This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/1-LbhNdw_AJV43onNE0QCUpCX6so.roa File: 1-LbhNdw_AJV43onNE0QCUpCX6so.roa (raw, json) Hash identifier: dSYVcw8EiYO4/PAbhwcAgMdvgRcG7f4kUZi0vNXjJIw= Subject key identifier: F8:B6:E1:35:DC:3F:00:95:78:DE:89:CD:13:44:02:52:90:97:EA:CA Certificate issuer: /CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76 Certificate serial: 019B77C6EC7C836B638A798DAA420BF94A6C Authority key identifier: 46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/1-LbhNdw_AJV43onNE0QCUpCX6so.roa Signing time: Thu 01 Jan 2026 04:18:03 +0000 ROA not before: Thu 01 Jan 2026 04:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213105 IP address blocks: 90.156.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.mft rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:ec:7c:83:6b:63:8a:79:8d:aa:42:0b:f9:4a:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=46ba3f80039b9e784cfb24bf2c7ddb24e1900a76 Validity Not Before: Jan 1 04:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8b6e135dc3f009578de89cd134402529097eaca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4c:39:7f:c5:4f:19:a3:6f:2e:ef:81:12:13: 9b:c4:a8:6d:40:6a:4f:d1:f1:4d:fc:da:9f:c0:c7: 54:09:ab:43:8a:5e:9c:58:1e:08:66:83:6c:55:5d: 0e:fa:6a:52:26:d4:4c:13:47:48:30:c5:02:a2:4d: 2e:3e:d5:a8:1a:57:00:59:bb:f7:0b:2b:f4:b8:e9: 86:7f:d2:d1:d2:4e:d7:24:36:03:71:74:39:af:59: 0f:9c:d8:40:47:e2:0a:c6:bb:13:62:eb:7d:36:a9: d8:84:1a:ab:d6:21:9e:32:fa:2d:87:0b:2d:9e:0e: 7b:00:63:bc:35:53:37:46:ab:1d:96:98:f2:2a:85: 0f:4f:82:0d:2f:90:7a:6a:8f:62:fa:0e:8a:99:e1: 94:88:64:11:ec:e2:d1:07:97:2f:c1:0c:1d:5b:8b: 71:f3:31:e5:2b:92:6d:e9:c3:2a:b9:b7:0f:e7:5c: 36:5a:b2:76:fc:64:78:67:27:e8:83:4b:ad:cf:db: 77:a1:92:a0:d1:40:53:87:2d:41:e7:24:c2:e8:af: d1:07:e6:e9:77:89:00:d2:8f:5b:6c:1c:c4:c1:9c: 74:de:79:7d:24:a8:20:77:ad:cc:e4:09:81:02:63: 94:4d:ab:14:b9:c5:d9:0f:7d:f8:49:58:10:2f:b3: 0e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B6:E1:35:DC:3F:00:95:78:DE:89:CD:13:44:02:52:90:97:EA:CA X509v3 Authority Key Identifier: keyid:46:BA:3F:80:03:9B:9E:78:4C:FB:24:BF:2C:7D:DB:24:E1:90:0A:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rro_gAObnnhM-yS_LH3bJOGQCnY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/1-LbhNdw_AJV43onNE0QCUpCX6so.