This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/cJSB3QS13j7tmP3z_rxKXgO4j60.roa File: cJSB3QS13j7tmP3z_rxKXgO4j60.roa (raw, json) Hash identifier: 9yWuPk6TuuusjVGKVizh7DPc+s1P+89Z5o314zB49FI= Subject key identifier: 70:94:81:DD:04:B5:DE:3E:ED:98:FD:F3:FE:BC:4A:5E:03:B8:8F:AD Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515 Certificate serial: 019B7C7FE6E7C87E3D7DC8F799990686D41F Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/cJSB3QS13j7tmP3z_rxKXgO4j60.roa Signing time: Fri 02 Jan 2026 02:18:35 +0000 ROA not before: Fri 02 Jan 2026 02:18:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47147 IP address blocks: 46.38.248.0/24 maxlen: 24 2a0a:4cc0:40::/43 maxlen: 43 2a0a:4cc0:80::/43 maxlen: 43 2a0a:4cc0:c0::/43 maxlen: 43 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7f:e6:e7:c8:7e:3d:7d:c8:f7:99:99:06:86:d4:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515 Validity Not Before: Jan 2 02:18:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=709481dd04b5de3eed98fdf3febc4a5e03b88fad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fa:cb:05:4b:3e:17:91:c3:63:1e:60:63:2c: 44:8f:6e:6f:12:29:27:bd:fe:73:ec:f0:61:6f:b9: 11:64:0c:2c:96:82:8f:fe:7e:8d:cc:2d:46:cd:58: d3:b9:35:ff:00:1a:cb:1c:4d:7b:ba:c4:08:4f:b5: da:ba:ee:2a:47:f1:6b:66:a5:63:7e:c3:cf:b0:fe: 56:b7:fc:c2:bd:91:6e:4a:6f:d6:3f:73:20:39:1b: 1f:c1:e9:64:4f:eb:2f:e3:5e:a7:29:16:d4:7c:2f: 87:27:1c:ca:4d:d9:ee:03:36:9e:62:c5:2c:6e:86: 3c:23:71:76:04:ec:47:bd:2e:f8:49:98:46:7c:b2: b8:2d:3a:a3:bc:e2:16:e9:84:97:a0:96:18:6e:05: d5:a6:f3:c2:dc:34:2a:50:de:ed:c3:64:51:69:2f: de:7b:bb:83:f0:5b:54:37:e7:97:28:34:f5:e2:cf: 6e:92:ff:af:17:d8:2a:c4:87:b0:ea:38:e6:05:d5: 86:20:44:08:9e:14:13:e2:23:5b:8b:36:18:4e:e9: 6b:f8:4f:d6:49:c1:6d:eb:95:a2:e3:a1:0a:ee:47: 20:1a:a7:46:9a:42:bd:0a:22:ab:59:31:08:ab:15: 5b:f6:9e:86:08:9e:93:64:7c:63:d5:72:e5:57:c4: 95:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:94:81:DD:04:B5:DE:3E:ED:98:FD:F3:FE:BC:4A:5E:03:B8:8F:AD X509v3 Authority Key Identifier: keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/cJSB3QS13j7tmP3z_rxKXgO4j60.