This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/R9oqRXkDi9NstDQGawy9QSNPBao.roa File: R9oqRXkDi9NstDQGawy9QSNPBao.roa (raw, json) Hash identifier: K+X7cAVkozGC4gsHVnnMuzT6rGGVtiBQVtV5xTEy+RY= Subject key identifier: 47:DA:2A:45:79:03:8B:D3:6C:B4:34:06:6B:0C:BD:41:23:4F:05:AA Certificate issuer: /CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Certificate serial: 019B7D5CFE3D2BFC0B5739D4AB3C6032053F Authority key identifier: 5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/R9oqRXkDi9NstDQGawy9QSNPBao.roa Signing time: Fri 02 Jan 2026 06:20:04 +0000 ROA not before: Fri 02 Jan 2026 06:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44400 IP address blocks: 46.143.0.0/22 maxlen: 32 79.127.44.0/23 maxlen: 32 79.127.60.0/23 maxlen: 32 79.127.118.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.mft rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:fe:3d:2b:fc:0b:57:39:d4:ab:3c:60:32:05:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b52634a2eb03f8565b5e33dc2b9f49041f7cfb0 Validity Not Before: Jan 2 06:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=47da2a4579038bd36cb434066b0cbd41234f05aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:c4:01:f5:05:89:ab:ae:db:97:9a:62:0f:7c: 14:f9:bd:9d:48:90:91:2e:4b:94:96:1f:84:f2:34: 65:83:5e:05:4d:ba:80:b7:a6:41:73:29:57:94:15: c5:ae:81:84:c9:7a:c2:a1:c1:f6:c3:b5:05:ad:81: a5:e1:74:0c:46:75:ad:97:24:cc:9f:f6:72:88:ea: f1:1a:bc:3d:d2:45:c6:63:5e:3c:20:bc:ee:97:ed: 95:d2:ca:02:e3:92:36:53:a9:9f:d6:d7:1d:86:00: a8:e3:ea:7c:4c:7a:f1:12:bc:53:5c:94:1d:41:20: c0:91:ac:73:73:61:c0:69:0c:34:80:99:76:f9:d7: 18:01:60:74:b9:6d:c5:12:a0:6f:9d:35:36:09:9f: de:1a:88:8c:68:85:01:3d:a4:bf:03:40:92:7c:c6: 3d:67:7a:8d:ff:8e:2d:06:4f:d2:b0:a7:e6:39:23: 23:f4:8b:cd:da:c7:bf:ef:b2:d2:94:1e:ba:99:41: 25:06:d6:4f:92:6b:07:61:58:6b:90:f1:c7:05:43: 07:c8:3d:b0:8b:5d:71:53:f4:f1:58:9c:9b:b4:2d: b1:4a:a2:15:a8:cc:60:ad:9c:32:1a:cd:55:7b:c2: ca:6e:c1:60:14:3a:f3:ce:ff:41:9d:d3:cb:56:b8: f7:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:DA:2A:45:79:03:8B:D3:6C:B4:34:06:6B:0C:BD:41:23:4F:05:AA X509v3 Authority Key Identifier: keyid:5B:52:63:4A:2E:B0:3F:85:65:B5:E3:3D:C2:B9:F4:90:41:F7:CF:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W1JjSi6wP4VlteM9wrn0kEH3z7A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/R9oqRXkDi9NstDQGawy9QSNPBao.