This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/RLh9s9zTeKJ9bogTETA60TFw6lo.roa File: RLh9s9zTeKJ9bogTETA60TFw6lo.roa (raw, json) Hash identifier: 0m+pngGOwDg6Ap17PIVB2FP6vUl0HDw150aVd4LORg4= Subject key identifier: 44:B8:7D:B3:DC:D3:78:A2:7D:6E:88:13:11:30:3A:D1:31:70:EA:5A Certificate issuer: /CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc Certificate serial: 019B7F15841E69587C8734DB78779518A589 Authority key identifier: 12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/RLh9s9zTeKJ9bogTETA60TFw6lo.roa Signing time: Fri 02 Jan 2026 14:21:15 +0000 ROA not before: Fri 02 Jan 2026 14:21:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52194 IP address blocks: 46.173.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.mft rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:84:1e:69:58:7c:87:34:db:78:77:95:18:a5:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12b7ad8587f32b27265e9c67a6132bf9b3f020fc Validity Not Before: Jan 2 14:21:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44b87db3dcd378a27d6e881311303ad13170ea5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ae:dc:5b:ee:c6:7b:97:63:14:21:96:ab:68: ac:fe:a7:2e:9c:93:15:ee:21:1f:31:3f:db:2a:70: 8f:f7:71:00:f9:ec:b4:bb:72:1a:35:ae:25:37:40: 9e:22:e7:fd:60:bd:69:6c:b2:b8:98:2a:42:8d:75: 4c:c4:b5:44:9d:76:0c:26:30:e8:22:6c:bb:39:d2: 8e:a8:c0:4e:3a:b6:46:af:df:1c:ed:06:f8:96:ed: 2b:59:38:20:2c:c1:43:cc:fb:e2:76:ea:ca:5f:f2: 85:0e:80:42:8d:b1:75:28:ef:35:ee:00:87:a9:b4: a8:87:57:55:77:84:80:9b:59:16:9a:e6:07:13:a9: fe:12:75:af:6d:66:79:81:d2:03:1c:96:0d:58:21: fa:a6:37:a0:c9:f0:6e:24:aa:ae:c2:01:4c:c2:e5: 8f:35:d1:5b:8e:f5:16:02:a3:ac:a4:48:d6:6f:71: 77:e8:42:b0:69:d2:e7:27:21:e8:f7:23:b8:87:af: 7c:40:46:8b:40:4f:9a:d7:25:6f:be:f7:c5:ad:93: 52:9e:c4:e6:3f:ad:fc:7d:e3:ce:89:cd:f4:ae:1f: 98:05:99:ea:fa:0a:72:15:1e:e7:57:29:77:84:54: 69:0b:5c:c0:16:e6:00:64:95:7d:33:ec:33:7f:21: 64:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:B8:7D:B3:DC:D3:78:A2:7D:6E:88:13:11:30:3A:D1:31:70:EA:5A X509v3 Authority Key Identifier: keyid:12:B7:AD:85:87:F3:2B:27:26:5E:9C:67:A6:13:2B:F9:B3:F0:20:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ErethYfzKycmXpxnphMr-bPwIPw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/RLh9s9zTeKJ9bogTETA60TFw6lo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/89220f-91ec-4ce1-99c5-10912279a125/1/ErethYfzKycmXpxnphMr-bPwIPw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.173.176.0/20 Signature Algorithm: sha256WithRSAEncryption 