This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/5KwTCXGaEmxfineap3j8xC_SkiM.roa File: 5KwTCXGaEmxfineap3j8xC_SkiM.roa (raw, json) Hash identifier: iGdOA9kuMVNiObXLidash5z/PzOjRgRSWtuN684ej3Q= Subject key identifier: E4:AC:13:09:71:9A:12:6C:5F:8A:77:9A:A7:78:FC:C4:2F:D2:92:23 Certificate issuer: /CN=15f1fb12903a5cd4bc17abb59873c9d6da7e69b5 Certificate serial: 019B7D5CDCFD5BAB9FFA1EB78330B8788865 Authority key identifier: 15:F1:FB:12:90:3A:5C:D4:BC:17:AB:B5:98:73:C9:D6:DA:7E:69:B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/5KwTCXGaEmxfineap3j8xC_SkiM.roa Signing time: Fri 02 Jan 2026 06:19:56 +0000 ROA not before: Fri 02 Jan 2026 06:19:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51993 IP address blocks: 46.149.48.0/23 maxlen: 23 46.149.48.0/24 maxlen: 24 46.149.49.0/24 maxlen: 24 46.149.52.0/23 maxlen: 23 46.149.52.0/24 maxlen: 24 46.149.53.0/24 maxlen: 24 46.149.54.0/23 maxlen: 23 46.149.54.0/24 maxlen: 24 46.149.55.0/24 maxlen: 24 46.149.56.0/23 maxlen: 23 46.149.56.0/24 maxlen: 24 46.149.57.0/24 maxlen: 24 46.149.60.0/22 maxlen: 22 46.149.60.0/23 maxlen: 23 46.149.62.0/24 maxlen: 24 46.149.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.mft rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:dc:fd:5b:ab:9f:fa:1e:b7:83:30:b8:78:88:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15f1fb12903a5cd4bc17abb59873c9d6da7e69b5 Validity Not Before: Jan 2 06:19:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e4ac1309719a126c5f8a779aa778fcc42fd29223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:86:91:09:b6:43:92:f0:80:a3:1b:e5:5b:36: 23:5f:5c:23:ae:09:c8:1d:82:92:f7:29:0f:ce:0e: 8d:5c:97:20:7a:49:7a:eb:b0:9d:43:f4:4d:19:26: 0d:0c:bb:ca:2a:61:3f:f6:1d:f9:30:9f:3f:7c:9c: 88:8c:4a:07:17:6e:7a:f6:8c:57:ec:e6:9f:d7:4a: 3a:dd:ed:c1:45:b8:e9:89:8c:c2:f4:5d:37:e0:26: 40:03:d1:63:3d:63:e8:9d:19:7b:f1:17:f6:b3:7d: e8:9b:52:1c:a0:12:7e:ae:31:b4:9b:97:ba:ec:26: 26:d9:84:aa:74:75:b3:e8:e7:a2:1d:87:e7:ff:bb: 5c:05:48:4f:0c:f6:6d:de:bf:85:03:85:dc:11:c4: f0:51:6b:43:d5:0e:26:35:37:99:01:1b:fb:4d:38: f4:75:65:f7:c3:d9:be:55:3d:67:6e:88:c4:29:80: 48:28:5e:d0:54:04:fa:62:2f:48:74:6d:cf:77:2e: a5:38:0c:0b:02:83:58:2e:43:61:b8:99:11:b4:0f: ae:41:3e:2d:7c:67:74:2d:71:64:f8:fd:14:ea:76: 29:2c:f0:e9:e0:e6:d7:86:6d:6b:bc:8b:4c:ed:9b: 8e:8a:95:fd:70:e1:93:4b:44:f8:ba:58:b3:6c:b8: b1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:AC:13:09:71:9A:12:6C:5F:8A:77:9A:A7:78:FC:C4:2F:D2:92:23 X509v3 Authority Key Identifier: keyid:15:F1:FB:12:90:3A:5C:D4:BC:17:AB:B5:98:73:C9:D6:DA:7E:69:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfH7EpA6XNS8F6u1mHPJ1tp-abU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/5KwTCXGaEmxfineap3j8xC_SkiM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ec4a2b-76d7-4473-9945-2f2f8b590503/1/FfH7EpA6XNS8F6u1mHPJ1tp-abU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.149.48.0/23 46.149.52.0-46.149.57.255 46.149.60.