This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/1N902uWxBewZ5PtMsS3s5KUkFgs.roa File: 1N902uWxBewZ5PtMsS3s5KUkFgs.roa (raw, json) Hash identifier: o8+FHwdwrm2FTsBbNR1O1Ec7gfE8MxmnmProyM8q4BU= Subject key identifier: D4:DF:74:DA:E5:B1:05:EC:19:E4:FB:4C:B1:2D:EC:E4:A5:24:16:0B Certificate issuer: /CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238 Certificate serial: 019B7AC8E280BF37B430DA033FBA4467A90F Authority key identifier: 11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/1N902uWxBewZ5PtMsS3s5KUkFgs.roa Signing time: Thu 01 Jan 2026 18:19:04 +0000 ROA not before: Thu 01 Jan 2026 18:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49785 IP address blocks: 46.22.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:e2:80:bf:37:b4:30:da:03:3f:ba:44:67:a9:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238 Validity Not Before: Jan 1 18:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4df74dae5b105ec19e4fb4cb12dece4a524160b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:56:cc:ea:85:f5:0c:01:64:d8:16:2e:c3:19: ac:c9:8f:89:33:d1:d0:85:ad:7c:8f:94:c7:8a:a4: 4a:ab:01:dd:d4:69:ab:2f:af:2a:b7:aa:f4:3c:77: dd:ce:1a:b6:c6:a2:6b:1c:80:c0:52:c7:87:52:88: c9:1e:f7:f8:8b:a4:d3:62:c5:57:0c:39:c1:8c:17: 57:6b:7a:2f:c0:f2:ea:25:9a:e6:6f:04:7a:bb:bc: 7f:9f:a0:b5:ae:d7:13:9e:19:72:33:54:63:db:33: da:c3:9a:51:0b:d5:bd:0e:50:f8:55:71:b0:5f:f7: bc:ab:be:95:02:67:ce:57:7c:aa:ef:a9:75:62:35: 26:81:10:63:17:ad:4f:25:b4:51:a1:8c:14:30:58: a3:8e:e6:71:b0:83:a5:c5:be:37:24:39:14:19:69: e9:79:ec:1d:bd:6c:52:63:8f:28:7e:e0:6a:7b:46: ef:39:cf:d3:ee:a3:fa:2b:84:db:61:9a:fb:83:a4: 10:61:ae:14:85:08:4b:29:99:89:eb:bb:04:27:c5: 57:bb:76:6a:fd:63:8d:3e:72:c8:ad:79:a1:5f:19: 1a:0a:84:75:aa:ce:25:dc:68:e4:3a:0d:44:af:1b: 5e:40:1e:05:5a:30:f2:a2:32:36:97:ef:d3:cb:ed: 7b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:DF:74:DA:E5:B1:05:EC:19:E4:FB:4C:B1:2D:EC:E4:A5:24:16:0B X509v3 Authority Key Identifier: keyid:11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/1N902uWxBewZ5PtMsS3s5KUkFgs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.22.174.0/24 Signature Algorithm: sha256WithRSAEncryption 72:3c:1e:04:fc:d8:0a:cf:19:a7:18:52:a0:fa:ad:eb:d8:40: d1:c6:5a:14:7f:7d:d5:ab:ce:66:0c:60:03:2a:8c:cf:0b:28: de:11:9b:02:16:45:a1:9f:c7:86:46:72:e4:bf:27:00:f0:c4: 5a:54:c9:bc:2a:9c:f8:41:a4:50:43:8c:74:04:e1:44:8f:04: 81:05:ca:0d:b6:de:4d:82:48:80:35:19:34:f7:76:09:5b:12: 71:5c:b4:ef:0b:43:a4:ad:3c:9e:53:18:4b:02:70:85:0e:0c: e9:0a:49:fc:5c:a6:92:41:d9:e6:8f:dc:86:b5:bc:62:a6:d5: ab:60:2e:a0:04:32:73:11:ed:ce:79:95:ca:18:da:dc:57:5a: eb:97:43:74:af:b8:f6:4e:8f:38:a9:9c:f3:b3:da:77:62:1f: 29:2a:52:0d:09:55:fb:83:45:90:a6:bd:6d:e3:f8:1a:22:78: 28:9a:f6:6a:36:9f:7b:21:8c:b4:53:c4:f0:0b:d4:d6:e8:fd: 67:ef:16:8b:b7:e0:02:03:3a:45:19:eb:d2:c2:67:ca:3f:f6: 10:aa:e8:89:83:85:0f:74:9e:58:6e:a0:4f:7e:7e:f4:72:d3: 69:06:31:03:3d:85:34:d9:cf:40:75:6b:8d:dd:5f:7b:62:d5: 5f:86:31:5d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yOKAvze0MNoDP7pEZ6kPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYmZhMjk2MWZhMGUwYjA3MDQxMjkzZGRjMGMzNjkzYTll MGEyMzgwHhcNMjYwMTAxMTgxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGRmNzRkYWU1YjEwNWVjMTllNGZiNGNiMTJkZWNlNGE1MjQxNjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVbM6oX1DAFk2BYuwxmsyY+JM9HQ ha18j5THiqRKqwHd1GmrL68qt6r0PHfdzhq2xqJrHIDAUseHUojJHvf4i6TTYsVX DDnBjBdXa3ovwPLqJZrmbwR6u7x/n6C1rtcTnhlyM1Rj2zPaw5pRC9W9DlD4VXGw X/e8q76VAmfOV3yq76l1YjUmgRBjF61PJbRRoYwUMFijjuZxsIOlxb43JDkUGWnp eewdvWxSY48ofuBqe0bvOc/T7qP6K4TbYZr7g6QQYa4UhQhLKZmJ67sEJ8VXu3Zq /WONPnLIrXmhXxkaCoR1qs4l3GjkOg1ErxteQB4FWjDyojI2l+/Ty+17BwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNTfdNrlsQXsGeT7TLEt7OSlJBYLMB8GA1UdIwQY MBaAFBG/opYfoOCwcEEpPdwMNpOp4KI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWItaWxoLWc0TEJ3UVNrOTNBdzJrNm5nb2pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8xNzMxNzMtODE5Zi00YmM5LTkyZDgt Nzg3OTFjOTM1NmEzLzEvMU45MDJ1V3hCZXdaNVB0TXNTM3M1S1VrRmdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8xNzMxNzMtODE5Zi00YmM5LTkyZDgtNzg3OTFjOTM1NmEz LzEvRWItaWxoLWc0TEJ3UVNrOTNBdzJrNm5nb2pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALhauMA0G CSqGSIb3DQEBCwUAA4IBAQByPB4E/NgKzxmnGFKg+q3r2EDRxloUf33Vq85mDGAD KozPCyjeEZsCFkWhn8eGRnLkvycA8MRaVMm8Kpz4QaRQQ4x0BOFEjwSBBcoNtt5N gkiANRk093YJWxJxXLTvC0OkrTyeUxhLAnCFDgzpCkn8XKaSQdnmj9yGtbxiptWr YC6gBDJzEe3OeZXKGNrcV1rrl0N0r7j2To84qZzzs9p3Yh8pKlINCVX7g0WQpr1t 4/gaIngomvZqNp97IYy0U8TwC9TW6P1n7xaLt+ACAzpFGevSwmfKP/YQquiJg4UP dJ5YbqBPfn70ctNpBjEDPYU02c9AdWuN3V97YtVfhjFd -----END CERTIFICATE-----Generated at Mon Jan 26 06:33:23 2026 by rpki-client