This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/wTjmQameKdcpA0z8PRkcVGZwuuc.roa File: wTjmQameKdcpA0z8PRkcVGZwuuc.roa (raw, json) Hash identifier: k2WV/2PH4Kau8EV05RXYKBWzXM8y2f7UYSrD2p5Z2q4= Subject key identifier: C1:38:E6:41:A9:9E:29:D7:29:03:4C:FC:3D:19:1C:54:66:70:BA:E7 Certificate issuer: /CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94 Certificate serial: 019B7B3673AC2B3B0CDAAC27C3074E40A3A6 Authority key identifier: 9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/wTjmQameKdcpA0z8PRkcVGZwuuc.roa Signing time: Thu 01 Jan 2026 20:18:44 +0000 ROA not before: Thu 01 Jan 2026 20:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202740 IP address blocks: 46.70.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:73:ac:2b:3b:0c:da:ac:27:c3:07:4e:40:a3:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94 Validity Not Before: Jan 1 20:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c138e641a99e29d729034cfc3d191c546670bae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8d:76:fd:99:94:1f:77:8f:1d:99:20:eb:fc: 28:83:98:f5:83:81:84:eb:e6:c1:28:da:5d:a2:cb: f3:c1:59:bb:2e:f2:a8:70:f7:d5:d1:ef:08:75:26: 0a:12:64:9b:06:60:83:06:b0:d2:1a:07:85:31:78: 28:0d:d6:c9:c6:d9:9a:f0:60:0f:4d:12:02:df:84: 1b:f6:71:35:08:9e:e7:ea:d7:95:8e:b2:f2:00:f7: ce:8d:6f:d4:19:7b:86:87:7f:98:f0:ab:0f:da:4c: 4b:63:91:14:05:fd:b0:99:ac:3a:e7:63:24:21:f9: 96:ac:c5:65:c4:c5:eb:9b:db:91:08:3b:f7:d6:62: b8:1b:33:82:ef:bf:b7:2e:af:f3:65:77:fe:d9:c0: 60:9a:5b:a0:e4:98:88:af:f4:7b:6c:98:16:3f:ae: 1f:bd:2c:e8:89:c0:a8:55:85:6f:a6:86:87:6a:8b: 47:56:f5:9f:22:3b:da:73:b0:00:92:c1:0e:b5:ce: de:22:90:6d:37:77:d8:f2:b4:be:da:39:25:ff:6b: b1:5c:f3:80:2d:f8:78:48:de:25:05:4f:e4:65:7d: d6:ea:a0:aa:33:7a:1d:5d:69:fc:61:7a:f3:dd:be: ea:c7:e5:2d:81:3c:75:d8:57:22:3b:e9:82:bd:a6: 43:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:38:E6:41:A9:9E:29:D7:29:03:4C:FC:3D:19:1C:54:66:70:BA:E7 X509v3 Authority Key Identifier: keyid:9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/wTjmQameKdcpA0z8PRkcVGZwuuc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.70.253.0/24 Signature Algorithm: sha256WithRSAEncryption 57:ab:32:f7:5e:73:37:2e:4d:97:2c:f3:11:24:88:c4:dd:73: 94:99:53:f9:5b:38:9e:d6:02:bb:91:f0:ea:70:b5:9a:0f:12: 6e:50:6d:60:55:23:63:03:23:eb:21:70:03:50:05:8f:c0:96: f5:49:ff:7b:5e:50:ff:4e:d8:4f:44:4e:56:fe:bb:0f:12:f6: ff:35:fb:eb:15:4a:32:68:87:f1:d2:1e:12:05:a6:d5:75:b7: d2:5e:f3:a3:54:62:86:f0:03:e5:47:54:4e:a5:ef:b5:57:cd: 0d:3a:94:fc:a2:4a:9d:c8:79:a5:90:cb:27:96:5c:e3:38:4b: 58:db:ab:4c:4c:93:78:14:bd:12:c5:7a:ae:5c:cf:c7:fa:7d: b5:e8:50:59:e7:77:82:0f:42:5a:20:6d:ba:48:8d:7b:3d:c4: 6e:80:b9:a8:89:28:3f:67:16:ae:2b:5a:f1:3c:55:3b:c3:74: 63:01:d9:74:8b:aa:e9:0f:27:39:32:de:5c:82:32:1a:0a:2e: 98:cb:ce:88:5a:0f:89:9d:10:58:7f:2f:63:43:36:8b:33:f0: a7:e7:95:02:76:1b:c9:5d:b7:f3:56:cd:83:e7:74:36:c8:c9: 98:8a:a0:4e:59:f1:4c:33:50:7e:9b:c5:8b:bc:f9:5d:f8:6b: 19:51:92:32 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NnOsKzsM2qwnwwdOQKOmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZmYxNTI3OGY1M2Y3NzYxYzJmM2QzM2RkOWJlNzdhOGE0 ZmJkOTQwHhcNMjYwMTAxMjAxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjMTM4ZTY0MWE5OWUyOWQ3MjkwMzRjZmMzZDE5MWM1NDY2NzBiYWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw412/ZmUH3ePHZkg6/wog5j1g4GE 6+bBKNpdosvzwVm7LvKocPfV0e8IdSYKEmSbBmCDBrDSGgeFMXgoDdbJxtma8GAP TRIC34Qb9nE1CJ7n6teVjrLyAPfOjW/UGXuGh3+Y8KsP2kxLY5EUBf2wmaw652Mk IfmWrMVlxMXrm9uRCDv31mK4GzOC77+3Lq/zZXf+2cBgmlug5JiIr/R7bJgWP64f vSzoicCoVYVvpoaHaotHVvWfIjvac7AAksEOtc7eIpBtN3fY8rS+2jkl/2uxXPOA Lfh4SN4lBU/kZX3W6qCqM3odXWn8YXrz3b7qx+UtgTx12FciO+mCvaZD0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFME45kGpninXKQNM/D0ZHFRmcLrnMB8GA1UdIwQY MBaAFJv/FSePU/d2HC89M92b53qKT72UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbV84Vko0OVQ5M1ljTHowejNadm5lb3BQdlpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hYTdiMzMtZGVlYi00YWJkLWI4ZDIt NTY5NzI0OWY1MTI0LzEvd1RqbVFhbWVLZGNwQTB6OFBSa2NWR1p3dXVjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9hYTdiMzMtZGVlYi00YWJkLWI4ZDItNTY5NzI0OWY1MTI0 LzEvbV84Vko0OVQ5M1ljTHowejNadm5lb3BQdlpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALkb9MA0G CSqGSIb3DQEBCwUAA4IBAQBXqzL3XnM3Lk2XLPMRJIjE3XOUmVP5Wzie1gK7kfDq cLWaDxJuUG1gVSNjAyPrIXADUAWPwJb1Sf97XlD/TthPRE5W/rsPEvb/NfvrFUoy aIfx0h4SBabVdbfSXvOjVGKG8APlR1ROpe+1V80NOpT8okqdyHmlkMsnllzjOEtY 26tMTJN4FL0SxXquXM/H+n216FBZ53eCD0JaIG26SI17PcRugLmoiSg/ZxauK1rx PFU7w3RjAdl0i6rpDyc5Mt5cgjIaCi6Yy86IWg+JnRBYfy9jQzaLM/Cn55UCdhvJ XbfzVs2D53Q2yMmYiqBOWfFMM1B+m8WLvPld+GsZUZIy -----END CERTIFICATE-----Generated at Sun Jan 25 22:12:40 2026 by rpki-client