This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/NdaVlYyGJzmfbtga--jSELZwlbE.roa File: NdaVlYyGJzmfbtga--jSELZwlbE.roa (raw, json) Hash identifier: 44YtoyTu9IHJo6Ox432rtAmIAiFL2xtPhJVn1fVc8ls= Subject key identifier: 35:D6:95:95:8C:86:27:39:9F:6E:D8:1A:FB:E8:D2:10:B6:70:95:B1 Certificate issuer: /CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238 Certificate serial: 019B7AC8E4CFA39C6BD67272C5D1D6DA23A6 Authority key identifier: 11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/NdaVlYyGJzmfbtga--jSELZwlbE.roa Signing time: Thu 01 Jan 2026 18:19:04 +0000 ROA not before: Thu 01 Jan 2026 18:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197615 IP address blocks: 46.22.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.mft rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:e4:cf:a3:9c:6b:d6:72:72:c5:d1:d6:da:23:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11bfa2961fa0e0b07041293ddc0c3693a9e0a238 Validity Not Before: Jan 1 18:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=35d695958c8627399f6ed81afbe8d210b67095b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:53:35:bb:a2:31:63:b3:21:32:a8:a1:1c:e6: 09:b7:ea:46:cb:5a:15:f6:29:c9:f4:29:21:95:7f: 4e:1e:50:f3:0a:73:28:ee:9c:4d:f0:ad:08:35:1e: 24:ab:77:00:92:10:b4:01:56:99:d6:2e:b0:9b:41: 35:b7:34:22:ff:20:f7:d5:80:08:3c:e0:84:80:e8: 8f:7d:11:94:1d:3c:db:d7:c8:41:4b:a8:c7:11:d0: e1:90:50:b0:b1:57:75:a8:d1:5e:91:6a:6a:b1:ca: 1c:6f:fe:2d:e0:1c:f0:5e:a8:cb:f7:9c:38:e3:b1: 32:b3:76:a9:19:e8:be:20:92:de:c1:cd:14:6d:14: 1b:80:eb:6f:f8:dd:b8:81:05:76:58:94:4b:67:c9: 6a:84:2c:92:3e:d9:52:84:0f:b5:78:34:97:0f:13: 83:bb:c9:65:a7:5c:50:2d:5f:26:7d:43:19:56:0f: da:a4:d1:33:a1:a2:e2:ce:32:1f:04:5d:7f:6d:e0: f5:af:56:2a:0d:f7:d3:31:f5:6b:8e:5c:6a:3f:e2: e5:cd:9f:82:4b:34:75:29:01:61:ff:86:36:e7:5c: 1c:77:b0:1c:6a:3e:18:98:d3:e4:f7:70:74:7d:16: 6d:68:85:34:a3:30:f4:75:2d:84:b7:d5:42:36:e7: c5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:D6:95:95:8C:86:27:39:9F:6E:D8:1A:FB:E8:D2:10:B6:70:95:B1 X509v3 Authority Key Identifier: keyid:11:BF:A2:96:1F:A0:E0:B0:70:41:29:3D:DC:0C:36:93:A9:E0:A2:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eb-ilh-g4LBwQSk93Aw2k6ngojg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/NdaVlYyGJzmfbtga--jSELZwlbE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/173173-819f-4bc9-92d8-78791c9356a3/1/Eb-ilh-g4LBwQSk93Aw2k6ngojg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.22.166.0/24 Signature Algorithm: sha256WithRSAEncryption 