This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/nPVHMKh_KfMvRao_vET8GSNdB60.roa File: nPVHMKh_KfMvRao_vET8GSNdB60.roa (raw, json) Hash identifier: CNFNDT0hozsG/GOj4JydTWPL4u34Bu99WDiqKSdCSGY= Subject key identifier: 9C:F5:47:30:A8:7F:29:F3:2F:45:AA:3F:BC:44:FC:19:23:5D:07:AD Certificate issuer: /CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf Certificate serial: 019B775936AE9EA02BDDE594691F7093C913 Authority key identifier: A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/nPVHMKh_KfMvRao_vET8GSNdB60.roa Signing time: Thu 01 Jan 2026 02:18:14 +0000 ROA not before: Thu 01 Jan 2026 02:18:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212567 IP address blocks: 46.226.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.mft rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:59:36:ae:9e:a0:2b:dd:e5:94:69:1f:70:93:c9:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a487782e3f70c5cd27b32f5274d0e5bc62e95caf Validity Not Before: Jan 1 02:18:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9cf54730a87f29f32f45aa3fbc44fc19235d07ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ad:83:c3:19:e1:7b:47:3c:ba:0f:7d:36:fd: c2:f0:95:fd:bb:64:cf:eb:39:66:20:7e:55:47:aa: c7:c8:b0:89:ff:d3:b2:d7:ba:22:5f:87:5c:fb:36: 19:ac:93:a3:49:a7:7c:09:03:a5:80:de:7b:f5:98: ec:c8:6d:43:df:38:0f:f3:82:67:d8:e8:a2:56:63: ea:d5:6a:e6:ca:8c:f1:53:47:7d:87:1f:50:e5:8c: a1:12:00:af:eb:04:c0:9e:8c:f8:4f:6d:35:0c:63: 1b:24:2a:e9:b7:de:ca:2e:cc:8e:59:c9:a3:60:4f: f0:b3:c8:9b:d0:fe:f8:99:4b:71:e2:3e:98:56:21: 00:8b:9e:6a:6d:ed:f1:1d:8b:72:14:21:8f:5f:8e: 15:24:19:e4:63:12:85:1c:a8:86:83:90:52:99:fd: 24:ae:78:b7:d3:a5:35:56:fb:cc:36:1d:ac:72:3e: 7d:7e:6a:fb:31:63:10:41:51:8a:aa:eb:11:e8:1c: 83:22:40:1f:91:85:25:ca:a1:ae:a8:ca:7f:45:c5: 68:e8:33:21:79:fa:8e:53:01:78:81:63:7d:06:9f: 84:73:c0:f7:de:27:24:a9:cb:93:fb:66:5e:c9:dd: 6c:75:4e:e2:5a:70:c9:5d:a9:2e:d6:ed:97:c9:e7: 51:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:F5:47:30:A8:7F:29:F3:2F:45:AA:3F:BC:44:FC:19:23:5D:07:AD X509v3 Authority Key Identifier: keyid:A4:87:78:2E:3F:70:C5:CD:27:B3:2F:52:74:D0:E5:BC:62:E9:5C:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pId4Lj9wxc0nsy9SdNDlvGLpXK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/nPVHMKh_KfMvRao_vET8GSNdB60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bef6e8-8873-4529-8e72-238c6d8a4c17/1/pId4Lj9wxc0nsy9SdNDlvGLpXK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.226.127.0/24 Signature Algorithm: sha256WithRSAEncryption 