This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/5Qv7t_ADQOb6Y00SIFPxywPS8ro.roa File: 5Qv7t_ADQOb6Y00SIFPxywPS8ro.roa (raw, json) Hash identifier: OvUzcgXdun7e7rJvnWGXK1KokOo+inejKBUGCGEtOjc= Subject key identifier: E5:0B:FB:B7:F0:03:40:E6:FA:63:4D:12:20:53:F1:CB:03:D2:F2:BA Certificate issuer: /CN=d4afe3f0c9e555e52d3505d6163278df3da18cee Certificate serial: 019B79EC59E2766DC64B18C9443CF5AC393C Authority key identifier: D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/5Qv7t_ADQOb6Y00SIFPxywPS8ro.roa Signing time: Thu 01 Jan 2026 14:18:11 +0000 ROA not before: Thu 01 Jan 2026 14:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39591 IP address blocks: 46.17.8.0/22 maxlen: 22 2a02:2870::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:59:e2:76:6d:c6:4b:18:c9:44:3c:f5:ac:39:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4afe3f0c9e555e52d3505d6163278df3da18cee Validity Not Before: Jan 1 14:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e50bfbb7f00340e6fa634d122053f1cb03d2f2ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:c1:44:30:d7:a6:7d:e0:9e:0b:c1:bf:1d:20: 02:90:f1:23:ac:e6:ae:0a:04:4f:5c:0e:1f:71:1b: ba:d0:d2:5f:ed:1b:6b:4a:ea:9d:a1:3c:00:5d:ea: 3e:75:66:e8:f6:38:e8:bf:35:37:62:04:87:50:74: d8:04:4c:e1:46:85:ce:01:97:34:08:e7:aa:1c:90: d1:ab:c1:f2:a1:10:41:a1:ef:7b:be:76:3b:30:cd: f2:d8:95:78:83:61:16:2a:62:35:8f:a4:ad:08:f0: da:b4:2c:f3:4a:04:df:98:b8:b3:71:b9:49:e3:8e: 4f:04:7f:2f:6a:3d:94:c5:f7:cf:3b:cf:98:b9:40: c9:1e:45:9f:7f:24:3b:ef:bc:7b:be:94:8f:c4:1e: 42:06:5b:46:43:24:59:73:b6:f6:7c:96:64:d4:23: 1c:74:26:65:f6:d3:6a:f0:26:d1:92:c8:fc:d0:fb: 08:18:46:17:34:ec:0e:2a:ff:70:04:89:da:e0:a8: 15:36:35:43:26:9b:e3:0e:1b:67:ff:41:f1:c6:ff: 27:b8:4d:78:62:fd:2e:a7:3d:f6:47:5d:4b:ae:7e: c1:b0:3d:cd:4b:7c:18:0d:66:06:ba:84:ec:23:23: d4:1a:59:33:8b:92:f9:2a:10:dc:e5:d5:fd:58:44: 20:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:0B:FB:B7:F0:03:40:E6:FA:63:4D:12:20:53:F1:CB:03:D2:F2:BA X509v3 Authority Key Identifier: keyid:D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/5Qv7t_ADQOb6Y00SIFPxywPS8ro.