This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/7f9mWNQ21808rBtQKs150YeYGdQ.roa File: 7f9mWNQ21808rBtQKs150YeYGdQ.roa (raw, json) Hash identifier: K2kDNGbgaaoiVLGCQASew4TmUVDveF6R8yGfvf0iat0= Subject key identifier: ED:FF:66:58:D4:36:D7:CD:3C:AC:1B:50:2A:CD:79:D1:87:98:19:D4 Certificate issuer: /CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e Certificate serial: 019B7AC8A20833C4D22F0C943570A4FFB6AE Authority key identifier: 4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/7f9mWNQ21808rBtQKs150YeYGdQ.roa Signing time: Thu 01 Jan 2026 18:18:47 +0000 ROA not before: Thu 01 Jan 2026 18:18:47 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51731 IP address blocks: 46.36.32.0/19 maxlen: 19 2a02:25b0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 12:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:a2:08:33:c4:d2:2f:0c:94:35:70:a4:ff:b6:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e Validity Not Before: Jan 1 18:18:47 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=edff6658d436d7cd3cac1b502acd79d1879819d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:13:59:c5:19:2a:1c:bd:cc:c7:78:d6:b4:fa: 92:91:f6:3c:4b:51:4b:c9:2f:35:69:f7:f0:d7:10: c0:aa:c2:54:30:49:49:4d:e0:4a:2c:91:2c:b4:d0: b0:27:1b:fd:62:30:ce:68:be:66:60:17:48:2b:34: c3:c1:24:e9:dd:d7:7b:39:dd:80:d2:0b:01:1b:ce: b9:1e:3e:a3:30:6c:08:43:e3:0d:76:29:3c:20:6c: bd:89:c3:32:e1:70:fb:da:41:17:da:ba:74:7e:af: 1e:87:9c:4f:46:db:54:40:6a:f2:48:6b:96:ad:32: 91:dd:d6:f2:ba:48:c1:36:28:fa:ee:a9:ff:be:ca: 5b:ee:e1:fb:29:fa:19:07:c1:6c:94:60:74:fd:0a: 34:53:bf:0f:5f:50:03:a8:81:42:c2:d6:4e:13:c4: 8b:39:3a:9e:3f:7b:bf:c6:b2:f7:93:55:e2:e4:fe: c3:0d:57:5d:ad:b7:b5:5d:ee:68:89:68:72:6c:d2: 37:5d:d4:f7:ed:93:06:5c:23:df:20:9c:4c:21:b7: be:89:b4:e3:06:fc:0d:60:6e:e5:55:ca:86:52:fb: d6:d1:53:07:83:1d:f7:41:2c:cb:0b:8e:14:61:6b: 44:45:3e:b5:6c:98:21:3f:61:42:eb:1b:82:89:f2: c9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:FF:66:58:D4:36:D7:CD:3C:AC:1B:50:2A:CD:79:D1:87:98:19:D4 X509v3 Authority Key Identifier: keyid:4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/7f9mWNQ21808rBtQKs150YeYGdQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.36.32.0/19 IPv6: 2a02:25b0::/32 Signature Algorithm: sha256WithRSAEncryption 25:24:48:be:2a:25:c9:eb:29:c2:a3:25:e5:40:df:ae:34:f7: f7:4b:51:66:46:a5:3e:92:b1:3a:0f:3c:ac:e7:b4:22:3f:a6: d0:b8:ed:c3:38:4f:fa:b0:dc:ea:2d:25:2f:64:50:5f:22:ec: 2d:23:03:39:fd:fd:38:77:d8:8e:98:e7:63:9c:35:02:46:85: 60:cd:22:a1:33:0d:05:55:30:51:8f:54:e9:40:24:37:54:1f: 6a:b7:5e:bb:91:4d:6e:4e:60:38:0d:fc:d1:1a:28:22:3c:d4: de:71:12:6f:c7:be:49:61:6c:50:2f:42:37:ad:de:96:66:08: 98:0a:9f:63:0e:45:ec:9d:a1:b0:56:02:b8:08:0c:8f:54:7f: 2e:99:ad:27:4d:f0:04:3e:12:74:58:aa:1a:44:75:ff:02:62: e5:f2:ea:c1:f9:05:c7:3c:16:2a:21:da:7d:10:7f:56:42:29: 24:83:25:4b:35:99:37:4a:1e:54:a2:c4:13:e3:ad:67:f0:9e: b0:17:dd:84:5c:b7:95:8d:3f:22:e3:a8:f1:73:e6:8c:f2:cb: e7:00:39:99:80:c2:ac:e2:e5:85:7d:e3:0b:f2:52:51:63:20: 5b:d2:29:ab:d8:89:ae:10:6d:56:3e:51:4d:16:04:1d:48:d3: 86:44:9f:b8 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6yKIIM8TSLwyUNXCk/7auMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjOTg4YjkzYWI3YTI5OTlhMzI1NWVlYWU0ZTE4YWIyM2Iy ZTBmM2UwHhcNMjYwMTAxMTgxODQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZGZmNjY1OGQ0MzZkN2NkM2NhYzFiNTAyYWNkNzlkMTg3OTgxOWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxNZxRkqHL3Mx3jWtPqSkfY8S1FL yS81affw1xDAqsJUMElJTeBKLJEstNCwJxv9YjDOaL5mYBdIKzTDwSTp3dd7Od2A 0gsBG865Hj6jMGwIQ+MNdik8IGy9icMy4XD72kEX2rp0fq8eh5xPRttUQGrySGuW rTKR3dbyukjBNij67qn/vspb7uH7KfoZB8FslGB0/Qo0U78PX1ADqIFCwtZOE8SL OTqeP3u/xrL3k1Xi5P7DDVddrbe1Xe5oiWhybNI3XdT37ZMGXCPfIJxMIbe+ibTj BvwNYG7lVcqGUvvW0VMHgx33QSzLC44UYWtERT61bJghP2FC6xuCifLJlwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFO3/ZljUNtfNPKwbUCrNedGHmBnUMB8GA1UdIwQY MBaAFEyYi5OreimZoyVe6uThirI7Lg8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEppTGs2dDZLWm1qSlY3cTVPR0tzanN1RHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80YzFmNTktMGMxMi00MTUzLWExNWMt NzE1ZjljZDYzMDg2LzEvN2Y5bVdOUTIxODA4ckJ0UUtzMTUwWWVZR2RRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC80YzFmNTktMGMxMi00MTUzLWExNWMtNzE1ZjljZDYzMDg2 LzEvVEppTGs2dDZLWm1qSlY3cTVPR0tzanN1RHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFLiQgMA0E AgACMAcDBQAqAiWwMA0GCSqGSIb3DQEBCwUAA4IBAQAlJEi+KiXJ6ynCoyXlQN+u NPf3S1FmRqU+krE6Dzys57QiP6bQuO3DOE/6sNzqLSUvZFBfIuwtIwM5/f04d9iO mOdjnDUCRoVgzSKhMw0FVTBRj1TpQCQ3VB9qt167kU1uTmA4DfzRGigiPNTecRJv x75JYWxQL0I3rd6WZgiYCp9jDkXsnaGwVgK4CAyPVH8uma0nTfAEPhJ0WKoaRHX/ AmLl8urB+QXHPBYqIdp9EH9WQikkgyVLNZk3Sh5UosQT461n8J6wF92EXLeVjT8i 46jxc+aM8svnADmZgMKs4uWFfeML8lJRYyBb0imr2ImuEG1WPlFNFgQdSNOGRJ+4 -----END CERTIFICATE-----Generated at Mon Jan 26 17:01:24 2026 by rpki-client