This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/p_4g0vOKNx-e17qacT7FkdAcDt8.roa File: p_4g0vOKNx-e17qacT7FkdAcDt8.roa (raw, json) Hash identifier: fd3STafagDRIMRw317o4QPn390v+EBwVBufFRr2T/Lw= Subject key identifier: A7:FE:20:D2:F3:8A:37:1F:9E:D7:BA:9A:71:3E:C5:91:D0:1C:0E:DF Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9 Certificate serial: 019B7E37EF65E4D8FE4847CACDD28C475ED2 Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/p_4g0vOKNx-e17qacT7FkdAcDt8.roa Signing time: Fri 02 Jan 2026 10:19:13 +0000 ROA not before: Fri 02 Jan 2026 10:19:13 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60093 IP address blocks: 46.234.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:ef:65:e4:d8:fe:48:47:ca:cd:d2:8c:47:5e:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9 Validity Not Before: Jan 2 10:19:13 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7fe20d2f38a371f9ed7ba9a713ec591d01c0edf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3d:8d:bb:be:85:73:e3:9e:1c:75:e9:ef:70: cf:da:4d:0a:d9:1b:e1:3a:74:4a:73:40:c7:84:58: 26:3d:45:52:1b:e3:27:13:88:1c:90:b3:49:ad:e8: 51:22:33:b9:a2:56:e7:ef:ba:19:ed:dd:49:4f:ba: 94:c6:62:c7:f7:f5:90:35:b2:37:9a:86:c2:75:67: dd:2a:9e:a3:09:a7:77:69:20:96:3f:d3:d2:00:dd: d5:60:1e:79:ea:95:11:9d:6b:80:c1:70:7b:4c:f0: fb:fc:06:2d:6e:47:87:5f:bf:bb:5f:18:b6:18:0d: fa:cd:0d:64:51:53:23:7e:36:4c:d1:c5:f8:c1:5e: e0:74:2f:f0:3a:4d:58:48:ba:9d:6a:9c:e7:b6:6e: 1f:4c:83:d7:d1:c2:1e:e4:4b:c2:2e:d8:e5:73:df: 88:79:20:7b:b6:0f:a8:38:13:7a:2c:b7:d8:a0:05: c9:ff:35:a8:2c:fc:15:b6:24:8a:34:37:3d:81:4f: 77:fc:f6:b9:d0:4b:42:41:7e:0d:6c:d2:69:74:f6: 83:bd:2f:76:aa:07:31:e8:6e:57:d6:e4:a1:f5:ea: 7d:02:a2:3c:b9:15:b6:b8:f6:c5:6d:7a:e7:b9:c0: fd:d6:34:cb:35:55:90:a6:c2:c4:1b:1e:6f:06:f4: ea:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:FE:20:D2:F3:8A:37:1F:9E:D7:BA:9A:71:3E:C5:91:D0:1C:0E:DF X509v3 Authority Key Identifier: keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/p_4g0vOKNx-e17qacT7FkdAcDt8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.234.16.0/24 Signature Algorithm: sha256WithRSAEncryption 64:93:21:56:2e:10:53:b9:37:b0:8d:28:ae:46:2f:8a:bf:d3: b5:22:3d:2b:70:00:9d:cb:e2:a4:83:51:16:c1:07:69:ff:3a: 6a:a9:14:08:e1:03:ff:e9:da:a9:ca:23:b0:8d:8e:a6:22:9f: 98:a6:bf:24:1b:c9:96:b1:cd:74:36:f6:9d:6a:80:64:58:db: 5e:af:61:12:16:5a:8d:6d:9f:da:d3:d0:5f:76:93:05:4f:32: 8c:50:73:50:09:5c:57:c9:65:db:17:7a:32:96:ff:3e:a3:c7: e4:6b:5c:dd:52:19:94:29:cc:c3:c6:b2:4f:36:18:ac:65:60: 00:17:d4:c4:78:fd:27:33:6c:3c:f1:3f:40:c5:2d:3f:eb:1b: 01:ba:25:9b:e5:18:bb:c3:99:dd:f7:07:32:41:c9:0b:17:1e: 53:49:39:e9:78:f6:23:75:85:11:da:91:14:7f:f8:71:9a:d2: 5b:10:a6:25:c9:41:b2:6a:ba:17:70:72:15:c6:34:70:09:1c: 23:0a:31:f7:75:3e:95:76:06:1d:43:1c:4a:1e:5f:fa:94:85: a3:01:98:5e:2d:e9:85:fb:f9:86:0b:98:a3:e2:bc:c7:7b:e1: 3a:e4:e2:c7:eb:b2:de:76:c7:bd:6a:9b:1f:a3:8a:d5:e8:9a: 3a:0b:4e:3d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N+9l5Nj+SEfKzdKMR17SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2OGZlMzVjYzk2MjYzM2EyNzU3YWYxMGEwZTZlOGFiNmQw MWY0YzkwHhcNMjYwMTAyMTAxOTEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2ZlMjBkMmYzOGEzNzFmOWVkN2JhOWE3MTNlYzU5MWQwMWMwZWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD2Nu76Fc+OeHHXp73DP2k0K2Rvh OnRKc0DHhFgmPUVSG+MnE4gckLNJrehRIjO5olbn77oZ7d1JT7qUxmLH9/WQNbI3 mobCdWfdKp6jCad3aSCWP9PSAN3VYB556pURnWuAwXB7TPD7/AYtbkeHX7+7Xxi2 GA36zQ1kUVMjfjZM0cX4wV7gdC/wOk1YSLqdapzntm4fTIPX0cIe5EvCLtjlc9+I eSB7tg+oOBN6LLfYoAXJ/zWoLPwVtiSKNDc9gU93/Pa50EtCQX4NbNJpdPaDvS92 qgcx6G5X1uSh9ep9AqI8uRW2uPbFbXrnucD91jTLNVWQpsLEGx5vBvTqzwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKf+INLzijcfnte6mnE+xZHQHA7fMB8GA1UdIwQY MBaAFFaP41zJYmM6J1evEKDm6KttAfTJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMt ODNkNjQ4Zjc5NzQ2LzEvcF80ZzB2T0tOeC1lMTdxYWNUN0ZrZEFjRHQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC8zN2ViZTYtOGJmZS00YzFmLWExODMtODNkNjQ4Zjc5NzQ2 LzEvVm9falhNbGlZem9uVjY4UW9PYm9xMjBCOU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALuoQMA0G CSqGSIb3DQEBCwUAA4IBAQBkkyFWLhBTuTewjSiuRi+Kv9O1Ij0rcACdy+Kkg1EW wQdp/zpqqRQI4QP/6dqpyiOwjY6mIp+Ypr8kG8mWsc10NvadaoBkWNter2ESFlqN bZ/a09BfdpMFTzKMUHNQCVxXyWXbF3oylv8+o8fka1zdUhmUKczDxrJPNhisZWAA F9TEeP0nM2w88T9AxS0/6xsBuiWb5Ri7w5nd9wcyQckLFx5TSTnpePYjdYUR2pEU f/hxmtJbEKYlyUGyaroXcHIVxjRwCRwjCjH3dT6VdgYdQxxKHl/6lIWjAZheLemF +/mGC5ij4rzHe+E65OLH67Ledse9apsfo4rV6Jo6C049 -----END CERTIFICATE-----Generated at Sun Jan 25 19:18:09 2026 by rpki-client