This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/SR_Oqw4W1f3U3vok1BVIM_3prOQ.roa File: SR_Oqw4W1f3U3vok1BVIM_3prOQ.roa (raw, json) Hash identifier: xZRfZAtOOEJIXE0XPSwwSTYi/tKeXWXICqEFbpdqCLE= Subject key identifier: 49:1F:CE:AB:0E:16:D5:FD:D4:DE:FA:24:D4:15:48:33:FD:E9:AC:E4 Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Certificate serial: 019B7E38885E9B809C177BB08C32C455EB8A Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/SR_Oqw4W1f3U3vok1BVIM_3prOQ.roa Signing time: Fri 02 Jan 2026 10:19:52 +0000 ROA not before: Fri 02 Jan 2026 10:19:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51759 IP address blocks: 46.36.96.0/24 maxlen: 24 46.36.104.0/24 maxlen: 24 46.36.107.0/24 maxlen: 24 46.36.108.0/24 maxlen: 24 46.36.109.0/24 maxlen: 24 46.36.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:88:5e:9b:80:9c:17:7b:b0:8c:32:c4:55:eb:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Validity Not Before: Jan 2 10:19:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=491fceab0e16d5fdd4defa24d4154833fde9ace4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1c:f0:a9:20:7c:d6:38:0a:d4:43:10:fd:7e: be:4f:32:f5:de:b1:ec:5e:cd:1b:e8:49:00:d4:b9: 75:f1:bc:c5:6d:74:85:d6:79:56:d0:8f:66:30:85: 05:4a:9e:a3:d7:34:9c:ae:ec:71:da:c8:2f:5a:bf: e9:52:a0:52:3c:68:64:66:c6:0e:43:14:76:26:88: 84:cc:b7:e6:21:03:0d:c8:75:0d:c6:fd:c1:9c:b9: fe:b2:e2:f6:77:b8:01:c6:e0:bc:aa:dc:83:f0:d4: 72:3c:9d:6c:e6:e8:b1:cd:b2:79:25:c0:26:5d:2c: 79:b4:bc:39:e2:b2:5e:a9:8e:ed:a3:f7:e8:ed:a4: 2c:87:bc:90:6d:9a:73:bd:cd:31:ad:05:e9:37:10: c7:cb:bb:a8:e0:cb:19:d7:db:38:1c:a1:67:0f:f8: 3d:a9:cd:43:c9:29:e2:35:4d:04:2e:99:ea:3f:54: 5f:c6:81:50:5d:b9:8c:85:26:d5:f8:00:e7:80:77: 70:3b:e6:db:47:ff:f6:20:c9:52:c3:bb:c3:85:12: 72:44:33:1a:e9:78:03:f6:fb:12:d7:da:4e:65:42: c8:72:4c:07:53:4f:c8:fd:46:97:01:63:49:20:ac: 52:69:43:66:c1:10:c8:b0:b8:d1:eb:7b:16:f4:69: 69:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:1F:CE:AB:0E:16:D5:FD:D4:DE:FA:24:D4:15:48:33:FD:E9:AC:E4 X509v3 Authority Key Identifier: keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/SR_Oqw4W1f3U3vok1BVIM_3prOQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.36.96.0/24 46.36.104.0/24 46.36.107.0-46.36.110.255 Signature Algorithm: sha256WithRSAEncryption 36:17:05:b3:ae:1b:98:18:6c:69:ee:fb:50:ef:d5:d5:27:71: f8:5a:11:bc:ee:ff:9d:a5:12:7a:8f:25:52:b8:16:8b:bf:13: 71:ee:7c:4e:6f:38:6c:c0:e5:d4:29:59:1c:3e:10:68:9f:91: d7:7c:7e:67:e4:94:6e:10:0e:d4:f1:47:18:7c:7a:76:09:30: 25:91:c7:52:fd:63:eb:de:0c:5f:24:38:f9:e1:0a:34:c8:63: 8b:92:8f:36:7b:02:47:6b:34:85:35:8a:a4:5a:be:16:77:7e: f7:5d:bb:55:3b:2e:26:9e:e5:31:c9:40:b6:ea:5e:95:18:9b: 9b:b2:5a:6d:9d:b9:f1:2f:26:1f:78:7d:3e:66:1c:35:ba:9b: 1b:ee:6f:21:28:0d:08:aa:68:cd:1a:fe:67:d8:79:6b:11:cd: 64:a7:43:a1:c2:e8:2b:79:56:fc:dd:ff:5b:96:55:63:01:41: 65:fe:9a:95:01:ee:db:d1:a9:bd:6e:b3:bf:49:b8:01:ae:05: b2:4b:e8:4f:66:b4:01:60:d2:44:83:e9:ef:72:4c:06:a2:61: e4:9c:dd:6d:03:c3:ca:65:96:8a:0b:96:62:08:c2:0f:57:e3: 06:e9:b6:38:26:90:1b:9d:5e:14:35:ee:29:1f:bd:80:e3:70: 26:2f:a7:61 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt+OIhem4CcF3uwjDLEVeuKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNmE0MzRjNGI1ZDIzOWM0ZTZlNDFiN2U1ODVjOGQ1OGY4 OTk1YWIwHhcNMjYwMTAyMTAxOTUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTFmY2VhYjBlMTZkNWZkZDRkZWZhMjRkNDE1NDgzM2ZkZTlhY2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRzwqSB81jgK1EMQ/X6+TzL13rHs Xs0b6EkA1Ll18bzFbXSF1nlW0I9mMIUFSp6j1zScruxx2sgvWr/pUqBSPGhkZsYO QxR2JoiEzLfmIQMNyHUNxv3BnLn+suL2d7gBxuC8qtyD8NRyPJ1s5uixzbJ5JcAm XSx5tLw54rJeqY7to/fo7aQsh7yQbZpzvc0xrQXpNxDHy7uo4MsZ19s4HKFnD/g9 qc1DySniNU0ELpnqP1RfxoFQXbmMhSbV+ADngHdwO+bbR//2IMlSw7vDhRJyRDMa 6XgD9vsS19pOZULIckwHU0/I/UaXAWNJIKxSaUNmwRDIsLjR63sW9GlpwwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFEkfzqsOFtX91N76JNQVSDP96azkMB8GA1UdIwQY MBaAFC9qQ0xLXSOcTm5Bt+WFyNWPiZWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWIt NDBiNmQ2N2ZjZDk0LzEvU1JfT3F3NFcxZjNVM3ZvazFCVklNXzNwck9RLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWItNDBiNmQ2N2ZjZDk0 LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQALiRgAwQA LiRoMAwDBAAuJGsDBAAuJG4wDQYJKoZIhvcNAQELBQADggEBADYXBbOuG5gYbGnu +1Dv1dUncfhaEbzu/52lEnqPJVK4Fou/E3HufE5vOGzA5dQpWRw+EGifkdd8fmfk lG4QDtTxRxh8enYJMCWRx1L9Y+veDF8kOPnhCjTIY4uSjzZ7AkdrNIU1iqRavhZ3 fvddu1U7Liae5THJQLbqXpUYm5uyWm2dufEvJh94fT5mHDW6mxvubyEoDQiqaM0a /mfYeWsRzWSnQ6HC6Ct5Vvzd/1uWVWMBQWX+mpUB7tvRqb1us79JuAGuBbJL6E9m tAFg0kSD6e9yTAaiYeSc3W0Dw8pllooLlmIIwg9X4wbptjgmkBudXhQ17ikfvYDj cCYvp2E= -----END CERTIFICATE-----Generated at Mon Jan 26 08:38:37 2026 by rpki-client