6f:42:a5:05:80:27:56:6e:71:ef:0d:c9:d8:24:ae:e5:fc:86: 89:74:69:ce:5b:96:01:fb:54:fe:df:9b:77:b3:7a:10:13:bf: 0b:4d:47:1d:d1:1e:15:0e:67:1a:78:56:e4:6f:62:7f:ef:8f: e6:82:f8:75:e3:c7:2b:1d:34:76:61:c8:57:f8:1d:2f:6d:97: df:ea:6a:28:40:bb:36:87:a7:19:16:55:93:95:bd:9a:e0:d2: 6f:67:14:70:2b:f9:65:18:57:e2:84:34:84:ef:79:0d:5c:f5: 90:87:4a:ba:0f:2f:2c:e2:9a:78:7a:a6:a6:e3:b1:08:94:46: 4e:8d:13:36:26:59:f0:ab:1b:d7:33:b4:d7:33:c9:14:a1:f2: 75:9d:60:d4:86:60:0e:7b:d2:50:cf:03:42:78:cc:62:a6:34: 24:d1:5d:e6:b1:39:09:a1:6c:d2:6e:6b:23:b6:cb:b2:55:e7: 86:5e:ee:ee:43:49:c8:b5:4f:a5:55:d4:76:e2:bf:e4:ee:26: 28:00:c5:3a:2a:67:a0:bf:19:3c:70:7f:4c:98:04:29:c8:27: 68:4d:8b:11:ab:1b:db:97:1f:dd:9a:9e:b8:5d:c5:e7:25:16: 58:2b:31:eb:72:ff:a7:a2:ad:16:f7:9d:4a:46:8c:4a:91:c4: f8:de:9c:00 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/FYQeaVh8hzTbeHeVGKWJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYjdhZDg1ODdmMzJiMjcyNjVlOWM2N2E2MTMyYmY5YjNm MDIwZmMwHhcNMjYwMTAyMTQyMTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGI4N2RiM2RjZDM3OGEyN2Q2ZTg4MTMxMTMwM2FkMTMxNzBlYTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAla7cW+7Ge5djFCGWq2is/qcunJMV 7iEfMT/bKnCP93EA+ey0u3IaNa4lN0CeIuf9YL1pbLK4mCpCjXVMxLVEnXYMJjDo Imy7OdKOqMBOOrZGr98c7Qb4lu0rWTggLMFDzPvidurKX/KFDoBCjbF1KO817gCH qbSoh1dVd4SAm1kWmuYHE6n+EnWvbWZ5gdIDHJYNWCH6pjegyfBuJKquwgFMwuWP NdFbjvUWAqOspEjWb3F36EKwadLnJyHo9yO4h698QEaLQE+a1yVvvvfFrZNSnsTm P638fePOic30rh+YBZnq+gpyFR7nVyl3hFRpC1zAFuYAZJV9M+wzfyFk6wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFES4fbPc03iifW6IExEwOtExcOpaMB8GA1UdIwQY MBaAFBK3rYWH8ysnJl6cZ6YTK/mz8CD8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXJldGhZZnpLeWNtWHB4bnBoTXItYlB3SVB3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84OTIyMGYtOTFlYy00Y2UxLTk5YzUt MTA5MTIyNzlhMTI1LzEvUkxoOXM5elRlS0o5Ym9nVEVUQTYwVEZ3NmxvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni84OTIyMGYtOTFlYy00Y2UxLTk5YzUtMTA5MTIyNzlhMTI1 LzEvRXJldGhZZnpLeWNtWHB4bnBoTXItYlB3SVB3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELq2wMA0G CSqGSIb3DQEBCwUAA4IBAQBvQqUFgCdWbnHvDcnYJK7l/IaJdGnOW5YB+1T+35t3 s3oQE78LTUcd0R4VDmcaeFbkb2J/74/mgvh148crHTR2YchX+B0vbZff6mooQLs2 h6cZFlWTlb2a4NJvZxRwK/llGFfihDSE73kNXPWQh0q6Dy8s4pp4eqam47EIlEZO jRM2JlnwqxvXM7TXM8kUofJ1nWDUhmAOe9JQzwNCeMxipjQk0V3msTkJoWzSbmsj tsuyVeeGXu7uQ0nItU+lVdR24r/k7iYoAMU6Kmegvxk8cH9MmAQpyCdoTYsRqxvb lx/dmp64XcXnJRZYKzHrcv+noq0W951KRoxKkcT43pwA -----END CERTIFICATE-----Generated at Sun Jan 25 13:06:36 2026 by rpki-client