This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/eTcAXTyhlwWH5fSp-Pjurm6-nUM.roa File: eTcAXTyhlwWH5fSp-Pjurm6-nUM.roa (raw, json) Hash identifier: gBUrxzmGNJtSzYyVURltnbxrnWTt23qYR68F7kLRdUM= Subject key identifier: 79:37:00:5D:3C:A1:97:05:87:E5:F4:A9:F8:F8:EE:AE:6E:BE:9D:43 Certificate issuer: /CN=a7f00d1bffff3a53e94f867d743d031b922db5b1 Certificate serial: 019B7C80281FDC0ED24D4A46FE75338E1298 Authority key identifier: A7:F0:0D:1B:FF:FF:3A:53:E9:4F:86:7D:74:3D:03:1B:92:2D:B5:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_ANG___OlPpT4Z9dD0DG5IttbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/eTcAXTyhlwWH5fSp-Pjurm6-nUM.roa Signing time: Fri 02 Jan 2026 02:18:52 +0000 ROA not before: Fri 02 Jan 2026 02:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12905 IP address blocks: 46.29.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.mft rsync://rpki.ripe.net/repository/DEFAULT/p_ANG___OlPpT4Z9dD0DG5IttbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:28:1f:dc:0e:d2:4d:4a:46:fe:75:33:8e:12:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7f00d1bffff3a53e94f867d743d031b922db5b1 Validity Not Before: Jan 2 02:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7937005d3ca1970587e5f4a9f8f8eeae6ebe9d43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5b:ea:77:30:e0:a3:38:e1:f3:10:f8:b9:dc: 78:ba:a8:ee:dc:61:5c:20:65:78:85:41:f3:48:d2: 60:81:eb:c1:93:81:ed:07:42:dc:69:f3:58:39:9c: 2e:6c:5a:85:e1:5f:83:eb:77:d7:c6:74:c8:e3:ad: f9:5c:ad:c4:bd:44:c0:85:ac:dd:b3:d0:a3:dc:31: 9c:71:b0:7f:e1:ed:99:cd:82:a4:49:18:28:b9:c3: 99:03:77:92:7e:87:74:70:dd:07:a0:ff:84:80:c0: 74:ab:6a:db:6f:3a:b9:a5:a8:ef:30:d0:79:8f:5c: 9a:30:71:68:d6:a1:b6:80:e6:ed:97:70:50:77:87: dd:ae:eb:50:38:0a:6f:48:16:0c:3e:65:ff:7d:7e: 83:c8:f8:35:fc:24:a2:9f:68:30:e2:ad:87:a9:02: 15:b8:b3:e8:2c:8e:5d:1c:ca:40:13:10:36:16:f9: f6:e2:81:0f:12:7d:d5:8a:58:0f:8a:8e:e5:e9:71: 97:ff:c2:50:a4:c0:b3:de:ab:6c:c4:d9:38:8e:0b: 86:b2:28:23:cd:dc:49:86:e3:c4:b5:c5:20:e4:ce: c6:c4:1f:54:0b:ff:64:58:ac:e1:fb:e0:97:1f:cc: 31:da:39:14:08:9c:ff:0b:a0:84:5b:a5:28:9e:b9: d7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:37:00:5D:3C:A1:97:05:87:E5:F4:A9:F8:F8:EE:AE:6E:BE:9D:43 X509v3 Authority Key Identifier: keyid:A7:F0:0D:1B:FF:FF:3A:53:E9:4F:86:7D:74:3D:03:1B:92:2D:B5:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_ANG___OlPpT4Z9dD0DG5IttbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/eTcAXTyhlwWH5fSp-Pjurm6-nUM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.29.1.0/24 Signature