This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/B87mAdd4CvquW6IizfewWsMBYIg.roa File: B87mAdd4CvquW6IizfewWsMBYIg.roa (raw, json) Hash identifier: zPZbgJpRYs/sjp3ISOotVNKeFAfB1E/GJqKV02Oq3YM= Subject key identifier: 07:CE:E6:01:D7:78:0A:FA:AE:5B:A2:22:CD:F7:B0:5A:C3:01:60:88 Certificate issuer: /CN=f676887f22ecda8d074815a0bcf91faf81942abd Certificate serial: 019B7AC93671A03C968A606A5E2367F51C25 Authority key identifier: F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/B87mAdd4CvquW6IizfewWsMBYIg.roa Signing time: Thu 01 Jan 2026 18:19:25 +0000 ROA not before: Thu 01 Jan 2026 18:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44694 IP address blocks: 46.16.38.0/24 maxlen: 24 2a14:6480::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.mft rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:36:71:a0:3c:96:8a:60:6a:5e:23:67:f5:1c:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f676887f22ecda8d074815a0bcf91faf81942abd Validity Not Before: Jan 1 18:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=07cee601d7780afaae5ba222cdf7b05ac3016088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:02:3e:f7:89:7d:44:34:49:fa:04:7f:83:c9: 90:bf:c2:f0:04:61:78:8b:8d:d2:07:12:0f:13:dd: 53:fa:d6:24:08:c6:e7:62:df:d2:b3:9e:5d:f9:f3: 53:26:29:4d:15:7d:68:4b:50:33:cf:21:d7:75:71: b7:1a:f0:52:86:a3:3d:e3:f2:88:4c:72:84:51:9a: e6:c7:95:67:2d:27:3e:7b:b5:41:fd:5c:8f:96:20: d8:25:8b:9b:d3:77:ce:10:24:c9:1f:4f:cc:28:93: a9:8c:23:d2:a7:66:8c:db:56:dd:c6:fd:07:3d:c8: cd:9c:0a:58:79:4a:25:64:73:5f:96:29:dc:70:c9: 68:e3:89:42:24:f0:c5:b9:56:9d:6c:b0:af:ec:17: 52:5c:4c:ec:2f:e6:8f:c3:97:da:b9:48:bd:e1:db: da:17:40:93:aa:77:35:42:64:d7:41:8b:f3:c2:13: 16:34:df:b3:83:d0:da:78:13:0b:2a:bc:52:bd:d7: 79:3c:8c:3d:08:d1:80:b5:c4:d5:53:b2:47:fd:72: 7f:86:c6:b0:1d:90:43:6c:13:78:05:13:29:aa:68: 4d:58:51:d1:af:68:3b:7d:4f:23:ef:8a:39:ac:32: 62:fa:c9:3e:0b:8e:10:63:d5:56:6b:8a:69:cf:37: a5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:CE:E6:01:D7:78:0A:FA:AE:5B:A2:22:CD:F7:B0:5A:C3:01:60:88 X509v3 Authority Key Identifier: keyid:F6:76:88:7F:22:EC:DA:8D:07:48:15:A0:BC:F9:1F:AF:81:94:2A:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9naIfyLs2o0HSBWgvPkfr4GUKr0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/B87mAdd4CvquW6IizfewWsMBYIg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/cbc4bb-999c-4988-a1e1-cd2dcb355655/1/9naIfyLs2o0HSBWgvPkfr4GUKr0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.16.38.0/24 IPv6: 2a14:6480::/33 Signature Algorithm: sha256WithRSAEncryption 