This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/bRn03FRlSzZThZNkviNVTHKQJGs.roa File: bRn03FRlSzZThZNkviNVTHKQJGs.roa (raw, json) Hash identifier: xEDx54ik3RAUzg+a27rbqvQuS4hz986uk0RMqkm7R+M= Subject key identifier: 6D:19:F4:DC:54:65:4B:36:53:85:93:64:BE:23:55:4C:72:90:24:6B Certificate issuer: /CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20 Certificate serial: 019B7910271773CD97E85220692E20EEE4D5 Authority key identifier: E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/bRn03FRlSzZThZNkviNVTHKQJGs.roa Signing time: Thu 01 Jan 2026 10:17:40 +0000 ROA not before: Thu 01 Jan 2026 10:17:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50181 IP address blocks: 46.31.176.0/23 maxlen: 23 77.243.220.0/23 maxlen: 23 77.243.222.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:27:17:73:cd:97:e8:52:20:69:2e:20:ee:e4:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20 Validity Not Before: Jan 1 10:17:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6d19f4dc54654b3653859364be23554c7290246b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:55:ee:66:48:15:3c:a5:dc:b5:a3:a4:39:cd: 6d:10:87:98:6d:18:38:4d:54:70:88:65:90:df:5c: 84:9a:c6:39:e7:53:6c:23:79:54:e2:4b:2d:cc:e0: c9:fe:b9:05:78:55:67:cc:9d:96:a1:20:8d:e5:3b: e2:04:c5:c0:2d:74:af:c3:93:81:11:f2:e5:18:db: 19:3c:20:33:df:77:bf:f1:5b:60:82:28:88:b8:3f: 2e:aa:7c:06:f5:4c:63:90:2d:90:7b:de:16:c7:c7: 57:be:bc:15:10:ca:4c:df:46:0b:9c:26:af:ca:89: fe:43:62:fd:f6:a4:b7:e8:d9:6e:73:71:09:0f:b3: 56:18:08:54:6a:fd:38:76:67:7f:ed:71:00:49:b6: 7b:8f:ae:1e:8e:db:76:41:f1:33:a3:10:61:fe:91: b7:48:22:28:08:76:28:b5:7d:d3:97:26:31:db:be: 37:79:e4:2b:5f:c1:db:0d:1d:69:75:a3:96:68:5b: 13:3b:07:d6:4c:fd:70:ad:3a:b6:5d:39:a0:15:ba: 55:52:14:96:6c:77:18:28:cd:6e:14:78:9d:e5:f6: 1a:3e:ca:c0:29:00:ac:a7:ee:8e:d2:6a:d4:ab:ae: 00:68:07:60:3a:3b:35:96:79:f1:16:de:7b:71:76: 51:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:19:F4:DC:54:65:4B:36:53:85:93:64:BE:23:55:4C:72:90:24:6B X509v3 Authority Key Identifier: keyid:E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/bRn03FRlSzZThZNkviNVTHKQJGs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.31.176.0/23 77.243.220.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:2b:32:c5:a3:ec:18:5e:15:04:c0:29:0b:c6:26:54:af:39: 30:25:3c:87:5c:52:80:ef:64:76:30:c8:15:32:a6:02:60:51: d2:39:66:b0:a5:f8:18:22:ad:cd:3b:24:75:ec:95:6e:01:b0: b3:cf:11:cd:0f:de:cb:a6:a0:08:ca:b5:2f:2b:c2:b3:87:11: 07:ef:73:e3:18:22:37:46:8c:4a:66:ed:f2:86:0c:25:3c:e6: ba:f7:fd:6f:ce:c2:73:1b:8f:57:dc:73:ae:25:dc:2b:9e:05: 51:e9:3e:d1:6a:22:40:6b:86:d9:4b:38:ef:76:57:0b:f7:08: f1:d1:26:9b:44:07:21:84:9a:66:90:61:bd:00:51:8b:d2:fb: 95:be:49:84:dd:9b:18:4b:00:be:f2:a2:db:2f:6d:2e:a1:c1: a6:87:a7:30:b5:5b:eb:49:c0:73:82:66:b6:5d:a2:2b:77:ed: b9:e4:70:d4:d5:67:e2:76:22:fd:99:6f:8b:a7:93:8e:bf:62: 41:b7:3b:4d:12:7f:d2:71:b7:c1:7f:2a:5e:24:ec:0e:17:c2: 98:c8:88:90:93:a6:05:70:1f:19:71:af:10:a4:09:a6:cd:15: dd:27:16:9b:5b:16:ef:fc:21:19:91:03:62:4b:0f:ee:5e:57: d8:b2:c8:61 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5ECcXc82X6FIgaS4g7uTVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxYWMwMzIyYjNlYWI2NTcyZWNlMmEwYWM1YWJmMTY0YTVi YmZmMjAwHhcNMjYwMTAxMTAxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ZDE5ZjRkYzU0NjU0YjM2NTM4NTkzNjRiZTIzNTU0YzcyOTAyNDZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVXuZkgVPKXctaOkOc1tEIeYbRg4 TVRwiGWQ31yEmsY551NsI3lU4kstzODJ/rkFeFVnzJ2WoSCN5TviBMXALXSvw5OB EfLlGNsZPCAz33e/8VtggiiIuD8uqnwG9UxjkC2Qe94Wx8dXvrwVEMpM30YLnCav yon+Q2L99qS36Nluc3EJD7NWGAhUav04dmd/7XEASbZ7j64ejtt2QfEzoxBh/pG3 SCIoCHYotX3TlyYx2743eeQrX8HbDR1pdaOWaFsTOwfWTP1wrTq2XTmgFbpVUhSW bHcYKM1uFHid5fYaPsrAKQCsp+6O0mrUq64AaAdgOjs1lnnxFt57cXZRYwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFG0Z9NxUZUs2U4WTZL4jVUxykCRrMB8GA1UdIwQY MBaAFOGsAyKz6rZXLs4qCsWr8WSlu/8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGF3RElyUHF0bGN1emlvS3hhdnhaS1c3X3lBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mZjAwMzYtODMxMy00YjNkLWFkN2Yt OGQ4MWZkYzZmMTcwLzEvYlJuMDNGUmxTelpUaFpOa3ZpTlZUSEtRSkdzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9mZjAwMzYtODMxMy00YjNkLWFkN2YtOGQ4MWZkYzZmMTcw LzEvNGF3RElyUHF0bGN1emlvS3hhdnhaS1c3X3lBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLh+wAwQC TfPcMA0GCSqGSIb3DQEBCwUAA4IBAQA7KzLFo+wYXhUEwCkLxiZUrzkwJTyHXFKA 72R2MMgVMqYCYFHSOWawpfgYIq3NOyR17JVuAbCzzxHND97LpqAIyrUvK8KzhxEH 73PjGCI3RoxKZu3yhgwlPOa69/1vzsJzG49X3HOuJdwrngVR6T7RaiJAa4bZSzjv dlcL9wjx0SabRAchhJpmkGG9AFGL0vuVvkmE3ZsYSwC+8qLbL20uocGmh6cwtVvr ScBzgma2XaIrd+255HDU1WfidiL9mW+Lp5OOv2JBtztNEn/ScbfBfypeJOwOF8KY yIiQk6YFcB8Zca8QpAmmzRXdJxabWxbv/CEZkQNiSw/uXlfYsshh -----END CERTIFICATE-----Generated at Mon Jan 26 01:15:36 2026 by rpki-client