This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/0U-rEF9agnpJ5Ty3fMelv62IQ0M.roa File: 0U-rEF9agnpJ5Ty3fMelv62IQ0M.roa (raw, json) Hash identifier: fzpeIGTnD7Q+WUFkK4UZ/gImbOfjt8R2WwapBm5NRmI= Subject key identifier: D1:4F:AB:10:5F:5A:82:7A:49:E5:3C:B7:7C:C7:A5:BF:AD:88:43:43 Certificate issuer: /CN=026d511ce3af90c4d601c7ccf8360523713e2c90 Certificate serial: 019B7EA6FC8EAEF4767CC8C249E08729D65E Authority key identifier: 02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/0U-rEF9agnpJ5Ty3fMelv62IQ0M.roa Signing time: Fri 02 Jan 2026 12:20:31 +0000 ROA not before: Fri 02 Jan 2026 12:20:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200359 IP address blocks: 46.232.172.0/24 maxlen: 24 46.232.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.mft rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:fc:8e:ae:f4:76:7c:c8:c2:49:e0:87:29:d6:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=026d511ce3af90c4d601c7ccf8360523713e2c90 Validity Not Before: Jan 2 12:20:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d14fab105f5a827a49e53cb77cc7a5bfad884343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4d:1c:76:c0:cb:2f:d7:7f:7b:a7:8d:9c:e7: f0:af:c5:46:17:0a:cc:55:17:71:1d:30:ff:e7:28: 65:05:b3:33:1e:0c:b7:56:09:c9:07:69:ee:93:4c: bf:f5:e6:fb:47:73:05:ef:53:3e:c3:34:cf:5e:14: e9:31:fd:d4:2e:7b:c6:ce:09:e0:28:3a:1a:11:ab: 19:2a:85:e4:40:2a:7d:3c:89:1f:2a:9e:91:18:96: 6e:ef:12:29:7e:59:04:7a:9d:76:45:f0:b8:22:bf: 3d:98:d5:79:9d:b9:d8:dc:1b:67:84:fd:da:e6:29: e4:ec:55:a0:7c:d9:0d:3b:68:13:ee:5d:0a:4b:3d: 90:30:2b:05:dd:aa:69:63:49:ed:5a:59:58:31:cd: f4:6a:82:18:9f:80:06:9e:7a:4c:a7:7e:0f:45:7a: 9f:6f:7f:7c:d3:01:3f:43:ed:b9:9f:02:c1:95:8f: ee:1c:50:99:79:77:c4:37:03:ce:70:e9:3c:bf:ea: 73:78:11:aa:90:cf:d3:1e:bb:ca:4f:a5:63:42:46: db:2b:4c:06:a8:c6:77:9f:f5:1c:1e:00:12:61:2b: c3:b7:63:64:ce:bb:93:8f:3c:97:0a:e1:11:a8:6d: d8:24:3c:11:60:2f:b9:8b:38:15:e5:31:ff:fa:f6: 3e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:4F:AB:10:5F:5A:82:7A:49:E5:3C:B7:7C:C7:A5:BF:AD:88:43:43 X509v3 Authority Key Identifier: keyid:02:6D:51:1C:E3:AF:90:C4:D6:01:C7:CC:F8:36:05:23:71:3E:2C:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Am1RHOOvkMTWAcfM-DYFI3E-LJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/0U-rEF9agnpJ5Ty3fMelv62IQ0M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b0c402-e09e-4c69-acc9-84da62066e8a/1/Am1RHOOvkMTWAcfM-DYFI3E-LJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.232.172.0/23 Signature Algorithm: