This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/s_5QpDGJrsLFrzczLgoR3EMf0m0.roa File: s_5QpDGJrsLFrzczLgoR3EMf0m0.roa (raw, json) Hash identifier: GFdMpEO6Z/wYXVa3+ThU6vuq/k+ifYhFXbDk0JiqBUE= Subject key identifier: B3:FE:50:A4:31:89:AE:C2:C5:AF:37:33:2E:0A:11:DC:43:1F:D2:6D Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019B77C6B86A225654C49117126F5B270D1D Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/s_5QpDGJrsLFrzczLgoR3EMf0m0.roa Signing time: Thu 01 Jan 2026 04:17:50 +0000 ROA not before: Thu 01 Jan 2026 04:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213592 IP address blocks: 46.8.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b8:6a:22:56:54:c4:91:17:12:6f:5b:27:0d:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Jan 1 04:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b3fe50a43189aec2c5af37332e0a11dc431fd26d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:24:60:5d:9f:63:af:31:70:f4:47:e4:dd:c8: 9e:d9:b7:4a:f6:3e:cf:5b:a8:f1:52:ae:5a:47:77: 75:00:fc:bc:62:bf:b3:0c:3f:62:71:6d:cf:8e:eb: 08:e0:6b:a7:b6:d1:a6:06:b3:ac:7b:6b:3e:24:d3: 83:13:18:a8:38:55:91:66:18:32:99:c2:7f:60:4b: 0d:e2:6b:cc:41:1c:c1:ca:a8:f1:98:1b:f0:65:b6: ea:6a:50:cd:24:36:a9:81:d8:04:04:d1:23:fe:72: dc:a1:29:22:51:91:0c:bf:f4:7c:02:e8:ef:31:65: 4f:94:42:ec:52:9f:3f:af:fc:5a:bd:72:12:66:d3: ff:7d:93:df:61:3a:01:dc:e4:8b:92:4f:80:45:a1: 6f:6e:60:a7:5c:e5:c7:ac:32:ca:14:db:10:01:04: c2:64:e0:9b:ac:7d:da:f6:d4:ce:ea:80:47:b4:1d: c8:47:ea:1f:b9:df:ba:a8:ad:7b:e4:9f:ce:a7:9c: 73:b4:ec:f2:ee:9c:60:c3:02:43:f2:8a:5c:3b:95: e5:79:36:d6:3a:aa:a9:b9:65:46:63:74:68:57:aa: 3a:82:ab:e1:10:ca:68:1a:0c:7f:76:6a:92:e2:c3: 00:ae:cc:02:0d:ea:f5:88:64:a0:f4:23:85:d4:85: 49:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:FE:50:A4:31:89:AE:C2:C5:AF:37:33:2E:0A:11:DC:43:1F:D2:6D X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/s_5QpDGJrsLFrzczLgoR3EMf0m0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.8.77.0/24 Signature Algorithm: sha256WithRSAEncryption b3:fc:26:57:07:03:cb:26:b3:0d:b9:56:7a:96:b7:82:4a:b8: 24:12:76:f4:dc:1d:64:f8:09:60:d7:68:6a:03:e9:a0:c3:be: e9:5b:b5:12:33:ff:36:f7:2d:66:b0:46:96:29:fc:80:91:76: 61:0b:82:ef:d9:16:9c:7f:7f:89:1e:96:8c:5c:45:2c:24:da: 15:a6:3f:dc:6d:11:0e:da:73:f5:78:1b:ad:34:48:53:40:7f: 3a:7a:59:0a:c6:b8:19:f4:e1:3e:e1:63:47:fc:fa:75:a8:a6: 9a:a2:33:de:74:58:68:e1:cb:b1:b3:93:f8:3a:8b:c5:ee:6d: e7:ee:db:89:22:af:b9:82:35:8e:27:86:69:c2:54:e9:79:28: 95:c3:e7:6c:f8:82:1c:eb:dd:a8:02:6d:e5:a5:de:5a:62:02: 10:28:c4:a4:68:b5:21:99:38:42:3b:6d:d8:c5:16:26:a9:5a: bf:a5:ca:f4:ff:64:be:c0:da:0f:37:36:bb:1b:18:d3:58:98: 24:05:b8:ed:4d:d7:10:9d:44:b9:af:70:41:4a:5f:ec:6d:b0: 99:e7:00:f0:71:3b:84:91:02:be:a7:60:c2:01:2f:c2:15:8b: db:11:32:4e:24:ba:06:4d:f1:1e:5e:8b:c6:90:2c:58:34:8a: 4b:be:03:43 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xrhqIlZUxJEXEm9bJw0dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjYwMTAxMDQxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiM2ZlNTBhNDMxODlhZWMyYzVhZjM3MzMyZTBhMTFkYzQzMWZkMjZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4SRgXZ9jrzFw9Efk3cie2bdK9j7P W6jxUq5aR3d1APy8Yr+zDD9icW3PjusI4GunttGmBrOse2s+JNODExioOFWRZhgy mcJ/YEsN4mvMQRzByqjxmBvwZbbqalDNJDapgdgEBNEj/nLcoSkiUZEMv/R8Aujv MWVPlELsUp8/r/xavXISZtP/fZPfYToB3OSLkk+ARaFvbmCnXOXHrDLKFNsQAQTC ZOCbrH3a9tTO6oBHtB3IR+ofud+6qK175J/Op5xztOzy7pxgwwJD8opcO5XleTbW OqqpuWVGY3RoV6o6gqvhEMpoGgx/dmqS4sMArswCDer1iGSg9COF1IVJ8wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLP+UKQxia7Cxa83My4KEdxDH9JtMB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEvc181UXBER0pyc0xGcnpjekxnb1IzRU1mMG0wLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALghNMA0G CSqGSIb3DQEBCwUAA4IBAQCz/CZXBwPLJrMNuVZ6lreCSrgkEnb03B1k+Alg12hq A+mgw77pW7USM/829y1msEaWKfyAkXZhC4Lv2Racf3+JHpaMXEUsJNoVpj/cbREO 2nP1eButNEhTQH86elkKxrgZ9OE+4WNH/Pp1qKaaojPedFho4cuxs5P4OovF7m3n 7tuJIq+5gjWOJ4ZpwlTpeSiVw+ds+IIc692oAm3lpd5aYgIQKMSkaLUhmThCO23Y xRYmqVq/pcr0/2S+wNoPNza7GxjTWJgkBbjtTdcQnUS5r3BBSl/sbbCZ5wDwcTuE kQK+p2DCAS/CFYvbETJOJLoGTfEeXovGkCxYNIpLvgND -----END CERTIFICATE-----Generated at Sun Jan 25 20:58:32 2026 by rpki-client