This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/qhOxpj_c3S2DYwJgHNfR-DM8zhY.roa File: qhOxpj_c3S2DYwJgHNfR-DM8zhY.roa (raw, json) Hash identifier: CHN/ugJO85MgbT7e9ultnWAy3Ba/jHBvIHUKvsxGSz4= Subject key identifier: AA:13:B1:A6:3F:DC:DD:2D:83:63:02:60:1C:D7:D1:F8:33:3C:CE:16 Certificate issuer: /CN=1cee91296c94992d151a232240e6cf3a176d2039 Certificate serial: 019B7CEE35161EF93E5460AD4377CDD0C012 Authority key identifier: 1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/qhOxpj_c3S2DYwJgHNfR-DM8zhY.roa Signing time: Fri 02 Jan 2026 04:19:04 +0000 ROA not before: Fri 02 Jan 2026 04:19:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 203980 IP address blocks: 46.172.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.mft rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ee:35:16:1e:f9:3e:54:60:ad:43:77:cd:d0:c0:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cee91296c94992d151a232240e6cf3a176d2039 Validity Not Before: Jan 2 04:19:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aa13b1a63fdcdd2d836302601cd7d1f8333cce16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ef:60:53:ea:e6:3d:80:a2:11:78:25:96:07: 25:56:35:21:b6:9e:88:41:df:43:02:1e:6f:28:31: ec:3a:04:37:11:a7:c5:f3:fd:de:cf:ac:14:d1:9f: 9b:41:6e:f8:57:14:c9:25:85:6a:5f:46:42:09:9e: 8b:e0:44:ae:0f:9f:98:1e:66:90:ef:20:0c:9d:9f: 13:ce:f9:75:c3:2b:e7:90:5d:be:9f:bf:bf:ae:c7: 8c:48:25:b7:e1:8a:b8:b8:6a:ee:63:04:10:f7:83: 16:78:3a:64:91:60:54:b0:f7:6a:df:dc:b6:43:3e: 22:fd:13:bd:ef:3d:f8:01:17:9e:7b:5a:f0:6c:a0: 52:11:89:7f:f6:33:18:c6:ed:77:6e:1f:27:ab:6f: cd:da:65:6d:45:c9:e7:45:fd:0a:18:c1:bd:af:fa: 66:87:2d:ca:70:81:f5:bb:01:62:b3:d8:06:8a:6e: bb:89:7c:4d:fd:60:9b:57:94:bb:5f:d0:c9:56:ea: 3d:fd:b9:6e:4d:a7:1b:95:c8:92:94:0e:f8:0d:46: 92:57:70:66:5d:4f:d8:de:6e:5f:7c:c6:29:ec:ab: 60:c3:0c:68:ee:39:18:01:3c:d2:95:f8:1e:a8:51: 08:47:d7:9a:ba:69:3d:f2:a0:01:13:18:24:99:09: 5c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:13:B1:A6:3F:DC:DD:2D:83:63:02:60:1C:D7:D1:F8:33:3C:CE:16 X509v3 Authority Key Identifier: keyid:1C:EE:91:29:6C:94:99:2D:15:1A:23:22:40:E6:CF:3A:17:6D:20:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HO6RKWyUmS0VGiMiQObPOhdtIDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/qhOxpj_c3S2DYwJgHNfR-DM8zhY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/c91ec3-2820-417b-9aad-bacab475e6cc/1/HO6RKWyUmS0VGiMiQObPOhdtIDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.172.76.