This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/1-g6OpGedOnxN63cJ1EmDTL-4hvw.roa File: 1-g6OpGedOnxN63cJ1EmDTL-4hvw.roa (raw, json) Hash identifier: JM6W0dxskOtwH/4wZYEeDey8i9ac93ewUEb24GlUyks= Subject key identifier: FA:0E:8E:A4:67:9D:3A:7C:4D:EB:77:09:D4:49:83:4C:BF:B8:86:FC Certificate issuer: /CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94 Certificate serial: 019B7B3671A5B8EDD4A081D7964EEAC1DCE5 Authority key identifier: 9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/1-g6OpGedOnxN63cJ1EmDTL-4hvw.roa Signing time: Thu 01 Jan 2026 20:18:44 +0000 ROA not before: Thu 01 Jan 2026 20:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42688 IP address blocks: 46.70.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:71:a5:b8:ed:d4:a0:81:d7:96:4e:ea:c1:dc:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94 Validity Not Before: Jan 1 20:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fa0e8ea4679d3a7c4deb7709d449834cbfb886fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:69:f2:c1:b1:a6:2b:da:c6:ef:4e:8e:07:b2: a8:68:1a:b9:8b:b5:d4:31:54:a8:14:36:76:e6:c0: 90:0b:e1:ad:74:45:4b:3f:c7:76:a5:cc:b4:b9:25: 5e:57:61:dc:71:81:41:bd:64:8e:c5:ce:29:f5:73: 73:90:7a:09:6b:3d:77:09:40:60:af:2d:06:14:18: 9d:a9:a4:93:cc:d8:94:de:33:79:3f:a4:8a:e3:48: 0a:3c:ee:1f:07:dd:48:96:50:c0:9d:94:79:d8:ad: c0:e7:2c:87:97:f5:1f:65:3b:38:49:f4:a6:d0:d9: c8:be:8a:2a:14:7c:11:c7:8d:0b:a2:39:6e:de:10: eb:b9:13:f8:fc:2c:56:d9:ae:a4:28:52:22:a3:d0: 1e:92:3b:4a:17:33:76:a7:9c:45:b5:84:6a:3d:d6: 38:89:1d:a4:18:8f:2f:12:ff:28:99:4a:44:22:4b: d1:bc:10:c3:4a:13:c5:4c:33:eb:d8:0a:f1:29:61: f9:59:60:a4:4f:1d:70:3a:a6:27:a4:96:8e:2a:b1: be:50:0c:3a:e1:82:d2:75:a6:d7:46:52:5f:eb:84: 87:f7:67:8c:e3:cf:1e:41:83:a9:0a:8d:a0:c8:5a: 4d:73:3d:4b:6e:0c:78:76:06:83:c7:e0:0a:dc:c3: 0f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:0E:8E:A4:67:9D:3A:7C:4D:EB:77:09:D4:49:83:4C:BF:B8:86:FC X509v3 Authority Key Identifier: keyid:9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/1-g6OpGedOnxN63cJ1EmDTL-4hvw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.70.254.0/24 Signature Algorithm: sha256WithRSAEncryption 1b:97:78:80:fb:e0:ab:3a:a4:30:b0:db:f8:c4:ef:fd:2b:b8: 2d:82:90:f2:e1:c4:f4:a9:41:ff:a7:e6:ed:5f:cb:c2:ab:a1: e9:53:55:84:b3:7a:97:c9:f3:db:a6:66:9b:24:c9:13:8d:23: 