This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/gu8Xb0EdAj5QQiEbcZUHWSiqy4o.roa File: gu8Xb0EdAj5QQiEbcZUHWSiqy4o.roa (raw, json) Hash identifier: Qu77EoHxyeTpqNbgaiHUpPIuYcauYq9nmWOzOey7QMY= Subject key identifier: 82:EF:17:6F:41:1D:02:3E:50:42:21:1B:71:95:07:59:28:AA:CB:8A Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Certificate serial: 019B7E388AB126A20E0690015CFDB2D10928 Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/gu8Xb0EdAj5QQiEbcZUHWSiqy4o.roa Signing time: Fri 02 Jan 2026 10:19:53 +0000 ROA not before: Fri 02 Jan 2026 10:19:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210650 IP address blocks: 46.36.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:8a:b1:26:a2:0e:06:90:01:5c:fd:b2:d1:09:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Validity Not Before: Jan 2 10:19:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=82ef176f411d023e5042211b7195075928aacb8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:bf:f5:c4:26:c8:f0:16:31:14:b8:eb:1d:66: 67:4a:71:c1:7e:2c:92:da:c7:db:59:0c:ff:12:ba: fc:71:15:88:f0:be:84:d2:01:d8:7c:c8:28:06:70: bf:c9:b9:69:fd:d0:05:72:1b:a7:b7:10:58:69:6c: d1:47:a8:23:78:f4:d2:e0:09:13:81:e0:50:4d:93: 75:f9:dc:6c:58:50:17:bc:c5:c9:51:23:05:6a:90: 1e:a7:b8:8e:70:ab:15:fd:61:57:0b:56:70:a2:ea: 2a:94:ca:2b:11:f9:4a:12:f9:d0:8d:99:46:a8:16: 2f:2c:9b:ab:d8:4e:9e:bd:ea:ce:34:d1:8a:01:ba: 82:7e:66:c2:13:6c:a0:b0:87:ef:f0:e1:ee:a9:07: d3:65:93:69:1c:4a:42:35:75:d7:78:30:45:9a:ef: 55:fe:4c:d1:43:a3:6b:96:5b:ae:94:f7:a9:b2:60: 77:07:43:d4:6d:67:25:02:26:03:89:d8:31:00:b6: e4:39:6a:4e:2b:dd:0a:84:1c:53:da:0b:05:17:ab: d4:c6:4a:4b:ed:90:92:83:dd:d5:05:3d:03:65:5d: b9:e3:af:7e:a9:3c:7e:0c:89:25:4d:b2:69:dd:b9: f7:8d:06:bf:00:da:1e:8c:e2:95:4d:2e:d4:21:e6: 21:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:EF:17:6F:41:1D:02:3E:50:42:21:1B:71:95:07:59:28:AA:CB:8A X509v3 Authority Key Identifier: keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/gu8Xb0EdAj5QQiEbcZUHWSiqy4o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.36.111.0/24 Signature Algorithm: sha256WithRSAEncryption 7f:44:af:29:fc:f2:34:49:1a:c9:14:98:5b:66:c9:8d:1a:6d: 5a:7f:00:4b:f2:b1:d4:dd:e3:d2:97:90:58:f0:db:00:c7:a7: 64:05:73:b3:1d:57:66:35:78:c4:2e:67:c2:d6:48:5f:65:65: 69:9f:1c:99:05:3d:87:2e:6f:14:30:59:03:8a:7d:9b:9a:94: f7:d6:6e:1d:c6:35:b5:cd:b0:c0:3d:ae:fe:06:ae:02:79:52: 08:80:c2:15:20:49:92:8e:84:46:4d:05:cb:eb:5e:94:a5:57: 1b:7f:20:80:60:04:7a:ba:df:c6:ca:b5:8d:95:0d:b0:b9:b3: b2:ac:e7:83:ff:fb:43:79:79:d7:a8:ab:21:41:a3:50:2d:22: 77:80:f6:f7:bf:f4:25:bd:ff:e5:f0:00:e3:3b:4f:b8:5e:aa: ce:e8:1c:45:14:f6:88:46:e4:89:ab:bd:ef:f5:b4:25:aa:8a: b7:b2:72:14:58:42:8d:48:99:02:58:51:a8:45:85:a9:9a:3c: 28:eb:93:10:bf:00:2f:1a:27:1a:f4:8b:33:2c:8f:48:c2:bf: 61:50:c5:d0:2d:b4:89:4f:c0:90:01:d9:6b:8f:4f:d0:96:ac: 13:e6:7c:e1:1e:28:e7:44:5a:f3:41:6b:1b:2c:e5:aa:9b:69: 91:4f:67:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OIqxJqIOBpABXP2y0QkoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNmE0MzRjNGI1ZDIzOWM0ZTZlNDFiN2U1ODVjOGQ1OGY4 OTk1YWIwHhcNMjYwMTAyMTAxOTUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4MmVmMTc2ZjQxMWQwMjNlNTA0MjIxMWI3MTk1MDc1OTI4YWFjYjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1L/1xCbI8BYxFLjrHWZnSnHBfiyS 2sfbWQz/Err8cRWI8L6E0gHYfMgoBnC/yblp/dAFchuntxBYaWzRR6gjePTS4AkT geBQTZN1+dxsWFAXvMXJUSMFapAep7iOcKsV/WFXC1ZwouoqlMorEflKEvnQjZlG qBYvLJur2E6everONNGKAbqCfmbCE2ygsIfv8OHuqQfTZZNpHEpCNXXXeDBFmu9V /kzRQ6NrlluulPepsmB3B0PUbWclAiYDidgxALbkOWpOK90KhBxT2gsFF6vUxkpL 7ZCSg93VBT0DZV25469+qTx+DIklTbJp3bn3jQa/ANoejOKVTS7UIeYh0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFILvF29BHQI+UEIhG3GVB1koqsuKMB8GA1UdIwQY MBaAFC9qQ0xLXSOcTm5Bt+WFyNWPiZWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWIt NDBiNmQ2N2ZjZDk0LzEvZ3U4WGIwRWRBajVRUWlFYmNaVUhXU2lxeTRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWItNDBiNmQ2N2ZjZDk0 LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiRvMA0G CSqGSIb3DQEBCwUAA4IBAQB/RK8p/PI0SRrJFJhbZsmNGm1afwBL8rHU3ePSl5BY 8NsAx6dkBXOzHVdmNXjELmfC1khfZWVpnxyZBT2HLm8UMFkDin2bmpT31m4dxjW1 zbDAPa7+Bq4CeVIIgMIVIEmSjoRGTQXL616UpVcbfyCAYAR6ut/GyrWNlQ2wubOy rOeD//tDeXnXqKshQaNQLSJ3gPb3v/Qlvf/l8ADjO0+4XqrO6BxFFPaIRuSJq73v 9bQlqoq3snIUWEKNSJkCWFGoRYWpmjwo65MQvwAvGica9IszLI9Iwr9hUMXQLbSJ T8CQAdlrj0/QlqwT5nzhHijnRFrzQWsbLOWqm2mRT2fC -----END CERTIFICATE-----Generated at Mon Jan 26 08:39:11 2026 by rpki-client