This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/nZX_nzH3JzTrJeZ8L9ZU0lIyk-4.roa File: nZX_nzH3JzTrJeZ8L9ZU0lIyk-4.roa (raw, json) Hash identifier: BdZa7hgF5JlHhd3QhsJDvnmYPHKo0HSuto3Mzwo2NpU= Subject key identifier: 9D:95:FF:9F:31:F7:27:34:EB:25:E6:7C:2F:D6:54:D2:52:32:93:EE Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901 Certificate serial: 019B7A5B76AC90E2797190C33441F0A89B1C Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/nZX_nzH3JzTrJeZ8L9ZU0lIyk-4.roa Signing time: Thu 01 Jan 2026 16:19:33 +0000 ROA not before: Thu 01 Jan 2026 16:19:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 30937 IP address blocks: 46.253.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:76:ac:90:e2:79:71:90:c3:34:41:f0:a8:9b:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901 Validity Not Before: Jan 1 16:19:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d95ff9f31f72734eb25e67c2fd654d2523293ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ee:2f:cf:7e:4d:f8:a0:61:69:5e:de:a9:14: 81:e4:d5:f6:eb:06:11:24:3c:70:4c:6d:2f:08:57: ea:e1:3a:1c:9f:a7:cc:9f:3b:db:19:e1:4f:d4:63: fb:c8:58:6d:b6:d2:77:e1:de:d9:6c:1d:c1:f7:3a: 03:c0:0b:e5:63:6c:cd:c8:12:ab:23:1b:64:ca:89: 3b:6a:18:d1:36:e9:4e:86:29:3f:d5:9f:71:e2:90: 6a:da:c5:92:af:1f:ea:77:1f:20:5d:57:0b:26:66: 23:d0:90:ef:0a:6d:73:df:3d:bd:7b:ea:5f:98:a9: 82:59:17:ce:91:b5:5f:33:0d:48:4c:d4:68:8c:eb: a7:34:a8:7b:18:da:19:31:d2:ac:17:60:9f:7f:e4: 1e:81:df:3c:ed:82:db:c0:50:b9:43:66:b9:27:46: 90:dd:4c:82:b0:fe:37:fa:7e:07:7d:98:a1:4d:0e: d0:1d:7c:f5:ae:72:8d:d8:ab:a2:f8:57:90:91:d0: 31:c7:7c:0c:b1:ba:d3:cf:3d:d2:f0:db:38:89:17: 82:c9:f5:d7:63:9b:a8:b3:e1:37:03:ff:73:82:6f: 83:81:6d:bf:ac:20:4b:f0:9d:1a:14:49:3d:b4:b8: 5c:95:d2:d3:73:63:b5:b4:5a:5b:f9:fc:e7:0a:94: 66:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:95:FF:9F:31:F7:27:34:EB:25:E6:7C:2F:D6:54:D2:52:32:93:EE X509v3 Authority Key Identifier: keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/nZX_nzH3JzTrJeZ8L9ZU0lIyk-4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.253.138.0/24 Signature Algorithm: sha256WithRSAEncryption 00:be:27:8d:04:eb:47:5e:f1:1d:f6:df:3e:90:a7:79:83:a8: 0e:f1:40:df:3c:26:57:a6:bb:0e:df:70:26:33:1d:d0:46:14: e3:c8:98:ee:5e:e3:db:23:c7:cc:e9:b2:fb:45:14:4d:06:75: 25:57:0e:8c:0d:0f:f5:5c:fe:85:05:62:9e:ee:a7:8d:48:0e: 4b:9e:dc:6b:1f:ad:b2:80:17:50:40:bd:9f:03:6f:91:ae:a1: 5e:32:17:c5:36:fc:38:3f:0b:1b:a3:06:cc:c6:3d:77:6d:d6: 7c:16:c5:c3:37:4e:87:3c:59:1a:2c:39:19:c2:14:63:9e:36: 28:9c:70:60:d0:e6:14:c6:35:a2:66:2a:91:b1:9d:c5:7b:fe: 80:e1:db:25:3f:06:c6:d5:83:4d:f6:10:cb:ec:de:81:6a:9a: 6d:19:a8:71:e2:b2:99:98:b4:1f:9e:44:6e:24:b9:48:ec:0e: dd:0f:d1:39:d5:f5:09:89:0e:26:73:ce:36:6f:a5:af:6c:b0: 8c:58:27:e8:ff:16:45:cd:54:60:08:0a:f8:d2:92:a9:08:5e: 8d:6e:33:fa:f9:3c:3e:e1:e8:d1:94:59:ae:f0:09:e3:da:60: fc:9a:de:15:00:00:42:34:db:64:49:1f:6a:7b:a4:d5:c7:02: af:cc:11:1a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W3askOJ5cZDDNEHwqJscMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhYmExMTcyNDcyZWE4MDI2NWQxMjk4Mjk2N2RlMGE4YjBi YzU5MDEwHhcNMjYwMTAxMTYxOTMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDk1ZmY5ZjMxZjcyNzM0ZWIyNWU2N2MyZmQ2NTRkMjUyMzI5M2VlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+4vz35N+KBhaV7eqRSB5NX26wYR JDxwTG0vCFfq4Tocn6fMnzvbGeFP1GP7yFhtttJ34d7ZbB3B9zoDwAvlY2zNyBKr Ixtkyok7ahjRNulOhik/1Z9x4pBq2sWSrx/qdx8gXVcLJmYj0JDvCm1z3z29e+pf mKmCWRfOkbVfMw1ITNRojOunNKh7GNoZMdKsF2Cff+Qegd887YLbwFC5Q2a5J0aQ 3UyCsP43+n4HfZihTQ7QHXz1rnKN2Kui+FeQkdAxx3wMsbrTzz3S8Ns4iReCyfXX Y5uos+E3A/9zgm+DgW2/rCBL8J0aFEk9tLhcldLTc2O1tFpb+fznCpRmowIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ2V/58x9yc06yXmfC/WVNJSMpPuMB8GA1UdIwQY MBaAFDq6EXJHLqgCZdEpgpZ94KiwvFkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgt NGRkMDQzNDZhYmMzLzEvblpYX256SDNKelRySmVaOEw5WlUwbEl5ay00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgtNGRkMDQzNDZhYmMz LzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALv2KMA0G CSqGSIb3DQEBCwUAA4IBAQAAvieNBOtHXvEd9t8+kKd5g6gO8UDfPCZXprsO33Am Mx3QRhTjyJjuXuPbI8fM6bL7RRRNBnUlVw6MDQ/1XP6FBWKe7qeNSA5LntxrH62y gBdQQL2fA2+RrqFeMhfFNvw4PwsbowbMxj13bdZ8FsXDN06HPFkaLDkZwhRjnjYo nHBg0OYUxjWiZiqRsZ3Fe/6A4dslPwbG1YNN9hDL7N6BapptGahx4rKZmLQfnkRu JLlI7A7dD9E51fUJiQ4mc842b6WvbLCMWCfo/xZFzVRgCAr40pKpCF6NbjP6+Tw+ 4ejRlFmu8Anj2mD8mt4VAABCNNtkSR9qe6TVxwKvzBEa -----END CERTIFICATE-----Generated at Sun Jan 25 17:47:53 2026 by rpki-client