This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/tB6VFRP5A8-dHCyfbuK5W6EfmO0.roa File: tB6VFRP5A8-dHCyfbuK5W6EfmO0.roa (raw, json) Hash identifier: fBvgu7KJJRGq3XvqIRdFtimL7QHl3Bi00rxcK3wEvVw= Subject key identifier: B4:1E:95:15:13:F9:03:CF:9D:1C:2C:9F:6E:E2:B9:5B:A1:1F:98:ED Certificate issuer: /CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79 Certificate serial: 019B26C95E4C0546605AF92D6F7A54CB4B3B Authority key identifier: A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/tB6VFRP5A8-dHCyfbuK5W6EfmO0.roa Signing time: Tue 16 Dec 2025 10:51:29 +0000 ROA not before: Tue 16 Dec 2025 10:51:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16509 IP address blocks: 46.19.168.0/24 maxlen: 24 46.19.169.0/24 maxlen: 24 46.19.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.crl rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Dec 2025 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:26:c9:5e:4c:05:46:60:5a:f9:2d:6f:7a:54:cb:4b:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79 Validity Not Before: Dec 16 10:51:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=b41e951513f903cf9d1c2c9f6ee2b95ba11f98ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2e:5e:58:5e:f4:5b:64:1f:89:af:19:3c:b9: 9c:c6:8b:54:70:83:99:d8:00:24:35:5e:02:47:bb: a4:d5:b1:0b:a5:10:4d:14:ad:cc:5b:d2:c8:a7:45: e2:dd:e8:42:63:bc:f9:b8:84:fa:55:30:6e:9e:85: 50:f6:c2:e5:50:4f:a5:19:97:11:43:97:38:d4:d9: 7b:10:60:eb:4e:e7:ca:5b:f0:77:b8:1b:7c:04:a5: 93:03:45:53:3e:ee:af:12:a0:ef:c1:44:56:0c:70: df:60:52:21:86:dd:63:be:05:f0:77:ea:ac:2f:29: ef:73:c3:74:4e:7e:26:93:40:a0:f6:58:d8:c9:8e: e5:8a:78:e1:c7:2b:92:3d:36:0d:77:33:53:45:b0: 39:86:2d:00:24:95:5e:9a:76:4e:26:01:18:15:d2: b4:c3:e4:23:7b:0f:f1:4a:1e:4a:5f:0e:09:90:ee: 0d:76:62:5e:d9:2d:cf:39:8b:a7:f2:c0:e7:58:94: bd:87:37:b9:7e:94:58:9f:d1:b6:21:9e:f0:5e:44: fa:9c:dd:72:b3:6d:dc:f9:8e:0d:eb:23:12:d9:6d: fc:34:c2:15:f7:6c:43:33:d0:9d:bf:37:d4:5a:60: b7:79:72:6f:0d:7e:4b:17:82:43:6d:48:e3:a0:64: 74:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:1E:95:15:13:F9:03:CF:9D:1C:2C:9F:6E:E2:B9:5B:A1:1F:98:ED X509v3 Authority Key Identifier: keyid:A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/tB6VFRP5A8-dHCyfbuK5W6EfmO0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.19.168.0/23 46.19.171.0/24 Signature Algorithm: sha256WithRSAEncryption 57:a9:4a:18:79:98:22:32:a3:12:91:cc:a9:fc:9d:bd:13:0e: