This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/46QaHVMJCGlRapFTukwuml2I-vg.roa File: 46QaHVMJCGlRapFTukwuml2I-vg.roa (raw, json) Hash identifier: 88YvFIPiabGOr5eSBP9AiPkHJdkR88co4NO1gCEyhOA= Subject key identifier: E3:A4:1A:1D:53:09:08:69:51:6A:91:53:BA:4C:2E:9A:5D:88:FA:F8 Certificate issuer: /CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e Certificate serial: 019B7AC7EF84447ABF8532D1D502B084EA61 Authority key identifier: 47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/46QaHVMJCGlRapFTukwuml2I-vg.roa Signing time: Thu 01 Jan 2026 18:18:01 +0000 ROA not before: Thu 01 Jan 2026 18:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 45681 IP address blocks: 45.143.0.0/22 maxlen: 24 176.118.178.0/24 maxlen: 24 2a14:2d40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.mft rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 06:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:ef:84:44:7a:bf:85:32:d1:d5:02:b0:84:ea:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47ddbcce2628bf09fae6bf044218c657e8bd3c6e Validity Not Before: Jan 1 18:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3a41a1d53090869516a9153ba4c2e9a5d88faf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:41:70:61:70:a7:36:e3:32:8b:c3:e3:d7:ae: 2a:6d:3e:14:09:f4:93:dd:8d:9f:91:51:64:e4:aa: bf:10:85:bb:47:02:78:99:a5:01:5f:f1:f9:93:f2: 84:20:e5:77:81:ff:ad:fe:0d:19:9d:2d:10:65:32: 9e:48:1f:19:e9:9d:ab:70:1c:77:16:5e:7b:de:a6: 10:78:d5:e5:85:fc:c3:7a:93:47:74:09:ab:25:aa: 0f:d2:bd:f0:42:ce:0d:2f:66:58:4f:63:62:c7:43: 31:19:ed:90:da:d0:21:66:fc:66:81:d9:d9:c3:ba: 90:77:0f:96:db:71:f8:be:98:3e:b8:aa:1a:d7:d9: 26:cc:4c:3a:a9:ac:95:1f:99:53:ef:42:7b:fd:cb: bb:46:0b:de:52:4b:0a:5e:8c:1e:b0:50:bd:80:12: 09:63:ee:36:b4:4b:9e:a2:36:c0:0d:91:45:3b:24: 3b:55:f9:0d:9f:02:e8:c3:58:1e:d7:66:47:ad:55: 5b:0c:00:3f:d7:6d:b2:3b:e1:ac:c9:0a:f8:23:30: 6c:92:bf:8a:40:b8:71:30:a6:f4:68:78:c2:fe:10: 6f:7e:6f:6f:5b:71:f5:eb:98:b4:d4:65:8c:ec:ec: 5a:d2:b0:8a:59:5c:5e:ab:22:a1:65:ea:22:05:03: 79:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:A4:1A:1D:53:09:08:69:51:6A:91:53:BA:4C:2E:9A:5D:88:FA:F8 X509v3 Authority Key Identifier: keyid:47:DD:BC:CE:26:28:BF:09:FA:E6:BF:04:42:18:C6:57:E8:BD:3C:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R928ziYovwn65r8EQhjGV-i9PG4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/46QaHVMJCGlRapFTukwuml2I-vg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a3b355-9afa-434e-8098-50d709bffeb5/1/R928ziYovwn65r8EQhjGV-i9PG4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.143.0.0/22 176.118.178.0/24 