This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/niVLGlNb2CUGmMSyBWD8kTLpDBk.roa File: niVLGlNb2CUGmMSyBWD8kTLpDBk.roa (raw, json) Hash identifier: AKZ4s72v3jmhY1tnibGP99rC3Jazs2P+Hkr6MsVxXxY= Subject key identifier: 9E:25:4B:1A:53:5B:D8:25:06:98:C4:B2:05:60:FC:91:32:E9:0C:19 Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Certificate serial: 019BD4F8E1CE71BC5897569CD2FF005A5F59 Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/niVLGlNb2CUGmMSyBWD8kTLpDBk.roa Signing time: Mon 19 Jan 2026 06:37:19 +0000 ROA not before: Mon 19 Jan 2026 06:37:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200154 IP address blocks: 46.32.163.0/24 maxlen: 24 46.32.173.0/24 maxlen: 24 46.32.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:d4:f8:e1:ce:71:bc:58:97:56:9c:d2:ff:00:5a:5f:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Validity Not Before: Jan 19 06:37:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9e254b1a535bd8250698c4b20560fc9132e90c19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:10:87:e9:5d:b5:63:49:b9:ad:7e:1a:5a:3a: 6f:09:29:30:6e:19:6b:f7:b3:68:da:45:3a:19:c3: ab:af:2a:a2:f1:8d:1c:3e:54:3e:ab:fe:1d:08:8e: 40:4e:00:4c:d6:b1:aa:5d:ef:c5:00:72:79:70:58: 6c:1c:63:f7:b6:69:88:d4:b6:3c:01:3c:45:e5:63: 85:ea:67:d1:d6:77:5d:3d:fe:92:ed:ac:6d:5c:08: 41:d9:7e:ba:b4:cc:42:c7:5f:87:6d:3c:f3:fa:8c: 0d:d6:c3:a4:7b:78:4b:1f:04:9d:9f:59:d2:e8:28: 77:e4:51:e9:01:c5:09:8f:d9:4e:b2:e7:c5:a0:d4: 02:7f:2a:d7:48:2e:68:e6:10:5c:cd:8e:95:e1:5b: b7:53:c1:16:38:b9:29:b8:ef:b2:40:80:f6:32:fc: 7c:57:18:94:0c:45:44:ef:4f:2b:12:6b:3e:3f:70: 1e:1c:63:6b:36:64:06:84:5e:aa:c4:c3:db:f7:20: 70:d6:f7:cb:23:49:87:8c:74:55:9d:ae:31:47:c2: 55:7e:f1:a9:09:6a:21:eb:89:ee:b6:40:42:bc:e1: 29:72:e8:df:88:a4:db:f0:5c:ab:71:a7:7d:50:dd: ff:14:13:72:39:cb:21:a9:20:6f:33:0b:fe:3e:fa: b9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:25:4B:1A:53:5B:D8:25:06:98:C4:B2:05:60:FC:91:32:E9:0C:19 X509v3 Authority Key Identifier: keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/niVLGlNb2CUGmMSyBWD8kTLpDBk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.32.163.0/24 46.32.173.0/24 46.32.176.0/24 Signature Algorithm: sha256WithRSAEncryption 04:67:c6:7e:d6:49:a6:1b:f7:99:46:fe:9e:6c:81:61:32:2b: fa:ea:85:91:97:68:3f:40:2c:4b:de:88:f3:c9:27:20:34:f7: 10:d7:b5:73:22:34:61:e8:3f:e8:16:4e:b4:66:c4:36:a8:98: 4c:07:fe:3c:7c:2e:de:59:69:09:59:54:d1:e6:12:c3:bc:a7: b5:11:7b:66:1e:e7:fb:cc:b5:b9:5a:7b:b6:ff:b5:17:46:42: f1:a9:aa:ae:f5:47:7f:85:d3:d2:71:06:9e:0c:d4:f1:5b:fb: f5:2a:5f:42:71:37:12:1e:d8:29:b9:66:73:32:39:37:3b:4d: f0:bc:18:f8:76:26:5a:7c:49:dc:6d:f9:84:02:63:a0:cf:dc: 45:d9:88:61:e0:39:1c:ab:d8:97:45:4c:b6:d1:5c:39:45:66: 92:1d:c7:43:f2:6c:e2:ad:bf:97:d1:6b:50:12:82:86:72:82: a8:af:9e:02:54:8b:c0:de:41:5e:ce:1d:af:70:91:5e:ea:e1: 06:d5:59:1f:14:0d:43:7a:87:c5:e8:fc:26:fe:f7:43:8c:a0: 58:41:d1:9f:35:a7:71:c9:74:cd:e5:50:a8:63:e6:34:8a:25: 45:6e:18:ff:06:aa:94:10:22:f7:52:de:7a:8e:5e:4c:35:41: 46:32:29:96 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZvU+OHOcbxYl1ac0v8AWl9ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzN2VlMWVjZWQxOWY4YTBhM2E2MzViZmFhMjY0MjkzZTM0 Mzc3OTUwHhcNMjYwMTE5MDYzNzE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZTI1NGIxYTUzNWJkODI1MDY5OGM0YjIwNTYwZmM5MTMyZTkwYzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRCH6V21Y0m5rX4aWjpvCSkwbhlr 97No2kU6GcOrryqi8Y0cPlQ+q/4dCI5ATgBM1rGqXe/FAHJ5cFhsHGP3tmmI1LY8 ATxF5WOF6mfR1nddPf6S7axtXAhB2X66tMxCx1+HbTzz+owN1sOke3hLHwSdn1nS 6Ch35FHpAcUJj9lOsufFoNQCfyrXSC5o5hBczY6V4Vu3U8EWOLkpuO+yQID2Mvx8 VxiUDEVE708rEms+P3AeHGNrNmQGhF6qxMPb9yBw1vfLI0mHjHRVna4xR8JVfvGp CWoh64nutkBCvOEpcujfiKTb8Fyrcad9UN3/FBNyOcshqSBvMwv+Pvq5SQIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFJ4lSxpTW9glBpjEsgVg/JEy6QwZMB8GA1UdIwQY MBaAFON+4eztGfigo6Y1v6omQpPjQ3eVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMt MzZlMzQ0YWJjOWQzLzEvbmlWTEdsTmIyQ1VHbU1TeUJXRDhrVExwREJrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMtMzZlMzQ0YWJjOWQz LzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALiCjAwQA LiCtAwQALiCwMA0GCSqGSIb3DQEBCwUAA4IBAQAEZ8Z+1kmmG/eZRv6ebIFhMiv6 6oWRl2g/QCxL3ojzyScgNPcQ17VzIjRh6D/oFk60ZsQ2qJhMB/48fC7eWWkJWVTR 5hLDvKe1EXtmHuf7zLW5Wnu2/7UXRkLxqaqu9Ud/hdPScQaeDNTxW/v1Kl9CcTcS HtgpuWZzMjk3O03wvBj4diZafEncbfmEAmOgz9xF2Yhh4Dkcq9iXRUy20Vw5RWaS HcdD8mzirb+X0WtQEoKGcoKor54CVIvA3kFezh2vcJFe6uEG1VkfFA1DeofF6Pwm /vdDjKBYQdGfNadxyXTN5VCoY+Y0iiVFbhj/BqqUECL3Ut56jl5MNUFGMimW -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:06 2026 by rpki-client