This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/puPeL-quzze3Iu-8tKemQ0iPs0k.roa File: puPeL-quzze3Iu-8tKemQ0iPs0k.roa (raw, json) Hash identifier: GbBJ6hePt7PdLRJMTeiSyT7VVW/+8H5RqhvnaDMCdpg= Subject key identifier: A6:E3:DE:2F:EA:AE:CF:37:B7:22:EF:BC:B4:A7:A6:43:48:8F:B3:49 Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Certificate serial: 019B7BA52E73580D6C0AF7DFD00FAA7717E0 Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/puPeL-quzze3Iu-8tKemQ0iPs0k.roa Signing time: Thu 01 Jan 2026 22:19:41 +0000 ROA not before: Thu 01 Jan 2026 22:19:41 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29286 IP address blocks: 46.10.162.0/23 maxlen: 24 95.43.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a5:2e:73:58:0d:6c:0a:f7:df:d0:0f:aa:77:17:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4 Validity Not Before: Jan 1 22:19:41 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a6e3de2feaaecf37b722efbcb4a7a643488fb349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:16:a2:a6:d4:dc:3b:18:c6:a0:51:2e:5c:d1: ca:02:cc:e7:fd:d3:cb:90:25:10:5f:98:b0:65:11: a9:fb:0c:f5:3f:66:80:1d:7e:3b:63:8f:a0:4d:21: f2:b2:60:32:77:a6:f3:a0:8f:d0:d4:38:69:e8:32: f6:2d:1c:44:d2:01:d1:86:6f:1f:2d:f0:07:a9:90: f0:33:14:11:6b:1a:ad:c1:a6:39:bf:ce:37:3f:8a: 85:62:67:1c:c0:13:24:0a:c2:17:43:af:ce:46:d8: 1e:4d:fb:7b:e8:9a:45:c2:d1:c6:3d:34:40:28:cc: 98:32:61:e3:05:4b:e8:1d:3e:ea:e5:26:37:25:ce: c7:53:1d:83:37:68:e6:ce:54:d3:63:b5:d1:0b:05: a3:ee:a4:97:a6:47:9d:aa:13:fd:e9:79:b5:67:e8: 1e:80:80:76:46:84:40:64:4b:53:bd:a9:bb:ef:f6: 54:44:80:f0:eb:0f:91:15:89:d5:6f:76:ac:17:83: 0e:51:c2:75:f0:5b:eb:a5:18:c5:8c:9f:9f:0c:33: 40:43:de:c0:d5:b2:62:3b:dd:51:01:ee:27:63:c2: 02:17:c6:d4:78:34:06:f1:53:d7:e4:76:7d:e3:4d: 62:eb:e1:09:5d:1c:ab:1c:44:7f:0e:45:1b:84:48: 51:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:E3:DE:2F:EA:AE:CF:37:B7:22:EF:BC:B4:A7:A6:43:48:8F:B3:49 X509v3 Authority Key Identifier: keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/puPeL-quzze3Iu-8tKemQ0iPs0k.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.10.162.0/23 95.43.198.0/24 Signature Algorithm: sha256WithRSAEncryption a9:90:bc:69:9c:67:a0:fb:40:da:6c:9c:50:2c:bc:f1:9f:19: 79:2a:cd:11:f4:a9:cb:2b:4f:b9:b5:c8:de:54:8b:35:89:23: 43:d7:9a:5d:86:f5:e1:46:39:43:86:c5:f3:e5:13:fa:07:fd: 78:ea:e2:39:0e:0a:de:d0:72:0b:f9:d4:ac:8c:86:06:b6:6f: 06:06:91:ce:10:4e:40:90:b3:d8:41:fb:1d:e8:31:ee:94:d7: a9:e9:d1:1c:9c:58:ac:f8:f8:57:38:97:2e:29:db:28:91:99: db:d6:77:bb:d3:45:86:47:c3:4f:6c:fb:9b:c5:b6:d5:3d:04: 06:6a:c1:99:12:b4:5e:66:55:02:f4:ea:f9:62:d5:9e:49:72: be:5a:6a:06:a4:28:51:10:6f:18:82:87:35:e6:4e:b5:bb:f2: 98:28:60:27:16:98:1d:ec:62:a2:32:71:29:ca:31:d6:b3:19: 6d:e4:90:44:06:15:67:45:31:49:5e:cd:f6:43:68:a0:8c:a8: 2a:e0:4d:25:34:9b:d1:bc:2e:91:f5:21:c7:ad:fb:70:10:22: c9:47:1c:27:a4:46:37:9c:41:03:16:f2:7b:6f:5b:37:1f:bb: ee:68:fa:dc:5d:d7:e5:fe:91:2a:c2:6f:75:60:9e:23:80:65: 57:7a:70:7e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7pS5zWA1sCvff0A+qdxfgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4 ZmI0YzQwHhcNMjYwMTAxMjIxOTQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNmUzZGUyZmVhYWVjZjM3YjcyMmVmYmNiNGE3YTY0MzQ4OGZiMzQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBaiptTcOxjGoFEuXNHKAszn/dPL kCUQX5iwZRGp+wz1P2aAHX47Y4+gTSHysmAyd6bzoI/Q1Dhp6DL2LRxE0gHRhm8f LfAHqZDwMxQRaxqtwaY5v843P4qFYmccwBMkCsIXQ6/ORtgeTft76JpFwtHGPTRA KMyYMmHjBUvoHT7q5SY3Jc7HUx2DN2jmzlTTY7XRCwWj7qSXpkedqhP96Xm1Z+ge gIB2RoRAZEtTvam77/ZURIDw6w+RFYnVb3asF4MOUcJ18FvrpRjFjJ+fDDNAQ97A 1bJiO91RAe4nY8ICF8bUeDQG8VPX5HZ9401i6+EJXRyrHER/DkUbhEhRYwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFKbj3i/qrs83tyLvvLSnpkNIj7NJMB8GA1UdIwQY MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct ODcyYmEyZDlmNDRjLzEvcHVQZUwtcXV6emUzSXUtOHRLZW1RMGlQczBrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLgqiAwQA XyvGMA0GCSqGSIb3DQEBCwUAA4IBAQCpkLxpnGeg+0DabJxQLLzxnxl5Ks0R9KnL K0+5tcjeVIs1iSND15pdhvXhRjlDhsXz5RP6B/146uI5Dgre0HIL+dSsjIYGtm8G BpHOEE5AkLPYQfsd6DHulNep6dEcnFis+PhXOJcuKdsokZnb1ne700WGR8NPbPub xbbVPQQGasGZErReZlUC9Or5YtWeSXK+WmoGpChREG8Ygoc15k61u/KYKGAnFpgd 7GKiMnEpyjHWsxlt5JBEBhVnRTFJXs32Q2igjKgq4E0lNJvRvC6R9SHHrftwECLJ RxwnpEY3nEEDFvJ7b1s3H7vuaPrcXdfl/pEqwm91YJ4jgGVXenB+ -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:09 2026 by rpki-client