This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/J8ydQUQXwbdeLKGsKIlOYLkn-2g.roa File: J8ydQUQXwbdeLKGsKIlOYLkn-2g.roa (raw, json) Hash identifier: x5tw3RQ3h8IFbqDxJqbX4jZdtBMVMlLrubg1cBqUbGY= Subject key identifier: 27:CC:9D:41:44:17:C1:B7:5E:2C:A1:AC:28:89:4E:60:B9:27:FB:68 Certificate issuer: /CN=69a4d6916b93159aa80984a9b3774683bb550ebd Certificate serial: 019B7C126DF7E2FE3A08594D43387906AE14 Authority key identifier: 69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/J8ydQUQXwbdeLKGsKIlOYLkn-2g.roa Signing time: Fri 02 Jan 2026 00:19:01 +0000 ROA not before: Fri 02 Jan 2026 00:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216235 IP address blocks: 46.183.166.0/23 maxlen: 24 46.183.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.mft rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:6d:f7:e2:fe:3a:08:59:4d:43:38:79:06:ae:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69a4d6916b93159aa80984a9b3774683bb550ebd Validity Not Before: Jan 2 00:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27cc9d414417c1b75e2ca1ac28894e60b927fb68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ad:d0:d7:40:72:e1:f5:5d:04:94:f2:7c:12: 81:72:a9:04:6d:de:42:fe:56:b0:87:36:c9:63:f5: 04:a7:b6:2c:91:cc:a4:af:51:97:18:82:0e:42:b2: da:09:ca:f0:4e:b2:66:f5:c8:11:e6:b3:63:f7:69: 6b:fd:c7:3f:48:90:47:1c:56:3d:f3:b9:0b:2d:4a: 5a:c6:d9:f4:28:3d:49:24:81:4d:b8:75:22:e4:1b: 8d:9d:12:f2:f7:bd:cd:d6:82:64:ed:7d:af:e4:83: 8a:19:07:46:5b:7e:e8:2c:68:10:f1:8e:08:6a:1f: a6:fd:91:57:6d:e9:ef:4d:f4:d7:6c:48:08:f1:04: 9b:d4:56:ad:fb:ad:50:2a:e7:a9:7a:e6:7a:e3:40: cc:89:d8:7e:8e:c5:d3:39:dc:52:72:32:dd:0e:7e: 93:fe:f5:0f:38:15:02:28:91:4b:39:ce:f7:41:d9: 83:c7:bd:cb:df:e0:f2:d1:a5:14:d5:9f:a3:13:88: 51:3c:20:f9:06:5c:f4:be:96:15:60:36:ed:93:97: 14:d9:de:3d:8b:3f:16:45:e2:52:fb:50:7d:d2:70: a8:33:c9:01:3d:e9:67:29:ce:01:fa:19:11:44:c0: cb:1e:28:d4:30:c1:56:6e:00:a0:6f:19:0a:11:03: 61:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:CC:9D:41:44:17:C1:B7:5E:2C:A1:AC:28:89:4E:60:B9:27:FB:68 X509v3 Authority Key Identifier: keyid:69:A4:D6:91:6B:93:15:9A:A8:09:84:A9:B3:77:46:83:BB:55:0E:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaTWkWuTFZqoCYSps3dGg7tVDr0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/J8ydQUQXwbdeLKGsKIlOYLkn-2g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c031e5-fc67-41f5-8ebe-3197110097c9/1/aaTWkWuTFZqoCYSps3dGg7tVDr0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.183.166.0/23 Signature Algorithm: