This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/S2uqhGd5VIemjik2qHeVybZJomc.roa File: S2uqhGd5VIemjik2qHeVybZJomc.roa (raw, json) Hash identifier: XK9+/uD+Iw2orGdtdQp1Ic0RyG3Erof5uesouhGwg38= Subject key identifier: 4B:6B:AA:84:67:79:54:87:A6:8E:29:36:A8:77:95:C9:B6:49:A2:67 Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc Certificate serial: 019BE15A9C4FDA12E4DEE84E8386FE7A95D7 Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/S2uqhGd5VIemjik2qHeVybZJomc.roa Signing time: Wed 21 Jan 2026 16:19:30 +0000 ROA not before: Wed 21 Jan 2026 16:19:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205759 IP address blocks: 46.151.182.0/24 maxlen: 24 83.142.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:e1:5a:9c:4f:da:12:e4:de:e8:4e:83:86:fe:7a:95:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc Validity Not Before: Jan 21 16:19:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b6baa8467795487a68e2936a87795c9b649a267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d3:39:97:3d:eb:38:27:a2:d6:19:70:3a:90: 16:f4:8a:c9:4b:50:05:f8:9e:ec:7c:76:26:a4:8a: 62:77:09:c5:4b:c1:0a:12:ac:d0:bc:b2:eb:5e:68: 41:3a:99:f5:53:09:cb:26:65:03:cd:2a:e0:92:67: ee:6c:4e:46:a7:13:f5:6a:6b:ae:e6:dc:d0:21:ee: 0b:b4:c8:6d:50:f8:59:a6:00:e4:9d:7d:28:ea:7b: 17:b4:3c:e0:23:17:8a:82:9c:8c:b4:26:12:94:21: 48:ed:70:11:5c:72:8d:b9:45:b9:81:00:9e:3d:7e: 3e:9b:fb:e9:92:9a:f5:63:78:d9:1a:dd:3f:f0:d6: 89:12:c2:8a:14:3c:a4:22:16:6b:5b:62:01:ec:8c: 7b:0a:f2:d6:13:55:10:07:c3:1f:1a:0c:13:b3:50: d6:24:3e:b6:46:af:f8:ba:c4:75:c3:36:ed:8a:e8: ca:06:d3:d3:dd:01:a3:78:12:ac:7d:b9:05:3d:7f: 23:53:f5:5c:2e:84:ca:c0:4f:f5:93:d9:09:df:7b: fe:4b:0d:de:2f:cd:94:ab:0d:c0:f1:ff:e6:e2:72: a2:4b:ea:f6:57:d1:94:68:3e:12:ba:93:1b:4a:6f: c3:6f:79:fe:17:8d:03:3d:c8:9c:23:3f:73:7d:b9: 05:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:6B:AA:84:67:79:54:87:A6:8E:29:36:A8:77:95:C9:B6:49:A2:67 X509v3 Authority Key Identifier: keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/S2uqhGd5VIemjik2qHeVybZJomc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.151.182.0/24 83.142.209.0/24 Signature Algorithm: sha256WithRSAEncryption 2f:88:69:2e:b7:68:47:1a:c5:35:ed:fe:ef:66:0c:0b:49:38: d8:10:03:be:0b:ea:29:a8:84:f6:81:e6:2f:cf:ac:50:2a:27: 0a:a4:e8:56:b9:2a:6e:63:aa:67:4b:1f:f8:28:42:1f:5e:43: 3e:2b:ab:f3:93:71:9b:be:60:4c:f6:72:ed:5f:37:35:c0:2d: 75:2c:11:73:50:e3:1c:89:1c:39:92:c8:88:dc:2d:0e:3e:8c: a4:d0:c9:3a:24:88:22:0a:f5:3c:17:57:b5:a5:3f:4d:c2:d3: a3:53:82:ee:e4:b8:b6:e6:89:49:3e:4b:4f:bf:94:da:f5:d1: 4a:96:4a:ee:f1:6d:fc:92:55:2a:d5:f9:61:d1:b1:48:0e:bc: 47:a3:d9:f6:97:bd:8b:98:88:b3:00:7a:fa:5d:c2:4d:7d:e5: ad:99:5f:5b:f8:4d:18:7a:c5:b6:45:51:ac:fe:e2:a9:a2:87: 4a:bd:16:8a:ba:80:e5:0e:08:bf:35:cc:58:53:ae:c1:55:66: 7e:33:07:20:76:34:3f:90:a8:e4:26:3a:b1:ee:1f:e0:11:70: 83:eb:d2:f4:18:ea:7c:3f:22:c4:74:69:5f:55:0d:51:98:d7: 15:3c:3b:01:11:f5:7b:ef:38:d7:7a:42:2f:84:c8:20:49:6d: 18:80:4d:76 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZvhWpxP2hLk3uhOg4b+epXXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYjQ0MWRhZGJiZWNiNjk2NWQ0ZWExZjA0NmNjNWM4ZTI4 ODE3ZmMwHhcNMjYwMTIxMTYxOTMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjZiYWE4NDY3Nzk1NDg3YTY4ZTI5MzZhODc3OTVjOWI2NDlhMjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9M5lz3rOCei1hlwOpAW9IrJS1AF +J7sfHYmpIpidwnFS8EKEqzQvLLrXmhBOpn1UwnLJmUDzSrgkmfubE5GpxP1amuu 5tzQIe4LtMhtUPhZpgDknX0o6nsXtDzgIxeKgpyMtCYSlCFI7XARXHKNuUW5gQCe PX4+m/vpkpr1Y3jZGt0/8NaJEsKKFDykIhZrW2IB7Ix7CvLWE1UQB8MfGgwTs1DW JD62Rq/4usR1wzbtiujKBtPT3QGjeBKsfbkFPX8jU/VcLoTKwE/1k9kJ33v+Sw3e L82Uqw3A8f/m4nKiS+r2V9GUaD4SupMbSm/Db3n+F40DPcicIz9zfbkFUQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEtrqoRneVSHpo4pNqh3lcm2SaJnMB8GA1UdIwQY MBaAFI60QdrbvstpZdTqHwRsxcjiiBf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmIt NDZiOTQ5MDkyY2JlLzEvUzJ1cWhHZDVWSWVtamlrMnFIZVZ5YlpKb21jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmItNDZiOTQ5MDkyY2Jl LzEvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALpe2AwQA U47RMA0GCSqGSIb3DQEBCwUAA4IBAQAviGkut2hHGsU17f7vZgwLSTjYEAO+C+op qIT2geYvz6xQKicKpOhWuSpuY6pnSx/4KEIfXkM+K6vzk3GbvmBM9nLtXzc1wC11 LBFzUOMciRw5ksiI3C0OPoyk0Mk6JIgiCvU8F1e1pT9NwtOjU4Lu5Li25olJPktP v5Ta9dFKlkru8W38klUq1flh0bFIDrxHo9n2l72LmIizAHr6XcJNfeWtmV9b+E0Y esW2RVGs/uKpoodKvRaKuoDlDgi/NcxYU67BVWZ+MwcgdjQ/kKjkJjqx7h/gEXCD 69L0GOp8PyLEdGlfVQ1RmNcVPDsBEfV77zjXekIvhMggSW0YgE12 -----END CERTIFICATE-----Generated at Sun Jan 25 07:15:44 2026 by rpki-client