This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/3DdHsX6it2ap4y_VnsjWCiY07Yo.roa File: 3DdHsX6it2ap4y_VnsjWCiY07Yo.roa (raw, json) Hash identifier: x9mgWA78JqU1sZIpmaNa31HOdxWPBMoH6TxC+AtVICA= Subject key identifier: DC:37:47:B1:7E:A2:B7:66:A9:E3:2F:D5:9E:C8:D6:0A:26:34:ED:8A Certificate issuer: /CN=ff8dd5fe4179e8bda28532561919f6d07877c63d Certificate serial: 019B7BA4C715851D953E69D14B162ED355A6 Authority key identifier: FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/3DdHsX6it2ap4y_VnsjWCiY07Yo.roa Signing time: Thu 01 Jan 2026 22:19:14 +0000 ROA not before: Thu 01 Jan 2026 22:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62240 IP address blocks: 46.149.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.crl rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.mft rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:c7:15:85:1d:95:3e:69:d1:4b:16:2e:d3:55:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff8dd5fe4179e8bda28532561919f6d07877c63d Validity Not Before: Jan 1 22:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dc3747b17ea2b766a9e32fd59ec8d60a2634ed8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:4f:f2:a9:93:ec:4c:55:8b:39:49:3f:7e:97: ae:95:4f:54:d4:c2:f0:18:bd:ca:38:2d:c4:f0:a4: 39:24:84:0a:b1:64:23:bc:86:5a:21:9a:aa:14:14: 04:b9:f6:5d:ff:40:b2:7a:56:93:bb:79:2b:e4:60: 0d:89:16:a4:08:85:04:10:b6:07:fd:38:90:38:47: 44:2c:d1:ce:31:f4:a3:f7:82:7e:19:fa:1e:93:e3: b7:3b:99:43:d3:58:5c:e2:d7:4f:53:a6:cc:9b:6f: 95:5a:10:89:a4:ad:53:6f:5c:de:0e:d5:da:c3:c8: e2:36:86:8c:57:43:07:af:c7:99:1d:c2:8d:b3:fb: 0e:e5:41:92:d7:0d:8d:80:58:6a:29:bb:b3:f3:08: 41:05:9a:ba:86:a4:fb:1b:2b:b2:0d:b8:78:dd:8d: 21:11:73:d7:08:1d:dc:b5:cd:3e:4e:7e:6a:eb:d3: e8:43:e9:7b:12:f1:e9:b2:ba:dc:14:f2:ac:d5:8d: ef:8d:16:a8:0e:e7:a4:05:86:72:5e:a3:e4:2a:10: 99:1d:7b:6e:cf:78:35:90:75:8b:97:dd:10:e9:f9: d9:40:17:08:36:df:9f:a2:1d:32:a3:14:32:b6:c9: f2:4e:80:65:85:b8:77:2a:e8:49:ee:49:26:75:81: 9a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:37:47:B1:7E:A2:B7:66:A9:E3:2F:D5:9E:C8:D6:0A:26:34:ED:8A X509v3 Authority Key Identifier: keyid:FF:8D:D5:FE:41:79:E8:BD:A2:85:32:56:19:19:F6:D0:78:77:C6:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_43V_kF56L2ihTJWGRn20Hh3xj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/3DdHsX6it2ap4y_VnsjWCiY07Yo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4b2f88-3e20-4afa-b754-06a404435e50/1/_43V_kF56L2ihTJWGRn20Hh3xj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.149.128.0/20 Signature Algorithm: