This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/vDtti9xnyakhZ1WWiOjhX42Cz4E.roa File: vDtti9xnyakhZ1WWiOjhX42Cz4E.roa (raw, json) Hash identifier: C355/1wMzaPIkZLvnFKM+IMHqthGrw6arcc7tCzyvb0= Subject key identifier: BC:3B:6D:8B:DC:67:C9:A9:21:67:55:96:88:E8:E1:5F:8D:82:CF:81 Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901 Certificate serial: 019B7A5B7D42F64A29ACBA3D170E7A23CF1F Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/vDtti9xnyakhZ1WWiOjhX42Cz4E.roa Signing time: Thu 01 Jan 2026 16:19:34 +0000 ROA not before: Thu 01 Jan 2026 16:19:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210876 IP address blocks: 46.226.151.0/24 maxlen: 24 185.204.102.0/24 maxlen: 24 193.57.164.0/23 maxlen: 23 193.57.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.mft rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:7d:42:f6:4a:29:ac:ba:3d:17:0e:7a:23:cf:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901 Validity Not Before: Jan 1 16:19:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bc3b6d8bdc67c9a92167559688e8e15f8d82cf81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:2c:2e:1d:02:dc:9d:3d:d7:18:ac:bd:29:d2: 0d:f2:ff:7f:aa:2a:92:f3:5e:02:33:3d:04:14:6b: f2:bb:65:60:cf:ed:ad:38:3f:fc:75:29:9d:3b:ee: 8e:a5:8b:20:82:b9:ba:e2:9d:4b:66:30:f8:af:fd: 31:a1:cc:af:df:6d:de:99:88:5a:62:3c:ba:d9:7f: a7:e4:ab:c4:7b:22:87:b6:3e:7e:42:d8:96:9d:f6: cb:5d:ad:e8:58:b1:d3:d8:64:7a:67:17:23:90:c9: c7:bf:74:f5:5a:55:89:10:d8:94:4b:8e:11:89:e0: e7:75:37:17:18:44:80:31:51:c0:2d:3f:95:6d:c1: a2:7f:38:41:c1:3f:f4:f3:d2:ac:b6:cc:56:1d:98: 97:5c:98:3f:89:6f:f1:bd:59:c0:42:1d:77:e3:bc: e7:42:af:02:a1:a9:de:7c:68:ef:50:a3:a8:3a:91: c8:30:3b:62:d3:2e:09:92:1b:51:b1:aa:a5:87:11: 46:37:16:ec:74:b4:0d:79:70:51:25:0b:b7:f8:7e: 29:53:0f:57:c4:ef:1a:7f:02:54:05:28:a3:18:7b: 4b:70:a1:f5:1a:aa:bc:94:30:74:5d:ba:d9:36:1e: 1c:a5:1d:8d:df:f8:b6:83:5a:44:74:4a:d1:33:9e: 03:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:3B:6D:8B:DC:67:C9:A9:21:67:55:96:88:E8:E1:5F:8D:82:CF:81 X509v3 Authority Key Identifier: keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/vDtti9xnyakhZ1WWiOjhX42Cz4E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.226.151.0/24 185.204.102.0/24 193.57.164.0/23 Signature Algorithm: sha256WithRSAEncryption 29:c6:79:50:cb:35:4b:f5:57:a6:8b:64:0c:60:f8:79:c6:39: 96:52:72:69:ef:1f:0e:e9:bc:d4:0c:27:9a:cf:af:e9:3a:52: f4:23:e4:6a:ae:17:6c:01:26:03:85:fe:3f:4e:ad:2a:b3:9c: 53:59:9a:94:13:24:b2:f8:e8:af:19:21:cb:36:63:5d:31:63: e2:90:05:f0:68:70:ba:58:0d:f2:82:11:a8:5b:96:91:36:1d: a9:27:4f:80:c6:a0:f7:25:82:a5:28:f0:d2:bd:3c:29:3a:f1: 29:63:0e:1a:ca:b3:13:4b:58:35:b2:c7:c7:5e:37:94:be:aa: d7:58:f5:14:c5:16:2e:12:7b:8a:7d:16:de:73:d6:b3:87:1e: fd:ea:69:9d:73:b0:54:8f:f5:aa:09:79:fe:87:89:06:28:36: 35:26:21:3c:8e:31:9c:d4:fb:5c:7b:17:a9:f2:2e:54:bd:83: 4d:b9:e0:20:eb:cf:77:8b:0b:3a:f0:66:ba:8a:39:88:1f:a1: 42:33:b9:6b:c4:49:d6:cc:21:3c:cd:b0:e5:51:6b:b9:34:db: 3b:f4:af:86:9a:69:7d:b4:bc:54:fe:3d:39:a3:10:17:e7:85: 01:04:39:fa:37:fc:e0:1f:05:04:68:3b:19:6b:a6:2f:e2:5a: d5:56:d1:42 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt6W31C9koprLo9Fw56I88fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNhYmExMTcyNDcyZWE4MDI2NWQxMjk4Mjk2N2RlMGE4YjBi YzU5MDEwHhcNMjYwMTAxMTYxOTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYzNiNmQ4YmRjNjdjOWE5MjE2NzU1OTY4OGU4ZTE1ZjhkODJjZjgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5CwuHQLcnT3XGKy9KdIN8v9/qiqS 814CMz0EFGvyu2Vgz+2tOD/8dSmdO+6OpYsggrm64p1LZjD4r/0xocyv323emYha Yjy62X+n5KvEeyKHtj5+QtiWnfbLXa3oWLHT2GR6ZxcjkMnHv3T1WlWJENiUS44R ieDndTcXGESAMVHALT+VbcGifzhBwT/089KstsxWHZiXXJg/iW/xvVnAQh1347zn Qq8CoanefGjvUKOoOpHIMDti0y4JkhtRsaqlhxFGNxbsdLQNeXBRJQu3+H4pUw9X xO8afwJUBSijGHtLcKH1Gqq8lDB0XbrZNh4cpR2N3/i2g1pEdErRM54DgQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFLw7bYvcZ8mpIWdVlojo4V+Ngs+BMB8GA1UdIwQY MBaAFDq6EXJHLqgCZdEpgpZ94KiwvFkBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgt NGRkMDQzNDZhYmMzLzEvdkR0dGk5eG55YWtoWjFXV2lPamhYNDJDejRFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My83YjFjNTUtZGRkMC00MjgxLTgzNzgtNGRkMDQzNDZhYmMz LzEvT3JvUmNrY3VxQUpsMFNtQ2xuM2dxTEM4V1FFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALuKXAwQA ucxmAwQBwTmkMA0GCSqGSIb3DQEBCwUAA4IBAQApxnlQyzVL9Vemi2QMYPh5xjmW UnJp7x8O6bzUDCeaz6/pOlL0I+RqrhdsASYDhf4/Tq0qs5xTWZqUEySy+OivGSHL NmNdMWPikAXwaHC6WA3yghGoW5aRNh2pJ0+AxqD3JYKlKPDSvTwpOvEpYw4ayrMT S1g1ssfHXjeUvqrXWPUUxRYuEnuKfRbec9azhx796mmdc7BUj/WqCXn+h4kGKDY1 JiE8jjGc1Ptcexep8i5UvYNNueAg6893iws68Ga6ijmIH6FCM7lrxEnWzCE8zbDl UWu5NNs79K+Gmml9tLxU/j05oxAX54UBBDn6N/zgHwUEaDsZa6Yv4lrVVtFC -----END CERTIFICATE-----Generated at Sun Jan 25 14:21:12 2026 by rpki-client