This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/N18aROBQ19Wj6Kdi3-iQ5c6OfeA.roa File: N18aROBQ19Wj6Kdi3-iQ5c6OfeA.roa (raw, json) Hash identifier: ezUkbSC7P3mO/d4z+5YndvD9aLmtqZ6KOctd3R4dOws= Subject key identifier: 37:5F:1A:44:E0:50:D7:D5:A3:E8:A7:62:DF:E8:90:E5:CE:8E:7D:E0 Certificate issuer: /CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2 Certificate serial: 019B7EA6AEFF9718B41BCEA5E0322768A00D Authority key identifier: B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/N18aROBQ19Wj6Kdi3-iQ5c6OfeA.roa Signing time: Fri 02 Jan 2026 12:20:11 +0000 ROA not before: Fri 02 Jan 2026 12:20:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 4445 IP address blocks: 46.190.128.0/17 maxlen: 24 47.73.173.0/24 maxlen: 24 47.73.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.mft rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:ae:ff:97:18:b4:1b:ce:a5:e0:32:27:68:a0:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3a5d99863db2e49b44f6c324eb04388fc7515d2 Validity Not Before: Jan 2 12:20:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=375f1a44e050d7d5a3e8a762dfe890e5ce8e7de0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e5:e6:92:a1:50:cc:10:40:58:7c:c5:99:d5: 2b:c1:02:5a:7c:e4:b3:93:f7:38:3c:28:23:3f:6e: f3:9b:89:15:3c:e5:46:73:4c:0f:04:3f:60:0d:ae: e0:50:3a:2d:d3:12:94:9e:89:d2:a9:f7:f6:25:26: 21:31:64:95:f3:a4:e0:94:9c:34:69:58:8f:ce:66: e8:6a:ed:74:7d:84:48:b2:10:68:df:9d:58:d9:65: 43:a5:38:d0:32:2f:e5:7e:2c:19:43:4b:fe:b1:81: 7b:f4:8b:2c:14:19:3c:f6:1c:05:a6:03:a9:3a:97: 3c:76:a7:25:03:c1:e8:05:89:51:14:c8:06:03:1d: bb:a4:c5:b8:b4:d8:db:93:64:a4:62:d5:7b:06:ea: 9b:b4:42:58:65:e5:a4:74:33:6a:e7:a6:42:79:fd: a9:ca:3e:af:c8:8c:04:51:97:10:dc:55:db:07:8f: 28:28:67:09:81:b9:83:de:38:82:70:ce:d8:9a:45: 03:13:77:75:31:db:ea:d0:d9:30:34:bd:83:57:cf: 4c:17:3a:d6:31:43:6c:0c:58:71:12:a3:db:ac:13: f2:f2:55:a7:42:82:3d:8a:c7:d3:8d:23:29:f6:eb: ff:2b:c5:d7:4d:3a:30:bc:00:72:cf:e5:37:98:ff: c4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:5F:1A:44:E0:50:D7:D5:A3:E8:A7:62:DF:E8:90:E5:CE:8E:7D:E0 X509v3 Authority Key Identifier: keyid:B3:A5:D9:98:63:DB:2E:49:B4:4F:6C:32:4E:B0:43:88:FC:75:15:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s6XZmGPbLkm0T2wyTrBDiPx1FdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/N18aROBQ19Wj6Kdi3-iQ5c6OfeA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/s6XZmGPbLkm0T2wyTrBDiPx1FdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.190.128.0/17 