sha256WithRSAEncryption 63:7f:b0:35:e3:e3:de:b8:d9:49:d9:1d:92:60:b0:f1:de:b4: 3c:22:cf:8d:0d:6d:43:e9:d4:6e:b7:76:d7:9b:c8:df:16:1a: 2b:9c:cb:c7:22:f7:ca:7a:f7:8f:7d:fe:1f:6c:bf:56:3f:c0: 01:c9:2c:48:fe:3e:f3:ce:8d:2c:e8:60:59:09:69:9d:a7:1c: 66:67:4f:9c:ba:82:3c:fc:6d:a6:98:48:30:c6:c0:dd:d4:02: 2b:22:0d:da:cc:f6:a4:d5:89:39:9a:c9:8e:c2:20:18:84:12: 71:fc:37:2c:f2:fa:a4:ef:4f:e4:95:6d:1f:39:c9:a2:4e:02: db:43:b9:75:86:2d:fc:37:08:55:28:fd:00:40:4d:aa:02:2d: bc:24:ed:b0:2f:e6:51:90:65:83:09:ba:71:5d:69:4d:62:6b: 14:06:c4:a3:41:4c:ee:da:87:d6:fd:84:30:87:19:3c:4b:02: f1:e5:bc:52:ab:ed:81:a8:0d:51:e5:f1:ff:10:48:68:0c:92: 27:0a:a1:a9:04:2a:13:10:5e:00:25:2f:04:4b:cd:5e:43:ea: 28:4f:08:ce:f0:a8:84:ce:7b:cd:3a:d6:28:08:97:e3:37:cd: f0:b8:3f:25:29:2e:1b:27:ca:94:9c:56:95:b4:60:c2:cd:fc: 50:d7:bf:74 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pMcVhR2VPmnRSxYu01WmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmOGRkNWZlNDE3OWU4YmRhMjg1MzI1NjE5MTlmNmQwNzg3 N2M2M2QwHhcNMjYwMTAxMjIxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkYzM3NDdiMTdlYTJiNzY2YTllMzJmZDU5ZWM4ZDYwYTI2MzRlZDhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5k/yqZPsTFWLOUk/fpeulU9U1MLw GL3KOC3E8KQ5JIQKsWQjvIZaIZqqFBQEufZd/0CyelaTu3kr5GANiRakCIUEELYH /TiQOEdELNHOMfSj94J+Gfoek+O3O5lD01hc4tdPU6bMm2+VWhCJpK1Tb1zeDtXa w8jiNoaMV0MHr8eZHcKNs/sO5UGS1w2NgFhqKbuz8whBBZq6hqT7GyuyDbh43Y0h EXPXCB3ctc0+Tn5q69PoQ+l7EvHpsrrcFPKs1Y3vjRaoDuekBYZyXqPkKhCZHXtu z3g1kHWLl90Q6fnZQBcINt+foh0yoxQytsnyToBlhbh3KuhJ7kkmdYGajQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNw3R7F+ordmqeMv1Z7I1gomNO2KMB8GA1UdIwQY MBaAFP+N1f5Beei9ooUyVhkZ9tB4d8Y9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzQzVl9rRjU2TDJpaFRKV0dSbjIwSGgzeGowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80YjJmODgtM2UyMC00YWZhLWI3NTQt MDZhNDA0NDM1ZTUwLzEvM0RkSHNYNml0MmFwNHlfVm5zaldDaVkwN1lvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS80YjJmODgtM2UyMC00YWZhLWI3NTQtMDZhNDA0NDM1ZTUw LzEvXzQzVl9rRjU2TDJpaFRKV0dSbjIwSGgzeGowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELpWAMA0G CSqGSIb3DQEBCwUAA4IBAQBjf7A14+PeuNlJ2R2SYLDx3rQ8Is+NDW1D6dRut3bX m8jfFhornMvHIvfKevePff4fbL9WP8ABySxI/j7zzo0s6GBZCWmdpxxmZ0+cuoI8 /G2mmEgwxsDd1AIrIg3azPak1Yk5msmOwiAYhBJx/Dcs8vqk70/klW0fOcmiTgLb Q7l1hi38NwhVKP0AQE2qAi28JO2wL+ZRkGWDCbpxXWlNYmsUBsSjQUzu2ofW/YQw hxk8SwLx5bxSq+2BqA1R5fH/EEhoDJInCqGpBCoTEF4AJS8ES81eQ+ooTwjO8KiE znvNOtYoCJfjN83wuD8lKS4bJ8qUnFaVtGDCzfxQ1790 -----END CERTIFICATE-----Generated at Sun Jan 25 14:36:35 2026 by rpki-client