00:0c:66:75:d5:93:30:bf:37:75:3f:24:ee:32:dd:6b:dd:97: 7f:43:7b:6e:d3:2c:5f:87:68:78:12:af:0f:e8:92:94:d3:fd: 21:87:7f:48:8a:dc:fa:b6:97:35:85:f3:80:a0:32:26:e4:72: 90:92:33:e2:79:52:18:22:47:95:dc:62:9f:e4:14:4a:e5:38: d7:1e:51:69:0d:31:34:00:61:7c:39:68:a4:61:da:99:d2:de: 9d:24:3c:85:99:2f:4b:eb:33:a1:c5:de:b6:26:c4:58:9f:81: 15:17:9c:de:39:2c:46:17:08:c9:8b:f4:0e:c7:6b:c2:da:9a: 7e:1a:62:17:1f:de:91:a6:d9:ff:42:e2:df:29:16:af:87:13: 6a:af:11:d4:ae:fb:d1:69:21:a1:2b:59:04:ef:64:6d:b9:38: 21:2e:12:14:a5:e9:87:d6:13:13:82:e3:9f:49:15:37:37:3c: 72:9d:ab:fb:a0:34:e4:e4:22:ed:31:9f:8e:58:31:52:93:db: e6:f0:92:0c:68:89:13:4e:62:e5:5c:5f:98:45:f8:6e:b1:49: 10:e5:69:88:ed:09:07:94:fa:7d:ba:e2:c3:35:83:88:85:96: 00:b0:b0:c4:ea:59:ad:99:5a:89:77:5f:8f:77:d8:11:8c:40: 38:13:8a:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WTaunqAr3eWUaR9wk8kTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0ODc3ODJlM2Y3MGM1Y2QyN2IzMmY1Mjc0ZDBlNWJjNjJl OTVjYWYwHhcNMjYwMTAxMDIxODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2Y1NDczMGE4N2YyOWYzMmY0NWFhM2ZiYzQ0ZmMxOTIzNWQwN2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3q2Dwxnhe0c8ug99Nv3C8JX9u2TP 6zlmIH5VR6rHyLCJ/9Oy17oiX4dc+zYZrJOjSad8CQOlgN579ZjsyG1D3zgP84Jn 2OiiVmPq1WrmyozxU0d9hx9Q5YyhEgCv6wTAnoz4T201DGMbJCrpt97KLsyOWcmj YE/ws8ib0P74mUtx4j6YViEAi55qbe3xHYtyFCGPX44VJBnkYxKFHKiGg5BSmf0k rni306U1VvvMNh2scj59fmr7MWMQQVGKqusR6ByDIkAfkYUlyqGuqMp/RcVo6DMh efqOUwF4gWN9Bp+Ec8D33ickqcuT+2Zeyd1sdU7iWnDJXaku1u2XyedRvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJz1RzCofynzL0WqP7xE/BkjXQetMB8GA1UdIwQY MBaAFKSHeC4/cMXNJ7MvUnTQ5bxi6VyvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcElkNExqOXd4YzBuc3k5U2RORGx2R0xwWEs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9iZWY2ZTgtODg3My00NTI5LThlNzIt MjM4YzZkOGE0YzE3LzEvblBWSE1LaF9LZk12UmFvX3ZFVDhHU05kQjYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi9iZWY2ZTgtODg3My00NTI5LThlNzItMjM4YzZkOGE0YzE3 LzEvcElkNExqOXd4YzBuc3k5U2RORGx2R0xwWEs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALuJ/MA0G CSqGSIb3DQEBCwUAA4IBAQAADGZ11ZMwvzd1PyTuMt1r3Zd/Q3tu0yxfh2h4Eq8P 6JKU0/0hh39Iitz6tpc1hfOAoDIm5HKQkjPieVIYIkeV3GKf5BRK5TjXHlFpDTE0 AGF8OWikYdqZ0t6dJDyFmS9L6zOhxd62JsRYn4EVF5zeOSxGFwjJi/QOx2vC2pp+ GmIXH96Rptn/QuLfKRavhxNqrxHUrvvRaSGhK1kE72RtuTghLhIUpemH1hMTguOf SRU3Nzxynav7oDTk5CLtMZ+OWDFSk9vm8JIMaIkTTmLlXF+YRfhusUkQ5WmI7QkH lPp9uuLDNYOIhZYAsLDE6lmtmVqJd1+Pd9gRjEA4E4oz -----END CERTIFICATE-----Generated at Mon Jan 26 07:07:14 2026 by rpki-client