This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/t8eIgMClHX3oL8Kz7kDeYL0J8-I.roa File: t8eIgMClHX3oL8Kz7kDeYL0J8-I.roa (raw, json) Hash identifier: jcUfNtNFO2Y7xEuTx/9w6iJn9BhR83TnoBAGY+TGric= Subject key identifier: B7:C7:88:80:C0:A5:1D:7D:E8:2F:C2:B3:EE:40:DE:60:BD:09:F3:E2 Certificate issuer: /CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f Certificate serial: 019B7759152035BD4A5636C27710C4CC41CC Authority key identifier: 73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/t8eIgMClHX3oL8Kz7kDeYL0J8-I.roa Signing time: Thu 01 Jan 2026 02:18:05 +0000 ROA not before: Thu 01 Jan 2026 02:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9119 IP address blocks: 46.54.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.mft rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 20:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:15:20:35:bd:4a:56:36:c2:77:10:c4:cc:41:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=731d9ad404ecdafa70ea9a4c9d10b9801829ea1f Validity Not Before: Jan 1 02:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b7c78880c0a51d7de82fc2b3ee40de60bd09f3e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:57:e9:c5:d5:41:d1:13:4d:49:87:6a:cd:ed: bb:3b:a9:d2:fb:d3:48:6e:d9:0d:3e:7f:50:ad:b9: 93:d7:7c:34:ff:0d:d2:06:25:54:fc:7a:b0:6d:a8: 9a:16:57:0f:e7:f9:c7:1f:fe:50:a8:86:0c:36:73: ca:cf:b6:bc:38:16:d6:b8:a9:c8:9d:c7:f9:99:50: bd:ce:f4:38:4c:80:bb:20:5a:3b:3f:1e:9f:0b:ae: 83:d8:0e:8d:f9:c7:4c:37:cf:11:8b:45:c2:7e:7c: 52:7d:07:4f:46:39:f7:56:fa:dc:12:7b:cc:15:a8: f9:54:cd:ae:ca:a8:42:eb:0a:c0:35:fe:df:c6:54: 29:3a:bd:12:5b:3e:ce:77:79:ce:e0:1f:79:54:26: c6:a6:0a:05:21:5b:b1:df:fc:c6:38:1b:d7:4f:73: 56:81:49:1b:58:09:eb:af:e8:a8:e0:9a:0d:34:95: 75:9d:6a:92:8c:c0:15:11:01:b6:74:cd:51:1d:19: bc:10:50:74:14:3a:4e:15:9d:61:88:1d:7a:f1:cd: 0c:a2:7a:3a:c3:5c:43:61:ee:58:5c:08:20:0c:8e: 08:07:1d:21:8c:21:12:9c:3c:b0:30:f0:70:2f:e2: ec:3d:2a:d8:cd:e7:11:4b:95:e6:d0:c6:b7:44:85: fe:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:C7:88:80:C0:A5:1D:7D:E8:2F:C2:B3:EE:40:DE:60:BD:09:F3:E2 X509v3 Authority Key Identifier: keyid:73:1D:9A:D4:04:EC:DA:FA:70:EA:9A:4C:9D:10:B9:80:18:29:EA:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cx2a1ATs2vpw6ppMnRC5gBgp6h8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/t8eIgMClHX3oL8Kz7kDeYL0J8-I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/4429a4-0b36-4ced-846f-e20a654fca95/1/cx2a1ATs2vpw6ppMnRC5gBgp6h8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.54.240.0/20 Signature