This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/uRy6lNHq57rdX7_VPdepBDiNmnc.roa File: uRy6lNHq57rdX7_VPdepBDiNmnc.roa (raw, json) Hash identifier: 65Rm9CIooU3CDnzNITl4VhD3i1B6DOi7f6KdO4ec990= Subject key identifier: B9:1C:BA:94:D1:EA:E7:BA:DD:5F:BF:D5:3D:D7:A9:04:38:8D:9A:77 Certificate issuer: /CN=43cf416193a1c2ed3056b647e5a46503148e3824 Certificate serial: 019B7AC91533D298D6D6DBE35964FB748184 Authority key identifier: 43:CF:41:61:93:A1:C2:ED:30:56:B6:47:E5:A4:65:03:14:8E:38:24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/uRy6lNHq57rdX7_VPdepBDiNmnc.roa Signing time: Thu 01 Jan 2026 18:19:17 +0000 ROA not before: Thu 01 Jan 2026 18:19:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 216200 IP address blocks: 46.255.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c9:15:33:d2:98:d6:d6:db:e3:59:64:fb:74:81:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43cf416193a1c2ed3056b647e5a46503148e3824 Validity Not Before: Jan 1 18:19:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b91cba94d1eae7badd5fbfd53dd7a904388d9a77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9b:9e:fd:78:50:d5:19:70:b0:05:ca:4b:05: b6:56:cd:e0:34:e0:c0:5c:bf:dd:f5:af:39:7c:f7: 57:04:0d:91:4a:de:68:44:e1:9b:ec:d9:c6:7b:26: 1a:6c:c9:eb:03:71:69:4d:41:05:0f:f3:fa:e4:e3: 20:29:e9:fe:51:11:b7:85:d6:84:b9:a0:6a:9d:bf: ed:c6:5c:da:58:fc:61:66:2c:7f:49:43:65:ab:23: 91:fc:ee:e5:b6:ae:ad:0a:7e:51:68:f1:fa:3b:19: 2e:8f:6e:f6:1c:a5:0a:0c:42:c8:bb:da:99:5a:55: f0:94:9e:78:c3:bb:27:e2:6b:39:9f:86:e7:81:f7: f3:a6:d6:00:68:cb:22:60:43:a0:63:1b:6c:12:85: e1:c2:7d:cd:32:c8:6b:d7:cf:c5:17:f8:05:5c:9b: 00:6b:98:3d:44:03:22:a8:53:24:f4:d6:74:52:53: fb:73:9e:2f:5f:5d:55:72:69:22:4a:18:6e:8e:fe: 7e:48:50:dc:eb:ce:ac:8e:59:bf:2c:f5:0f:e9:34: c7:9c:ab:85:0a:41:09:97:93:d5:6e:52:22:e2:b8: 37:7d:64:2d:ee:1f:75:d8:b2:e3:8f:d4:60:43:c7: 91:39:fd:cb:d3:16:d6:91:77:c2:40:c3:9b:35:30: 4f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:1C:BA:94:D1:EA:E7:BA:DD:5F:BF:D5:3D:D7:A9:04:38:8D:9A:77 X509v3 Authority Key Identifier: keyid:43:CF:41:61:93:A1:C2:ED:30:56:B6:47:E5:A4:65:03:14:8E:38:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/uRy6lNHq57rdX7_VPdepBDiNmnc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.255.27.0/24 Signature Algorithm: sha256WithRSAEncryption 6f:8d:08:f8:20:a8:6c:2a:f6:d9:28:7d:b4:0a:2c:d5:b7:eb: da:b4:5a:e8:bc:e8:b2:82:b4:9a:b2:de:e7:85:f5:3f:13:1f: 