This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/jCfveam_XFqY1WaoDM8mc53l0-A.roa File: jCfveam_XFqY1WaoDM8mc53l0-A.roa (raw, json) Hash identifier: oYsXoD5qrvfH3xJxru02r9mxYtA0m3BelZFuFCg04Oc= Subject key identifier: 8C:27:EF:79:A9:BF:5C:5A:98:D5:66:A8:0C:CF:26:73:9D:E5:D3:E0 Certificate issuer: /CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33 Certificate serial: 019B7C12BFB59B43DD85BD9F438E4BEC4739 Authority key identifier: 89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/jCfveam_XFqY1WaoDM8mc53l0-A.roa Signing time: Fri 02 Jan 2026 00:19:22 +0000 ROA not before: Fri 02 Jan 2026 00:19:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31655 IP address blocks: 46.227.48.0/21 maxlen: 21 185.47.104.0/22 maxlen: 22 2a03:15c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.mft rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:bf:b5:9b:43:dd:85:bd:9f:43:8e:4b:ec:47:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89f4c7873b7fea49ff6eb90d502c1dbc3a5f8c33 Validity Not Before: Jan 2 00:19:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8c27ef79a9bf5c5a98d566a80ccf26739de5d3e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d1:ba:b0:d5:e0:10:ad:f3:b9:bc:82:76:f8: e7:4d:a2:2e:50:3d:7c:70:d7:21:bb:9e:f9:11:14: fa:a9:36:69:53:a0:5e:fa:a5:a7:b4:a9:71:6f:eb: 37:49:65:10:1c:77:75:9b:aa:d2:cd:59:67:91:be: fd:15:f1:2d:b1:fc:30:73:5c:8d:a0:a2:a6:bf:97: 47:09:ec:9b:5e:94:ac:24:3f:74:e6:71:dc:6f:12: 3d:3c:67:f4:c0:65:b4:c2:e8:f3:14:1e:96:ca:c1: a8:fb:2f:8b:56:79:d6:52:c3:53:3d:01:5c:11:c1: 65:2c:4e:b2:3d:7e:82:44:b9:d6:0b:d8:34:97:1c: 32:df:44:a9:d3:39:e6:a8:f8:dd:d9:79:e6:aa:84: 7f:1c:f1:46:fe:d8:06:41:77:25:7e:01:f7:dd:88: f2:f9:fa:7c:5b:3e:50:12:bd:82:a8:c2:62:b1:79: c6:ef:15:d4:8f:52:d7:ac:2b:44:b4:c0:f9:04:14: a6:4f:5d:ca:30:72:fb:dd:2d:37:4d:1e:47:13:46: b0:86:11:1e:74:90:51:b8:20:b6:59:7c:cd:16:66: 2a:dc:8c:78:07:63:ea:79:a6:cd:aa:9e:46:c9:b1: 6f:2f:7d:7f:33:29:7a:e3:01:12:61:d7:73:6b:28: fd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:27:EF:79:A9:BF:5C:5A:98:D5:66:A8:0C:CF:26:73:9D:E5:D3:E0 X509v3 Authority Key Identifier: keyid:89:F4:C7:87:3B:7F:EA:49:FF:6E:B9:0D:50:2C:1D:BC:3A:5F:8C:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ifTHhzt_6kn_brkNUCwdvDpfjDM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/jCfveam_XFqY1WaoDM8mc53l0-A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/43afb6-0d21-4ff6-9863-bc517e121d54/1/ifTHhzt_6kn_brkNUCwdvDpfjDM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.227.48.0/21 185.47.104.0/22 IPv6: 2a03:15c0::/32 Signature