This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/95n53MPAl62Bp8gdAx6GUcBNH6s.roa File: 95n53MPAl62Bp8gdAx6GUcBNH6s.roa (raw, json) Hash identifier: SFJj356Hap+M3guGi+p9KYnj5vkCtgLdD7PsVKZ7QL0= Subject key identifier: F7:99:F9:DC:C3:C0:97:AD:81:A7:C8:1D:03:1E:86:51:C0:4D:1F:AB Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Certificate serial: 019B7CEDCF3796BD896802B40ECD4E169057 Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/95n53MPAl62Bp8gdAx6GUcBNH6s.roa Signing time: Fri 02 Jan 2026 04:18:38 +0000 ROA not before: Fri 02 Jan 2026 04:18:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210490 IP address blocks: 46.229.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:cf:37:96:bd:89:68:02:b4:0e:cd:4e:16:90:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Validity Not Before: Jan 2 04:18:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f799f9dcc3c097ad81a7c81d031e8651c04d1fab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:29:9c:a5:11:f2:e2:62:c5:e4:bd:c2:32:0b: 44:a4:7d:9b:e5:4d:26:b3:12:5e:ac:44:24:d4:f3: 5f:93:b8:06:55:7f:58:2d:59:45:c7:61:12:8b:83: 92:09:ba:75:76:36:60:9f:cf:c1:90:f1:95:b3:32: 08:b6:29:c7:6c:dd:61:3a:d0:e0:ac:61:86:26:74: 11:c3:da:c4:cd:6b:42:2f:0d:77:b7:75:5f:db:c4: aa:10:45:ca:73:ff:37:7e:de:f5:11:ef:f2:b1:99: 73:cc:5c:c6:0e:fe:76:3a:bc:f9:83:f8:d9:23:61: 6a:36:95:22:3a:55:b0:df:71:05:aa:46:f4:37:e3: a2:93:e1:31:b0:47:80:3e:70:6b:18:3e:99:a7:2d: a4:de:cd:b3:8a:26:fa:f1:a4:95:16:d9:29:c8:bd: 5b:1f:a6:7d:cc:40:93:fb:1a:15:12:03:f2:ec:9b: b5:53:b6:ef:79:4b:a6:72:bb:2f:c1:41:2a:ba:92: b9:34:9e:c1:69:50:41:d0:9e:a5:a2:5c:98:1e:d9: be:18:d9:ac:a4:34:41:ae:78:37:4a:75:4f:92:3f: 45:92:31:4b:f7:76:17:6b:db:86:8e:64:c5:be:92: f0:37:52:2f:fe:92:2c:d9:09:61:d0:03:86:bd:03: 98:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:99:F9:DC:C3:C0:97:AD:81:A7:C8:1D:03:1E:86:51:C0:4D:1F:AB X509v3 Authority Key Identifier: keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/95n53MPAl62Bp8gdAx6GUcBNH6s.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.229.54.0/24 Signature Algorithm: sha256WithRSAEncryption a1:bb:10:e4:0b:91:69:05:37:a6:e9:51:4a:47:43:f7:64:e1: 0f:9c:37:8d:04:e2:4e:1c:4d:1d:8a:a4:f0:55:3a:2b:41:5d: 34:ca:c9:14:1d:b9:a9:62:51:c4:9d:3c:1d:61:39:d2:d7:ca: e2:dd:24:9d:0d:1e:0b:71:1d:1f:d8:59:95:55:fa:0c:1c:92: 4d:de:4c:da:74:2b:81:bf:42:6f:78:25:2d:40:d0:62:04:3f: 43:46:e5:f8:c6:78:9e:75:b3:2d:ea:2f:71:2b:cc:93:6c:f6: 4d:7f:99:9a:25:fc:e3:98:50:8a:5b:3d:93:26:27:6e:16:89: cd:d0:71:ef:67:c3:05:50:0b:0f:47:8c:48:cd:9c:43:df:33: 9f:5c:f9:b2:b2:b5:dc:20:b3:63:ad:8e:96:1b:e3:6a:23:52: ca:be:e2:14:40:5e:96:a7:dc:7d:57:a4:44:85:f5:c7:bc:88: 19:69:fe:7b:15:5e:51:1c:0a:dc:7f:d6:79:c0:49:1e:38:4a: ec:a1:8a:93:b7:26:31:8f:1e:87:66:f9:e8:80:2c:82:b1:69: a2:29:2b:cc:03:33:19:e5:c0:96:6c:22:4f:a4:ac:c1:00:32: 7f:45:f3:15:a8:de:26:83:45:c0:05:07:7c:50:08:a1:67:4c: 41:dd:2e:87 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87c83lr2JaAK0Ds1OFpBXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YmNjMTJhZmE0ZjA1NzM5ZjQ1ZjYwNWUyMjFjNjRjM2Mw ZDJlZDYwHhcNMjYwMTAyMDQxODM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzk5ZjlkY2MzYzA5N2FkODFhN2M4MWQwMzFlODY1MWMwNGQxZmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCmcpRHy4mLF5L3CMgtEpH2b5U0m sxJerEQk1PNfk7gGVX9YLVlFx2ESi4OSCbp1djZgn8/BkPGVszIItinHbN1hOtDg rGGGJnQRw9rEzWtCLw13t3Vf28SqEEXKc/83ft71Ee/ysZlzzFzGDv52Orz5g/jZ I2FqNpUiOlWw33EFqkb0N+Oik+ExsEeAPnBrGD6Zpy2k3s2ziib68aSVFtkpyL1b H6Z9zECT+xoVEgPy7Ju1U7bveUumcrsvwUEqupK5NJ7BaVBB0J6lolyYHtm+GNms pDRBrng3SnVPkj9FkjFL93YXa9uGjmTFvpLwN1Iv/pIs2Qlh0AOGvQOYhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPeZ+dzDwJetgafIHQMehlHATR+rMB8GA1UdIwQY MBaAFKS8wSr6TwVzn0X2BeIhxkw8DS7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2Mt ODhiMDE2YmJkNTgxLzEvOTVuNTNNUEFsNjJCcDhnZEF4NkdVY0JOSDZzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2MtODhiMDE2YmJkNTgx LzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALuU2MA0G CSqGSIb3DQEBCwUAA4IBAQChuxDkC5FpBTem6VFKR0P3ZOEPnDeNBOJOHE0diqTw VTorQV00yskUHbmpYlHEnTwdYTnS18ri3SSdDR4LcR0f2FmVVfoMHJJN3kzadCuB v0JveCUtQNBiBD9DRuX4xniedbMt6i9xK8yTbPZNf5maJfzjmFCKWz2TJiduFonN 0HHvZ8MFUAsPR4xIzZxD3zOfXPmysrXcILNjrY6WG+NqI1LKvuIUQF6Wp9x9V6RE hfXHvIgZaf57FV5RHArcf9Z5wEkeOErsoYqTtyYxjx6HZvnogCyCsWmiKSvMAzMZ 5cCWbCJPpKzBADJ/RfMVqN4mg0XABQd8UAihZ0xB3S6H -----END CERTIFICATE-----Generated at Mon Jan 26 10:23:08 2026 by rpki-client