This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/STnOJRTNql21M2Kz5QY42xiaMM4.roa File: STnOJRTNql21M2Kz5QY42xiaMM4.roa (raw, json) Hash identifier: 5N7rcDLtfU0kN4gxROhTw9CW7XTPLN7mgLp3zMXOn6o= Subject key identifier: 49:39:CE:25:14:CD:AA:5D:B5:33:62:B3:E5:06:38:DB:18:9A:30:CE Certificate issuer: /CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce Certificate serial: 019B7AC89E4BC7AE8F9D6B706E27769D135C Authority key identifier: 46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/STnOJRTNql21M2Kz5QY42xiaMM4.roa Signing time: Thu 01 Jan 2026 18:18:46 +0000 ROA not before: Thu 01 Jan 2026 18:18:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 41171 IP address blocks: 146.19.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.mft rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:9e:4b:c7:ae:8f:9d:6b:70:6e:27:76:9d:13:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=468b592f3110bc6c35249a8271a0dac1a9acb0ce Validity Not Before: Jan 1 18:18:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4939ce2514cdaa5db53362b3e50638db189a30ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5f:09:37:c9:14:d7:5a:92:a8:dd:d5:b7:9e: 12:db:bc:24:fb:5c:f4:0e:1f:96:7a:e7:10:fe:c8: 30:1a:23:6b:09:29:fb:48:ef:56:92:2f:ef:10:d6: fe:b2:5c:dc:63:9a:e4:e5:11:f9:cf:e8:20:70:fa: 3e:bf:a5:b3:82:27:6e:0a:bd:d5:60:c7:c7:e8:ea: 53:c5:a8:fd:69:ab:ab:8c:01:c4:ba:1a:5d:09:4c: 50:58:f7:fe:9c:33:fb:2e:40:6b:91:8b:af:40:0b: 13:87:80:c5:49:5f:30:f7:cd:ac:f7:9a:bf:cb:bc: 5b:c0:87:9c:79:62:f8:d1:c5:eb:10:d3:18:d2:1c: f5:0a:5f:4d:79:e1:4a:f6:a9:a1:a9:fa:c6:02:02: f7:3b:43:1c:7d:c6:f7:21:68:c0:bb:f1:d1:47:5c: ea:99:08:7a:e9:ff:b1:7e:5d:df:a7:b3:36:fb:b9: 5d:d1:23:24:32:bb:c5:5b:7a:fa:df:24:52:67:91: e1:dc:bc:e8:c7:0c:5a:20:e9:4e:f9:15:4e:cc:03: bb:fe:82:81:15:57:f5:64:e9:09:56:9c:b1:b9:06: f3:70:5f:c6:08:11:17:76:7e:94:e5:1d:27:d0:f1: 3d:2b:d1:62:66:64:f4:e8:70:d8:d0:1d:2a:c2:ce: 9c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:39:CE:25:14:CD:AA:5D:B5:33:62:B3:E5:06:38:DB:18:9A:30:CE X509v3 Authority Key Identifier: keyid:46:8B:59:2F:31:10:BC:6C:35:24:9A:82:71:A0:DA:C1:A9:AC:B0:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RotZLzEQvGw1JJqCcaDawamssM4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/STnOJRTNql21M2Kz5QY42xiaMM4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/29e166-98d2-49f2-8497-0503749adea0/1/RotZLzEQvGw1JJqCcaDawamssM4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 146.19.228.