This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/ZkNagawyRZ70RDIXLqeICJ_NWvA.roa File: ZkNagawyRZ70RDIXLqeICJ_NWvA.roa (raw, json) Hash identifier: 1+wxgjSOWcm3+O0IK2qUtncsQ8Yyn6qzh3/LjTc9BqU= Subject key identifier: 66:43:5A:81:AC:32:45:9E:F4:44:32:17:2E:A7:88:08:9F:CD:5A:F0 Certificate issuer: /CN=c89c2cc489ebe48f490584ac866fe362c4117e75 Certificate serial: 019B7BA4B999FA5712D1A5491A1DCC21CD3C Authority key identifier: C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/ZkNagawyRZ70RDIXLqeICJ_NWvA.roa Signing time: Thu 01 Jan 2026 22:19:11 +0000 ROA not before: Thu 01 Jan 2026 22:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47376 IP address blocks: 46.148.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.mft rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a4:b9:99:fa:57:12:d1:a5:49:1a:1d:cc:21:cd:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c89c2cc489ebe48f490584ac866fe362c4117e75 Validity Not Before: Jan 1 22:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=66435a81ac32459ef44432172ea788089fcd5af0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7c:7e:77:79:6b:48:09:ab:e8:b0:67:66:91: a4:b4:2d:d4:0f:ee:40:24:9d:00:65:10:3e:ae:d9: 08:a9:75:33:c4:58:64:cb:c2:6a:45:9d:ac:63:c2: 93:53:60:60:7a:a9:2e:11:4a:d5:cd:c9:b7:9e:20: 88:1f:d3:b8:c6:2f:1f:a0:36:fb:7b:f2:53:4c:76: 9e:50:77:fc:f6:4e:7f:a7:4e:1f:36:04:85:1b:78: 62:a1:bb:64:80:3e:56:da:f3:e1:3a:72:a4:e6:47: c0:80:9d:6a:e9:b1:06:e1:e2:8e:bf:05:df:72:0c: 14:4c:ef:d6:e9:17:fc:78:a2:6c:6e:3d:a4:06:9b: 75:19:c5:79:8f:8e:8d:6d:f3:b0:df:38:19:9e:ba: a2:2d:1b:1c:57:f4:85:4d:61:0a:79:18:d7:97:32: d7:52:f5:f9:6c:01:0f:07:fe:1d:a3:04:45:9c:bd: 4f:ad:e0:65:40:d5:c6:5b:b4:ec:21:0e:41:94:86: 0b:1e:92:bd:49:fe:28:4c:b5:87:32:07:6c:da:dd: 90:78:7b:34:35:85:f1:b4:0a:22:15:ff:08:6d:0a: 55:14:61:d1:63:04:fe:b2:b8:3d:a1:a2:a3:9c:77: f9:0b:50:3c:2b:e2:e2:b1:08:11:46:fc:94:2e:6e: 0b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:43:5A:81:AC:32:45:9E:F4:44:32:17:2E:A7:88:08:9F:CD:5A:F0 X509v3 Authority Key Identifier: keyid:C8:9C:2C:C4:89:EB:E4:8F:49:05:84:AC:86:6F:E3:62:C4:11:7E:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yJwsxInr5I9JBYSshm_jYsQRfnU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/ZkNagawyRZ70RDIXLqeICJ_NWvA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a00be2-877d-40e7-8a8a-af2cfa622d18/1/yJwsxInr5I9JBYSshm_jYsQRfnU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.148.41.0/24 Signature Algorithm: sha256WithRSAEncryption 