55:58:63:21:38:12:b4:be:41:79:a9:fe:4d:c5:5b:be:84:84: c5:d1:b6:6f:b7:91:8d:1d:78:7d:3f:d8:ad:ac:51:bf:7c:9b: 4a:7d:ea:40:54:5f:ac:b2:69:4e:3d:c4:6f:8e:d4:84:2b:0b: 20:c9:5d:ed:c2:9a:a5:9c:ff:c2:35:8e:7c:8b:aa:46:62:64: 21:7b:ad:dd:1b:9e:04:95:37:80:f7:aa:5b:d2:2f:4b:a3:10: 3f:ee:6a:b4:c8:8f:56:df:5e:bf:21:09:6f:1b:a5:4e:37:49: 7b:ec:33:7e:c2:28:27:c7:fe:01:2f:03:bb:b0:7c:a4:e1:59: 0a:b4:66:56:05:03:4c:c9:69:90:32:cb:6b:96:73:b4:72:82: c6:ed:62:d0:69:63:b1:b4:b4:3e:83:28:16:2e:c8:4f:95:9f: 8b:dc:b4:58:1a:6d:65:f2:85:5b:4b:79:63:6e:ba:04:c3:d2: 86:58:cc:f6:0f:08:c9:5b:78:8d:b2:5f:c7:0d:4b:c4:2e:f8: e3:fc:ef:a7:f4:25:a1:8c:3f:0d:c3:b7:ce:78:70:8c:90:2b: 75:9f:a3:c3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yRUz0pjW1tvjWWT7dIGEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzY2Y0MTYxOTNhMWMyZWQzMDU2YjY0N2U1YTQ2NTAzMTQ4 ZTM4MjQwHhcNMjYwMTAxMTgxOTE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOTFjYmE5NGQxZWFlN2JhZGQ1ZmJmZDUzZGQ3YTkwNDM4OGQ5YTc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJue/XhQ1RlwsAXKSwW2Vs3gNODA XL/d9a85fPdXBA2RSt5oROGb7NnGeyYabMnrA3FpTUEFD/P65OMgKen+URG3hdaE uaBqnb/txlzaWPxhZix/SUNlqyOR/O7ltq6tCn5RaPH6Oxkuj272HKUKDELIu9qZ WlXwlJ54w7sn4ms5n4bngffzptYAaMsiYEOgYxtsEoXhwn3NMshr18/FF/gFXJsA a5g9RAMiqFMk9NZ0UlP7c54vX11VcmkiShhujv5+SFDc686sjlm/LPUP6TTHnKuF CkEJl5PVblIi4rg3fWQt7h912LLjj9RgQ8eROf3L0xbWkXfCQMObNTBPIwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLkcupTR6ue63V+/1T3XqQQ4jZp3MB8GA1UdIwQY MBaAFEPPQWGTocLtMFa2R+WkZQMUjjgkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTg5QllaT2h3dTB3VnJaSDVhUmxBeFNPT0NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9hYTMxY2YtYmIzMS00OTdjLWE1Nzct MDliOTY5ZDE2MGZlLzEvdVJ5NmxOSHE1N3JkWDdfVlBkZXBCRGlObW5jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9hYTMxY2YtYmIzMS00OTdjLWE1NzctMDliOTY5ZDE2MGZl LzEvUTg5QllaT2h3dTB3VnJaSDVhUmxBeFNPT0NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALv8bMA0G CSqGSIb3DQEBCwUAA4IBAQBvjQj4IKhsKvbZKH20CizVt+vatFrovOiygrSast7n hfU/Ex9VWGMhOBK0vkF5qf5NxVu+hITF0bZvt5GNHXh9P9itrFG/fJtKfepAVF+s smlOPcRvjtSEKwsgyV3twpqlnP/CNY58i6pGYmQhe63dG54ElTeA96pb0i9LoxA/ 7mq0yI9W316/IQlvG6VON0l77DN+wignx/4BLwO7sHyk4VkKtGZWBQNMyWmQMstr lnO0coLG7WLQaWOxtLQ+gygWLshPlZ+L3LRYGm1l8oVbS3ljbroEw9KGWMz2DwjJ W3iNsl/HDUvELvjj/O+n9CWhjD8Nw7fOeHCMkCt1n6PD -----END CERTIFICATE-----Generated at Sun Jan 25 14:39:50 2026 by rpki-client