This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/4oUREHHyIkiOh0co8Pudi6bs10M.roa File: 4oUREHHyIkiOh0co8Pudi6bs10M.roa (raw, json) Hash identifier: PRIF2dM2ftg0MEjLw3V/ihyVcrr3WlqQhGD4KoMtYPw= Subject key identifier: E2:85:11:10:71:F2:22:48:8E:87:47:28:F0:FB:9D:8B:A6:EC:D7:43 Certificate issuer: /CN=a7f00d1bffff3a53e94f867d743d031b922db5b1 Certificate serial: 019B7C802956A46C37B4B04320E0D7BF56D2 Authority key identifier: A7:F0:0D:1B:FF:FF:3A:53:E9:4F:86:7D:74:3D:03:1B:92:2D:B5:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_ANG___OlPpT4Z9dD0DG5IttbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/4oUREHHyIkiOh0co8Pudi6bs10M.roa Signing time: Fri 02 Jan 2026 02:18:52 +0000 ROA not before: Fri 02 Jan 2026 02:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201924 IP address blocks: 46.29.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.mft rsync://rpki.ripe.net/repository/DEFAULT/p_ANG___OlPpT4Z9dD0DG5IttbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:29:56:a4:6c:37:b4:b0:43:20:e0:d7:bf:56:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7f00d1bffff3a53e94f867d743d031b922db5b1 Validity Not Before: Jan 2 02:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e285111071f222488e874728f0fb9d8ba6ecd743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c4:05:50:8e:b9:5b:b4:e9:3e:7a:09:63:c2: 04:a9:9a:4d:8b:43:14:b7:88:b5:b6:f5:06:8f:d8: 05:66:cd:c8:49:ce:42:b4:1f:8c:78:ec:3f:c9:65: 4b:fc:1f:dc:d1:b5:5b:50:70:97:bd:7f:8f:a1:8e: 72:63:f3:27:9c:6f:07:95:3b:a0:22:0a:a1:a5:7e: 53:a6:4e:b9:7b:86:ba:37:40:10:d7:a0:2c:cf:e0: cf:a1:7d:47:d4:99:5c:d8:72:de:3a:af:d9:28:ff: 10:a1:09:7f:55:4e:8f:d7:e7:3b:0d:d2:63:33:f9: a5:62:2d:d0:ce:e8:25:8d:f1:8a:15:07:9f:7c:d9: e8:92:2b:fc:96:6d:b5:a2:11:a3:87:92:33:1b:ff: 0c:15:29:01:0c:d2:14:2a:e2:62:ad:30:99:55:ce: 7d:5a:0d:e2:1c:b9:68:6a:d2:c2:73:1e:5d:3e:1a: 90:47:b4:f2:fa:f9:86:35:6f:e4:ce:08:0b:30:8d: b8:60:56:8c:85:68:3d:db:e2:cf:5f:64:34:e9:37: 0b:d9:4b:e1:2e:61:12:f4:f3:0f:87:8a:f2:82:7b: 6a:19:c2:9b:35:a2:16:94:5b:60:d9:c8:b0:e8:0e: 85:57:79:16:a7:5f:cf:d1:bc:b4:4d:4c:93:57:b5: 1c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:85:11:10:71:F2:22:48:8E:87:47:28:F0:FB:9D:8B:A6:EC:D7:43 X509v3 Authority Key Identifier: keyid:A7:F0:0D:1B:FF:FF:3A:53:E9:4F:86:7D:74:3D:03:1B:92:2D:B5:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_ANG___OlPpT4Z9dD0DG5IttbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/4oUREHHyIkiOh0co8Pudi6bs10M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.29.2.