This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/n0THaoKrwYQYc0Ny8HLmBK3P5lU.roa File: n0THaoKrwYQYc0Ny8HLmBK3P5lU.roa (raw, json) Hash identifier: VOHhyMAChKmkHQdwMvB1QhPPBG/k5oVzSZrLsHZLtHY= Subject key identifier: 9F:44:C7:6A:82:AB:C1:84:18:73:43:72:F0:72:E6:04:AD:CF:E6:55 Certificate issuer: /CN=1cee91296c94992d151a232240e6cf3a176d2039 Certificate serial: 019B7CEE36C4E16E600E3762389E8499715F Authority key identifier: 1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/n0THaoKrwYQYc0Ny8HLmBK3P5lU.roa Signing time: Fri 02 Jan 2026 04:19:04 +0000 ROA not before: Fri 02 Jan 2026 04:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212621 IP address blocks: 46.172.90.0/24 maxlen: 24 46.172.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:36:c4:e1:6e:60:0e:37:62:38:9e:84:99:71:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cee91296c94992d151a232240e6cf3a176d2039 Validity Not Before: Jan 2 04:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f44c76a82abc18418734372f072e604adcfe655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a7:36:51:d7:14:7d:24:2b:e5:ae:11:db:21: c9:bb:8c:2e:61:72:c2:57:72:a9:56:93:51:bc:88: f8:d7:22:f3:93:a6:17:b0:88:ae:2e:b4:2a:3f:c4: 90:ca:6b:c8:ee:7a:0a:2a:7f:16:d4:03:51:27:36: e9:84:ec:2e:cf:94:e8:8c:35:d0:15:60:19:1e:61: bc:e4:57:f1:8d:b2:98:4b:eb:36:b0:c7:e4:50:64: 67:25:1f:ab:5a:74:14:ee:ce:b6:a0:ad:c8:ba:f8: af:d3:72:96:bb:b3:d4:bc:12:f2:30:fd:ee:a2:e6: 15:3a:e6:b7:23:67:95:37:d9:77:cf:98:c9:a6:fd: 17:02:f9:f7:3c:83:f6:c9:ef:7c:f4:14:d1:d7:32: c1:c2:44:b7:fe:4a:89:73:9e:47:e2:6a:2e:6d:88: e0:60:37:95:e0:07:08:18:8e:ec:63:67:d1:77:32: 13:ab:bd:b2:61:18:85:27:82:b6:ff:d9:86:23:71: f6:63:47:fb:bf:b3:70:b0:cb:32:d6:04:39:44:39: a3:54:fc:5a:31:9a:2a:72:f8:34:03:c6:db:9a:bc: 76:b9:99:ec:7a:89:81:17:fa:89:5b:d1:40:92:76: 83:74:fb:ff:df:2f:f4:78:0f:38:bb:c2:81:f3:25: 99:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:44:C7:6A:82:AB:C1:84:18:73:43:72:F0:72:E6:04:AD:CF:E6:55 X509v3 Authority Key Identifier: keyid:1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/n0THaoKrwYQYc0Ny8HLmBK3P5lU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.172.90.0/24 46.172.93.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:98:77:46:16:a3:dd:26:da:14:1d:5d:ee:a3:5d:8a:ed:46: c8:02:e4:b8:7c:e0:a9:3a:b6:c7:55:27:df:c1:c7:38:99:68: c8:51:f5:6c:4a:f0:dc:c1:e9:cc:9d:04:fa:eb:4f:cb:0a:58: 23:b3:fe:32:39:29:ba:1e:d3:42:11:cc:37:27:09:c9:4c:bd: 6c:6d:53:53:7f:13:59:88:fe:7b:41:2c:99:1f:24:74:6e:90: 40:6c:12:a3:c3:4c:5f:27:39:c9:08:c8:2e:f1:72:07:8f:bd: 8b:13:a8:e5:05:32:61:43:56:42:0f:b2:7b:bb:e3:91:f0:0d: 80:f8:a4:b9:86:4b:6a:54:8b:c4:78:cf:e4:a4:d3:7d:7a:2a: 3c:a9:df:5b:52:50:ae:a7:3e:09:04:8f:8b:d1:1d:9d:58:b2: f9:61:66:59:9a:e6:0b:aa:7d:76:2d:1a:59:41:a0:d3:bb:f2: 98:d9:66:f0:36:2a:33:39:96:3a:61:bd:73:60:a9:28:0a:b5: 20:0f:2f:b4:90:b5:0f:3f:54:1e:f5:16:d1:d2:b3:cf:17:59: 83:b5:33:5e:3d:fb:b4:1a:75:cc:86:4d:93:0e:55:e3:74:e4: 83:99:a2:e9:3e:90:c2:54:12:c5:b0:00:60:eb:94:11:60:d0: 14:e3:a3:e1 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt87jbE4W5gDjdiOJ6EmXFfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZWU5MTI5NmM5NDk5MmQxNTFhMjMyMjQwZTZjZjNhMTc2 ZDIwMzkwHhcNMjYwMTAyMDQxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZjQ0Yzc2YTgyYWJjMTg0MTg3MzQzNzJmMDcyZTYwNGFkY2ZlNjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16c2UdcUfSQr5a4R2yHJu4wuYXLC V3KpVpNRvIj41yLzk6YXsIiuLrQqP8SQymvI7noKKn8W1ANRJzbphOwuz5TojDXQ FWAZHmG85FfxjbKYS+s2sMfkUGRnJR+rWnQU7s62oK3Iuviv03KWu7PUvBLyMP3u ouYVOua3I2eVN9l3z5jJpv0XAvn3PIP2ye989BTR1zLBwkS3/kqJc55H4moubYjg YDeV4AcIGI7sY2fRdzITq72yYRiFJ4K2/9mGI3H2Y0f7v7NwsMsy1gQ5RDmjVPxa MZoqcvg0A8bbmrx2uZnseomBF/qJW9FAknaDdPv/3y/0eA84u8KB8yWZlQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFJ9Ex2qCq8GEGHNDcvBy5gStz+ZVMB8GA1UdIwQY MBaAFBzukSlslJktFRojIkDmzzoXbSA5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQt YmFjYWI0NzVlNmNjLzEvbjBUSGFvS3J3WVFZYzBOeThITG1CSzNQNWxVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQtYmFjYWI0NzVlNmNj LzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALqxaAwQA LqxdMA0GCSqGSIb3DQEBCwUAA4IBAQB7mHdGFqPdJtoUHV3uo12K7UbIAuS4fOCp OrbHVSffwcc4mWjIUfVsSvDcwenMnQT660/LClgjs/4yOSm6HtNCEcw3JwnJTL1s bVNTfxNZiP57QSyZHyR0bpBAbBKjw0xfJznJCMgu8XIHj72LE6jlBTJhQ1ZCD7J7 u+OR8A2A+KS5hktqVIvEeM/kpNN9eio8qd9bUlCupz4JBI+L0R2dWLL5YWZZmuYL qn12LRpZQaDTu/KY2WbwNiozOZY6Yb1zYKkoCrUgDy+0kLUPP1Qe9RbR0rPPF1mD tTNePfu0GnXMhk2TDlXjdOSDmaLpPpDCVBLFsABg65QRYNAU46Ph -----END CERTIFICATE-----Generated at Mon Jan 26 05:54:56 2026 by rpki-client