66:52:ac:d7:ac:8a:7d:11:b7:20:e6:82:b0:cf:1e:f6:0a:d0: 22:6d:1a:30:94:f1:83:11:4c:6f:dc:77:20:ac:d1:57:dc:87: cf:84:b2:e9:2a:ea:c0:30:c2:07:16:5a:53:cb:96:dc:e0:1c: a5:4e:e6:0a:fc:96:5f:fa:3d:75:e1:d6:ac:aa:9d:e6:c0:44: e3:96:9f:5a:21:58:bd:2c:b4:fb:9f:4d:97:16:f9:0b:3b:7e: c9:ee:37:f9:8c:38:e2:4e:70:6f:2f:bb:82:4e:af:90:35:14: 1a:7b:b0:f8:85:a8:38:3e:60:61:43:83:43:3a:aa:44:23:6f: 6d:bf:c8:3a:81:69:d5:33:79:96:63:cc:46:3e:0f:2c:b5:df: dc:e0:3f:31:70:e3:04:c1:b6:3f:bf:8d:d7:f7:a6:df:7a:89: c4:97:c6:73:d7:02:b6:91:37:6c:90:27:d7:a7:24:45:50:cd: 6b:8c:c4:9c:27:92:8e:dc:68:f4:8a:d9:b6:8a:36:c4:02:e6: e2:ca:d6:74:df:76:cb:b9:85:fb:7e:51:21:af:c5:3c:b9:20: d5:99:92:59:72:b5:a3:81:4c:ac:1b:11:d3:83:b0:1c:1e:2f: 39:83:d6:6b:58:58:a4:b7:a7:95:5f:64:09:41:bf:da:34:29: 8a:74:a6:9f -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt6yTZxoDyWimBqXiNn9RwlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2NzY4ODdmMjJlY2RhOGQwNzQ4MTVhMGJjZjkxZmFmODE5 NDJhYmQwHhcNMjYwMTAxMTgxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwN2NlZTYwMWQ3NzgwYWZhYWU1YmEyMjJjZGY3YjA1YWMzMDE2MDg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gI+94l9RDRJ+gR/g8mQv8LwBGF4 i43SBxIPE91T+tYkCMbnYt/Ss55d+fNTJilNFX1oS1AzzyHXdXG3GvBShqM94/KI THKEUZrmx5VnLSc+e7VB/VyPliDYJYub03fOECTJH0/MKJOpjCPSp2aM21bdxv0H PcjNnApYeUolZHNflinccMlo44lCJPDFuVadbLCv7BdSXEzsL+aPw5fauUi94dva F0CTqnc1QmTXQYvzwhMWNN+zg9DaeBMLKrxSvdd5PIw9CNGAtcTVU7JH/XJ/hsaw HZBDbBN4BRMpqmhNWFHRr2g7fU8j74o5rDJi+sk+C44QY9VWa4ppzzelVwIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFAfO5gHXeAr6rluiIs33sFrDAWCIMB8GA1UdIwQY MBaAFPZ2iH8i7NqNB0gVoLz5H6+BlCq9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOW5hSWZ5THMybzBIU0JXZ3ZQa2ZyNEdVS3IwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9jYmM0YmItOTk5Yy00OTg4LWExZTEt Y2QyZGNiMzU1NjU1LzEvQjg3bUFkZDRDdnF1VzZJaXpmZXdXc01CWUlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9jYmM0YmItOTk5Yy00OTg4LWExZTEtY2QyZGNiMzU1NjU1 LzEvOW5hSWZ5THMybzBIU0JXZ3ZQa2ZyNEdVS3IwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQALhAmMA4E AgACMAgDBgcqFGSAADANBgkqhkiG9w0BAQsFAAOCAQEAZlKs16yKfRG3IOaCsM8e 9grQIm0aMJTxgxFMb9x3IKzRV9yHz4Sy6SrqwDDCBxZaU8uW3OAcpU7mCvyWX/o9 deHWrKqd5sBE45afWiFYvSy0+59Nlxb5Czt+ye43+Yw44k5wby+7gk6vkDUUGnuw +IWoOD5gYUODQzqqRCNvbb/IOoFp1TN5lmPMRj4PLLXf3OA/MXDjBMG2P7+N1/em 33qJxJfGc9cCtpE3bJAn16ckRVDNa4zEnCeSjtxo9IrZtoo2xALm4srWdN92y7mF +35RIa/FPLkg1ZmSWXK1o4FMrBsR04OwHB4vOYPWa1hYpLenlV9kCUG/2jQpinSm nw== -----END CERTIFICATE-----Generated at Mon Jan 26 15:00:43 2026 by rpki-client