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7a5b44-6b18-42d3-a8d5-dc6554fd1235/1/W1JjSi6wP4VlteM9wrn0kEH3z7A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.143.0.0/22 79.127.44.0/23 79.127.60.0/23 79.127.118.0/24 Signature Algorithm: sha256WithRSAEncryption 63:39:62:e8:50:1e:93:a3:53:4f:15:99:fe:46:12:4c:29:fd: af:21:4a:f3:17:bf:5b:f0:fa:74:8a:9b:e5:c0:7c:73:1d:d2: 62:1a:52:62:4e:13:d3:08:13:2e:3a:d0:4b:cc:97:45:4f:f3: 46:27:9a:ee:fc:27:1e:8b:5d:f9:82:0e:48:04:71:a4:65:99: 02:1b:8c:91:81:0f:ab:6c:de:46:94:08:ba:30:a5:67:49:93: c0:12:1b:22:97:b1:68:2c:4a:71:43:75:b7:92:7d:76:78:ec: 48:c7:db:75:a7:2e:e9:3d:d4:51:50:8f:6a:a4:d8:dd:75:76: ab:74:91:fc:36:12:0b:c9:94:7e:20:c9:11:3f:87:a7:fa:a2: 66:2e:7f:60:0e:a9:15:ee:80:19:e8:e4:fc:18:63:85:ce:8e: 52:80:94:88:aa:54:8d:d0:24:7e:4a:e2:ea:65:da:74:ad:95: e9:e3:00:0a:ec:04:64:c1:62:45:94:d1:f3:0c:c9:1b:94:77: 06:00:c5:d8:9a:90:6e:14:26:6b:d5:b5:34:ea:65:f9:a9:45: 68:0b:bc:38:24:ba:60:ef:4a:d1:58:f4:fb:d8:95:1e:ce:40: 82:c3:d6:04:8a:d9:69:71:22:e4:ab:3f:e1:d6:fd:93:d4:69: 99:80:48:4b -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt9XP49K/wLVznUqzxgMgU/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNTI2MzRhMmViMDNmODU2NWI1ZTMzZGMyYjlmNDkwNDFm N2NmYjAwHhcNMjYwMTAyMDYyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0N2RhMmE0NTc5MDM4YmQzNmNiNDM0MDY2YjBjYmQ0MTIzNGYwNWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+8QB9QWJq67bl5piD3wU+b2dSJCR LkuUlh+E8jRlg14FTbqAt6ZBcylXlBXFroGEyXrCocH2w7UFrYGl4XQMRnWtlyTM n/ZyiOrxGrw90kXGY148ILzul+2V0soC45I2U6mf1tcdhgCo4+p8THrxErxTXJQd QSDAkaxzc2HAaQw0gJl2+dcYAWB0uW3FEqBvnTU2CZ/eGoiMaIUBPaS/A0CSfMY9 Z3qN/44tBk/SsKfmOSMj9IvN2se/77LSlB66mUElBtZPkmsHYVhrkPHHBUMHyD2w i11xU/TxWJybtC2xSqIVqMxgrZwyGs1Ve8LKbsFgFDrzzv9BndPLVrj3TQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFEfaKkV5A4vTbLQ0BmsMvUEjTwWqMB8GA1UdIwQY MBaAFFtSY0ousD+FZbXjPcK59JBB98+wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUt ZGM2NTU0ZmQxMjM1LzEvUjlvcVJYa0RpOU5zdERRR2F3eTlRU05QQmFvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83YTViNDQtNmIxOC00MmQzLWE4ZDUtZGM2NTU0ZmQxMjM1 LzEvVzFKalNpNndQNFZsdGVNOXdybjBrRUgzejdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCLo8AAwQB T38sAwQBT388AwQAT392MA0GCSqGSIb3DQEBCwUAA4IBAQBjOWLoUB6To1NPFZn+ RhJMKf2vIUrzF79b8Pp0ipvlwHxzHdJiGlJiThPTCBMuOtBLzJdFT/NGJ5ru/Cce i135gg5IBHGkZZkCG4yRgQ+rbN5GlAi6MKVnSZPAEhsil7FoLEpxQ3W3kn12eOxI x9t1py7pPdRRUI9qpNjddXardJH8NhILyZR+IMkRP4en+qJmLn9gDqkV7oAZ6OT8 GGOFzo5SgJSIqlSN0CR+SuLqZdp0rZXp4wAK7ARkwWJFlNHzDMkblHcGAMXYmpBu FCZr1bU06mX5qUVoC7w4JLpg70rRWPT72JUezkCCw9YEitlpcSLkqz/h1v2T1GmZ gEhL -----END CERTIFICATE-----Generated at Sun Jan 25 17:45:50 2026 by rpki-client