07:76:13:da:6c:c1:c8:6f:49:56:37:fa:94:91:c8:32:06:de: 2e:25:ed:99:f4:09:10:a9:57:46:fb:a9:1b:94:ed:83:76:38: e7:cc:13:b0:cb:66:62:9e:1e:44:94:29:f1:cb:72:85:5e:85: f4:7e:b4:b9:ad:53:9f:dc:8c:bf:60:ab:56:c0:f1:b1:25:70: 19:89:83:93:c7:82:e7:7e:8d:5a:b0:41:f9:2a:56:96:93:2f: 0e:e0:3f:8a:4d:d2:e5:a4:07:c0:cf:90:90:97:45:eb:12:37: 19:4b:ce:f3:e0:09:fa:f9:84:5d:46:41:f8:14:f9:5f:77:41: cc:ff:c6:96:a5:92:1a:8e:6f:17:a4:44:0b:9d:fd:04:1d:24: 74:97:de:57:8b:89:2c:28:36:cf:f3:69:53:d8:cb:57:d1:74: 62:ce:27:b2:e9:18:fe:85:bd:66:fa:8b:d5:22:80:ef:7a:61: d1:3b:c2:3d:36:a9:20:43:97:b6:c7:92:a2:a2:75:b3:b4:c0: 43:0d:87:63:bf:99:cf:52:fb:df:91:f0:25:f2:ad:77:79:c3: e0:22:d3:d9:32:f5:72:8e:6d:07:c1:aa:71:05:05:81:78:3c: ee:89:56:a0:78:19:bd:7b:17:9c:05:44:b4:63:bd:f0:4a:0c: ca:3e:07:3e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7pLmZ+lcS0aVJGh3MIc08MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM4OWMyY2M0ODllYmU0OGY0OTA1ODRhYzg2NmZlMzYyYzQx MTdlNzUwHhcNMjYwMTAxMjIxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NjQzNWE4MWFjMzI0NTllZjQ0NDMyMTcyZWE3ODgwODlmY2Q1YWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3x+d3lrSAmr6LBnZpGktC3UD+5A JJ0AZRA+rtkIqXUzxFhky8JqRZ2sY8KTU2BgeqkuEUrVzcm3niCIH9O4xi8foDb7 e/JTTHaeUHf89k5/p04fNgSFG3hiobtkgD5W2vPhOnKk5kfAgJ1q6bEG4eKOvwXf cgwUTO/W6Rf8eKJsbj2kBpt1GcV5j46NbfOw3zgZnrqiLRscV/SFTWEKeRjXlzLX UvX5bAEPB/4dowRFnL1PreBlQNXGW7TsIQ5BlIYLHpK9Sf4oTLWHMgds2t2QeHs0 NYXxtAoiFf8IbQpVFGHRYwT+srg9oaKjnHf5C1A8K+LisQgRRvyULm4L/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGZDWoGsMkWe9EQyFy6niAifzVrwMB8GA1UdIwQY MBaAFMicLMSJ6+SPSQWErIZv42LEEX51MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveUp3c3hJbnI1STlKQllTc2htX2pZc1FSZm5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hMDBiZTItODc3ZC00MGU3LThhOGEt YWYyY2ZhNjIyZDE4LzEvWmtOYWdhd3lSWjcwUkRJWExxZUlDSl9OV3ZBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9hMDBiZTItODc3ZC00MGU3LThhOGEtYWYyY2ZhNjIyZDE4 LzEveUp3c3hJbnI1STlKQllTc2htX2pZc1FSZm5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALpQpMA0G CSqGSIb3DQEBCwUAA4IBAQAHdhPabMHIb0lWN/qUkcgyBt4uJe2Z9AkQqVdG+6kb lO2DdjjnzBOwy2Zinh5ElCnxy3KFXoX0frS5rVOf3Iy/YKtWwPGxJXAZiYOTx4Ln fo1asEH5KlaWky8O4D+KTdLlpAfAz5CQl0XrEjcZS87z4An6+YRdRkH4FPlfd0HM /8aWpZIajm8XpEQLnf0EHSR0l95Xi4ksKDbP82lT2MtX0XRiziey6Rj+hb1m+ovV IoDvemHRO8I9NqkgQ5e2x5KionWztMBDDYdjv5nPUvvfkfAl8q13ecPgItPZMvVy jm0HwapxBQWBeDzuiVageBm9execBUS0Y73wSgzKPgc+ -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:13 2026 by rpki-client