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/85/cfa2ae-e524-4bd0-875b-89ace38220fb/1/Rro_gAObnnhM-yS_LH3bJOGQCnY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 90.156.246.0/24 Signature Algorithm: sha256WithRSAEncryption a6:dd:69:e7:79:78:7f:f4:92:28:55:fa:19:4e:d4:10:20:59: 71:14:9b:86:03:a3:1b:e8:fe:16:4a:19:9c:b2:5d:46:c7:a3: c2:9c:be:5f:ae:a7:7c:6b:1c:20:49:ca:c3:09:0d:4b:6b:0c: bb:db:c0:81:23:60:ca:46:0e:73:92:3b:a4:b7:3b:f5:d3:be: dc:8f:ab:d4:7c:16:21:1f:54:c2:fe:b5:88:bb:3a:3a:db:14: 16:5b:90:85:0c:74:73:6f:fc:38:42:a5:10:f1:9d:92:6b:ba: f5:cc:74:5e:80:5e:58:5e:d8:cd:d7:d6:36:f7:9a:1f:46:6e: e6:d9:63:a7:e3:91:04:7b:18:fa:5f:d5:3c:5c:75:fa:d6:ca: a3:c1:90:12:c5:74:e0:57:47:3e:87:8c:f0:89:24:1c:3a:2c: 9d:04:5d:e6:e8:37:c6:e5:31:3c:58:d0:98:72:5e:49:f5:11: 19:42:c1:d5:f7:64:c7:49:a2:7f:e5:10:72:ec:d7:b7:89:3d: 2f:96:6e:6d:d5:8e:a2:ff:01:ff:e9:c6:3c:aa:d6:e4:1a:52: 7e:27:c2:fa:43:00:e3:25:3f:dd:98:25:7f:94:d4:d6:8c:e1: 05:11:74:e5:c0:06:ff:86:1c:aa:47:b6:eb:23:19:7a:14:69: 20:f7:e9:85 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt3xux8g2tjinmNqkIL+UpsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2YmEzZjgwMDM5YjllNzg0Y2ZiMjRiZjJjN2RkYjI0ZTE5 MDBhNzYwHhcNMjYwMTAxMDQxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGI2ZTEzNWRjM2YwMDk1NzhkZTg5Y2QxMzQ0MDI1MjkwOTdlYWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0w5f8VPGaNvLu+BEhObxKhtQGpP 0fFN/NqfwMdUCatDil6cWB4IZoNsVV0O+mpSJtRME0dIMMUCok0uPtWoGlcAWbv3 Cyv0uOmGf9LR0k7XJDYDcXQ5r1kPnNhAR+IKxrsTYut9NqnYhBqr1iGeMvothwst ng57AGO8NVM3RqsdlpjyKoUPT4INL5B6ao9i+g6KmeGUiGQR7OLRB5cvwQwdW4tx 8zHlK5Jt6cMqubcP51w2WrJ2/GR4Zyfog0utz9t3oZKg0UBThy1B5yTC6K/RB+bp d4kA0o9bbBzEwZx03nl9JKggd63M5AmBAmOUTasUucXZD334SVgQL7MOrQIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPi24TXcPwCVeN6JzRNEAlKQl+rKMB8GA1UdIwQY MBaAFEa6P4ADm554TPskvyx92yThkAp2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnJvX2dBT2JubmhNLXlTX0xIM2JKT0dRQ25ZLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9jZmEyYWUtZTUyNC00YmQwLTg3NWIt ODlhY2UzODIyMGZiLzEvMS1MYmhOZHdfQUpWNDNvbk5FMFFDVXBDWDZzby5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvODUvY2ZhMmFlLWU1MjQtNGJkMC04NzViLTg5YWNlMzgyMjBm Yi8xL1Jyb19nQU9ibm5oTS15U19MSDNiSk9HUUNuWS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFqc9jAN BgkqhkiG9w0BAQsFAAOCAQEApt1p53l4f/SSKFX6GU7UECBZcRSbhgOjG+j+FkoZ nLJdRsejwpy+X66nfGscIEnKwwkNS2sMu9vAgSNgykYOc5I7pLc79dO+3I+r1HwW IR9Uwv61iLs6OtsUFluQhQx0c2/8OEKlEPGdkmu69cx0XoBeWF7YzdfWNveaH0Zu 5tljp+ORBHsY+l/VPFx1+tbKo8GQEsV04FdHPoeM8IkkHDosnQRd5ug3xuUxPFjQ mHJeSfURGULB1fdkx0mif+UQcuzXt4k9L5ZubdWOov8B/+nGPKrW5BpSfifC+kMA 4yU/3Zglf5TU1ozhBRF05cAG/4Ycqke26yMZehRpIPfphQ== -----END CERTIFICATE-----Generated at Sun Jan 25 21:03:35 2026 by rpki-client