d7:d7:56:76:f8:82:e4:26:5a:4a:0d:f9:ac:c9:6b:a3:9f:41: e7:89:c4:25:d4:4c:4a:67:4e:9a:a7:36:6f:31:dd:61:c3:23: 82:46:58:8d:63:76:34:19:16:e2:18:e3:ec:14:9d:31:3b:b4: 34:f4:5d:9a:80:df:87:22:c0:b9:bd:c5:1a:b5:41:e1:a8:53: bf:1b:e4:17:37:5e:d0:f9:a3:26:2a:53:90:d2:7e:ac:7f:cf: 0f:e4:05:ce:6a:8c:7f:1f:99:80:c0:1b:4e:a8:c1:ce:65:61: 1f:42:da:77:42:b7:15:de:77:2e:ca:02:8d:70:18:f8:9a:5e: 35:1b:61:99:78:5f:7f:dd:e1:ca:e7:05:43:f7:8e:bc:1d:e8: a5:50:55:aa:9b:50:f1:ea:e9:87:5c:f8:d8:17:3e:9f:23:b7: 79:9e:3b:69:b0:20:f1:a1:91:cd:cf:e6:64:85:ec:e5:03:6c: 6b:42:5a:52:0c:57:c3:71:c3:be:a7:68:9c:cc:66:b9:f3:d3: 09:9d:85:fc:b5:10:3d:85:8c:c0:aa:5e:9a:8c:f9:33:3a:50: 8c:07:2b:df:99:5b:d8:4c:85:8d:7d:23:cf:7d:7b:ff:39:73: 84:6c:17:23 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZsmyV5MBUZgWvktb3pUy0s7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZjZiYzhmMTYzYWY0OWMwM2Q5YWQ2OWU3MTZiNDJjNWI5 NmVlNzkwHhcNMjUxMjE2MTA1MTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDFlOTUxNTEzZjkwM2NmOWQxYzJjOWY2ZWUyYjk1YmExMWY5OGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxi5eWF70W2Qfia8ZPLmcxotUcIOZ 2AAkNV4CR7uk1bELpRBNFK3MW9LIp0Xi3ehCY7z5uIT6VTBunoVQ9sLlUE+lGZcR Q5c41Nl7EGDrTufKW/B3uBt8BKWTA0VTPu6vEqDvwURWDHDfYFIhht1jvgXwd+qs Lynvc8N0Tn4mk0Cg9ljYyY7linjhxyuSPTYNdzNTRbA5hi0AJJVemnZOJgEYFdK0 w+Qjew/xSh5KXw4JkO4NdmJe2S3POYun8sDnWJS9hze5fpRYn9G2IZ7wXkT6nN1y s23c+Y4N6yMS2W38NMIV92xDM9CdvzfUWmC3eXJvDX5LF4JDbUjjoGR0LwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLQelRUT+QPPnRwsn27iuVuhH5jtMB8GA1UdIwQY MBaAFKL2vI8WOvScA9mtaecWtCxblu55MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3ZhOGp4WTY5SndEMmExcDV4YTBMRnVXN25rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yODUxYjYtMmU2NS00ODU5LTljMDUt NTA2YmI2YzY3OWNlLzEvdEI2VkZSUDVBOC1kSEN5ZmJ1SzVXNkVmbU8wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8yODUxYjYtMmU2NS00ODU5LTljMDUtNTA2YmI2YzY3OWNl LzEvb3ZhOGp4WTY5SndEMmExcDV4YTBMRnVXN25rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLhOoAwQA LhOrMA0GCSqGSIb3DQEBCwUAA4IBAQBXqUoYeZgiMqMSkcyp/J29Ew7X11Z2+ILk JlpKDfmsyWujn0HnicQl1ExKZ06apzZvMd1hwyOCRliNY3Y0GRbiGOPsFJ0xO7Q0 9F2agN+HIsC5vcUatUHhqFO/G+QXN17Q+aMmKlOQ0n6sf88P5AXOaox/H5mAwBtO qMHOZWEfQtp3QrcV3ncuygKNcBj4ml41G2GZeF9/3eHK5wVD9468HeilUFWqm1Dx 6umHXPjYFz6fI7d5njtpsCDxoZHNz+ZkhezlA2xrQlpSDFfDccO+p2iczGa589MJ nYX8tRA9hYzAql6ajPkzOlCMByvfmVvYTIWNfSPPfXv/OXOEbBcj -----END CERTIFICATE-----Generated at Fri Dec 19 23:19:41 2025 by rpki-client