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:2f:64:f4:ad:69:f3:e7:0a:bb:f2:d1:1b:ba:cf:68:00:45: 67:ef:47:03:a7:52:bd:1d:7e:3a:23:93:fd:48:e7:4a:c1:52: e3:51:ca:85:f5:61:9b:13:d2:59:f7:5e:7d:60:29:6a:43:20: d1:29:aa:15:4e:59:bd:86:37:05:b2:11:37:8c:0e:c2:46:cc: 32:7f:83:1b:17:5a:98:d3:0a:d7:af:79:76:1d:3c:e4:22:5e: 24:6d:b5:90:ba:66:3d:46:15:4d:1a:d7:c8:bc:1c:69:dc:3a: eb:7f:30:9a:d8:a7:02:65:07:99:ad:a2:b8:e7:35:21:3d:49: e3:22:26:6d:de:0b:94:34:9b:6b:48:1d:55:a0:5c:80:69:2e: d7:93:0c:19:87:95:e2:8c:58:17:7a:95:19:cd:06:a8:08:17: 37:27:e9:01:62:e2:3a:fb:d0:fe:24:66:0b:54:c7:33:bc:62: 73:54:8f:a8:53:12:08:b0:c3:61:8e:fa:f0:08:a8:7e:c7:85: b1:61:60:d1:2c:5d:e2:fc:4f:29:cb:7b:16:71:fc:af:05:f5: 65:1b:b7:6c:e4:5b:86:66:93:27:89:b5:45:06:b3:86:42:b8: 77:8c:f6:80:e9:7d:df:ec:f8:b1:27:97:8c:02:85:26:81:1c: 74:ef:e8:f9 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt9XNz9W6uf+h63gzC4eIhlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZjFmYjEyOTAzYTVjZDRiYzE3YWJiNTk4NzNjOWQ2ZGE3 ZTY5YjUwHhcNMjYwMTAyMDYxOTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNGFjMTMwOTcxOWExMjZjNWY4YTc3OWFhNzc4ZmNjNDJmZDI5MjIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYaRCbZDkvCAoxvlWzYjX1wjrgnI HYKS9ykPzg6NXJcgekl667CdQ/RNGSYNDLvKKmE/9h35MJ8/fJyIjEoHF2569oxX 7Oaf10o63e3BRbjpiYzC9F034CZAA9FjPWPonRl78Rf2s33om1IcoBJ+rjG0m5e6 7CYm2YSqdHWz6OeiHYfn/7tcBUhPDPZt3r+FA4XcEcTwUWtD1Q4mNTeZARv7TTj0 dWX3w9m+VT1nbojEKYBIKF7QVAT6Yi9IdG3Pdy6lOAwLAoNYLkNhuJkRtA+uQT4t fGd0LXFk+P0U6nYpLPDp4ObXhm1rvItM7ZuOipX9cOGTS0T4ulizbLixyQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFOSsEwlxmhJsX4p3mqd4/MQv0pIjMB8GA1UdIwQY MBaAFBXx+xKQOlzUvBertZhzydbafmm1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmZIN0VwQTZYTlM4RjZ1MW1IUEoxdHAtYWJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9lYzRhMmItNzZkNy00NDczLTk5NDUt MmYyZjhiNTkwNTAzLzEvNUt3VENYR2FFbXhmaW5lYXAzajh4Q19Ta2lNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9lYzRhMmItNzZkNy00NDczLTk5NDUtMmYyZjhiNTkwNTAz LzEvRmZIN0VwQTZYTlM4RjZ1MW1IUEoxdHAtYWJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBLpUwMAwD BAIulTQDBAEulTgDBAIulTwwDQYJKoZIhvcNAQELBQADggEBAGovZPStafPnCrvy 0Ru6z2gARWfvRwOnUr0dfjojk/1I50rBUuNRyoX1YZsT0ln3Xn1gKWpDINEpqhVO Wb2GNwWyETeMDsJGzDJ/gxsXWpjTCteveXYdPOQiXiRttZC6Zj1GFU0a18i8HGnc Out/MJrYpwJlB5mtorjnNSE9SeMiJm3eC5Q0m2tIHVWgXIBpLteTDBmHleKMWBd6 lRnNBqgIFzcn6QFi4jr70P4kZgtUxzO8YnNUj6hTEgiww2GO+vAIqH7HhbFhYNEs XeL8TynLexZx/K8F9WUbt2zkW4ZmkyeJtUUGs4ZCuHeM9oDpfd/s+LEnl4wChSaB HHTv6Pk= -----END CERTIFICATE-----Generated at Fri Jan 2 13:02:09 2026 by rpki-client