This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/0-9sd-qmadUujczOz2WkJX2kNQA.roa File: 0-9sd-qmadUujczOz2WkJX2kNQA.roa (raw, json) Hash identifier: GjNrMaOgADYzx542miG7jXCQg7xlwiNJxr+8IrSPpjc= Subject key identifier: D3:EF:6C:77:EA:A6:69:D5:2E:8D:CC:CE:CF:65:A4:25:7D:A4:35:00 Certificate issuer: /CN=5e23518faa9b94a42d1a3b4d9f63b974394d0662 Certificate serial: 019B7C12BAE6F08619A9D0F2EF1AF1C06634 Authority key identifier: 5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/0-9sd-qmadUujczOz2WkJX2kNQA.roa Signing time: Fri 02 Jan 2026 00:19:20 +0000 ROA not before: Fri 02 Jan 2026 00:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24700 IP address blocks: 46.174.188.0/24 maxlen: 24 46.174.189.0/24 maxlen: 24 46.174.190.0/24 maxlen: 24 46.174.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.crl rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.mft rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:12:ba:e6:f0:86:19:a9:d0:f2:ef:1a:f1:c0:66:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e23518faa9b94a42d1a3b4d9f63b974394d0662 Validity Not Before: Jan 2 00:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d3ef6c77eaa669d52e8dcccecf65a4257da43500 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6f:d2:b9:2a:e4:4b:59:c9:62:0a:a6:b2:91: 2e:71:dc:03:43:cb:0a:78:0c:52:88:e4:36:05:21: 6b:4a:e0:dd:46:3e:6d:25:52:d6:fc:64:56:6b:fd: aa:66:fa:23:d3:fb:4a:25:c4:f3:8c:91:74:5a:84: f1:62:b1:f8:ec:9d:0e:89:a5:f4:1b:a2:8f:cc:f6: d8:71:63:51:b6:1b:32:41:a5:bf:ed:cc:38:b3:34: dd:e6:b4:bc:43:4e:68:83:d4:a8:0d:ef:ae:f1:86: 52:4a:28:e6:af:58:2c:35:eb:49:97:d8:d4:79:fb: 2d:ec:34:c1:af:b9:9f:4f:ce:58:82:d6:49:bb:7e: ac:97:8f:da:78:39:dd:e0:72:3f:bb:92:e7:c7:b1: 6c:e2:83:49:fb:8c:85:57:99:b8:2d:27:a7:84:ea: b1:bf:cb:38:0f:ac:ad:ab:46:25:58:8a:e8:09:04: af:85:4a:4f:c0:25:12:4f:21:6e:46:ea:23:8d:45: 0c:de:00:5e:72:4a:7b:e5:dc:2f:ae:82:72:02:64: e0:51:e2:48:59:8b:a4:11:53:21:b8:4a:43:ec:40: 43:84:cd:3b:a5:15:37:96:67:1c:c4:4a:e4:bb:3f: d0:98:69:3a:1f:21:fa:1f:ef:b2:02:90:8d:27:2f: 9e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:EF:6C:77:EA:A6:69:D5:2E:8D:CC:CE:CF:65:A4:25:7D:A4:35:00 X509v3 Authority Key Identifier: keyid:5E:23:51:8F:AA:9B:94:A4:2D:1A:3B:4D:9F:63:B9:74:39:4D:06:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiNRj6qblKQtGjtNn2O5dDlNBmI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/0-9sd-qmadUujczOz2WkJX2kNQA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/414b36-eca9-4e22-aed5-a48ac31dbbf0/1/XiNRj6qblKQtGjtNn2O5dDlNBmI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.174.188.0/22 