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.17.8.0/22 IPv6: 2a02:2870::/33 Signature Algorithm: sha256WithRSAEncryption 82:14:ee:ee:aa:19:69:aa:f7:06:57:67:3f:7b:62:7f:fe:bd: 55:77:c6:86:2c:0e:9c:f6:78:f3:50:97:85:4e:25:bf:bb:8a: a6:0c:fe:fd:30:ab:52:4f:e5:2e:2a:22:1a:fe:96:24:e5:98: 34:a4:68:1d:cd:4c:93:78:69:d3:06:69:e2:a1:b1:0d:be:d6: c0:e6:94:79:ee:11:db:16:b6:be:14:1a:8c:a3:3a:3b:d6:4b: 73:1d:c8:16:f0:8e:9c:7b:be:f2:27:77:d7:dc:64:b7:29:f3: c9:56:5c:6a:a4:78:5f:e8:84:50:fd:28:61:65:ef:af:e8:47: 81:44:dd:7c:d6:b0:91:47:7b:e5:45:8c:c0:5b:b5:39:f6:7d: 3d:ed:ad:3c:3d:f2:36:cb:33:28:c6:f2:40:a2:5b:a6:1b:8f: a9:d1:21:58:e0:51:f4:67:0d:df:0d:54:c9:cd:d7:1c:67:9c: 6d:64:67:fc:e5:0e:0c:1a:0c:d2:24:37:85:bb:a9:88:d5:a9: 37:d9:57:7c:7b:9a:77:dd:a5:bd:e9:58:39:ac:7a:c3:bd:a5: dd:8d:e1:b4:a5:0b:1a:42:6b:be:86:ec:84:f7:68:40:07:4b: e8:c6:11:45:00:9a:05:87:53:33:1d:d8:ca:b5:11:1a:a2:38: ee:4b:1c:4d -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt57Fnidm3GSxjJRDz1rDk8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0YWZlM2YwYzllNTU1ZTUyZDM1MDVkNjE2MzI3OGRmM2Rh MThjZWUwHhcNMjYwMTAxMTQxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNTBiZmJiN2YwMDM0MGU2ZmE2MzRkMTIyMDUzZjFjYjAzZDJmMmJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsFEMNemfeCeC8G/HSACkPEjrOau CgRPXA4fcRu60NJf7RtrSuqdoTwAXeo+dWbo9jjovzU3YgSHUHTYBEzhRoXOAZc0 COeqHJDRq8HyoRBBoe97vnY7MM3y2JV4g2EWKmI1j6StCPDatCzzSgTfmLizcblJ 445PBH8vaj2UxffPO8+YuUDJHkWffyQ777x7vpSPxB5CBltGQyRZc7b2fJZk1CMc dCZl9tNq8CbRksj80PsIGEYXNOwOKv9wBIna4KgVNjVDJpvjDhtn/0Hxxv8nuE14 Yv0upz32R11Lrn7BsD3NS3wYDWYGuoTsIyPUGlkzi5L5KhDc5dX9WEQgXQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFOUL+7fwA0Dm+mNNEiBT8csD0vK6MB8GA1UdIwQY MBaAFNSv4/DJ5VXlLTUF1hYyeN89oYzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUtfajhNbmxWZVV0TlFYV0ZqSjQzejJoak80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xYzY3ZWYtZTgzZC00NDI3LTg2NGIt YzU5ODI1YmJjYjMyLzEvNVF2N3RfQURRT2I2WTAwU0lGUHh5d1BTOHJvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8xYzY3ZWYtZTgzZC00NDI3LTg2NGItYzU5ODI1YmJjYjMy LzEvMUtfajhNbmxWZVV0TlFYV0ZqSjQzejJoak80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCLhEIMA4E AgACMAgDBgcqAihwADANBgkqhkiG9w0BAQsFAAOCAQEAghTu7qoZaar3BldnP3ti f/69VXfGhiwOnPZ481CXhU4lv7uKpgz+/TCrUk/lLioiGv6WJOWYNKRoHc1Mk3hp 0wZp4qGxDb7WwOaUee4R2xa2vhQajKM6O9ZLcx3IFvCOnHu+8id319xktynzyVZc aqR4X+iEUP0oYWXvr+hHgUTdfNawkUd75UWMwFu1OfZ9Pe2tPD3yNsszKMbyQKJb phuPqdEhWOBR9GcN3w1Uyc3XHGecbWRn/OUODBoM0iQ3hbupiNWpN9lXfHuad92l velYOax6w72l3Y3htKULGkJrvobshPdoQAdL6MYRRQCaBYdTMx3YyrURGqI47ksc TQ== -----END CERTIFICATE-----Generated at Sun Jan 25 14:35:23 2026 by rpki-client