This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/46CB3rmq7ghb0IOigVJMslc8LZI.roa File: 46CB3rmq7ghb0IOigVJMslc8LZI.roa (raw, json) Hash identifier: iNpxmitmZCNCk+8flAyzDSyitulva1I3mwpI1j7ulR8= Subject key identifier: E3:A0:81:DE:B9:AA:EE:08:5B:D0:83:A2:81:52:4C:B2:57:3C:2D:92 Certificate issuer: /CN=98e5320f856be82ea874e92d6d80bc6f9978300e Certificate serial: 019B76EAFD121D182C6C00E4626BCD14E9D6 Authority key identifier: 98:E5:32:0F:85:6B:E8:2E:A8:74:E9:2D:6D:80:BC:6F:99:78:30:0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mOUyD4Vr6C6odOktbYC8b5l4MA4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/46CB3rmq7ghb0IOigVJMslc8LZI.roa Signing time: Thu 01 Jan 2026 00:17:50 +0000 ROA not before: Thu 01 Jan 2026 00:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 31122 IP address blocks: 92.39.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.mft rsync://rpki.ripe.net/repository/DEFAULT/mOUyD4Vr6C6odOktbYC8b5l4MA4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:ea:fd:12:1d:18:2c:6c:00:e4:62:6b:cd:14:e9:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98e5320f856be82ea874e92d6d80bc6f9978300e Validity Not Before: Jan 1 00:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3a081deb9aaee085bd083a281524cb2573c2d92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:cc:af:09:2e:4e:80:30:3f:c8:0d:d0:2c:5a: f8:0d:61:59:d7:69:ff:88:60:e4:5b:32:3e:30:3a: f5:5a:e6:95:fa:07:f3:23:61:ff:35:d6:92:7a:a1: 43:7e:e1:26:f3:5b:5d:6d:04:f6:c6:9c:11:a1:5a: 53:b2:a6:63:f4:a8:af:21:83:47:b7:5c:d5:d0:92: 40:cb:76:05:1e:2b:8d:39:61:e2:56:f8:c5:d7:17: d3:79:22:e6:6c:a3:25:41:64:87:b2:ee:6a:3c:40: 4e:d3:b5:46:e5:6b:6c:38:08:fe:4a:ee:6a:67:16: af:66:f0:d9:6c:a4:07:47:ef:57:5e:02:bb:04:6b: 1e:d7:61:8a:dc:44:d2:8b:c5:cc:57:ba:77:40:c9: ce:18:a3:d7:b6:65:ea:c2:25:dc:4c:e8:89:a4:d8: a1:81:f0:1e:28:0d:df:bb:ca:0f:3d:44:8b:1c:61: c4:af:cc:73:50:c8:42:6c:f6:91:cb:46:ed:1e:10: 53:7b:43:71:2d:23:81:9d:12:15:22:42:da:a0:11: c0:0f:76:99:22:12:64:37:39:b6:82:1d:5f:68:4f: 9a:07:b3:0d:0e:d0:fa:9a:98:61:06:36:aa:eb:e3: b5:db:36:3e:74:ae:b1:79:b1:6d:7a:06:2d:92:b6: 6d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:A0:81:DE:B9:AA:EE:08:5B:D0:83:A2:81:52:4C:B2:57:3C:2D:92 X509v3 Authority Key Identifier: keyid:98:E5:32:0F:85:6B:E8:2E:A8:74:E9:2D:6D:80:BC:6F:99:78:30:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mOUyD4Vr6C6odOktbYC8b5l4MA4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/46CB3rmq7ghb0IOigVJMslc8LZI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f57ef9-9815-4f95-a0bd-f98da546abd3/1/mOUyD4Vr6C6odOktbYC8b5l4MA4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 