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:6d:48:fb:5c:7f:25:49:f2:55:dd:d9:58:02:6c:67:05:34: 97:39:ef:ed:94:05:33:39:9b:e3:75:fc:60:0e:e7:bb:59:5b: 15:7f:0c:aa:87:9a:11:93:fc:05:05:0c:06:da:88:cc:11:ec: 30:47:4c:5d:74:f2:58:60:6d:e5:77:c1:ae:be:0d:de:e4:a7: 16:1d:8b:5c:9c:d6:1d:b7:b0:43:b8:c3:75:eb:db:84:bd:09: d3:ed:d2:8f:33:24:d7:98:34:bc:54:6c:26:d2:6a:58:80:0c: 76:2a:ed:41:e2:89:9b:d3:c8:9a:e2:4b:85:01:ef:2d:e0:e3: 4f:c0:e1:74:9e:4d:69:dc:6d:87:fc:b6:85:26:eb:3b:b9:7a: c2:39:4b:c8:ba:b2:40:b4:b2:63:53:15:a3:47:61:56:4f:bb: 57:94:d8:83:19:71:89:96:34:28:74:ae:ab:dd:71:9d:7f:13: 04:b8:6f:be:2f:2f:08:01:8c:c6:42:73:f9:ac:4f:2e:18:e9: 86:12:2f:c9:c2:14:55:5b:73:8e:ef:67:11:84:9d:64:cf:bb: 07:08:e7:02:e9:d2:a4:4f:49:c4:05:e5:0b:65:b4:6d:8f:18: d6:ba:15:e9:c4:c9:ba:42:0d:9e:34:6b:20:3b:58:98:42:30: d0:f0:21:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87jUWHvk+VGCtQ3fN0MASMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjZWU5MTI5NmM5NDk5MmQxNTFhMjMyMjQwZTZjZjNhMTc2 ZDIwMzkwHhcNMjYwMTAyMDQxOTA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYTEzYjFhNjNmZGNkZDJkODM2MzAyNjAxY2Q3ZDFmODMzM2NjZTE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1e9gU+rmPYCiEXgllgclVjUhtp6I Qd9DAh5vKDHsOgQ3EafF8/3ez6wU0Z+bQW74VxTJJYVqX0ZCCZ6L4ESuD5+YHmaQ 7yAMnZ8Tzvl1wyvnkF2+n7+/rseMSCW34Yq4uGruYwQQ94MWeDpkkWBUsPdq39y2 Qz4i/RO97z34AReee1rwbKBSEYl/9jMYxu13bh8nq2/N2mVtRcnnRf0KGMG9r/pm hy3KcIH1uwFis9gGim67iXxN/WCbV5S7X9DJVuo9/bluTacblciSlA74DUaSV3Bm XU/Y3m5ffMYp7Ktgwwxo7jkYATzSlfgeqFEIR9eaumk98qABExgkmQlcGwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKoTsaY/3N0tg2MCYBzX0fgzPM4WMB8GA1UdIwQY MBaAFBzukSlslJktFRojIkDmzzoXbSA5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQt YmFjYWI0NzVlNmNjLzEvcWhPeHBqX2MzUzJEWXdKZ0hOZlItRE04emhZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9jOTFlYzMtMjgyMC00MTdiLTlhYWQtYmFjYWI0NzVlNmNj LzEvSE82UktXeVVtUzBWR2lNaVFPYlBPaGR0SURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALqxMMA0G CSqGSIb3DQEBCwUAA4IBAQAMbUj7XH8lSfJV3dlYAmxnBTSXOe/tlAUzOZvjdfxg Due7WVsVfwyqh5oRk/wFBQwG2ojMEewwR0xddPJYYG3ld8Guvg3e5KcWHYtcnNYd t7BDuMN169uEvQnT7dKPMyTXmDS8VGwm0mpYgAx2Ku1B4omb08ia4kuFAe8t4ONP wOF0nk1p3G2H/LaFJus7uXrCOUvIurJAtLJjUxWjR2FWT7tXlNiDGXGJljQodK6r 3XGdfxMEuG++Ly8IAYzGQnP5rE8uGOmGEi/JwhRVW3OO72cRhJ1kz7sHCOcC6dKk T0nEBeULZbRtjxjWuhXpxMm6Qg2eNGsgO1iYQjDQ8CHU -----END CERTIFICATE-----Generated at Mon Jan 26 02:43:46 2026 by rpki-client