This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/X4Jj1-4HqPQyHoz2uvlpMoAV66I.roa File: X4Jj1-4HqPQyHoz2uvlpMoAV66I.roa (raw, json) Hash identifier: U8BCAKAOabJXvpxRbVFDeRvoLuUy39ScZ8CQFXOkfKo= Subject key identifier: 5F:82:63:D7:EE:07:A8:F4:32:1E:8C:F6:BA:F9:69:32:80:15:EB:A2 Certificate issuer: /CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20 Certificate serial: 019B7910282F773640082FAD9A1A7A552842 Authority key identifier: E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/X4Jj1-4HqPQyHoz2uvlpMoAV66I.roa Signing time: Thu 01 Jan 2026 10:17:40 +0000 ROA not before: Thu 01 Jan 2026 10:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210611 IP address blocks: 46.31.183.0/24 maxlen: 24 2a00:df80:ffff::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:28:2f:77:36:40:08:2f:ad:9a:1a:7a:55:28:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20 Validity Not Before: Jan 1 10:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5f8263d7ee07a8f4321e8cf6baf969328015eba2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3a:42:9b:fd:e2:95:05:29:05:05:8c:54:e1: 05:21:8a:4d:67:a5:95:8e:ef:02:08:5b:b9:2b:7d: 79:0c:24:11:da:8c:02:6f:70:1f:4f:95:6c:4b:26: 11:bf:10:db:53:4b:52:67:b0:ef:5e:fa:96:0b:6c: a1:a4:8e:0a:75:b3:da:f5:9a:e2:a5:e3:51:58:3c: eb:a0:e2:52:05:20:58:00:3d:d7:36:ee:d8:32:ff: b5:e2:df:5b:83:d9:bc:8f:da:4a:e4:1c:35:eb:65: 80:6a:c2:f2:21:37:e8:a9:60:c2:89:bf:d2:e4:d2: 91:17:6b:e8:7f:bf:61:8a:df:0c:42:81:a3:5d:9c: 49:a7:17:58:88:6c:d1:8c:82:58:8e:24:2a:92:de: 9c:93:ec:a8:30:f6:33:ba:f4:43:a1:d5:4b:bd:23: 55:cc:dd:04:3a:c4:eb:c0:01:0d:c9:30:65:43:ef: f5:2f:09:c1:11:45:00:18:59:fe:12:66:6c:5b:0a: f9:92:4f:38:20:69:e8:0c:0f:b1:1a:76:1b:29:e9: 26:a1:40:31:a9:16:4c:17:f6:2d:4c:a0:26:9e:68: 8f:73:13:43:5d:16:03:48:e0:9f:75:5c:eb:33:e3: b0:df:40:99:39:0d:92:d1:14:c4:7c:58:3c:fc:37: 81:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:82:63:D7:EE:07:A8:F4:32:1E:8C:F6:BA:F9:69:32:80:15:EB:A2 X509v3 Authority Key Identifier: keyid:E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/X4Jj1-4HqPQyHoz2uvlpMoAV66I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.31.183.0/24 IPv6: 2a00:df80:ffff::/48 Signature Algorithm: sha256WithRSAEncryption 30:58:5c:8f:f9:62:79:49:2e:cb:16:b2:60:33:61:20:31:a2: 1e:4f:14:65:7b:9a:ec:6a:10:db:95:7a:6a:c1:2e:37:f1:8e: 34:fa:5b:08:9e:69:d9:f0:4b:6a:e7:83:66:e8:6f:27:f3:ef: 