This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/46eH9Cj2ZoAvvZOdO1gLEixXty0.roa File: 46eH9Cj2ZoAvvZOdO1gLEixXty0.roa (raw, json) Hash identifier: nutrSegvu5QxeGV6g/QuVOtrzFyb4Km/JeoI/dWaXRo= Subject key identifier: E3:A7:87:F4:28:F6:66:80:2F:BD:93:9D:3B:58:0B:12:2C:57:B7:2D Certificate issuer: /CN=5e774467e21849524943d2bd459010720f3e20e4 Certificate serial: 019B7B357BFB3E485818FF011785E960E643 Authority key identifier: 5E:77:44:67:E2:18:49:52:49:43:D2:BD:45:90:10:72:0F:3E:20:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/46eH9Cj2ZoAvvZOdO1gLEixXty0.roa Signing time: Thu 01 Jan 2026 20:17:41 +0000 ROA not before: Thu 01 Jan 2026 20:17:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210472 IP address blocks: 185.112.0.0/24 maxlen: 24 185.112.1.0/24 maxlen: 24 185.112.2.0/24 maxlen: 24 185.112.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft rsync://rpki.ripe.net/repository/DEFAULT/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:7b:fb:3e:48:58:18:ff:01:17:85:e9:60:e6:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e774467e21849524943d2bd459010720f3e20e4 Validity Not Before: Jan 1 20:17:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3a787f428f666802fbd939d3b580b122c57b72d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f9:94:bb:3e:95:8d:3b:b1:37:66:cc:72:43: 9a:8a:8d:d0:ce:bb:15:9e:a0:f2:ed:77:7b:ab:13: f2:47:cf:16:e9:55:d0:f3:06:13:c6:de:48:6a:13: 33:fc:15:7e:f3:cc:d3:69:a8:73:46:e1:72:42:bf: b8:1d:fe:7c:73:d6:b4:e5:e0:e4:d9:5f:f0:b7:6a: d8:f3:0d:f7:e4:37:04:97:40:30:e3:99:1e:7c:e8: 2b:b1:19:a1:a0:f8:87:8a:85:f2:61:c2:0d:6b:6a: 82:37:98:f0:83:09:1b:90:67:0b:67:30:85:a7:7e: dc:e7:65:31:10:0f:79:a0:de:67:88:19:f1:b3:bf: 72:87:db:a6:50:26:db:61:f3:b9:ae:e2:27:0b:6e: 07:1b:64:e0:ae:36:58:2d:2c:e6:49:36:4d:78:c3: 0a:f8:a6:9a:ff:b8:05:d7:3b:f4:a6:62:b2:1f:c9: af:e1:7e:3a:3e:60:c0:0d:6b:3d:37:28:ea:63:24: 0b:25:54:74:ea:32:2e:a3:8f:a6:37:94:f6:1f:53: 60:54:3f:51:5f:53:3d:18:77:b9:37:8c:15:18:88: 34:5c:58:a8:d8:b8:03:da:d7:88:37:b7:92:e0:62: 00:7c:10:1a:31:eb:46:5a:a6:b3:7b:05:71:de:0f: 27:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:A7:87:F4:28:F6:66:80:2F:BD:93:9D:3B:58:0B:12:2C:57:B7:2D X509v3 Authority Key Identifier: keyid:5E:77:44:67:E2:18:49:52:49:43:D2:BD:45:90:10:72:0F:3E:20:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/46eH9Cj2ZoAvvZOdO1gLEixXty0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.112.0.