This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/IF91kVRDdrzodh2Mtx752KpXv5s.roa File: IF91kVRDdrzodh2Mtx752KpXv5s.roa (raw, json) Hash identifier: bPW1vVJsM7mDfRcerRQP2xE13iLp87+EUfaxF1z9J4g= Subject key identifier: 20:5F:75:91:54:43:76:BC:E8:76:1D:8C:B7:1E:F9:D8:AA:57:BF:9B Certificate issuer: /CN=b712c9fecbdebf56f845d607913d1b5571592a2a Certificate serial: 019B7D5AD6EFEFDB97239A62FDEB0158BA3B Authority key identifier: B7:12:C9:FE:CB:DE:BF:56:F8:45:D6:07:91:3D:1B:55:71:59:2A:2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txLJ_svev1b4RdYHkT0bVXFZKio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/IF91kVRDdrzodh2Mtx752KpXv5s.roa Signing time: Fri 02 Jan 2026 06:17:43 +0000 ROA not before: Fri 02 Jan 2026 06:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210574 IP address blocks: 46.36.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.crl rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.mft rsync://rpki.ripe.net/repository/DEFAULT/txLJ_svev1b4RdYHkT0bVXFZKio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 12:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:d6:ef:ef:db:97:23:9a:62:fd:eb:01:58:ba:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b712c9fecbdebf56f845d607913d1b5571592a2a Validity Not Before: Jan 2 06:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=205f7591544376bce8761d8cb71ef9d8aa57bf9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7d:e8:79:3e:38:3a:d0:70:65:00:ae:f1:e8: b9:c7:bb:d0:bd:ee:f2:c1:e9:f4:53:82:83:50:8a: 3e:53:b8:22:90:54:5f:e6:b3:7c:6a:ab:84:a4:2f: 0d:32:cc:f5:60:d1:7d:fa:8b:ab:35:a4:3e:71:66: 05:bc:85:5a:79:de:72:8f:8b:c3:cf:63:1e:9e:47: a5:ee:87:8c:2c:59:1f:d1:fa:80:ff:b3:d8:71:51: 08:f4:34:36:a1:00:ce:4d:47:6d:6a:21:1d:7c:d0: 72:59:a1:57:a1:7c:d3:b6:84:ed:b5:ed:28:c0:04: 4c:db:dd:7c:f3:15:ab:bd:e7:34:1b:8e:c3:1b:46: 80:32:4e:c7:e6:7f:c6:db:86:22:38:d9:ea:a2:37: 05:4a:66:cb:b2:eb:69:a0:c6:8b:d9:35:1d:b4:ba: 50:e8:ba:69:38:f0:b6:f2:e8:c8:29:08:54:1c:c5: dc:f0:76:27:55:ae:20:71:d3:81:7b:5f:14:25:9d: b1:37:1b:6b:9a:fa:64:df:56:99:be:af:7a:d3:6e: f8:49:4a:06:56:6b:7c:c2:e8:d1:5a:31:1c:95:c6: 91:79:a1:e2:5d:17:4c:e3:b3:78:c6:dd:49:fa:ef: 2f:6b:bf:26:9c:67:25:db:0e:35:35:64:2b:2b:15: 0e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:5F:75:91:54:43:76:BC:E8:76:1D:8C:B7:1E:F9:D8:AA:57:BF:9B X509v3 Authority Key Identifier: keyid:B7:12:C9:FE:CB:DE:BF:56:F8:45:D6:07:91:3D:1B:55:71:59:2A:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txLJ_svev1b4RdYHkT0bVXFZKio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/IF91kVRDdrzodh2Mtx752KpXv5s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f2edd1-fe25-4432-b7a4-958b6798905c/1/txLJ_svev1b4RdYHkT0bVXFZKio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.36.201.