Algorithm: sha256WithRSAEncryption 19:87:a7:43:d9:09:8d:60:63:82:2b:e7:7e:ed:d2:4c:2e:d3: a1:d6:b4:81:d8:09:79:98:7f:e8:34:c2:bf:36:4b:9c:81:47: 44:a4:6e:c0:ca:bc:2c:75:ca:c8:29:c5:1f:5c:04:3f:c0:e3: 4a:1a:2f:a9:2b:46:8d:02:e0:5d:20:fd:f5:bc:2f:4f:3f:a6: 19:58:a1:66:f3:f4:da:d1:2c:79:f3:a1:d3:37:f0:bf:9f:d5: 9b:8e:3e:64:83:6f:e8:f4:08:15:bf:14:4b:91:07:13:62:f4: cc:4c:02:ab:ef:96:14:28:4f:0b:5b:61:42:0d:d7:6b:ec:b5: 7b:d7:42:57:45:9a:9f:28:32:33:db:63:d8:c8:b9:5c:61:c3: d4:d4:43:32:64:84:14:ac:2f:96:15:c6:37:75:d0:44:f9:22: e7:cc:2f:97:4c:55:92:b3:93:b2:18:57:a8:07:42:98:e9:35: bd:24:47:c8:fb:1b:3c:94:1e:7d:ef:dc:04:17:79:51:fb:06: fe:a7:37:13:af:c4:61:d9:18:ed:ba:30:36:d3:ca:f5:25:84: a1:06:a5:c0:f0:40:62:2d:e3:09:3e:b5:08:8d:b3:28:35:7b: 8f:68:cf:4d:87:5f:94:6e:9d:b0:f7:71:16:87:0e:23:29:8f: 2c:8b:6f:e5 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt8Er+1m0Pdhb2fQ45L7Ec5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5ZjRjNzg3M2I3ZmVhNDlmZjZlYjkwZDUwMmMxZGJjM2E1 ZjhjMzMwHhcNMjYwMTAyMDAxOTIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4YzI3ZWY3OWE5YmY1YzVhOThkNTY2YTgwY2NmMjY3MzlkZTVkM2UwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNG6sNXgEK3zubyCdvjnTaIuUD18 cNchu575ERT6qTZpU6Be+qWntKlxb+s3SWUQHHd1m6rSzVlnkb79FfEtsfwwc1yN oKKmv5dHCeybXpSsJD905nHcbxI9PGf0wGW0wujzFB6WysGo+y+LVnnWUsNTPQFc EcFlLE6yPX6CRLnWC9g0lxwy30Sp0znmqPjd2XnmqoR/HPFG/tgGQXclfgH33Yjy +fp8Wz5QEr2CqMJisXnG7xXUj1LXrCtEtMD5BBSmT13KMHL73S03TR5HE0awhhEe dJBRuCC2WXzNFmYq3Ix4B2PqeabNqp5GybFvL31/Myl64wESYddzayj97QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFIwn73mpv1xamNVmqAzPJnOd5dPgMB8GA1UdIwQY MBaAFIn0x4c7f+pJ/265DVAsHbw6X4wzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWZUSGh6dF82a25fYnJrTlVDd2R2RHBmakRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80M2FmYjYtMGQyMS00ZmY2LTk4NjMt YmM1MTdlMTIxZDU0LzEvakNmdmVhbV9YRnFZMVdhb0RNOG1jNTNsMC1BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS80M2FmYjYtMGQyMS00ZmY2LTk4NjMtYmM1MTdlMTIxZDU0 LzEvaWZUSGh6dF82a25fYnJrTlVDd2R2RHBmakRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDLuMwAwQC uS9oMA0EAgACMAcDBQAqAxXAMA0GCSqGSIb3DQEBCwUAA4IBAQAZh6dD2QmNYGOC K+d+7dJMLtOh1rSB2Al5mH/oNMK/NkucgUdEpG7AyrwsdcrIKcUfXAQ/wONKGi+p K0aNAuBdIP31vC9PP6YZWKFm8/Ta0Sx586HTN/C/n9Wbjj5kg2/o9AgVvxRLkQcT YvTMTAKr75YUKE8LW2FCDddr7LV710JXRZqfKDIz22PYyLlcYcPU1EMyZIQUrC+W FcY3ddBE+SLnzC+XTFWSs5OyGFeoB0KY6TW9JEfI+xs8lB5979wEF3lR+wb+pzcT r8Rh2RjtujA208r1JYShBqXA8EBiLeMJPrUIjbMoNXuPaM9Nh1+Ubp2w93EWhw4j KY8si2/l -----END CERTIFICATE-----Generated at Mon Jan 26 06:19:24 2026 by rpki-client