This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/ect0VLyGxLTAHgm5UEEwZ9GTeS0.roa File: ect0VLyGxLTAHgm5UEEwZ9GTeS0.roa (raw, json) Hash identifier: hf5M94Bf98dR3QTKoqckfWZ6ep9Go7yDo2QW8sVSqrY= Subject key identifier: 79:CB:74:54:BC:86:C4:B4:C0:1E:09:B9:50:41:30:67:D1:93:79:2D Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Certificate serial: 019B7F839F77CD05B7D1B1537760C4FC4584 Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/ect0VLyGxLTAHgm5UEEwZ9GTeS0.roa Signing time: Fri 02 Jan 2026 16:21:31 +0000 ROA not before: Fri 02 Jan 2026 16:21:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56595 IP address blocks: 46.243.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:9f:77:cd:05:b7:d1:b1:53:77:60:c4:fc:45:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e Validity Not Before: Jan 2 16:21:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=79cb7454bc86c4b4c01e09b950413067d193792d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4d:c7:32:04:78:e2:2e:51:88:03:ec:24:dc: bd:a3:21:07:01:49:63:56:a1:a5:76:c9:bd:b0:96: ad:8d:f2:e5:10:81:2b:6d:f6:d6:d3:9e:bc:4c:4f: 67:28:c6:8a:f4:fe:79:f3:3c:50:15:eb:31:2b:40: b5:5e:c0:32:60:2a:31:7d:62:35:1f:4d:c7:59:cd: ca:f2:32:0d:5c:c5:cf:7a:30:69:63:59:87:2f:00: c4:ff:d6:23:f5:c2:ec:dc:56:fc:b0:22:b4:49:eb: ed:a2:81:07:15:94:f3:0f:a8:52:de:3c:4f:62:06: 04:1b:05:f6:24:58:b3:8b:27:65:6d:f0:fb:20:be: c5:56:93:44:48:f7:c3:1b:31:d2:b9:43:a9:54:01: 9e:e7:88:7b:c1:dd:59:0e:10:00:aa:5b:81:1a:5f: b7:3f:22:54:2f:b5:43:27:ba:46:cf:40:86:75:66: 6e:7e:fa:4c:ac:10:d6:9f:16:bc:5f:b9:7c:48:f2: 91:07:d1:79:bc:98:40:c5:bf:88:ee:e5:dc:1e:a1: 61:9d:11:ae:f0:e1:c7:40:31:76:63:74:ed:b3:f9: b6:be:f9:53:65:88:bb:a0:ee:df:6f:2d:e7:c7:77: 55:06:fd:8e:7f:39:48:96:cb:c0:07:e4:ab:17:94: 4c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:CB:74:54:BC:86:C4:B4:C0:1E:09:B9:50:41:30:67:D1:93:79:2D X509v3 Authority Key Identifier: keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/ect0VLyGxLTAHgm5UEEwZ9GTeS0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.243.200.0/24 Signature Algorithm: sha256WithRSAEncryption b5:89:7d:38:1f:56:82:cf:84:36:46:9d:08:09:30:84:14:ab: 4c:0e:e1:22:6e:2f:79:2e:89:e3:56:6b:3e:08:49:dd:fc:56: dd:b9:8f:c3:0e:24:16:92:d8:8a:95:7d:a2:e6:99:20:75:67: 86:9a:e1:a3:d3:f2:86:95:7e:0f:a7:37:fb:49:1c:24:b8:1b: 39:26:42:99:95:91:69:aa:b1:17:e0:3c:7d:bc:ef:75:b8:c3: b4:0c:38:f3:c0:e6:72:65:18:67:ca:ab:d5:e2:05:ba:fc:30: c7:b7:76:07:8d:7d:9f:59:30:ee:df:7b:56:d6:cf:e3:48:1d: 9c:16:7c:b7:f7:b2:dc:80:75:de:04:f4:51:1b:d3:5c:41:13: 86:15:d6:d0:1a:55:eb:d4:a3:96:58:a0:1c:53:92:e4:9e:92: d9:94:e0:0d:b7:7d:78:78:4f:5f:2b:42:bb:a0:51:4d:44:35: 66:5e:f7:a7:af:38:68:0c:9e:69:d9:9a:36:5d:53:a7:72:ce: 9f:27:10:b6:30:cf:a3:1e:c8:4e:82:dc:a4:c4:7d:ca:2d:34: 7f:10:81:8e:79:ea:23:eb:9f:f8:0c:d5:71:97:ac:58:16:3b: 8c:b5:85:44:5f:35:e2:ca:db:44:49:1d:82:55:0d:8f:b5:91: 25:bb:59:c4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt/g593zQW30bFTd2DE/EWEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU4ODVlODg0YzJmYzdhNzVkMTJkZDFkZWE0OWNlMjM0OWM0 NzA2N2UwHhcNMjYwMTAyMTYyMTMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3OWNiNzQ1NGJjODZjNGI0YzAxZTA5Yjk1MDQxMzA2N2QxOTM3OTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtk3HMgR44i5RiAPsJNy9oyEHAUlj VqGldsm9sJatjfLlEIErbfbW0568TE9nKMaK9P558zxQFesxK0C1XsAyYCoxfWI1 H03HWc3K8jINXMXPejBpY1mHLwDE/9Yj9cLs3Fb8sCK0SevtooEHFZTzD6hS3jxP YgYEGwX2JFiziydlbfD7IL7FVpNESPfDGzHSuUOpVAGe54h7wd1ZDhAAqluBGl+3 PyJUL7VDJ7pGz0CGdWZufvpMrBDWnxa8X7l8SPKRB9F5vJhAxb+I7uXcHqFhnRGu 8OHHQDF2Y3Tts/m2vvlTZYi7oO7fby3nx3dVBv2OfzlIlsvAB+SrF5RMxwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHnLdFS8hsS0wB4JuVBBMGfRk3ktMB8GA1UdIwQY MBaAFFiF6ITC/Hp10S3R3qSc4jScRwZ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODkt OGM5NTgxZDk2ZDhmLzEvZWN0MFZMeUd4TFRBSGdtNVVFRXdaOUdUZVMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni82YzBiZjctNWYxMy00NGEyLTk5ODktOGM5NTgxZDk2ZDhm LzEvV0lYb2hNTDhlblhSTGRIZXBKemlOSnhIQm40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALvPIMA0G CSqGSIb3DQEBCwUAA4IBAQC1iX04H1aCz4Q2Rp0ICTCEFKtMDuEibi95LonjVms+ CEnd/FbduY/DDiQWktiKlX2i5pkgdWeGmuGj0/KGlX4Ppzf7SRwkuBs5JkKZlZFp qrEX4Dx9vO91uMO0DDjzwOZyZRhnyqvV4gW6/DDHt3YHjX2fWTDu33tW1s/jSB2c Fny397LcgHXeBPRRG9NcQROGFdbQGlXr1KOWWKAcU5LknpLZlOANt314eE9fK0K7 oFFNRDVmXvenrzhoDJ5p2Zo2XVOncs6fJxC2MM+jHshOgtykxH3KLTR/EIGOeeoj 65/4DNVxl6xYFjuMtYVEXzXiyttESR2CVQ2PtZElu1nE -----END CERTIFICATE-----Generated at Mon Jan 26 06:17:46 2026 by rpki-client