1e:43:44:b8:ee:49:e4:8b:60:b4:90:74:73:7f:b8: 8f:01:81:49:7f:07:3c:90:2e:71:c3:92:16:d9:b5:07:c8:de: e6:c9:7b:e7:cf:c1:80:5a:72:f2:8c:5a:70:55:45:8c:f7:7e: 0f:22:ec:b6:b0:95:c5:18:96:bb:08:75:69:09:d0:36:ec:8a: c1:8c:22:90:7c:10:8f:be:7c:ca:24:21:85:3b:ee:46:1b:e8: b6:38:6b:d5:e4:6b:24:88:4f:e1:9e:4c:ce:79:86:e2:2e:c3: 41:40:91:f5:c4:1e:77:5a:28:2d:d8:a1:6e:99:04:7a:d7:52: 97:9f:da:25:78:28:e1:04:4e:d4:d1:40:99:c8:32:9e:91:dd: 5e:f1:e9:df -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8Er/lMY13h//MggL3uELYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZjRjNzg3M2I3ZmVhNDlmZjZlYjkwZDUwMmMxZGJjM2E1 ZjhjMzMwHhcNMjYwMTAyMDAxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlYTQ5Y2Y3Zjg2N2Y2Mjg5YmJkZGY2NzBiNDA1ZmI0YzY5YTdjMTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn42PqQqF4QO1YAwKLhUMbLnW7NoS tsNP2SNkfUzj2Ai7KHGgg1QK8txk77MjEyR4RI5Z4txbtby803gnzkQRS38oakdp rBiKf/5EKsBuxtfq4LP2LsAJ6bE7J7jki2GA1zRBt+xj3WDAD/YNTg/W7pXyKRCE ez78YV9ZJkXMkLk60BQ5NjEbNlX8VdfvixKyUAgDzYSdcm+Zu6LjO6cznwKl41nS nMomSrDO5a1cg7Zn7a93QY67vstYsdt0GMDMNRx5zlexFv1hBfyvcLkL4Pm18xIl y+3hEdxtJ7FuE/WZdLAw3F55i56A4vY3kn/LPNfY1vK3E0vCqiynbGk0ewIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOpJz3+Gf2KJu932cLQF+0xpp8FiMB8GA1UdIwQY MBaAFIn0x4c7f+pJ/265DVAsHbw6X4wzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWZUSGh6dF82a25fYnJrTlVDd2R2RHBmakRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80M2FmYjYtMGQyMS00ZmY2LTk4NjMt YmM1MTdlMTIxZDU0LzEvNmtuUGY0Wl9Zb203M2Zad3RBWDdUR21ud1dJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS80M2FmYjYtMGQyMS00ZmY2LTk4NjMtYmM1MTdlMTIxZDU0 LzEvaWZUSGh6dF82a25fYnJrTlVDd2R2RHBmakRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLuMwAwQC uS9oMA0GCSqGSIb3DQEBCwUAA4IBAQAkjX0kWmGorvI9n9Fh5s1lb3Stjz6K/J1U 2r59/xkZHuQctXzNpEeqbckO3CrJzRx+P7eUcmoWROKlDImx8F2s/8jvL40h+hjN lJjXiua5EeR9VAXjki3ga2LDxlkEClr5N7qkMEiFeQB3g8zMmSUeQ0S47knki2C0 kHRzf7iPAYFJfwc8kC5xw5IW2bUHyN7myXvnz8GAWnLyjFpwVUWM934PIuy2sJXF GJa7CHVpCdA27IrBjCKQfBCPvnzKJCGFO+5GG+i2OGvV5GskiE/hnkzOeYbiLsNB QJH1xB53Wigt2KFumQR611KXn9oleCjhBE7U0UCZyDKekd1e8enf -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:57 2026 by rpki-client