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:91:8e:c7:ee:16:8c:ef:81:cc:2b:fc:93:f3:dd:09:5d:d9: f7:e4:df:83:1d:d7:ba:9f:52:76:d5:84:ae:9f:6a:91:82:a5: 7c:36:d7:22:19:81:bc:66:28:dc:02:32:2e:0a:6e:74:4b:53: d7:7d:df:6d:0d:77:19:5a:c1:18:58:f4:9f:e7:cf:2b:48:2d: 28:a8:2e:7f:a4:19:81:65:ed:4e:29:2e:56:6e:78:04:f4:a9: b9:a8:4c:d6:e3:ff:b7:b8:43:87:51:03:46:1a:f4:f0:77:3c: c4:81:86:02:83:c8:ad:80:4a:0e:a3:86:ba:69:91:70:14:3e: c8:33:39:c6:af:fb:0d:96:9c:50:12:f2:de:11:ae:b0:f7:7c: b4:e8:a0:99:34:00:0f:26:9d:fb:8a:a5:99:ee:92:dd:19:fe: 9a:d8:8d:a9:38:27:bb:a4:36:4e:b7:26:52:32:66:56:c9:97: 4c:6c:64:c1:90:bf:ea:04:e9:ff:1a:e1:f7:90:50:0e:bc:70: 7f:9a:f3:89:73:7d:ae:66:78:a9:f8:73:a2:4a:e2:4f:28:47: 9c:64:b9:50:04:25:b3:fb:40:e6:93:be:8f:67:10:0f:85:23: a6:d1:fc:1d:b9:e0:84:c9:bb:aa:5a:ea:37:a7:f6:f9:25:3d: cb:ad:fd:15 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yJ5Lx66PnWtwbid2nRNcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2OGI1OTJmMzExMGJjNmMzNTI0OWE4MjcxYTBkYWMxYTlh Y2IwY2UwHhcNMjYwMTAxMTgxODQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTM5Y2UyNTE0Y2RhYTVkYjUzMzYyYjNlNTA2MzhkYjE4OWEzMGNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz18JN8kU11qSqN3Vt54S27wk+1z0 Dh+WeucQ/sgwGiNrCSn7SO9Wki/vENb+slzcY5rk5RH5z+ggcPo+v6WzgiduCr3V YMfH6OpTxaj9aaurjAHEuhpdCUxQWPf+nDP7LkBrkYuvQAsTh4DFSV8w982s95q/ y7xbwIeceWL40cXrENMY0hz1Cl9NeeFK9qmhqfrGAgL3O0Mcfcb3IWjAu/HRR1zq mQh66f+xfl3fp7M2+7ld0SMkMrvFW3r63yRSZ5Hh3LzoxwxaIOlO+RVOzAO7/oKB FVf1ZOkJVpyxuQbzcF/GCBEXdn6U5R0n0PE9K9FiZmT06HDY0B0qws6cywIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEk5ziUUzapdtTNis+UGONsYmjDOMB8GA1UdIwQY MBaAFEaLWS8xELxsNSSagnGg2sGprLDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTct MDUwMzc0OWFkZWEwLzEvU1RuT0pSVE5xbDIxTTJLejVRWTQyeGlhTU00LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy8yOWUxNjYtOThkMi00OWYyLTg0OTctMDUwMzc0OWFkZWEw LzEvUm90Wkx6RVF2R3cxSkpxQ2NhRGF3YW1zc000LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhPkMA0G CSqGSIb3DQEBCwUAA4IBAQBMkY7H7haM74HMK/yT890JXdn35N+DHde6n1J21YSu n2qRgqV8NtciGYG8ZijcAjIuCm50S1PXfd9tDXcZWsEYWPSf588rSC0oqC5/pBmB Ze1OKS5WbngE9Km5qEzW4/+3uEOHUQNGGvTwdzzEgYYCg8itgEoOo4a6aZFwFD7I MznGr/sNlpxQEvLeEa6w93y06KCZNAAPJp37iqWZ7pLdGf6a2I2pOCe7pDZOtyZS MmZWyZdMbGTBkL/qBOn/GuH3kFAOvHB/mvOJc32uZnip+HOiSuJPKEecZLlQBCWz +0Dmk76PZxAPhSOm0fwdueCEybuqWuo3p/b5JT3Lrf0V -----END CERTIFICATE-----Generated at Sun Jan 25 08:50:28 2026 by rpki-client