This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/1JeMvt87ntSFpMX8aYx-v1XfV3o.roa File: 1JeMvt87ntSFpMX8aYx-v1XfV3o.roa (raw, json) Hash identifier: 7uScl5iatsW1W+98ypfsdtiDJ1/Gc62y324ObfeuxjQ= Subject key identifier: D4:97:8C:BE:DF:3B:9E:D4:85:A4:C5:FC:69:8C:7E:BF:55:DF:57:7A Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019B77C6B7F036F09D650A6BA32A2C723ADD Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/1JeMvt87ntSFpMX8aYx-v1XfV3o.roa Signing time: Thu 01 Jan 2026 04:17:50 +0000 ROA not before: Thu 01 Jan 2026 04:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212999 IP address blocks: 46.8.150.0/24 maxlen: 24 95.182.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b7:f0:36:f0:9d:65:0a:6b:a3:2a:2c:72:3a:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Jan 1 04:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4978cbedf3b9ed485a4c5fc698c7ebf55df577a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d0:2f:b3:20:e8:c2:a6:55:25:9b:d9:e1:d4: 1b:cb:cc:40:c9:fb:8d:64:c7:fb:e3:7a:6c:47:c2: e4:fa:a8:1a:7b:40:5f:fc:cb:93:03:df:75:d3:52: 4e:d6:80:af:ac:49:08:fe:2e:1c:99:ea:45:75:55: db:b5:1e:6e:7e:01:58:bc:94:5f:5f:69:f4:2e:6c: 4c:fb:ae:c8:e1:e6:39:40:13:3f:26:8d:96:82:4b: ac:18:bd:ac:17:af:c6:3d:bb:ee:98:9a:6c:07:c0: 25:09:54:56:fe:13:d3:6c:d5:7b:10:cb:7a:97:2e: a6:1c:f4:64:8e:60:08:62:98:04:de:41:d0:29:f1: 66:a2:70:da:0c:22:18:c3:af:2c:e6:55:ad:27:07: 27:fb:5b:3a:ba:f5:b5:9c:1f:13:20:cf:b3:7c:86: b8:19:b1:c6:82:56:91:45:94:7e:2a:c1:b6:26:a5: 24:46:67:97:c6:fb:0c:55:8f:12:77:11:d9:19:bf: c1:2c:79:48:73:c4:31:8d:44:15:8f:e0:0b:8f:69: 56:d9:3b:a7:db:a0:37:2b:1a:6a:f0:ac:85:5f:cb: 32:7f:af:06:b0:60:50:7f:26:b1:4f:73:0e:4d:ad: cd:c6:7a:8f:0c:15:d7:8f:2a:d2:51:04:d1:ed:9a: 9c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:97:8C:BE:DF:3B:9E:D4:85:A4:C5:FC:69:8C:7E:BF:55:DF:57:7A X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/1JeMvt87ntSFpMX8aYx-v1XfV3o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.8.150.0/24 95.182.104.0/22 Signature Algorithm: sha256WithRSAEncryption 99:f0:67:60:04:51:ed:a9:0f:33:4e:23:d5:74:f1:a9:72:0e: 35:52:a1:9e:c5:f8:1b:b1:25:c1:0f:d2:c8:89:a3:49:a9:65: 96:6d:6b:8e:d6:b2:a4:34:41:9d:0f:49:5b:5f:fd:46:51:de: 25:ee:ee:67:b1:90:e2:8a:65:7f:78:b4:ec:6c:79:af:9b:a3: a5:97:46:1a:c3:78:f4:95:ac:c9:9e:e0:7c:03:e3:e7:e5:28: fc:f5:72:3c:64:92:92:a7:ed:fc:56:59:75:02:94:c2:7c:d8: 3a:c1:e0:b6:bd:49:c8:0e:6f:a2:e8:db:27:16:71:c4:97:40: d1:e0:10:ec:c8:ac:9b:d4:5e:8c:ed:3b:75:a1:06:3c:13:d1: 3e:83:3b:c5:8d:5a:06:8a:ba:13:54:d6:13:de:2b:25:44:4f: da:78:d2:d6:53:82:7b:18:44:2d:e0:31:33:df:83:cb:76:b1: f9:97:2c:96:e6:82:74:76:71:3e:38:6f:06:ae:54:1b:78:01: dd:07:e1:b3:40:24:64:69:aa:da:e9:11:7f:bc:9b:52:f9:a8: a1:cb:25:88:9f:5c:76:28:a3:07:ef:b7:ef:3a:09:25:cf:1f: de:8b:62:5b:19:35:58:ee:d4:80:db:3c:ba:a9:a4:a1:28:85: e8:13:da:5e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt3xrfwNvCdZQproyoscjrdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjYwMTAxMDQxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDk3OGNiZWRmM2I5ZWQ0ODVhNGM1ZmM2OThjN2ViZjU1ZGY1NzdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydAvsyDowqZVJZvZ4dQby8xAyfuN ZMf743psR8Lk+qgae0Bf/MuTA99101JO1oCvrEkI/i4cmepFdVXbtR5ufgFYvJRf X2n0LmxM+67I4eY5QBM/Jo2WgkusGL2sF6/GPbvumJpsB8AlCVRW/hPTbNV7EMt6 ly6mHPRkjmAIYpgE3kHQKfFmonDaDCIYw68s5lWtJwcn+1s6uvW1nB8TIM+zfIa4 GbHGglaRRZR+KsG2JqUkRmeXxvsMVY8SdxHZGb/BLHlIc8QxjUQVj+ALj2lW2Tun 26A3Kxpq8KyFX8syf68GsGBQfyaxT3MOTa3NxnqPDBXXjyrSUQTR7Zqc1QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNSXjL7fO57UhaTF/GmMfr9V31d6MB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEvMUplTXZ0ODdudFNGcE1YOGFZeC12MVhmVjNvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALgiWAwQC X7ZoMA0GCSqGSIb3DQEBCwUAA4IBAQCZ8GdgBFHtqQ8zTiPVdPGpcg41UqGexfgb sSXBD9LIiaNJqWWWbWuO1rKkNEGdD0lbX/1GUd4l7u5nsZDiimV/eLTsbHmvm6Ol l0Yaw3j0lazJnuB8A+Pn5Sj89XI8ZJKSp+38Vll1ApTCfNg6weC2vUnIDm+i6Nsn FnHEl0DR4BDsyKyb1F6M7Tt1oQY8E9E+gzvFjVoGiroTVNYT3islRE/aeNLWU4J7 GEQt4DEz34PLdrH5lyyW5oJ0dnE+OG8GrlQbeAHdB+GzQCRkaara6RF/vJtS+aih yyWIn1x2KKMH77fvOgklzx/ei2JbGTVY7tSA2zy6qaShKIXoE9pe -----END CERTIFICATE-----Generated at Sun Jan 25 20:58:33 2026 by rpki-client