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:0b:f8:36:2b:29:a5:24:87:79:24:cc:9d:ff:e3:15:ba:fa: da:39:48:a6:32:ea:5b:e0:55:59:9e:2c:61:0b:ec:2c:43:6c: 3b:c0:60:4e:f8:ce:e7:f9:cf:99:72:a6:9f:44:c9:98:3d:1c: c4:7d:b2:46:cf:10:36:87:ad:20:74:ae:b3:78:a0:fa:b3:f3: 32:8c:bc:35:90:a8:a9:59:3f:86:a8:16:1c:2a:01:fb:67:75: 21:cd:99:8b:e0:7a:25:18:ed:a5:5d:ae:b2:24:c5:e7:b0:a2: b6:33:2b:c6:8e:20:6a:0c:7e:97:a3:f4:e1:66:da:f6:76:bb: b9:0a:76:4a:51:9b:8a:32:d0:7b:c3:17:e1:9c:31:b2:1a:d3: 48:7d:9e:a8:2b:bd:2a:ba:32:58:85:cb:a7:20:a3:5a:31:01: 16:5f:03:8b:cf:61:4c:53:df:9c:22:09:c5:b0:d7:1f:c7:48: aa:39:6e:7b:0f:f6:d2:8f:33:48:02:d1:16:27:85:fb:9a:fc: 81:3e:65:67:8e:29:0e:0a:0c:ac:9f:d2:2a:63:ce:43:c1:4b: 6e:7b:a2:71:21:dd:5a:5d:54:01:1c:37:f1:a5:86:b5:93:26: 7d:2d:93:30:8b:8b:f4:cf:bf:c1:80:f2:f6:51:4f:58:1f:51: 6f:7a:6c:07 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9Wtbv79uXI5pi/esBWLo7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3MTJjOWZlY2JkZWJmNTZmODQ1ZDYwNzkxM2QxYjU1NzE1 OTJhMmEwHhcNMjYwMTAyMDYxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMDVmNzU5MTU0NDM3NmJjZTg3NjFkOGNiNzFlZjlkOGFhNTdiZjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsH3oeT44OtBwZQCu8ei5x7vQve7y wen0U4KDUIo+U7gikFRf5rN8aquEpC8NMsz1YNF9+ourNaQ+cWYFvIVaed5yj4vD z2Menkel7oeMLFkf0fqA/7PYcVEI9DQ2oQDOTUdtaiEdfNByWaFXoXzTtoTtte0o wARM29188xWrvec0G47DG0aAMk7H5n/G24YiONnqojcFSmbLsutpoMaL2TUdtLpQ 6LppOPC28ujIKQhUHMXc8HYnVa4gcdOBe18UJZ2xNxtrmvpk31aZvq960274SUoG Vmt8wujRWjEclcaReaHiXRdM47N4xt1J+u8va78mnGcl2w41NWQrKxUOGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCBfdZFUQ3a86HYdjLce+diqV7+bMB8GA1UdIwQY MBaAFLcSyf7L3r9W+EXWB5E9G1VxWSoqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHhMSl9zdmV2MWI0UmRZSGtUMGJWWEZaS2lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9mMmVkZDEtZmUyNS00NDMyLWI3YTQt OTU4YjY3OTg5MDVjLzEvSUY5MWtWUkRkcnpvZGgyTXR4NzUyS3BYdjVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9mMmVkZDEtZmUyNS00NDMyLWI3YTQtOTU4YjY3OTg5MDVj LzEvdHhMSl9zdmV2MWI0UmRZSGtUMGJWWEZaS2lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiTJMA0G CSqGSIb3DQEBCwUAA4IBAQA/C/g2KymlJId5JMyd/+MVuvraOUimMupb4FVZnixh C+wsQ2w7wGBO+M7n+c+ZcqafRMmYPRzEfbJGzxA2h60gdK6zeKD6s/MyjLw1kKip WT+GqBYcKgH7Z3UhzZmL4HolGO2lXa6yJMXnsKK2MyvGjiBqDH6Xo/ThZtr2dru5 CnZKUZuKMtB7wxfhnDGyGtNIfZ6oK70qujJYhcunIKNaMQEWXwOLz2FMU9+cIgnF sNcfx0iqOW57D/bSjzNIAtEWJ4X7mvyBPmVnjikOCgysn9IqY85DwUtue6JxId1a XVQBHDfxpYa1kyZ9LZMwi4v0z7/BgPL2UU9YH1FvemwH -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:40 2026 by rpki-client