92.39.176.0/20 Signature Algorithm: sha256WithRSAEncryption 2c:35:96:05:7f:0d:c9:8d:41:18:a0:fb:5b:6a:ba:cf:47:88: 3b:b7:47:71:10:75:47:98:33:a4:bd:d5:9d:c5:52:d7:20:14: d1:23:5a:11:89:d0:03:64:6d:0d:05:b8:fc:80:20:a2:77:29: 93:ac:db:9b:0c:e5:0b:f4:fa:80:b4:34:30:e2:c2:48:c8:a7: 91:4d:48:a2:aa:86:8b:32:3a:ea:c7:27:5e:ac:3b:d1:79:ba: 2b:41:c9:b0:32:7e:e9:f2:b0:cd:e9:36:0b:f6:56:16:38:e0: 36:a0:dc:a6:e2:8b:9d:04:03:53:44:b0:93:47:c7:68:d9:12: 51:55:24:4e:8f:fb:49:28:50:5c:94:eb:50:c5:71:03:c2:83: 07:80:4e:0b:31:aa:ee:9a:b2:bc:97:b6:18:9f:ae:26:32:57: 0b:d3:f8:98:88:ed:7f:f7:ec:d2:07:ee:7a:53:9d:f3:5a:9b: d5:21:f9:35:9a:d8:37:93:09:8c:6c:e8:75:4e:dc:a2:01:4f: 14:18:03:b5:9f:fe:46:13:78:dd:f1:5b:e3:32:ea:fd:fe:2b: 90:3e:b1:06:0c:15:67:0b:b0:9d:41:2a:bb:97:20:89:ae:87: 04:42:d0:d1:80:3c:85:c0:c0:4d:21:be:49:76:b5:8f:53:54: 8e:6f:3b:ea -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt26v0SHRgsbADkYmvNFOnWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4ZTUzMjBmODU2YmU4MmVhODc0ZTkyZDZkODBiYzZmOTk3 ODMwMGUwHhcNMjYwMTAxMDAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2EwODFkZWI5YWFlZTA4NWJkMDgzYTI4MTUyNGNiMjU3M2MyZDkyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMyvCS5OgDA/yA3QLFr4DWFZ12n/ iGDkWzI+MDr1WuaV+gfzI2H/NdaSeqFDfuEm81tdbQT2xpwRoVpTsqZj9KivIYNH t1zV0JJAy3YFHiuNOWHiVvjF1xfTeSLmbKMlQWSHsu5qPEBO07VG5WtsOAj+Su5q ZxavZvDZbKQHR+9XXgK7BGse12GK3ETSi8XMV7p3QMnOGKPXtmXqwiXcTOiJpNih gfAeKA3fu8oPPUSLHGHEr8xzUMhCbPaRy0btHhBTe0NxLSOBnRIVIkLaoBHAD3aZ IhJkNzm2gh1faE+aB7MNDtD6mphhBjaq6+O12zY+dK6xebFtegYtkrZtBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOOggd65qu4IW9CDooFSTLJXPC2SMB8GA1UdIwQY MBaAFJjlMg+Fa+guqHTpLW2AvG+ZeDAOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbU9VeUQ0VnI2QzZvZE9rdGJZQzhiNWw0TUE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS9mNTdlZjktOTgxNS00Zjk1LWEwYmQt Zjk4ZGE1NDZhYmQzLzEvNDZDQjNybXE3Z2hiMElPaWdWSk1zbGM4TFpJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS9mNTdlZjktOTgxNS00Zjk1LWEwYmQtZjk4ZGE1NDZhYmQz LzEvbU9VeUQ0VnI2QzZvZE9rdGJZQzhiNWw0TUE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEXCewMA0G CSqGSIb3DQEBCwUAA4IBAQAsNZYFfw3JjUEYoPtbarrPR4g7t0dxEHVHmDOkvdWd xVLXIBTRI1oRidADZG0NBbj8gCCidymTrNubDOUL9PqAtDQw4sJIyKeRTUiiqoaL MjrqxyderDvReborQcmwMn7p8rDN6TYL9lYWOOA2oNym4oudBANTRLCTR8do2RJR VSROj/tJKFBclOtQxXEDwoMHgE4LMarumrK8l7YYn64mMlcL0/iYiO1/9+zSB+56 U53zWpvVIfk1mtg3kwmMbOh1TtyiAU8UGAO1n/5GE3jd8VvjMur9/iuQPrEGDBVn C7CdQSq7lyCJrocEQtDRgDyFwMBNIb5JdrWPU1SObzvq -----END CERTIFICATE-----Generated at Sun Jan 25 15:14:05 2026 by rpki-client