47.73.173.0/24 47.73.175.0/24 Signature Algorithm: sha256WithRSAEncryption b5:be:7c:c9:f6:a4:f4:1a:d6:f6:23:fb:ee:d7:a0:03:37:1a: e2:c5:34:66:5a:97:83:09:5e:1a:0f:ef:23:19:fc:87:5f:0f: 12:0c:96:87:06:87:76:db:4b:49:27:cd:a1:ab:97:1e:20:d4: a5:e1:7f:ef:1b:6d:24:0b:3c:77:77:83:03:60:54:13:1f:9d: fa:69:d7:0a:1f:e9:f6:db:f7:5e:33:37:5f:db:d1:7a:a5:dd: 09:8f:60:f1:fb:3b:63:78:4c:27:92:47:3f:e9:5b:34:e6:ba: f9:65:84:f4:f2:d5:a7:97:53:49:b0:72:30:87:02:61:9b:24: 00:e3:0a:94:96:13:b4:f6:51:a0:1a:2a:a4:32:37:ab:81:d0: 61:af:06:44:8d:54:59:52:29:eb:40:e8:09:32:85:5f:bf:d1: 79:82:58:82:79:a8:80:33:66:19:91:a8:81:29:48:d1:30:e3: 51:2d:06:0b:d8:6b:b8:8b:e0:77:10:e5:e9:29:e8:af:c2:55: 9a:64:cd:b1:5e:45:06:93:9f:5e:dd:bf:86:4b:2d:4b:c2:01: 5f:4c:39:24:a3:09:45:71:44:5d:91:63:39:d8:4e:a7:39:c3: 7e:8d:53:db:4e:e9:8c:13:70:1e:5f:7c:1d:d3:84:36:a1:da: 7d:1c:a4:3b -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt+pq7/lxi0G86l4DInaKANMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzYTVkOTk4NjNkYjJlNDliNDRmNmMzMjRlYjA0Mzg4ZmM3 NTE1ZDIwHhcNMjYwMTAyMTIyMDExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzVmMWE0NGUwNTBkN2Q1YTNlOGE3NjJkZmU4OTBlNWNlOGU3ZGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruXmkqFQzBBAWHzFmdUrwQJafOSz k/c4PCgjP27zm4kVPOVGc0wPBD9gDa7gUDot0xKUnonSqff2JSYhMWSV86TglJw0 aViPzmboau10fYRIshBo351Y2WVDpTjQMi/lfiwZQ0v+sYF79IssFBk89hwFpgOp Opc8dqclA8HoBYlRFMgGAx27pMW4tNjbk2SkYtV7BuqbtEJYZeWkdDNq56ZCef2p yj6vyIwEUZcQ3FXbB48oKGcJgbmD3jiCcM7YmkUDE3d1Mdvq0NkwNL2DV89MFzrW MUNsDFhxEqPbrBPy8lWnQoI9isfTjSMp9uv/K8XXTTowvAByz+U3mP/EqQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFDdfGkTgUNfVo+inYt/okOXOjn3gMB8GA1UdIwQY MBaAFLOl2Zhj2y5JtE9sMk6wQ4j8dRXSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAt ZWVjNWQ1MGVmYTk0LzEvTjE4YVJPQlExOVdqNktkaTMtaVE1YzZPZmVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAtZWVjNWQ1MGVmYTk0 LzEvczZYWm1HUGJMa20wVDJ3eVRyQkRpUHgxRmRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQHLr6AAwQA L0mtAwQAL0mvMA0GCSqGSIb3DQEBCwUAA4IBAQC1vnzJ9qT0Gtb2I/vu16ADNxri xTRmWpeDCV4aD+8jGfyHXw8SDJaHBod220tJJ82hq5ceINSl4X/vG20kCzx3d4MD YFQTH536adcKH+n22/deMzdf29F6pd0Jj2Dx+ztjeEwnkkc/6Vs05rr5ZYT08tWn l1NJsHIwhwJhmyQA4wqUlhO09lGgGiqkMjergdBhrwZEjVRZUinrQOgJMoVfv9F5 gliCeaiAM2YZkaiBKUjRMONRLQYL2Gu4i+B3EOXpKeivwlWaZM2xXkUGk59e3b+G Sy1LwgFfTDkkowlFcURdkWM52E6nOcN+jVPbTumME3AeX3wd04Q2odp9HKQ7 -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:08 2026 by rpki-client