sha256WithRSAEncryption 7b:ad:e7:29:2c:cc:66:10:41:05:6a:0b:29:73:13:94:b3:b6: c3:e8:ec:73:c9:ae:d6:b7:8c:44:0f:b5:f3:87:af:8c:bf:31: 8b:6f:49:0f:e0:7b:fd:e3:e7:f2:20:79:d3:ec:06:46:ca:74: e7:30:38:c6:a5:63:34:a2:de:b3:04:bc:ae:44:ba:d2:80:53: 11:1b:cb:d6:92:30:5b:02:3f:3d:c1:ac:18:71:fc:ca:c6:3e: 33:04:50:44:99:b8:f7:9f:6c:4c:85:4a:cb:2f:b4:6e:8c:27: 35:db:ab:d4:a0:61:db:e8:70:64:30:d7:89:68:ca:ac:af:ba: 9e:14:00:fa:cd:35:cb:74:87:b9:be:ca:c1:9e:42:6c:82:d4: ff:95:7a:66:44:38:66:5a:f7:0e:93:7e:44:c2:09:dc:a4:31: 8e:ea:53:21:10:b9:41:9f:69:d2:4e:3b:c5:dc:10:53:73:95: 1f:be:bf:27:fc:db:19:ce:ff:b0:88:ad:67:d4:d0:c0:a4:8e: 7d:93:27:49:93:d5:55:18:4e:69:3c:11:f5:2e:4b:87:32:47: f6:09:ca:bd:03:09:da:7d:49:1a:76:85:d7:b3:7a:17:fa:b3: 5c:7c:a6:3a:6a:b4:db:33:b6:e4:8a:b4:01:11:b9:34:62:6b: db:9d:f6:a8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Em334v46CFlNQzh5Bq4UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5YTRkNjkxNmI5MzE1OWFhODA5ODRhOWIzNzc0NjgzYmI1 NTBlYmQwHhcNMjYwMTAyMDAxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyN2NjOWQ0MTQ0MTdjMWI3NWUyY2ExYWMyODg5NGU2MGI5MjdmYjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk63Q10By4fVdBJTyfBKBcqkEbd5C /lawhzbJY/UEp7Yskcykr1GXGIIOQrLaCcrwTrJm9cgR5rNj92lr/cc/SJBHHFY9 87kLLUpaxtn0KD1JJIFNuHUi5BuNnRLy973N1oJk7X2v5IOKGQdGW37oLGgQ8Y4I ah+m/ZFXbenvTfTXbEgI8QSb1Fat+61QKuepeuZ640DMidh+jsXTOdxScjLdDn6T /vUPOBUCKJFLOc73QdmDx73L3+Dy0aUU1Z+jE4hRPCD5Blz0vpYVYDbtk5cU2d49 iz8WReJS+1B90nCoM8kBPelnKc4B+hkRRMDLHijUMMFWbgCgbxkKEQNhDwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCfMnUFEF8G3XiyhrCiJTmC5J/toMB8GA1UdIwQY MBaAFGmk1pFrkxWaqAmEqbN3RoO7VQ69MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWFUV2tXdVRGWnFvQ1lTcHMzZEdnN3RWRHIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9jMDMxZTUtZmM2Ny00MWY1LThlYmUt MzE5NzExMDA5N2M5LzEvSjh5ZFFVUVh3YmRlTEtHc0tJbE9ZTGtuLTJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9jMDMxZTUtZmM2Ny00MWY1LThlYmUtMzE5NzExMDA5N2M5 LzEvYWFUV2tXdVRGWnFvQ1lTcHMzZEdnN3RWRHIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLremMA0G CSqGSIb3DQEBCwUAA4IBAQB7recpLMxmEEEFagspcxOUs7bD6Oxzya7Wt4xED7Xz h6+MvzGLb0kP4Hv94+fyIHnT7AZGynTnMDjGpWM0ot6zBLyuRLrSgFMRG8vWkjBb Aj89wawYcfzKxj4zBFBEmbj3n2xMhUrLL7RujCc126vUoGHb6HBkMNeJaMqsr7qe FAD6zTXLdIe5vsrBnkJsgtT/lXpmRDhmWvcOk35EwgncpDGO6lMhELlBn2nSTjvF 3BBTc5Ufvr8n/NsZzv+wiK1n1NDApI59kydJk9VVGE5pPBH1LkuHMkf2Ccq9Awna fUkadoXXs3oX+rNcfKY6arTbM7bkirQBEbk0Ymvbnfao -----END CERTIFICATE-----Generated at Mon Jan 26 03:09:02 2026 by rpki-client