This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/ZAW9hLoDnVp80PJK59uzMqseMQg.roa File: ZAW9hLoDnVp80PJK59uzMqseMQg.roa (raw, json) Hash identifier: zROFGa57szBUE/hPHlcNo31U/nC8cbg/ehhEeCGDUB4= Subject key identifier: 64:05:BD:84:BA:03:9D:5A:7C:D0:F2:4A:E7:DB:B3:32:AB:1E:31:08 Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Certificate serial: 019B77C756B60EE2D9CC073A833734641914 Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/ZAW9hLoDnVp80PJK59uzMqseMQg.roa Signing time: Thu 01 Jan 2026 04:18:31 +0000 ROA not before: Thu 01 Jan 2026 04:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209360 IP address blocks: 46.32.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:56:b6:0e:e2:d9:cc:07:3a:83:37:34:64:19:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Validity Not Before: Jan 1 04:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6405bd84ba039d5a7cd0f24ae7dbb332ab1e3108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cd:63:cb:d4:df:0d:c3:59:44:91:0c:2f:dc: 7e:7f:c9:3b:89:e8:05:9e:eb:23:1e:da:1b:71:df: 41:ca:8c:f8:23:f6:bf:bf:c1:7b:4c:94:be:fc:0e: 36:f3:b3:f1:be:d6:1d:39:55:46:8d:2c:9a:6f:9a: 99:84:9b:d1:52:9d:5a:4c:0b:e9:fb:03:c8:54:9c: ae:70:62:75:02:40:bb:ce:d5:92:88:29:05:24:5f: a9:42:22:56:cd:ed:46:98:bc:2b:a7:e7:23:d9:cd: 9e:e8:e3:b4:47:98:33:49:de:fc:ea:aa:dd:cd:c0: be:ac:33:9c:bf:ad:4b:11:6b:92:47:51:8e:ea:fa: 2b:60:31:33:74:86:a2:d3:55:99:fd:6f:70:a9:59: e3:e3:37:bc:bd:67:4d:34:9d:d0:49:d8:a0:2a:50: 93:d1:36:0c:f8:99:89:20:93:15:e9:6a:42:8e:89: c7:7d:4c:85:ae:7a:74:d3:d7:17:1a:42:cb:8c:a4: 2a:fe:df:73:ab:3e:3e:19:fc:82:e1:04:42:d3:ec: 6e:46:23:e1:67:c8:10:5a:0a:3e:e8:14:2c:d6:f5: 0e:9d:e4:83:8a:40:61:93:e7:5d:ae:ed:3f:49:6d: d2:10:24:cd:b9:05:94:4f:ec:7c:ad:90:ae:3e:a8: c0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:05:BD:84:BA:03:9D:5A:7C:D0:F2:4A:E7:DB:B3:32:AB:1E:31:08 X509v3 Authority Key Identifier: keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/ZAW9hLoDnVp80PJK59uzMqseMQg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.32.177.0/24 Signature Algorithm: sha256WithRSAEncryption 13:cc:48:49:b1:b7:d7:74:da:eb:d9:5c:6f:40:7b:bf:dc:54: 6e:e1:3c:18:eb:43:5d:19:df:24:98:63:a2:e0:d1:83:25:6d: 5b:7a:22:5e:52:db:34:6a:f6:ac:22:1a:46:cd:01:88:90:57: f4:ae:57:c8:20:c7:db:a9:46:ee:36:84:41:c1:7f:0a:20:d7: f1:46:e5:0e:46:b7:d9:fc:d3:16:06:69:ed:dc:15:8c:eb:4b: bc:b1:fb:a9:71:70:0a:5a:2f:4c:cd:89:d7:49:03:bd:03:c3: 5b:77:42:11:30:2f:40:58:f0:de:1f:c8:2b:78:c8:da:ca:83: 8f:f2:9d:a5:c0:54:ec:f2:f8:bc:1c:9b:93:74:32:26:8b:c9: f9:04:48:e9:b6:5f:a5:1c:d1:e2:3d:2b:cc:ce:85:70:a4:15: cf:73:87:14:48:1e:60:c3:f9:ba:7f:08:7f:93:d9:d6:cf:9e: e3:73:13:64:8a:6c:a9:1e:61:08:c6:ca:1d:41:14:2e:4f:cc: ed:97:53:97:84:c4:59:5b:b9:f4:b1:75:20:93:30:5d:cb:3a: b1:e3:e0:be:0a:53:81:d7:5d:c1:8b:ca:b6:6d:93:e0:0e:43: 4d:6a:97:63:95:22:a9:37:5a:bd:59:f1:b8:58:e1:e6:ed:62: bc:dc:04:b4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x1a2DuLZzAc6gzc0ZBkUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzN2VlMWVjZWQxOWY4YTBhM2E2MzViZmFhMjY0MjkzZTM0 Mzc3OTUwHhcNMjYwMTAxMDQxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2NDA1YmQ4NGJhMDM5ZDVhN2NkMGYyNGFlN2RiYjMzMmFiMWUzMTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx81jy9TfDcNZRJEML9x+f8k7iegF nusjHtobcd9Byoz4I/a/v8F7TJS+/A4287PxvtYdOVVGjSyab5qZhJvRUp1aTAvp +wPIVJyucGJ1AkC7ztWSiCkFJF+pQiJWze1GmLwrp+cj2c2e6OO0R5gzSd786qrd zcC+rDOcv61LEWuSR1GO6vorYDEzdIai01WZ/W9wqVnj4ze8vWdNNJ3QSdigKlCT 0TYM+JmJIJMV6WpCjonHfUyFrnp009cXGkLLjKQq/t9zqz4+GfyC4QRC0+xuRiPh Z8gQWgo+6BQs1vUOneSDikBhk+ddru0/SW3SECTNuQWUT+x8rZCuPqjALQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGQFvYS6A51afNDySufbszKrHjEIMB8GA1UdIwQY MBaAFON+4eztGfigo6Y1v6omQpPjQ3eVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMt MzZlMzQ0YWJjOWQzLzEvWkFXOWhMb0RuVnA4MFBKSzU5dXpNcXNlTVFnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMtMzZlMzQ0YWJjOWQz LzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiCxMA0G CSqGSIb3DQEBCwUAA4IBAQATzEhJsbfXdNrr2VxvQHu/3FRu4TwY60NdGd8kmGOi 4NGDJW1beiJeUts0avasIhpGzQGIkFf0rlfIIMfbqUbuNoRBwX8KINfxRuUORrfZ /NMWBmnt3BWM60u8sfupcXAKWi9MzYnXSQO9A8Nbd0IRMC9AWPDeH8greMjayoOP 8p2lwFTs8vi8HJuTdDImi8n5BEjptl+lHNHiPSvMzoVwpBXPc4cUSB5gw/m6fwh/ k9nWz57jcxNkimypHmEIxsodQRQuT8ztl1OXhMRZW7n0sXUgkzBdyzqx4+C+ClOB 113Bi8q2bZPgDkNNapdjlSKpN1q9WfG4WOHm7WK83AS0 -----END CERTIFICATE-----Generated at Sun Jan 25 22:41:46 2026 by rpki-client