Algorithm: sha256WithRSAEncryption 3d:42:3a:a9:b9:42:ee:73:bf:87:e6:d6:b1:bb:fd:f9:0a:e0: a2:72:ec:f4:88:6d:27:59:5d:c1:8e:e7:54:cd:32:90:56:29: 23:87:6c:a4:6e:e0:e2:bb:16:df:e9:ff:25:92:13:fe:1f:8b: 53:06:20:21:35:48:37:3f:70:66:27:fc:08:91:bb:f8:e6:0f: dd:5d:4b:aa:d4:3d:9d:39:5c:0e:9c:41:af:dc:eb:ad:9b:50: 1e:11:5e:e0:9c:9f:a4:44:77:b9:87:9b:6e:e1:ae:6e:fd:f7: 29:d0:2a:ee:8e:af:0d:bd:89:37:50:bb:67:72:1b:d9:db:ab: eb:67:2e:5d:45:c9:35:24:ce:8d:b0:7a:e2:1c:a9:5a:94:37: 42:a8:ea:16:22:8c:30:1c:90:e4:bf:7f:e1:22:30:52:5b:28: b2:2b:0f:1d:93:b7:09:7c:8d:34:8d:c7:65:f8:5b:b9:2d:fe: 0d:7f:f9:ea:6a:1b:cd:cc:1f:af:e1:01:d1:02:41:82:e9:51: e8:5c:6b:0a:fa:b2:2e:f3:19:e6:ec:75:83:8a:18:2e:52:ca: bd:bc:10:cf:d9:9b:6b:ee:8d:33:63:c2:a2:71:b9:f3:fe:73: 92:2a:de:04:c0:6e:53:f6:1c:ea:70:cf:26:5f:10:21:b2:57: 43:04:ce:a7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WRUgNb1KVjbCdxDEzEHMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczMWQ5YWQ0MDRlY2RhZmE3MGVhOWE0YzlkMTBiOTgwMTgy OWVhMWYwHhcNMjYwMTAxMDIxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiN2M3ODg4MGMwYTUxZDdkZTgyZmMyYjNlZTQwZGU2MGJkMDlmM2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FfpxdVB0RNNSYdqze27O6nS+9NI btkNPn9QrbmT13w0/w3SBiVU/HqwbaiaFlcP5/nHH/5QqIYMNnPKz7a8OBbWuKnI ncf5mVC9zvQ4TIC7IFo7Px6fC66D2A6N+cdMN88Ri0XCfnxSfQdPRjn3VvrcEnvM Faj5VM2uyqhC6wrANf7fxlQpOr0SWz7Od3nO4B95VCbGpgoFIVux3/zGOBvXT3NW gUkbWAnrr+io4JoNNJV1nWqSjMAVEQG2dM1RHRm8EFB0FDpOFZ1hiB168c0Mono6 w1xDYe5YXAggDI4IBx0hjCESnDywMPBwL+LsPSrYzecRS5Xm0Ma3RIX+1QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLfHiIDApR196C/Cs+5A3mC9CfPiMB8GA1UdIwQY MBaAFHMdmtQE7Nr6cOqaTJ0QuYAYKeofMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3gyYTFBVHMydnB3NnBwTW5SQzVnQmdwNmg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80NDI5YTQtMGIzNi00Y2VkLTg0NmYt ZTIwYTY1NGZjYTk1LzEvdDhlSWdNQ2xIWDNvTDhLejdrRGVZTDBKOC1JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC80NDI5YTQtMGIzNi00Y2VkLTg0NmYtZTIwYTY1NGZjYTk1 LzEvY3gyYTFBVHMydnB3NnBwTW5SQzVnQmdwNmg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELjbwMA0G CSqGSIb3DQEBCwUAA4IBAQA9QjqpuULuc7+H5taxu/35CuCicuz0iG0nWV3BjudU zTKQVikjh2ykbuDiuxbf6f8lkhP+H4tTBiAhNUg3P3BmJ/wIkbv45g/dXUuq1D2d OVwOnEGv3Outm1AeEV7gnJ+kRHe5h5tu4a5u/fcp0Crujq8NvYk3ULtnchvZ26vr Zy5dRck1JM6NsHriHKlalDdCqOoWIowwHJDkv3/hIjBSWyiyKw8dk7cJfI00jcdl +Fu5Lf4Nf/nqahvNzB+v4QHRAkGC6VHoXGsK+rIu8xnm7HWDihguUsq9vBDP2Ztr 7o0zY8Kicbnz/nOSKt4EwG5T9hzqcM8mXxAhsldDBM6n -----END CERTIFICATE-----Generated at Mon Jan 26 05:31:40 2026 by rpki-client