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:c4:09:0e:dd:86:88:5c:bb:88:a5:59:a6:e7:b2:1d:77:0b: 5a:0b:72:d5:6e:11:b6:8c:cf:63:7d:2c:33:f1:b3:49:8f:43: 63:88:27:a8:3e:2d:61:69:36:73:20:53:c1:f3:43:5c:89:d1: 01:21:38:08:58:34:43:dd:c9:22:92:1c:0d:95:3f:bf:71:cc: a2:7d:af:be:ac:a7:9a:fc:4b:e9:e4:d1:9d:30:15:e4:45:a1: 5a:8c:1a:5e:5c:aa:e5:e7:fd:19:cc:3b:63:5e:ee:53:23:50: 54:a6:eb:be:49:5d:c3:bc:b6:63:81:ad:ba:f6:70:e0:93:cb: 36:20:35:6d:e5:c7:e3:18:c6:b9:6f:95:35:87:8c:53:04:92: 78:6f:55:f0:52:2b:72:2e:8a:8a:8d:b8:6d:91:45:28:05:e4: 95:a9:5d:20:01:5c:8a:72:33:5c:16:a4:ae:8e:84:34:c5:68: f0:26:d8:6d:d0:01:7e:f4:e3:6d:09:18:a9:c5:df:2f:b2:2d: 13:12:dc:38:3b:ff:a3:51:e9:68:05:75:77:07:b0:10:9e:62: a7:cd:c6:b1:fc:f1:de:6f:87:59:ac:4a:b6:da:2f:81:08:a9: bd:14:f4:b5:5d:86:d9:bc:d8:cf:60:75:e3:95:f3:e1:45:e2: ca:13:ec:93 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NXv7PkhYGP8BF4XpYOZDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlNzc0NDY3ZTIxODQ5NTI0OTQzZDJiZDQ1OTAxMDcyMGYz ZTIwZTQwHhcNMjYwMTAxMjAxNzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2E3ODdmNDI4ZjY2NjgwMmZiZDkzOWQzYjU4MGIxMjJjNTdiNzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/mUuz6VjTuxN2bMckOaio3QzrsV nqDy7Xd7qxPyR88W6VXQ8wYTxt5IahMz/BV+88zTaahzRuFyQr+4Hf58c9a05eDk 2V/wt2rY8w335DcEl0Aw45kefOgrsRmhoPiHioXyYcINa2qCN5jwgwkbkGcLZzCF p37c52UxEA95oN5niBnxs79yh9umUCbbYfO5ruInC24HG2TgrjZYLSzmSTZNeMMK +Kaa/7gF1zv0pmKyH8mv4X46PmDADWs9NyjqYyQLJVR06jIuo4+mN5T2H1NgVD9R X1M9GHe5N4wVGIg0XFio2LgD2teIN7eS4GIAfBAaMetGWqazewVx3g8n1wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOOnh/Qo9maAL72TnTtYCxIsV7ctMB8GA1UdIwQY MBaAFF53RGfiGElSSUPSvUWQEHIPPiDkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWG5kRVotSVlTVkpKUTlLOVJaQVFjZzgtSU9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8yMGEyMmYtMjBmYS00ZDk4LThiMDMt YWE0MDA1MzJkYWViLzEvNDZlSDlDajJab0F2dlpPZE8xZ0xFaXhYdHkwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8yMGEyMmYtMjBmYS00ZDk4LThiMDMtYWE0MDA1MzJkYWVi LzEvWG5kRVotSVlTVkpKUTlLOVJaQVFjZzgtSU9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXAAMA0G CSqGSIb3DQEBCwUAA4IBAQA6xAkO3YaIXLuIpVmm57IddwtaC3LVbhG2jM9jfSwz 8bNJj0NjiCeoPi1haTZzIFPB80NcidEBITgIWDRD3ckikhwNlT+/ccyifa++rKea /Evp5NGdMBXkRaFajBpeXKrl5/0ZzDtjXu5TI1BUpuu+SV3DvLZjga269nDgk8s2 IDVt5cfjGMa5b5U1h4xTBJJ4b1XwUityLoqKjbhtkUUoBeSVqV0gAVyKcjNcFqSu joQ0xWjwJtht0AF+9ONtCRipxd8vsi0TEtw4O/+jUeloBXV3B7AQnmKnzcax/PHe b4dZrEq22i+BCKm9FPS1XYbZvNjPYHXjlfPhReLKE+yT -----END CERTIFICATE-----Generated at Sun Jan 25 14:34:08 2026 by rpki-client