This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/iGV0CoyrITzjkKDaw4INbKqkpdE.roa File: iGV0CoyrITzjkKDaw4INbKqkpdE.roa (raw, json) Hash identifier: S/9miWwjqyjrqWzqhVaykBqXwqlsa3o7EOP2wtoRCcU= Subject key identifier: 88:65:74:0A:8C:AB:21:3C:E3:90:A0:DA:C3:82:0D:6C:AA:A4:A5:D1 Certificate issuer: /CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f Certificate serial: 019B775916122979489CDB2D9D479B1D8753 Authority key identifier: 73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/iGV0CoyrITzjkKDaw4INbKqkpdE.roa Signing time: Thu 01 Jan 2026 02:18:05 +0000 ROA not before: Thu 01 Jan 2026 02:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51615 IP address blocks: 46.54.128.0/18 maxlen: 18 46.54.192.0/19 maxlen: 19 46.54.224.0/20 maxlen: 20 2a02:2590::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:16:12:29:79:48:9c:db:2d:9d:47:9b:1d:87:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f Validity Not Before: Jan 1 02:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8865740a8cab213ce390a0dac3820d6caaa4a5d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:50:46:25:35:1d:11:1a:a9:1d:8c:a2:e7:94: 01:e6:20:09:5b:0c:47:73:30:fc:b8:e5:ae:e7:cc: e9:a9:2c:a8:fb:4c:98:e8:02:9c:54:60:af:23:fa: 56:cd:09:a6:8a:92:e9:03:ef:bd:6d:4e:0a:2b:a0: a4:9b:b4:f5:b8:d6:75:59:51:b0:9a:b8:08:ec:d8: 69:d6:cf:4e:c9:06:bd:35:17:f6:4a:07:86:ed:da: a1:03:be:dc:2c:0e:2d:42:ff:ac:19:d3:7e:73:f0: 7e:fd:c4:25:97:13:26:93:38:f7:52:e2:1e:36:29: 21:a8:d8:3b:75:87:09:c8:3a:85:df:ad:da:44:7a: 53:78:eb:0e:b6:7c:54:9b:6a:23:cc:27:c9:ca:6f: 80:1c:89:9a:67:b6:dd:73:1d:4b:cf:0d:1b:39:85: 17:32:1b:ff:e5:ba:d8:4c:b4:5b:bd:d8:0a:21:44: e3:89:54:35:09:d2:fc:04:bf:f8:52:d6:0c:2f:bd: 50:3f:36:50:03:d5:92:da:0d:b2:61:39:58:26:3d: 2a:42:c3:96:58:45:84:5c:6d:d6:e6:3e:fa:f0:d4: 43:6e:1e:7a:1f:31:09:ee:1e:a3:95:e3:a5:89:23: a1:50:63:1a:3a:d2:d3:a4:83:2c:33:1a:61:23:e4: f8:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:65:74:0A:8C:AB:21:3C:E3:90:A0:DA:C3:82:0D:6C:AA:A4:A5:D1 X509v3 Authority Key Identifier: keyid:73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/iGV0CoyrITzjkKDaw4INbKqkpdE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.54.128.0-46.54.239.255 IPv6: 2a02:2590::/32 Signature Algorithm: sha256WithRSAEncryption 1e:8d:59:a0:51:b4:72:1f:34:5d:e9:50:06:c2:e7:60:b2:50: de:80:52:b2:f2:b0:c0:18:43:73:d3:f8:dd:0c:0b:b8:1c:de: f8:36:69:50:fe:cb:92:60:9c:08:e0:15:1d:97:3a:01:38:3a: dc:cf:e9:8e:3f:b5:ee:80:07:8b:8c:f5:63:53:ee:15:1e:d6: 27:0a:1a:a3:00:49:42:76:80:26:7a:06:d6:4f:00:fc:37:0f: d3:60:4d:b3:be:11:d1:85:c8:2a:4e:0f:39:f2:c3:73:11:3b: aa:49:8a:70:b7:eb:47:6e:5e:4a:fc:24:cd:ae:e9:8d:ec:1f: 10:ae:19:61:23:ee:3d:26:ac:7d:16:35:3b:ea:ac:e2:6a:b9: 50:09:87:04:96:09:68:c4:20:50:f5:3e:87:bc:6c:70:8d:dc: 49:7b:a1:61:30:5f:98:50:87:34:21:ea:ad:78:4b:fd:56:1d: b7:32:cd:84:d8:67:ce:65:5c:17:69:84:42:43:59:06:c9:d6: 6c:c8:3d:60:61:39:03:6b:37:25:78:b5:4f:8e:d1:9b:11:67: 3b:d1:7a:fd:00:a4:8f:db:59:50:0e:50:ab:5d:72:5c:66:73: 27:a5:4e:d3:e5:d7:f8:b2:2f:97:3d:17:3c:b9:db:fb:2e:48: 24:90:02:94 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt3WRYSKXlInNstnUebHYdTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczMWQ5YWQ0MDRlY2RhZmE3MGVhOWE0YzlkMTBiOTgwMTgy OWVhMWYwHhcNMjYwMTAxMDIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4ODY1NzQwYThjYWIyMTNjZTM5MGEwZGFjMzgyMGQ2Y2FhYTRhNWQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1BGJTUdERqpHYyi55QB5iAJWwxH czD8uOWu58zpqSyo+0yY6AKcVGCvI/pWzQmmipLpA++9bU4KK6Ckm7T1uNZ1WVGw mrgI7Nhp1s9OyQa9NRf2SgeG7dqhA77cLA4tQv+sGdN+c/B+/cQllxMmkzj3UuIe NikhqNg7dYcJyDqF363aRHpTeOsOtnxUm2ojzCfJym+AHImaZ7bdcx1Lzw0bOYUX Mhv/5brYTLRbvdgKIUTjiVQ1CdL8BL/4UtYML71QPzZQA9WS2g2yYTlYJj0qQsOW WEWEXG3W5j768NRDbh56HzEJ7h6jleOliSOhUGMaOtLTpIMsMxphI+T4zwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFIhldAqMqyE845Cg2sOCDWyqpKXRMB8GA1UdIwQY MBaAFHMdmtQE7Nr6cOqaTJ0QuYAYKeofMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3gyYTFBVHMydnB3NnBwTW5SQzVnQmdwNmg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80NDI5YTQtMGIzNi00Y2VkLTg0NmYt ZTIwYTY1NGZjYTk1LzEvaUdWMENveXJJVHpqa0tEYXc0SU5iS3FrcGRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80NDI5YTQtMGIzNi00Y2VkLTg0NmYtZTIwYTY1NGZjYTk1 LzEvY3gyYTFBVHMydnB3NnBwTW5SQzVnQmdwNmg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTAUBAIAATAOMAwDBAcuNoAD BAQuNuAwDQQCAAIwBwMFACoCJZAwDQYJKoZIhvcNAQELBQADggEBAB6NWaBRtHIf NF3pUAbC52CyUN6AUrLysMAYQ3PT+N0MC7gc3vg2aVD+y5JgnAjgFR2XOgE4OtzP 6Y4/te6AB4uM9WNT7hUe1icKGqMASUJ2gCZ6BtZPAPw3D9NgTbO+EdGFyCpODzny w3MRO6pJinC360duXkr8JM2u6Y3sHxCuGWEj7j0mrH0WNTvqrOJquVAJhwSWCWjE IFD1Poe8bHCN3El7oWEwX5hQhzQh6q14S/1WHbcyzYTYZ85lXBdphEJDWQbJ1mzI PWBhOQNrNyV4tU+O0ZsRZzvRev0ApI/bWVAOUKtdclxmcyelTtPl1/iyL5c9Fzy5 2/suSCSQApQ= -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:37 2026 by rpki-client