sha256WithRSAEncryption 37:03:62:44:89:03:a1:51:eb:c5:7f:50:58:30:fd:ef:66:89: 01:e1:e5:87:04:90:18:9d:60:cf:1f:df:ef:17:cb:2b:7f:b0: ee:13:06:f7:93:f4:d8:e0:b1:bd:e3:cf:74:8b:ac:45:21:0a: c5:61:fd:2d:be:94:84:90:f8:a8:4a:65:5e:6c:e4:41:e7:58: d9:25:d1:38:2c:1c:48:e4:a6:50:3b:fe:08:87:c6:d7:5c:e4: 22:98:a6:17:0a:5c:24:6c:17:96:4d:23:77:2f:f0:0c:28:50: 1f:16:86:03:11:7f:a9:cc:21:45:82:c4:5f:47:f3:be:bb:04: c5:67:71:72:0f:9d:41:54:d5:64:ba:f5:c1:f2:38:da:dc:44: f3:97:e8:17:4c:e1:e4:7b:38:09:9d:c2:5e:49:aa:cb:df:2b: 56:66:0a:ce:8c:9c:d4:84:00:76:3f:df:e8:3f:db:6c:42:ec: 76:94:ed:55:50:d7:8c:3c:ae:73:86:e0:90:6d:87:68:69:72: e2:69:7f:05:98:81:39:37:9b:f9:95:0f:f0:c5:18:09:06:19: 91:af:40:9c:0c:9a:30:b4:e2:d0:70:ff:08:8c:5b:86:be:63: db:12:ae:e4:24:e0:5e:20:98:03:61:43:1b:9b:87:61:d7:7a: 17:f9:c0:e9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pvyOrvR2fMjCSeCHKdZeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyNmQ1MTFjZTNhZjkwYzRkNjAxYzdjY2Y4MzYwNTIzNzEz ZTJjOTAwHhcNMjYwMTAyMTIyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMTRmYWIxMDVmNWE4MjdhNDllNTNjYjc3Y2M3YTViZmFkODg0MzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnU0cdsDLL9d/e6eNnOfwr8VGFwrM VRdxHTD/5yhlBbMzHgy3VgnJB2nuk0y/9eb7R3MF71M+wzTPXhTpMf3ULnvGzgng KDoaEasZKoXkQCp9PIkfKp6RGJZu7xIpflkEep12RfC4Ir89mNV5nbnY3BtnhP3a 5ink7FWgfNkNO2gT7l0KSz2QMCsF3appY0ntWllYMc30aoIYn4AGnnpMp34PRXqf b3980wE/Q+25nwLBlY/uHFCZeXfENwPOcOk8v+pzeBGqkM/THrvKT6VjQkbbK0wG qMZ3n/UcHgASYSvDt2NkzruTjzyXCuERqG3YJDwRYC+5izgV5TH/+vY+eQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNFPqxBfWoJ6SeU8t3zHpb+tiENDMB8GA1UdIwQY MBaAFAJtURzjr5DE1gHHzPg2BSNxPiyQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQW0xUkhPT3ZrTVRXQWNmTS1EWUZJM0UtTEpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iMGM0MDItZTA5ZS00YzY5LWFjYzkt ODRkYTYyMDY2ZThhLzEvMFUtckVGOWFnbnBKNVR5M2ZNZWx2NjJJUTBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9iMGM0MDItZTA5ZS00YzY5LWFjYzktODRkYTYyMDY2ZThh LzEvQW0xUkhPT3ZrTVRXQWNmTS1EWUZJM0UtTEpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLuisMA0G CSqGSIb3DQEBCwUAA4IBAQA3A2JEiQOhUevFf1BYMP3vZokB4eWHBJAYnWDPH9/v F8srf7DuEwb3k/TY4LG94890i6xFIQrFYf0tvpSEkPioSmVebORB51jZJdE4LBxI 5KZQO/4Ih8bXXOQimKYXClwkbBeWTSN3L/AMKFAfFoYDEX+pzCFFgsRfR/O+uwTF Z3FyD51BVNVkuvXB8jja3ETzl+gXTOHkezgJncJeSarL3ytWZgrOjJzUhAB2P9/o P9tsQux2lO1VUNeMPK5zhuCQbYdoaXLiaX8FmIE5N5v5lQ/wxRgJBhmRr0CcDJow tOLQcP8IjFuGvmPbEq7kJOBeIJgDYUMbm4dh13oX+cDp -----END CERTIFICATE-----Generated at Mon Jan 26 04:20:09 2026 by rpki-client