4e:9e:18:14:42:be:fd:a2:70:e2:ff:8f:78:e2:81:c6:1c:8c: d3:ab:cd:db:d9:7d:01:a9:02:b9:19:c1:13:66:f0:a8:18:43: 3b:8f:93:02:bb:65:f1:7a:8d:e7:ad:8b:3c:ff:45:57:f5:4d: 0b:f6:41:d0:db:db:03:37:6d:85:51:02:37:21:54:d6:34:0c: 1c:c0:29:cb:f3:7f:f7:fd:c5:8a:8e:c5:41:e6:12:34:e4:55: e9:56:2c:99:96:fa:45:7a:2c:e0:6a:31:81:2f:3d:4c:64:f3: 55:b9:ec:d2:ac:54:ea:2d:09:45:3d:ce:ca:e9:11:c3:b8:8e: 53:ff:80:a8:46:8c:a1:10:34:de:0e:55:04:66:b5:65:f2:6c: 27:f6:6b:64:e4:54:b4:4d:99:1f:74:a2:06:b5:30:66:93:ce: c0:29:21:f9:e7:e7:a6:a0:1a:64:2e:cc:39:5f:e4:e1:f8:7f: d3:b9:ef:b2:c6:03:af:91:7e:b7:b5:d9:ff:64:1e:6d:ec:a3: 39:30:e1:27 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5ECgvdzZACC+tmhp6VShCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxYWMwMzIyYjNlYWI2NTcyZWNlMmEwYWM1YWJmMTY0YTVi YmZmMjAwHhcNMjYwMTAxMTAxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZjgyNjNkN2VlMDdhOGY0MzIxZThjZjZiYWY5NjkzMjgwMTVlYmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTpCm/3ilQUpBQWMVOEFIYpNZ6WV ju8CCFu5K315DCQR2owCb3AfT5VsSyYRvxDbU0tSZ7DvXvqWC2yhpI4KdbPa9Zri peNRWDzroOJSBSBYAD3XNu7YMv+14t9bg9m8j9pK5Bw162WAasLyITfoqWDCib/S 5NKRF2vof79hit8MQoGjXZxJpxdYiGzRjIJYjiQqkt6ck+yoMPYzuvRDodVLvSNV zN0EOsTrwAENyTBlQ+/1LwnBEUUAGFn+EmZsWwr5kk84IGnoDA+xGnYbKekmoUAx qRZMF/YtTKAmnmiPcxNDXRYDSOCfdVzrM+Ow30CZOQ2S0RTEfFg8/DeBAQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFF+CY9fuB6j0Mh6M9rr5aTKAFeuiMB8GA1UdIwQY MBaAFOGsAyKz6rZXLs4qCsWr8WSlu/8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGF3RElyUHF0bGN1emlvS3hhdnhaS1c3X3lBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mZjAwMzYtODMxMy00YjNkLWFkN2Yt OGQ4MWZkYzZmMTcwLzEvWDRKajEtNEhxUFF5SG96MnV2bHBNb0FWNjZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9mZjAwMzYtODMxMy00YjNkLWFkN2YtOGQ4MWZkYzZmMTcw LzEvNGF3RElyUHF0bGN1emlvS3hhdnhaS1c3X3lBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALh+3MA8E AgACMAkDBwAqAN+A//8wDQYJKoZIhvcNAQELBQADggEBADBYXI/5YnlJLssWsmAz YSAxoh5PFGV7muxqENuVemrBLjfxjjT6WwieadnwS2rng2bobyfz706eGBRCvv2i cOL/j3jigcYcjNOrzdvZfQGpArkZwRNm8KgYQzuPkwK7ZfF6jeetizz/RVf1TQv2 QdDb2wM3bYVRAjchVNY0DBzAKcvzf/f9xYqOxUHmEjTkVelWLJmW+kV6LOBqMYEv PUxk81W57NKsVOotCUU9zsrpEcO4jlP/gKhGjKEQNN4OVQRmtWXybCf2a2TkVLRN mR90oga1MGaTzsApIfnn56agGmQuzDlf5OH4f9O577LGA6+Rfre12f9kHm3sozkw 4Sc= -----END CERTIFICATE-----Generated at Sun Jan 25 22:13:33 2026 by rpki-client