28:e0:44:96:cb:45:b6:e9:02:4b:0d:de:b1:49:db:b6:23:f7: 7a:ab:db:fa:0b:5d:c5:8a:e6:2b:18:f9:dd:63:3b:2f:0e:24: 6e:99:93:86:c0:2a:6b:64:48:42:e8:f3:c2:7c:03:f7:94:6d: 41:f4:0a:77:36:6d:5b:77:9a:28:ab:52:e0:c7:a7:81:b0:e3: b1:56:77:8e:88:66:bc:62:16:32:23:45:0a:82:8f:5f:84:93: 32:12:a7:43:e8:c8:8f:60:72:58:36:86:10:59:26:80:4e:d6: bb:05:21:e0:aa:3a:23:d6:be:00:02:60:ee:ed:82:5d:27:b6: 2b:98:95:8c:87:b1:c3:b6:b1:23:31:25:a7:a9:8a:d9:f3:2f: 6d:0f:12:34:7c:7a:7a:2b:90:9b:cf:b8:c3:a1:eb:48:1d:0a: 57:14:70:6f:e9:59:5a:df:c7:1c:0a:e1:da:61:9d:36:10:2f: ea:7b:e9:27:f6:7d:81:f9:8e:b9:40:f4:38:fe:a8:ce:45:c5: 8a:55:02:74:0e:bc:c4:ef:dc:4a:81:e6:74:2b:e3:b0:ad:3f: e8:ca:12:47:cd:09:a2:69:8e:d1:08:75:8a:d8:5b:d6:68:cd: c2:b6:62:cc:08:95:1a:b3:82:22:d7:3e:6e:4d:c8:6b:9a:28: 67:d6:17:9a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yOTPo5xr1nJyxdHW2iOmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYmZhMjk2MWZhMGUwYjA3MDQxMjkzZGRjMGMzNjkzYTll MGEyMzgwHhcNMjYwMTAxMTgxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNWQ2OTU5NThjODYyNzM5OWY2ZWQ4MWFmYmU4ZDIxMGI2NzA5NWIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1M1u6IxY7MhMqihHOYJt+pGy1oV 9inJ9CkhlX9OHlDzCnMo7pxN8K0INR4kq3cAkhC0AVaZ1i6wm0E1tzQi/yD31YAI POCEgOiPfRGUHTzb18hBS6jHEdDhkFCwsVd1qNFekWpqscocb/4t4BzwXqjL95w4 47Eys3apGei+IJLewc0UbRQbgOtv+N24gQV2WJRLZ8lqhCySPtlShA+1eDSXDxOD u8llp1xQLV8mfUMZVg/apNEzoaLizjIfBF1/beD1r1YqDffTMfVrjlxqP+LlzZ+C SzR1KQFh/4Y251wcd7Acaj4YmNPk93B0fRZtaIU0ozD0dS2Et9VCNufF7QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDXWlZWMhic5n27YGvvo0hC2cJWxMB8GA1UdIwQY MBaAFBG/opYfoOCwcEEpPdwMNpOp4KI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWItaWxoLWc0TEJ3UVNrOTNBdzJrNm5nb2pnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8xNzMxNzMtODE5Zi00YmM5LTkyZDgt Nzg3OTFjOTM1NmEzLzEvTmRhVmxZeUdKem1mYnRnYS0talNFTFp3bGJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8xNzMxNzMtODE5Zi00YmM5LTkyZDgtNzg3OTFjOTM1NmEz LzEvRWItaWxoLWc0TEJ3UVNrOTNBdzJrNm5nb2pnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALhamMA0G CSqGSIb3DQEBCwUAA4IBAQAo4ESWy0W26QJLDd6xSdu2I/d6q9v6C13FiuYrGPnd YzsvDiRumZOGwCprZEhC6PPCfAP3lG1B9Ap3Nm1bd5ooq1Lgx6eBsOOxVneOiGa8 YhYyI0UKgo9fhJMyEqdD6MiPYHJYNoYQWSaATta7BSHgqjoj1r4AAmDu7YJdJ7Yr mJWMh7HDtrEjMSWnqYrZ8y9tDxI0fHp6K5Cbz7jDoetIHQpXFHBv6Vla38ccCuHa YZ02EC/qe+kn9n2B+Y65QPQ4/qjORcWKVQJ0DrzE79xKgeZ0K+OwrT/oyhJHzQmi aY7RCHWK2FvWaM3CtmLMCJUas4Ii1z5uTchrmihn1hea -----END CERTIFICATE-----Generated at Mon Jan 26 07:31:48 2026 by rpki-client