This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/I31C8iZaIQWbMFO9-aM0PeI5F84.roa File: I31C8iZaIQWbMFO9-aM0PeI5F84.roa (raw, json) Hash identifier: f2C5DnBMFphCtAknysi92tQ1Oj6c92bExwouoAzWmBE= Subject key identifier: 23:7D:42:F2:26:5A:21:05:9B:30:53:BD:F9:A3:34:3D:E2:39:17:CE Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d Certificate serial: 019B7F842880DBE0E8F232D30211B6E93137 Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/I31C8iZaIQWbMFO9-aM0PeI5F84.roa Signing time: Fri 02 Jan 2026 16:22:06 +0000 ROA not before: Fri 02 Jan 2026 16:22:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209087 IP address blocks: 46.26.164.0/24 maxlen: 24 77.231.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:84:28:80:db:e0:e8:f2:32:d3:02:11:b6:e9:31:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d Validity Not Before: Jan 2 16:22:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=237d42f2265a21059b3053bdf9a3343de23917ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:4b:af:1e:37:ee:21:23:30:e8:6e:bf:04:64: 16:03:b2:80:34:57:f1:62:8d:bf:d3:4f:11:0f:e0: a5:9c:4b:b4:c3:bb:a3:60:cf:9f:b2:44:9f:e6:3d: b3:bc:da:3c:72:05:03:21:9f:6c:33:f5:47:86:61: 38:4d:28:05:12:3b:b6:db:38:bc:00:82:57:ed:7d: 62:42:06:27:88:26:50:17:ce:a2:c9:e5:a5:b6:22: a5:d9:4e:e4:88:35:96:a1:aa:cc:1c:f2:28:d4:a4: 40:df:68:06:dd:d6:9a:cc:f9:76:ab:b9:85:0c:f7: 82:48:0d:7e:e8:73:9a:e3:67:41:ff:26:03:df:0b: 68:ef:ca:1d:1e:22:2a:c8:c0:05:65:3b:e9:a0:30: 92:08:71:53:c0:87:23:b2:01:ab:ab:73:df:26:13: 94:65:67:fe:15:1d:d4:e9:2d:c7:f9:e9:1c:0d:c7: 48:f5:ee:a7:0d:c4:64:19:7d:e4:52:45:f0:7b:bf: c6:81:1e:e5:17:31:62:a0:e8:72:78:48:b0:a3:c2: 93:f4:a3:c6:65:0e:c7:d0:f5:77:a5:60:bc:59:24: 7e:fe:6f:0c:de:ef:ae:da:99:b9:23:76:6c:45:54: f4:c6:98:13:26:31:07:28:c2:ca:9a:71:d7:49:50: 93:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:7D:42:F2:26:5A:21:05:9B:30:53:BD:F9:A3:34:3D:E2:39:17:CE X509v3 Authority Key Identifier: keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/I31C8iZaIQWbMFO9-aM0PeI5F84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.26.164.0/24 77.231.181.0/24 Signature Algorithm: sha256WithRSAEncryption a0:a4:60:f3:f8:43:b3:77:f0:84:9e:7b:d1:53:2f:37:fe:d1: c3:da:a4:e4:40:84:10:a6:74:3e:a3:69:f3:2b:e4:1c:89:19: 71:43:5f:33:f9:7a:9b:64:a5:d0:9b:a0:1e:c0:2b:76:f5:4f: 98:dc:79:34:75:29:24:77:c1:55:7a:78:12:8a:f6:b9:bd:64: 37:0b:08:70:a4:e2:23:65:c6:40:e2:a0:25:68:76:d3:1e:ab: 7a:18:1a:71:b7:16:f9:9b:cb:4c:1f:65:b2:5c:1d:06:3d:44: 1e:52:b1:8b:1b:45:55:93:5a:aa:2e:1b:87:3f:2d:76:47:41: f0:a2:3b:b1:55:d0:4b:66:21:55:a6:f4:c2:35:60:03:d0:82: 1e:b4:70:c9:25:59:58:04:9f:c6:89:1b:59:9d:f8:5a:62:ad: 15:f4:6c:3e:9a:d6:f9:df:cd:2a:52:e5:5f:1f:5f:ec:07:f0: 9b:d7:02:f6:45:5b:3d:8e:a0:59:e4:7d:46:b3:1c:f3:c0:bd: 13:9d:73:f1:de:8c:aa:63:78:90:5e:d5:7b:dd:5b:23:ba:8f: cb:0b:58:f2:e1:db:c1:b9:20:ab:c4:33:70:8e:58:6b:80:de: 4c:3e:cf:b3:06:a8:af:b2:91:40:a5:2e:80:b9:16:ac:ac:a1: 8b:87:be:15 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/hCiA2+Do8jLTAhG26TE3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MmFlMzNiMTFiMzZhMzE5YmE4MTM0N2Q4NTI0ODBkOGU3 NGM4N2QwHhcNMjYwMTAyMTYyMjA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzdkNDJmMjI2NWEyMTA1OWIzMDUzYmRmOWEzMzQzZGUyMzkxN2NlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0uvHjfuISMw6G6/BGQWA7KANFfx Yo2/008RD+ClnEu0w7ujYM+fskSf5j2zvNo8cgUDIZ9sM/VHhmE4TSgFEju22zi8 AIJX7X1iQgYniCZQF86iyeWltiKl2U7kiDWWoarMHPIo1KRA32gG3daazPl2q7mF DPeCSA1+6HOa42dB/yYD3wto78odHiIqyMAFZTvpoDCSCHFTwIcjsgGrq3PfJhOU ZWf+FR3U6S3H+ekcDcdI9e6nDcRkGX3kUkXwe7/GgR7lFzFioOhyeEiwo8KT9KPG ZQ7H0PV3pWC8WSR+/m8M3u+u2pm5I3ZsRVT0xpgTJjEHKMLKmnHXSVCT+QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCN9QvImWiEFmzBTvfmjND3iORfOMB8GA1UdIwQY MBaAFDUq4zsRs2oxm6gTR9hSSA2OdMh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMt MjUwNTBjNTkzYWExLzEvSTMxQzhpWmFJUVdiTUZPOS1hTTBQZUk1Rjg0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jNTVhYjAtZWEyMi00YTE5LThiMzMtMjUwNTBjNTkzYWEx LzEvTlNyak94R3phakdicUJOSDJGSklEWTUweUgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALhqkAwQA Tee1MA0GCSqGSIb3DQEBCwUAA4IBAQCgpGDz+EOzd/CEnnvRUy83/tHD2qTkQIQQ pnQ+o2nzK+QciRlxQ18z+XqbZKXQm6AewCt29U+Y3Hk0dSkkd8FVengSiva5vWQ3 CwhwpOIjZcZA4qAlaHbTHqt6GBpxtxb5m8tMH2WyXB0GPUQeUrGLG0VVk1qqLhuH Py12R0HwojuxVdBLZiFVpvTCNWAD0IIetHDJJVlYBJ/GiRtZnfhaYq0V9Gw+mtb5 380qUuVfH1/sB/Cb1wL2RVs9jqBZ5H1GsxzzwL0TnXPx3oyqY3iQXtV73Vsjuo/L C1jy4dvBuSCrxDNwjlhrgN5MPs+zBqivspFApS6AuRasrKGLh74V -----END CERTIFICATE-----Generated at Sun Jan 25 23:50:37 2026 by rpki-client