This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/9Y15TiSyn2wNGdw4h-rBMbyFaAc.roa File: 9Y15TiSyn2wNGdw4h-rBMbyFaAc.roa (raw, json) Hash identifier: 72P6b2id8MZPAK23i1WaqWGaegThFlPqZ6DtT05Xwkc= Subject key identifier: F5:8D:79:4E:24:B2:9F:6C:0D:19:DC:38:87:EA:C1:31:BC:85:68:07 Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Certificate serial: 019B77C7572277AE369D5019F6B8DE1D4F73 Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/9Y15TiSyn2wNGdw4h-rBMbyFaAc.roa Signing time: Thu 01 Jan 2026 04:18:31 +0000 ROA not before: Thu 01 Jan 2026 04:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213402 IP address blocks: 46.32.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:57:22:77:ae:36:9d:50:19:f6:b8:de:1d:4f:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Validity Not Before: Jan 1 04:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f58d794e24b29f6c0d19dc3887eac131bc856807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:bf:4b:02:1a:df:19:90:26:6c:57:2b:fe:0a: 2d:ac:61:5b:54:e4:2c:ab:42:07:45:4f:e6:8f:d2: d0:10:0c:4b:02:75:ab:07:10:f0:69:07:27:3b:1f: 1e:1e:ef:e6:f0:00:af:d8:7a:1c:74:fb:0b:ec:5c: d8:86:80:0b:6b:3b:83:8f:fb:d9:84:36:9d:bf:ad: 20:b2:39:2f:02:5f:8a:ff:c3:6f:81:94:7d:c9:54: 17:07:eb:49:d9:3a:6c:35:c9:88:33:78:22:19:52: 77:74:1e:de:4a:c6:a2:c4:a4:1f:84:47:fa:b2:3b: 47:d0:36:c1:1d:33:d7:80:dd:5e:e3:a6:36:d7:9a: 11:84:4b:71:b7:d7:8d:4a:68:c0:32:9a:24:6f:5d: cc:f1:fe:99:8f:41:9c:43:d1:4c:6c:bf:fb:cc:26: 39:b8:73:4a:2d:61:e1:e7:6f:68:37:4c:d6:fe:13: 03:80:03:0c:58:89:b4:7d:ec:e4:eb:8c:ab:51:4c: 5e:06:a5:7e:b5:63:b5:36:87:d3:64:99:e3:92:49: 79:8c:57:00:ee:11:8e:0b:e7:9b:aa:b9:d4:48:dc: a5:b3:b3:2e:6b:8c:b1:50:82:ed:3b:bd:33:35:4d: 90:4b:96:92:62:89:d3:35:cb:59:7c:76:bf:17:09: a3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:8D:79:4E:24:B2:9F:6C:0D:19:DC:38:87:EA:C1:31:BC:85:68:07 X509v3 Authority Key Identifier: keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/9Y15TiSyn2wNGdw4h-rBMbyFaAc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.32.172.0/24 Signature Algorithm: sha256WithRSAEncryption 18:83:e7:ac:e2:71:e8:df:28:c1:62:eb:76:cf:a7:2c:dc:ce: 13:2e:f6:3e:b1:7d:fd:55:8f:a4:bc:5e:7c:b5:9c:09:f3:23: 48:cb:2e:90:b3:90:47:be:d7:31:be:8c:00:85:1e:64:a8:73: 87:4f:12:03:df:17:71:9b:da:70:c5:eb:c6:5c:f2:48:52:97: 34:f9:6c:18:7a:05:53:48:c6:a8:b1:82:cc:22:36:d7:91:7d: 14:ca:9f:c3:e5:48:77:20:fc:c8:db:9d:7c:7f:5f:af:ef:ea: 27:c2:4a:ed:1e:11:3b:34:7e:5e:d8:a4:20:f5:9c:d6:1a:c2: 58:39:3a:9f:5e:36:e5:02:42:cc:6f:12:c4:c4:a8:05:47:b4: fe:2c:76:ac:e9:60:04:fa:f5:0f:53:63:9f:76:26:d3:cb:80: cf:64:cb:98:58:49:14:d2:cc:83:ce:87:d0:9b:97:48:cf:79: e5:39:2f:0c:28:fe:45:bf:75:4b:52:19:e8:fb:9f:d9:fb:5c: af:91:31:09:b3:5d:03:b2:a0:68:52:e3:da:68:a9:2a:96:04: 15:ad:45:38:2a:da:33:c6:db:52:35:14:5c:30:3f:8d:5b:57: a7:6f:fc:14:0e:ed:80:34:54:1d:3e:09:9d:14:69:58:69:19: 9e:9b:ac:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x1cid642nVAZ9rjeHU9zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzN2VlMWVjZWQxOWY4YTBhM2E2MzViZmFhMjY0MjkzZTM0 Mzc3OTUwHhcNMjYwMTAxMDQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNThkNzk0ZTI0YjI5ZjZjMGQxOWRjMzg4N2VhYzEzMWJjODU2ODA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlr9LAhrfGZAmbFcr/gotrGFbVOQs q0IHRU/mj9LQEAxLAnWrBxDwaQcnOx8eHu/m8ACv2HocdPsL7FzYhoALazuDj/vZ hDadv60gsjkvAl+K/8NvgZR9yVQXB+tJ2TpsNcmIM3giGVJ3dB7eSsaixKQfhEf6 sjtH0DbBHTPXgN1e46Y215oRhEtxt9eNSmjAMpokb13M8f6Zj0GcQ9FMbL/7zCY5 uHNKLWHh529oN0zW/hMDgAMMWIm0fezk64yrUUxeBqV+tWO1NofTZJnjkkl5jFcA 7hGOC+ebqrnUSNyls7Mua4yxUILtO70zNU2QS5aSYonTNctZfHa/FwmjRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPWNeU4ksp9sDRncOIfqwTG8hWgHMB8GA1UdIwQY MBaAFON+4eztGfigo6Y1v6omQpPjQ3eVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMt MzZlMzQ0YWJjOWQzLzEvOVkxNVRpU3luMndOR2R3NGgtckJNYnlGYUFjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMtMzZlMzQ0YWJjOWQz LzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiCsMA0G CSqGSIb3DQEBCwUAA4IBAQAYg+es4nHo3yjBYut2z6cs3M4TLvY+sX39VY+kvF58 tZwJ8yNIyy6Qs5BHvtcxvowAhR5kqHOHTxID3xdxm9pwxevGXPJIUpc0+WwYegVT SMaosYLMIjbXkX0Uyp/D5Uh3IPzI2518f1+v7+onwkrtHhE7NH5e2KQg9ZzWGsJY OTqfXjblAkLMbxLExKgFR7T+LHas6WAE+vUPU2OfdibTy4DPZMuYWEkU0syDzofQ m5dIz3nlOS8MKP5Fv3VLUhno+5/Z+1yvkTEJs10DsqBoUuPaaKkqlgQVrUU4Ktoz xttSNRRcMD+NW1enb/wUDu2ANFQdPgmdFGlYaRmem6zG -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:04 2026 by rpki-client