Algorithm: sha256WithRSAEncryption 26:97:f7:3f:99:e5:8b:f6:c6:e6:57:70:eb:77:78:45:f6:db: 1a:27:d8:2e:9f:8e:b1:13:79:9a:01:1f:47:2c:64:77:be:f9: 4c:0e:5e:c4:2e:63:18:f8:25:ce:18:8f:a6:c6:95:74:55:32: fb:44:0d:8a:93:b7:60:46:ba:ac:20:57:c0:bf:ec:b4:6d:6e: e8:c8:97:d4:0f:d4:88:e6:eb:a6:54:b2:85:b5:4d:70:2c:42: a8:71:ca:d2:1d:03:a0:10:e1:3e:e6:60:84:7b:e5:59:27:67: cd:bf:ee:a6:1d:85:89:0a:1a:61:7b:fb:15:2d:49:ea:c1:34: 85:c6:ba:0b:6b:14:d7:83:5b:5e:ce:01:88:7d:b7:13:b0:b3: ce:10:81:e0:d0:73:51:00:f9:ae:db:7e:46:78:22:80:cf:22: 14:56:02:aa:42:72:62:42:00:ee:e8:41:9b:b9:7c:b0:93:17: 8b:a2:d9:88:83:c0:32:2c:c6:60:9e:19:e2:13:a7:e8:0c:98: 54:84:36:e5:b0:03:8f:21:b8:0e:e3:3e:dc:f1:53:48:d1:0d: 9d:36:b2:b6:57:7d:76:0a:7c:82:8a:34:67:db:b3:2f:68:33: 32:bf:62:d0:b2:e7:ab:bc:a4:61:5c:14:83:9e:8c:cc:3a:70: 0d:77:23:d6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8gCgf3A7STUpG/nUzjhKYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZjAwZDFiZmZmZjNhNTNlOTRmODY3ZDc0M2QwMzFiOTIy ZGI1YjEwHhcNMjYwMTAyMDIxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OTM3MDA1ZDNjYTE5NzA1ODdlNWY0YTlmOGY4ZWVhZTZlYmU5ZDQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlvqdzDgozjh8xD4udx4uqju3GFc IGV4hUHzSNJggevBk4HtB0LcafNYOZwubFqF4V+D63fXxnTI4635XK3EvUTAhazd s9Cj3DGccbB/4e2ZzYKkSRgoucOZA3eSfod0cN0HoP+EgMB0q2rbbzq5pajvMNB5 j1yaMHFo1qG2gObtl3BQd4fdrutQOApvSBYMPmX/fX6DyPg1/CSin2gw4q2HqQIV uLPoLI5dHMpAExA2Fvn24oEPEn3VilgPio7l6XGX/8JQpMCz3qtsxNk4jguGsigj zdxJhuPEtcUg5M7GxB9UC/9kWKzh++CXH8wx2jkUCJz/C6CEW6UonrnXPQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHk3AF08oZcFh+X0qfj47q5uvp1DMB8GA1UdIwQY MBaAFKfwDRv//zpT6U+GfXQ9AxuSLbWxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcF9BTkdfX19PbFBwVDRaOWREMERHNUl0dGJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi80ZmYwNmYtZTk3Zi00YzVhLTlkYTct N2VlMDkwNTA0ZmJhLzEvZVRjQVhUeWhsd1dINWZTcC1QanVybTYtblVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi80ZmYwNmYtZTk3Zi00YzVhLTlkYTctN2VlMDkwNTA0ZmJh LzEvcF9BTkdfX19PbFBwVDRaOWREMERHNUl0dGJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALh0BMA0G CSqGSIb3DQEBCwUAA4IBAQAml/c/meWL9sbmV3Drd3hF9tsaJ9gun46xE3maAR9H LGR3vvlMDl7ELmMY+CXOGI+mxpV0VTL7RA2Kk7dgRrqsIFfAv+y0bW7oyJfUD9SI 5uumVLKFtU1wLEKoccrSHQOgEOE+5mCEe+VZJ2fNv+6mHYWJChphe/sVLUnqwTSF xroLaxTXg1tezgGIfbcTsLPOEIHg0HNRAPmu235GeCKAzyIUVgKqQnJiQgDu6EGb uXywkxeLotmIg8AyLMZgnhniE6foDJhUhDblsAOPIbgO4z7c8VNI0Q2dNrK2V312 CnyCijRn27MvaDMyv2LQsuervKRhXBSDnozMOnANdyPW -----END CERTIFICATE-----Generated at Mon Jan 26 10:13:57 2026 by rpki-client