This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/rKmAVK4PxzbR_IThsBb1WgVN_YY.roa File: rKmAVK4PxzbR_IThsBb1WgVN_YY.roa (raw, json) Hash identifier: TV5HtQ7LPjAdjxp+ggpRM593FUWUOfL9JtSMN7pzuhU= Subject key identifier: AC:A9:80:54:AE:0F:C7:36:D1:FC:84:E1:B0:16:F5:5A:05:4D:FD:86 Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e Certificate serial: 019B7CED5BB2406A844C79BC83EB41B72FB1 Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/rKmAVK4PxzbR_IThsBb1WgVN_YY.roa Signing time: Fri 02 Jan 2026 04:18:08 +0000 ROA not before: Fri 02 Jan 2026 04:18:08 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199312 IP address blocks: 46.28.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 10:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:5b:b2:40:6a:84:4c:79:bc:83:eb:41:b7:2f:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e Validity Not Before: Jan 2 04:18:08 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aca98054ae0fc736d1fc84e1b016f55a054dfd86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3a:b8:99:32:f5:eb:82:1f:1b:b2:04:c4:db: 9c:65:dc:95:a9:04:23:f4:0a:05:1f:41:fe:c4:59: c2:45:45:c4:6b:d1:1c:a0:08:5d:fb:d4:cc:57:6f: 0b:66:fe:26:84:7d:e0:83:55:a4:84:8a:81:6d:3c: 10:86:67:a3:ef:70:f6:4c:c0:29:5a:ed:88:c9:ae: 84:0b:9d:53:7d:48:c3:00:c6:e5:5d:bc:11:c2:c1: a2:68:84:60:77:65:ef:cb:5d:99:4c:71:7a:12:e5: 1c:48:51:c5:1b:b7:7e:65:59:c9:da:9e:29:72:86: 2a:bf:af:ed:44:aa:00:6c:89:26:fe:cb:db:a8:bc: ac:05:52:83:6a:6d:94:ac:1c:7d:b2:ac:1e:29:68: f5:f1:5a:60:f8:80:e0:50:f7:ac:31:e1:ed:1b:5c: f8:fd:ca:64:75:fd:0d:0a:d6:5f:0f:5b:61:e2:d1: 24:04:1b:87:f5:a3:d0:11:fc:fa:f2:f4:87:1d:e0: 4b:91:e9:6c:c1:45:97:1c:ff:6a:44:64:80:cb:f6: 07:fc:f7:f9:68:ba:da:a3:06:dd:30:89:c3:f1:b8: 42:9e:28:ca:65:94:af:00:38:4d:7c:1d:39:6a:7e: 8b:02:10:c5:ef:f0:bf:59:ce:2e:58:66:bd:41:3d: 79:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:A9:80:54:AE:0F:C7:36:D1:FC:84:E1:B0:16:F5:5A:05:4D:FD:86 X509v3 Authority Key Identifier: keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/rKmAVK4PxzbR_IThsBb1WgVN_YY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.28.160.0/21 Signature Algorithm: sha256WithRSAEncryption 3a:80:8b:4d:c5:7a:24:3b:e5:1e:47:58:e1:05:32:11:d7:ff: a7:7d:b9:18:97:92:ab:a4:c9:80:85:96:f3:44:3a:7a:99:66: e6:f7:16:e4:1c:b2:23:b1:57:b9:a1:c3:6b:6c:14:fc:63:4a: ad:16:c9:9e:99:50:d8:29:f2:b1:4a:89:79:a0:86:3d:aa:8d: ad:76:d2:f1:97:b8:13:43:34:69:c6:cb:69:21:55:96:fc:88: 50:2a:6d:8b:2d:49:d3:c7:4f:6e:87:20:bb:11:12:97:ba:6f: 45:77:68:d6:59:36:d4:17:80:65:8e:99:7e:2b:a7:a5:13:dd: de:7b:0f:d0:58:f7:68:53:24:9a:72:f2:64:ac:05:06:13:df: 6d:9c:8a:06:f0:6f:e8:29:62:14:33:d3:ae:df:b3:86:13:67: 53:8e:1e:f6:1f:0e:b1:2b:80:84:fd:11:a7:df:ec:de:3a:7f: 45:1a:c6:74:8e:d3:8d:44:b4:33:84:c3:fb:b5:a2:ea:b1:02: 27:06:49:a3:66:29:e7:ca:b5:0c:9e:ee:fa:b1:c3:69:79:49: 1f:ce:15:d5:92:a4:4d:ad:00:c6:a2:6d:20:44:4d:f0:3d:0e: 4e:fb:f2:ee:0f:2d:4d:99:84:2e:2e:d1:d8:ef:3e:f4:a7:13: cd:41:f4:a2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87VuyQGqETHm8g+tBty+xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1YjMwMTExYjBiNzIwYTIwOWY3ODhjOGI5MGY2MDM4MGI0 NjVjMmUwHhcNMjYwMTAyMDQxODA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhY2E5ODA1NGFlMGZjNzM2ZDFmYzg0ZTFiMDE2ZjU1YTA1NGRmZDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDq4mTL164IfG7IExNucZdyVqQQj 9AoFH0H+xFnCRUXEa9EcoAhd+9TMV28LZv4mhH3gg1WkhIqBbTwQhmej73D2TMAp Wu2Iya6EC51TfUjDAMblXbwRwsGiaIRgd2Xvy12ZTHF6EuUcSFHFG7d+ZVnJ2p4p coYqv6/tRKoAbIkm/svbqLysBVKDam2UrBx9sqweKWj18Vpg+IDgUPesMeHtG1z4 /cpkdf0NCtZfD1th4tEkBBuH9aPQEfz68vSHHeBLkelswUWXHP9qRGSAy/YH/Pf5 aLraowbdMInD8bhCnijKZZSvADhNfB05an6LAhDF7/C/Wc4uWGa9QT15fwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKypgFSuD8c20fyE4bAW9VoFTf2GMB8GA1UdIwQY MBaAFJWzARGwtyCiCfeIyLkPYDgLRlwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmIt OTE2NDZiZjAxNTNkLzEvckttQVZLNFB4emJSX0lUaHNCYjFXZ1ZOX1lZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmItOTE2NDZiZjAxNTNk LzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLhygMA0G CSqGSIb3DQEBCwUAA4IBAQA6gItNxXokO+UeR1jhBTIR1/+nfbkYl5KrpMmAhZbz RDp6mWbm9xbkHLIjsVe5ocNrbBT8Y0qtFsmemVDYKfKxSol5oIY9qo2tdtLxl7gT QzRpxstpIVWW/IhQKm2LLUnTx09uhyC7ERKXum9Fd2jWWTbUF4Bljpl+K6elE93e ew/QWPdoUySacvJkrAUGE99tnIoG8G/oKWIUM9Ou37OGE2dTjh72Hw6xK4CE/RGn 3+zeOn9FGsZ0jtONRLQzhMP7taLqsQInBkmjZinnyrUMnu76scNpeUkfzhXVkqRN rQDGom0gRE3wPQ5O+/LuDy1NmYQuLtHY7z70pxPNQfSi -----END CERTIFICATE-----Generated at Sun Jan 25 19:16:43 2026 by rpki-client