This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/1-PS1jNNnBTwv-jHREhAP6k3ZYVo.roa File: 1-PS1jNNnBTwv-jHREhAP6k3ZYVo.roa (raw, json) Hash identifier: VbVgqlFoHkyju8r4K3BXcUNoSiGbG+MwtSpHjzaMklA= Subject key identifier: F8:F4:B5:8C:D3:67:05:3C:2F:FA:31:D1:12:10:0F:EA:4D:D9:61:5A Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Certificate serial: 019A975F036E5F3744BF32D8175847570E27 Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/1-PS1jNNnBTwv-jHREhAP6k3ZYVo.roa Signing time: Tue 18 Nov 2025 14:29:37 +0000 ROA not before: Tue 18 Nov 2025 14:29:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 200154 IP address blocks: 46.32.163.0/24 maxlen: 24 46.32.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 13:09:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:97:5f:03:6e:5f:37:44:bf:32:d8:17:58:47:57:0e:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Validity Not Before: Nov 18 14:29:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=f8f4b58cd367053c2ffa31d112100fea4dd9615a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1f:ae:68:aa:e7:c7:43:4d:09:e3:92:48:71: 73:f3:f7:a4:bc:52:f4:78:0b:dd:f3:37:58:21:e6: 8c:00:88:67:cc:b7:1a:82:7b:0f:f0:b2:82:0a:7e: 98:3b:15:ed:e5:9a:51:2e:af:a1:49:29:d6:3c:b4: 8c:c7:91:6d:3b:c0:f7:56:03:c3:3d:cd:b2:d5:97: 26:e4:ba:e9:9f:b3:10:3f:b2:e5:db:f3:b3:bd:8d: fc:a9:6f:9d:26:50:ac:1b:d6:ad:4c:1a:07:fa:02: f6:30:62:4d:1c:9c:e6:24:3a:ea:d6:01:70:61:f0: 54:df:4b:16:21:e7:7a:2d:fd:49:db:5c:15:df:ff: b3:d7:e9:23:41:03:dd:a1:04:b8:e0:48:15:f3:ef: c1:9f:b5:ee:ef:df:64:3a:36:29:82:ef:39:07:7a: 4c:b6:0f:1a:22:e3:8f:08:ef:fa:91:15:90:93:20: 90:74:91:b5:04:be:d7:de:7e:c4:37:98:be:44:e9: d4:c0:f1:82:37:a5:e5:bf:96:72:ec:82:e5:ef:50: 2b:15:c8:f9:92:1c:4c:cc:69:a0:47:d3:06:7e:61: 29:c9:f1:bb:99:da:87:d9:0b:77:8a:99:17:d7:86: 22:37:45:65:b8:c1:85:a4:7c:a4:e7:31:e1:c3:59: e8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F4:B5:8C:D3:67:05:3C:2F:FA:31:D1:12:10:0F:EA:4D:D9:61:5A X509v3 Authority Key Identifier: keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/1-PS1jNNnBTwv-jHREhAP6k3ZYVo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.32.163.0/24 46.32.176.0/24 Signature Algorithm: sha256WithRSAEncryption 64:ad:60:10:f6:a3:2e:32:f9:62:d5:dc:a5:37:5c:90:a3:97: 68:d4:6c:e8:d7:f9:f4:ea:fa:db:8b:11:b3:f7:4a:df:7f:41: b9:6b:e3:b7:8d:88:a2:ca:c2:6b:83:99:a7:e5:3e:96:3a:fd: b2:6d:4c:ef:9a:dd:f5:5e:87:66:2a:28:be:f8:ad:de:b5:0c: c5:f7:d7:9c:85:48:6b:2a:1a:50:75:8b:26:2f:94:34:29:24: bb:d0:72:ab:3a:a3:f8:fc:fd:ef:04:7c:40:31:88:d5:14:b2: 1f:71:5e:5f:00:7e:85:e4:1c:66:fb:68:55:b2:4c:0a:15:a7: 93:69:31:98:9a:30:6c:b1:ff:4f:cf:2e:4f:b0:51:e5:af:2d: b9:2c:6a:f0:94:4d:a5:7f:8c:f5:45:76:c3:55:a4:53:0e:0e: 37:65:b9:d2:93:04:ea:83:9b:f9:99:1d:59:14:4f:aa:4d:9b: dc:79:af:b3:34:28:a3:41:bf:d7:ca:24:71:f2:43:f3:c0:c8: 5d:78:58:5c:46:d8:b5:26:ad:12:02:3b:79:12:dc:23:42:2a: bc:ab:6b:35:89:e4:28:19:1a:37:a6:10:34:22:c3:9e:e1:f3: f5:f0:ad:e2:8a:d0:9c:cb:b8:eb:96:58:68:da:0a:7f:e4:aa: 1a:c1:a7:03 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZqXXwNuXzdEvzLYF1hHVw4nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzN2VlMWVjZWQxOWY4YTBhM2E2MzViZmFhMjY0MjkzZTM0 Mzc3OTUwHhcNMjUxMTE4MTQyOTM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGY0YjU4Y2QzNjcwNTNjMmZmYTMxZDExMjEwMGZlYTRkZDk2MTVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB+uaKrnx0NNCeOSSHFz8/ekvFL0 eAvd8zdYIeaMAIhnzLcagnsP8LKCCn6YOxXt5ZpRLq+hSSnWPLSMx5FtO8D3VgPD Pc2y1Zcm5Lrpn7MQP7Ll2/OzvY38qW+dJlCsG9atTBoH+gL2MGJNHJzmJDrq1gFw YfBU30sWIed6Lf1J21wV3/+z1+kjQQPdoQS44EgV8+/Bn7Xu799kOjYpgu85B3pM tg8aIuOPCO/6kRWQkyCQdJG1BL7X3n7EN5i+ROnUwPGCN6Xlv5Zy7ILl71ArFcj5 khxMzGmgR9MGfmEpyfG7mdqH2Qt3ipkX14YiN0VluMGFpHyk5zHhw1nofQIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFPj0tYzTZwU8L/ox0RIQD+pN2WFaMB8GA1UdIwQY MBaAFON+4eztGfigo6Y1v6omQpPjQ3eVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMt MzZlMzQ0YWJjOWQzLzEvMS1QUzFqTk5uQlR3di1qSFJFaEFQNmszWllWby5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvYjgvNmQ1ZDc1LTRkMWUtNDY5Ny1iMWQzLTM2ZTM0NGFiYzlk My8xLzQzN2g3TzBaLUtDanBqV19xaVpDay1ORGQ1VS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAC4gowME AC4gsDANBgkqhkiG9w0BAQsFAAOCAQEAZK1gEPajLjL5YtXcpTdckKOXaNRs6Nf5 9Or624sRs/dK339BuWvjt42IosrCa4OZp+U+ljr9sm1M75rd9V6HZioovvit3rUM xffXnIVIayoaUHWLJi+UNCkku9Byqzqj+Pz97wR8QDGI1RSyH3FeXwB+heQcZvto VbJMChWnk2kxmJowbLH/T88uT7BR5a8tuSxq8JRNpX+M9UV2w1WkUw4ON2W50pME 6oOb+ZkdWRRPqk2b3HmvszQoo0G/18okcfJD88DIXXhYXEbYtSatEgI7eRLcI0Iq vKtrNYnkKBkaN6YQNCLDnuHz9fCt4orQnMu465ZYaNoKf+SqGsGnAw== -----END CERTIFICATE-----Generated at Sat Dec 6 17:08:11 2025 by rpki-client