8d:60:e1:cb:e1:e6:ee:00:39:ce:b1:6e:3e:6a:39:b5:03:c5: 35:f9:7e:87:b6:b4:1a:cd:86:06:c8:f0:af:6c:7a:de:a5:2c: ee:9e:d6:f1:7b:a8:2e:00:d8:7d:a2:d5:c9:2b:eb:b4:90:cd: 22:81:b5:68:f8:e8:e8:46:f1:f2:2f:0d:a8:b0:b0:7a:5b:53: f5:27:1b:a6:b4:1c:f6:27:22:13:65:55:71:59:00:23:d3:66: 37:0f:e0:80:1b:79:c5:8c:fc:b6:64:7b:f5:a6:c8:aa:f9:f0: 60:63:61:8c:ff:b2:d9:d5:5b:9d:69:fc:15:81:eb:a1:eb:c5: f6:75:9e:78:75:d4:e7:b5:8e:d6:81:9a:64:da:55:a2:b6:04: 7e:69:35:43:46:55:a6:3f:a7:26:0e:ce:58:61:b2:d0:73:c4: f5:8b:9e:23:1a:25:04:f1:d0:a8:10:f1:0e:a4:f7:26:2f:4a: 2a:c4:d8:79:df:36:fc:9a:92:28:e4:e7:5b:37:3a:8d:f6:af: e3:94:7d:ff -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt7NnGluO3UoIHXlk7qwdzlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZmYxNTI3OGY1M2Y3NzYxYzJmM2QzM2RkOWJlNzdhOGE0 ZmJkOTQwHhcNMjYwMTAxMjAxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmYTBlOGVhNDY3OWQzYTdjNGRlYjc3MDlkNDQ5ODM0Y2JmYjg4NmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GnywbGmK9rG706OB7KoaBq5i7XU MVSoFDZ25sCQC+GtdEVLP8d2pcy0uSVeV2HccYFBvWSOxc4p9XNzkHoJaz13CUBg ry0GFBidqaSTzNiU3jN5P6SK40gKPO4fB91IllDAnZR52K3A5yyHl/UfZTs4SfSm 0NnIvooqFHwRx40Lojlu3hDruRP4/CxW2a6kKFIio9AekjtKFzN2p5xFtYRqPdY4 iR2kGI8vEv8omUpEIkvRvBDDShPFTDPr2ArxKWH5WWCkTx1wOqYnpJaOKrG+UAw6 4YLSdabXRlJf64SH92eM488eQYOpCo2gyFpNcz1Lbgx4dgaDx+AK3MMPVQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPoOjqRnnTp8Tet3CdRJg0y/uIb8MB8GA1UdIwQY MBaAFJv/FSePU/d2HC89M92b53qKT72UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbV84Vko0OVQ5M1ljTHowejNadm5lb3BQdlpRLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hYTdiMzMtZGVlYi00YWJkLWI4ZDIt NTY5NzI0OWY1MTI0LzEvMS1nNk9wR2VkT254TjYzY0oxRW1EVEwtNGh2dy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvMjMvYWE3YjMzLWRlZWItNGFiZC1iOGQyLTU2OTcyNDlmNTEy NC8xL21fOFZKNDlUOTNZY0x6MHozWnZuZW9wUHZaUS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC5G/jAN BgkqhkiG9w0BAQsFAAOCAQEAG5d4gPvgqzqkMLDb+MTv/Su4LYKQ8uHE9KlB/6fm 7V/Lwquh6VNVhLN6l8nz26ZmmyTJE40jjWDhy+Hm7gA5zrFuPmo5tQPFNfl+h7a0 Gs2GBsjwr2x63qUs7p7W8XuoLgDYfaLVySvrtJDNIoG1aPjo6Ebx8i8NqLCweltT 9ScbprQc9iciE2VVcVkAI9NmNw/ggBt5xYz8tmR79abIqvnwYGNhjP+y2dVbnWn8 FYHroevF9nWeeHXU57WO1oGaZNpVorYEfmk1Q0ZVpj+nJg7OWGGy0HPE9YueIxol BPHQqBDxDqT3Ji9KKsTYed82/JqSKOTnWzc6jfav45R9/w== -----END CERTIFICATE-----Generated at Sun Jan 25 19:17:42 2026 by rpki-client