IPv6: 2a14:2d40::/29 Signature Algorithm: sha256WithRSAEncryption d1:41:a3:32:bb:14:4d:c7:f9:f0:24:91:7f:97:ad:39:dd:97: 97:6b:2b:62:cb:e2:0d:fd:fd:43:f9:a6:d3:fb:bc:ce:f0:ab: f8:8e:4f:36:ff:dc:d1:83:7b:20:ba:df:62:14:32:89:8f:81: f2:16:c5:60:b8:fa:1d:b2:b9:a0:61:fc:a2:01:8a:83:37:8a: ef:4b:65:f9:90:31:be:60:d8:ac:b5:94:13:40:33:e1:6a:e3: 1d:30:18:19:9a:74:01:0b:76:1e:f6:5e:44:e6:f0:e5:40:40: 0f:06:db:db:ce:ef:fd:cc:22:42:ac:90:15:c4:77:79:34:ae: 83:61:73:48:80:06:c6:28:9c:95:41:c2:76:f3:ca:69:8c:2c: 80:c8:c4:99:e7:1e:f9:6f:2d:0f:3f:e1:c1:5c:38:0b:c2:97: 70:e2:d3:8b:dc:24:74:a3:13:ef:38:61:d8:27:8d:76:44:3b: 94:9a:30:b1:40:57:0b:69:d7:32:38:ec:a6:54:6a:bc:dc:2a: b3:be:a6:6b:04:53:b9:af:99:90:bc:0c:15:6c:98:e6:e5:80: 4f:a4:bd:f2:6b:57:bd:41:21:d1:01:7c:77:f4:ce:07:85:dc: 70:a9:4e:5a:c0:56:2f:0f:44:bd:a8:d6:09:72:68:01:5c:b8: b2:76:7c:9a -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt6x++ERHq/hTLR1QKwhOphMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3ZGRiY2NlMjYyOGJmMDlmYWU2YmYwNDQyMThjNjU3ZThi ZDNjNmUwHhcNMjYwMTAxMTgxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2E0MWExZDUzMDkwODY5NTE2YTkxNTNiYTRjMmU5YTVkODhmYWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0FwYXCnNuMyi8Pj164qbT4UCfST 3Y2fkVFk5Kq/EIW7RwJ4maUBX/H5k/KEIOV3gf+t/g0ZnS0QZTKeSB8Z6Z2rcBx3 Fl573qYQeNXlhfzDepNHdAmrJaoP0r3wQs4NL2ZYT2Nix0MxGe2Q2tAhZvxmgdnZ w7qQdw+W23H4vpg+uKoa19kmzEw6qayVH5lT70J7/cu7RgveUksKXowesFC9gBIJ Y+42tEueojbADZFFOyQ7VfkNnwLow1ge12ZHrVVbDAA/122yO+GsyQr4IzBskr+K QLhxMKb0aHjC/hBvfm9vW3H165i01GWM7Oxa0rCKWVxeqyKhZeoiBQN53QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFOOkGh1TCQhpUWqRU7pMLppdiPr4MB8GA1UdIwQY MBaAFEfdvM4mKL8J+ua/BEIYxlfovTxuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjkyOHppWW92d242NXI4RVFoakdWLWk5UEc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9hM2IzNTUtOWFmYS00MzRlLTgwOTgt NTBkNzA5YmZmZWI1LzEvNDZRYUhWTUpDR2xSYXBGVHVrd3VtbDJJLXZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9hM2IzNTUtOWFmYS00MzRlLTgwOTgtNTBkNzA5YmZmZWI1 LzEvUjkyOHppWW92d242NXI4RVFoakdWLWk5UEc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLY8AAwQA sHayMA0EAgACMAcDBQMqFC1AMA0GCSqGSIb3DQEBCwUAA4IBAQDRQaMyuxRNx/nw JJF/l6053ZeXaytiy+IN/f1D+abT+7zO8Kv4jk82/9zRg3sgut9iFDKJj4HyFsVg uPodsrmgYfyiAYqDN4rvS2X5kDG+YNistZQTQDPhauMdMBgZmnQBC3Ye9l5E5vDl QEAPBtvbzu/9zCJCrJAVxHd5NK6DYXNIgAbGKJyVQcJ288ppjCyAyMSZ5x75by0P P+HBXDgLwpdw4tOL3CR0oxPvOGHYJ412RDuUmjCxQFcLadcyOOymVGq83CqzvqZr BFO5r5mQvAwVbJjm5YBPpL3ya1e9QSHRAXx39M4HhdxwqU5awFYvD0S9qNYJcmgB XLiydnya -----END CERTIFICATE-----Generated at Mon Jan 12 15:27:10 2026 by rpki-client