This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/pY-w966p6TcVCR_ceh3iqo8tBvM.roa File: pY-w966p6TcVCR_ceh3iqo8tBvM.roa (raw, json) Hash identifier: 9v8cY+ONlAQ5plK0CUQaAsntXexrpXKvoAQArC1anGo= Subject key identifier: A5:8F:B0:F7:AE:A9:E9:37:15:09:1F:DC:7A:1D:E2:AA:8F:2D:06:F3 Certificate issuer: /CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20 Certificate serial: 019B791026B0D8BB9FD7C2EA4523AF072988 Authority key identifier: E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/pY-w966p6TcVCR_ceh3iqo8tBvM.roa Signing time: Thu 01 Jan 2026 10:17:39 +0000 ROA not before: Thu 01 Jan 2026 10:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44789 IP address blocks: 46.31.178.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:26:b0:d8:bb:9f:d7:c2:ea:45:23:af:07:29:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20 Validity Not Before: Jan 1 10:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a58fb0f7aea9e93715091fdc7a1de2aa8f2d06f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e6:71:d9:01:b8:76:25:97:4c:3d:9b:4f:c5: 01:c4:29:01:66:fe:d2:d8:62:73:ad:49:ba:30:09: f6:b4:8d:ec:4c:cc:bf:02:94:44:f4:6a:36:f6:64: 02:08:16:9e:1b:83:86:7d:20:6a:c5:d5:5c:97:10: ee:3a:80:1f:74:25:d9:1c:0f:55:a7:ae:5a:b6:55: 8b:a9:9d:4f:57:de:60:27:36:fc:bd:b1:09:96:dc: ce:ed:61:58:f3:09:07:84:5b:af:0e:c1:c9:f6:ef: 2b:d4:62:5b:e3:e0:34:95:83:d6:9d:9d:a4:8a:d6: 4c:09:0d:11:9b:3f:7b:dc:f3:90:99:2a:b2:fe:32: 49:3a:94:8a:49:9e:29:87:e4:4d:2c:3e:50:42:2b: 75:57:04:2a:58:b3:f9:37:00:72:fb:bf:4e:21:aa: 18:a9:f7:b1:53:52:83:e7:66:8d:96:92:0d:a7:84: 42:77:62:4e:2c:0c:ac:87:43:8e:b5:3a:a2:60:b2: 89:03:ae:9a:76:9a:6e:5e:ae:e9:80:c1:e3:0d:1e: 08:06:d1:81:d4:f7:2b:c7:28:5e:96:fb:8b:dd:64: cc:4d:7e:f7:fb:fa:96:06:d3:fa:84:c4:aa:1f:70: 12:33:75:01:0c:ed:ba:4a:14:f3:55:7d:54:09:9f: 4f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:8F:B0:F7:AE:A9:E9:37:15:09:1F:DC:7A:1D:E2:AA:8F:2D:06:F3 X509v3 Authority Key Identifier: keyid:E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/pY-w966p6TcVCR_ceh3iqo8tBvM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.31.178.0/23 Signature Algorithm: sha256WithRSAEncryption 72:32:14:ae:9d:09:86:ed:76:81:5e:fd:6a:96:2e:bc:f1:55: 6b:0e:51:2f:2d:69:00:ed:76:ff:18:46:df:c9:ff:b7:eb:f6: ca:32:ad:cc:0f:66:08:1d:3e:31:bc:b6:d5:b2:2d:c6:f0:9a: d6:f4:95:cd:32:b5:12:f7:5f:7e:6b:15:61:56:c9:3e:f9:4d: b6:03:cc:be:51:d2:30:85:5c:2e:bd:d3:e3:72:b7:21:15:79: 1d:20:3f:b7:15:df:97:7e:0e:70:f1:39:70:33:8f:0d:41:21: 2b:2a:43:c5:e0:7b:75:4a:16:4d:cd:f5:0d:3f:79:b8:e2:a9: ea:7f:8d:ca:d1:b1:4e:24:0f:8e:e0:c0:f1:cf:65:6c:54:6c: 1b:e0:2b:60:1e:65:9c:c2:d8:26:e1:bc:f2:c5:01:a4:1a:e5: 4b:d7:0c:59:62:0f:19:ff:32:0f:0d:5e:18:4e:35:8b:1c:03: b4:36:a1:16:36:63:35:69:74:c7:eb:ee:49:90:88:c4:05:bc: fe:8d:3e:5d:bc:2b:61:cd:44:1b:ca:57:17:34:e0:7c:5c:c1: 83:5a:7e:1d:fd:d6:1c:52:e9:72:d7:dd:f2:81:04:e6:aa:27: 71:c6:b8:87:50:c0:4b:ea:f5:7c:03:ea:6c:ec:ca:0e:03:2e: 18:2e:28:b4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ECaw2Luf18LqRSOvBymIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxYWMwMzIyYjNlYWI2NTcyZWNlMmEwYWM1YWJmMTY0YTVi YmZmMjAwHhcNMjYwMTAxMTAxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNThmYjBmN2FlYTllOTM3MTUwOTFmZGM3YTFkZTJhYThmMmQwNmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eZx2QG4diWXTD2bT8UBxCkBZv7S 2GJzrUm6MAn2tI3sTMy/ApRE9Go29mQCCBaeG4OGfSBqxdVclxDuOoAfdCXZHA9V p65atlWLqZ1PV95gJzb8vbEJltzO7WFY8wkHhFuvDsHJ9u8r1GJb4+A0lYPWnZ2k itZMCQ0Rmz973POQmSqy/jJJOpSKSZ4ph+RNLD5QQit1VwQqWLP5NwBy+79OIaoY qfexU1KD52aNlpINp4RCd2JOLAysh0OOtTqiYLKJA66adppuXq7pgMHjDR4IBtGB 1PcrxyhelvuL3WTMTX73+/qWBtP6hMSqH3ASM3UBDO26ShTzVX1UCZ9PVQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKWPsPeuqek3FQkf3Hod4qqPLQbzMB8GA1UdIwQY MBaAFOGsAyKz6rZXLs4qCsWr8WSlu/8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNGF3RElyUHF0bGN1emlvS3hhdnhaS1c3X3lBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9mZjAwMzYtODMxMy00YjNkLWFkN2Yt OGQ4MWZkYzZmMTcwLzEvcFktdzk2NnA2VGNWQ1JfY2VoM2lxbzh0QnZNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9mZjAwMzYtODMxMy00YjNkLWFkN2YtOGQ4MWZkYzZmMTcw LzEvNGF3RElyUHF0bGN1emlvS3hhdnhaS1c3X3lBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLh+yMA0G CSqGSIb3DQEBCwUAA4IBAQByMhSunQmG7XaBXv1qli688VVrDlEvLWkA7Xb/GEbf yf+36/bKMq3MD2YIHT4xvLbVsi3G8JrW9JXNMrUS919+axVhVsk++U22A8y+UdIw hVwuvdPjcrchFXkdID+3Fd+Xfg5w8TlwM48NQSErKkPF4Ht1ShZNzfUNP3m44qnq f43K0bFOJA+O4MDxz2VsVGwb4CtgHmWcwtgm4bzyxQGkGuVL1wxZYg8Z/zIPDV4Y TjWLHAO0NqEWNmM1aXTH6+5JkIjEBbz+jT5dvCthzUQbylcXNOB8XMGDWn4d/dYc Uuly193ygQTmqidxxriHUMBL6vV8A+ps7MoOAy4YLii0 -----END CERTIFICATE-----Generated at Sun Jan 25 22:17:16 2026 by rpki-client