Signature Algorithm: sha256WithRSAEncryption 40:20:d5:35:ac:89:b1:27:bc:ed:35:56:4b:3c:a3:c0:01:ae: 62:72:4f:33:10:75:bd:e7:5d:f1:8d:b0:c7:c6:d6:87:ed:c0: 1e:42:9f:8b:ee:e8:ba:54:a4:50:85:86:de:6e:22:23:f3:2a: cb:0b:2a:52:72:d2:83:f8:35:64:f3:1e:d8:2c:3e:13:40:29: 53:9c:d4:91:60:09:81:29:9a:1e:e6:6e:11:86:0c:3f:35:96: 6c:dc:ba:39:6e:0f:05:11:f3:9c:23:a0:ad:3c:e5:fc:1d:19: 2d:b2:f3:28:95:ba:f0:57:87:35:2e:ab:c6:8d:6a:88:17:42: 11:8c:c4:66:b2:1c:12:12:3f:4b:34:f3:13:1a:86:d4:63:ec: 9c:a1:5f:49:74:95:a1:9f:ad:34:a7:fb:75:44:16:b2:7f:cb: bb:f2:f7:45:18:6e:57:96:94:73:50:10:92:43:67:95:a9:ca: bd:68:2b:b4:39:84:e1:0f:9d:e1:40:1e:70:ae:76:00:5a:ad: 2d:08:d6:ff:45:4a:2c:8c:f9:d2:43:f1:df:d6:57:ae:dd:9b: 6b:05:86:79:24:25:68:ee:ed:26:34:60:74:d5:18:aa:8a:de: 22:e8:09:66:92:a9:68:19:1c:b6:20:75:33:f6:b6:2e:48:87: 90:7a:11:39 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8Errm8IYZqdDy7xrxwGY0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMjM1MThmYWE5Yjk0YTQyZDFhM2I0ZDlmNjNiOTc0Mzk0 ZDA2NjIwHhcNMjYwMTAyMDAxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkM2VmNmM3N2VhYTY2OWQ1MmU4ZGNjY2VjZjY1YTQyNTdkYTQzNTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvm/SuSrkS1nJYgqmspEucdwDQ8sK eAxSiOQ2BSFrSuDdRj5tJVLW/GRWa/2qZvoj0/tKJcTzjJF0WoTxYrH47J0OiaX0 G6KPzPbYcWNRthsyQaW/7cw4szTd5rS8Q05og9SoDe+u8YZSSijmr1gsNetJl9jU efst7DTBr7mfT85YgtZJu36sl4/aeDnd4HI/u5Lnx7Fs4oNJ+4yFV5m4LSenhOqx v8s4D6ytq0YlWIroCQSvhUpPwCUSTyFuRuojjUUM3gBeckp75dwvroJyAmTgUeJI WYukEVMhuEpD7EBDhM07pRU3lmccxErkuz/QmGk6HyH6H++yApCNJy+eHQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNPvbHfqpmnVLo3Mzs9lpCV9pDUAMB8GA1UdIwQY MBaAFF4jUY+qm5SkLRo7TZ9juXQ5TQZiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGlOUmo2cWJsS1F0R2p0Tm4yTzVkRGxOQm1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS80MTRiMzYtZWNhOS00ZTIyLWFlZDUt YTQ4YWMzMWRiYmYwLzEvMC05c2QtcW1hZFV1amN6T3oyV2tKWDJrTlFBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS80MTRiMzYtZWNhOS00ZTIyLWFlZDUtYTQ4YWMzMWRiYmYw LzEvWGlOUmo2cWJsS1F0R2p0Tm4yTzVkRGxOQm1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLq68MA0G CSqGSIb3DQEBCwUAA4IBAQBAINU1rImxJ7ztNVZLPKPAAa5ick8zEHW9513xjbDH xtaH7cAeQp+L7ui6VKRQhYbebiIj8yrLCypSctKD+DVk8x7YLD4TQClTnNSRYAmB KZoe5m4Rhgw/NZZs3Lo5bg8FEfOcI6CtPOX8HRktsvMolbrwV4c1LqvGjWqIF0IR jMRmshwSEj9LNPMTGobUY+ycoV9JdJWhn600p/t1RBayf8u78vdFGG5XlpRzUBCS Q2eVqcq9aCu0OYThD53hQB5wrnYAWq0tCNb/RUosjPnSQ/Hf1leu3ZtrBYZ5JCVo 7u0mNGB01Riqit4i6AlmkqloGRy2IHUz9rYuSIeQehE5 -----END CERTIFICATE-----Generated at Sun Jan 25 20:30:12 2026 by rpki-client