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:ca:c4:24:b6:44:ea:3c:5b:11:42:bc:10:77:17:36:58:87: 08:76:6e:36:a7:03:38:23:4f:8b:5c:3f:d2:4c:4a:02:13:0b: 1d:8f:23:c5:d4:20:a5:32:c9:b4:f5:1d:27:03:f5:ab:79:d9: e4:b0:ab:99:1c:b4:c2:64:4f:29:7b:ce:ae:28:86:6a:53:84: 72:0d:8b:03:0b:de:5a:9b:5e:47:e9:a9:23:f5:1d:7b:bb:31: 55:19:2c:72:b2:c6:54:97:45:50:43:84:99:70:87:c2:f7:51: d6:d1:36:f6:46:c1:f6:f1:5a:ed:63:24:18:d3:f0:f2:2a:9f: 94:75:7f:fb:22:cc:8c:c0:87:be:37:c1:c7:d8:6c:89:4f:f7: 59:a6:b9:5e:6b:d2:29:9b:df:60:61:19:08:d3:00:1d:34:84: 60:af:bd:cc:45:75:ae:7c:9d:fe:8c:e5:7a:1a:c8:64:74:42: bb:3d:1c:c1:13:ea:f3:34:e0:a4:84:3c:cd:7f:eb:f8:0b:8e: 86:8b:53:8e:33:af:0b:9a:21:71:d7:aa:46:19:c5:49:dd:ad: 05:29:e2:0d:e0:4a:9a:df:87:7a:be:c4:34:9c:99:21:0c:39: c4:2e:79:f4:4c:71:7d:ea:07:c8:81:9f:af:d6:4c:9b:e7:30: 09:3a:d7:aa -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gClWpGw3tLBDIODXv1bSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZjAwZDFiZmZmZjNhNTNlOTRmODY3ZDc0M2QwMzFiOTIy ZGI1YjEwHhcNMjYwMTAyMDIxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjg1MTExMDcxZjIyMjQ4OGU4NzQ3MjhmMGZiOWQ4YmE2ZWNkNzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MQFUI65W7TpPnoJY8IEqZpNi0MU t4i1tvUGj9gFZs3ISc5CtB+MeOw/yWVL/B/c0bVbUHCXvX+PoY5yY/MnnG8HlTug IgqhpX5Tpk65e4a6N0AQ16Asz+DPoX1H1Jlc2HLeOq/ZKP8QoQl/VU6P1+c7DdJj M/mlYi3QzugljfGKFQeffNnokiv8lm21ohGjh5IzG/8MFSkBDNIUKuJirTCZVc59 Wg3iHLloatLCcx5dPhqQR7Ty+vmGNW/kzggLMI24YFaMhWg92+LPX2Q06TcL2Uvh LmES9PMPh4rygntqGcKbNaIWlFtg2ciw6A6FV3kWp1/P0by0TUyTV7UcKQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOKFERBx8iJIjodHKPD7nYum7NdDMB8GA1UdIwQY MBaAFKfwDRv//zpT6U+GfXQ9AxuSLbWxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcF9BTkdfX19PbFBwVDRaOWREMERHNUl0dGJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi80ZmYwNmYtZTk3Zi00YzVhLTlkYTct N2VlMDkwNTA0ZmJhLzEvNG9VUkVISHlJa2lPaDBjbzhQdWRpNmJzMTBNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi80ZmYwNmYtZTk3Zi00YzVhLTlkYTctN2VlMDkwNTA0ZmJh LzEvcF9BTkdfX19PbFBwVDRaOWREMERHNUl0dGJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALh0CMA0G CSqGSIb3DQEBCwUAA4IBAQB+ysQktkTqPFsRQrwQdxc2WIcIdm42pwM4I0+LXD/S TEoCEwsdjyPF1CClMsm09R0nA/WrednksKuZHLTCZE8pe86uKIZqU4RyDYsDC95a m15H6akj9R17uzFVGSxyssZUl0VQQ4SZcIfC91HW0Tb2RsH28VrtYyQY0/DyKp+U dX/7IsyMwIe+N8HH2GyJT/dZprlea9Ipm99gYRkI0wAdNIRgr73MRXWufJ3+jOV6 GshkdEK7PRzBE+rzNOCkhDzNf+v4C46Gi1OOM68LmiFx16pGGcVJ3a0FKeIN4Eqa 34d6vsQ0nJkhDDnELnn0THF96gfIgZ+v1kyb5zAJOteq -----END CERTIFICATE-----Generated at Mon Jan 26 10:13:56 2026 by rpki-client