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.38.248.0/24 IPv6: 2a0a:4cc0:40::/43 2a0a:4cc0:80::/43 2a0a:4cc0:c0::/43 Signature Algorithm: sha256WithRSAEncryption 93:19:b9:0c:56:e2:38:c6:62:f4:c2:60:8c:c9:fb:fc:4d:33: d9:e2:0d:b1:45:30:a9:cb:31:8b:0e:4f:e6:ce:a9:5e:99:fa: 8b:28:31:55:7a:97:56:43:70:cc:97:46:2d:01:d2:8b:5e:54: 52:b4:26:07:58:58:12:cf:2b:55:f7:78:73:51:08:81:ee:2c: 02:54:91:f6:e9:9b:74:49:6c:b9:6d:73:25:ff:2a:0d:1a:9c: bd:da:1d:b0:c1:fc:db:98:63:83:d7:dc:97:ce:75:0d:1c:be: 5a:c1:cb:be:de:ed:c6:d5:90:12:ff:c1:64:79:a7:2d:7b:ba: 1c:0a:42:49:50:77:b6:4d:93:4f:cb:9f:ac:41:b4:91:07:6c: fa:83:8c:2b:e1:5e:c8:eb:46:14:56:6b:07:1b:65:85:22:53: 03:61:ec:ca:56:f1:1f:fb:80:10:4b:77:68:da:24:ae:2d:42: 97:d1:6e:fc:ba:78:2e:1d:5c:e1:d4:4f:a3:7b:10:66:0e:18: 84:8a:61:41:25:62:f3:6d:d5:37:b1:36:23:70:2e:21:0d:02: df:5f:dd:9a:33:07:d5:b7:08:22:79:3f:21:3d:d5:ce:4f:4e: 4e:af:b8:b6:a5:ab:cb:cb:63:ab:c1:ce:ab:95:55:9a:bd:f7: 47:24:cd:24 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt8f+bnyH49fcj3mZkGhtQfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2MmVlYjg3OTA4NWM5NDE5NDI5N2RkOWU0Y2QyNDljZDI1 MTY1MTUwHhcNMjYwMTAyMDIxODM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MDk0ODFkZDA0YjVkZTNlZWQ5OGZkZjNmZWJjNGE1ZTAzYjg4ZmFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/rLBUs+F5HDYx5gYyxEj25vEikn vf5z7PBhb7kRZAwsloKP/n6NzC1GzVjTuTX/ABrLHE17usQIT7Xauu4qR/FrZqVj fsPPsP5Wt/zCvZFuSm/WP3MgORsfwelkT+sv416nKRbUfC+HJxzKTdnuAzaeYsUs boY8I3F2BOxHvS74SZhGfLK4LTqjvOIW6YSXoJYYbgXVpvPC3DQqUN7tw2RRaS/e e7uD8FtUN+eXKDT14s9ukv+vF9gqxIew6jjmBdWGIEQInhQT4iNbizYYTulr+E/W ScFt65Wi46EK7kcgGqdGmkK9CiKrWTEIqxVb9p6GCJ6TZHxj1XLlV8SVXQIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFHCUgd0Etd4+7Zj98/68Sl4DuI+tMB8GA1UdIwQY MBaAFPYu64eQhclBlCl92eTNJJzSUWUVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWk3cmg1Q0Z5VUdVS1gzWjVNMGtuTkpSWlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS85MWRhOGItMDUwMi00OGRmLTg1MzIt NWZiZjlhMjliNmUxLzEvY0pTQjNRUzEzajd0bVAzel9yeEtYZ080ajYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS85MWRhOGItMDUwMi00OGRmLTg1MzItNWZiZjlhMjliNmUx LzEvOWk3cmg1Q0Z5VUdVS1gzWjVNMGtuTkpSWlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAMBAIAATAGAwQALib4MCEE AgACMBsDBwUqCkzAAEADBwUqCkzAAIADBwUqCkzAAMAwDQYJKoZIhvcNAQELBQAD ggEBAJMZuQxW4jjGYvTCYIzJ+/xNM9niDbFFMKnLMYsOT+bOqV6Z+osoMVV6l1ZD cMyXRi0B0oteVFK0JgdYWBLPK1X3eHNRCIHuLAJUkfbpm3RJbLltcyX/Kg0anL3a HbDB/NuYY4PX3JfOdQ0cvlrBy77e7cbVkBL/wWR5py17uhwKQklQd7ZNk0/Ln6xB tJEHbPqDjCvhXsjrRhRWawcbZYUiUwNh7MpW8R/7gBBLd2jaJK4tQpfRbvy6eC4d XOHUT6N7EGYOGISKYUElYvNt1TexNiNwLiENAt9f3ZozB9W3CCJ5PyE91c5PTk6v uLalq8vLY6vBzquVVZq990ckzSQ= -----END CERTIFICATE-----Generated at Mon Jan 26 01:52:43 2026 by rpki-client