This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/aCZ93vgD_JrnhMVE8ag6EFucpkg.roa File: aCZ93vgD_JrnhMVE8ag6EFucpkg.roa (raw, json) Hash identifier: YM2YwZolqo4cY7IySdgCVqucXddKsJE5ZWSJH8u/1Ww= Subject key identifier: 68:26:7D:DE:F8:03:FC:9A:E7:84:C5:44:F1:A8:3A:10:5B:9C:A6:48 Certificate issuer: /CN=be6144b459bce139f2734a44fbdb46c981329b2b Certificate serial: 019B76EB6BBF60263E6C058D1AD5BE82BF15 Authority key identifier: BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/aCZ93vgD_JrnhMVE8ag6EFucpkg.roa Signing time: Thu 01 Jan 2026 00:18:18 +0000 ROA not before: Thu 01 Jan 2026 00:18:18 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29007 IP address blocks: 46.182.96.0/21 maxlen: 21 78.154.64.0/19 maxlen: 19 185.9.124.0/22 maxlen: 22 217.28.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 18:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:6b:bf:60:26:3e:6c:05:8d:1a:d5:be:82:bf:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be6144b459bce139f2734a44fbdb46c981329b2b Validity Not Before: Jan 1 00:18:18 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68267ddef803fc9ae784c544f1a83a105b9ca648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a9:b0:3e:81:f1:cf:9c:99:f1:bd:4d:26:ed: 9f:73:e1:b6:2f:1b:ba:92:72:ca:8a:83:98:0d:84: 39:91:43:fe:e5:53:8b:e0:25:d8:ec:ea:65:e7:9f: 20:7e:af:38:60:b7:21:17:b0:53:b3:db:1c:43:02: ef:d7:e0:32:49:86:dd:ea:7b:92:0e:0a:51:c2:1b: f2:3e:d0:cd:e2:c7:98:5f:46:7f:3e:56:1a:1f:0b: 96:01:7f:88:13:e8:82:22:4c:07:a7:a1:b0:39:c9: 97:7e:96:fc:68:fb:33:42:ae:37:bd:ce:ba:f7:44: e3:73:bc:11:48:55:9d:11:0b:80:bb:ba:c2:f0:4f: 67:a5:13:02:95:c6:8f:e8:cb:41:5b:6b:dc:aa:a9: 37:72:52:ed:af:09:ee:5a:1a:2d:37:34:02:96:f0: 18:f8:3f:9d:38:00:de:f5:82:ff:a7:ec:5d:66:ca: 56:f5:3c:22:47:66:82:d3:b7:fd:a5:b4:a0:99:01: 22:6c:15:90:0c:40:9c:22:a7:8a:e5:23:c1:60:11: 48:ed:cc:24:6c:ca:ca:fe:b4:ad:8b:9d:4a:f1:b5: c1:b8:90:cb:8d:89:1a:70:2e:58:af:19:e5:e5:bc: d3:21:d5:3d:3f:f7:6c:1a:0f:6d:da:65:21:d7:38: c0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:26:7D:DE:F8:03:FC:9A:E7:84:C5:44:F1:A8:3A:10:5B:9C:A6:48 X509v3 Authority Key Identifier: keyid:BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/aCZ93vgD_JrnhMVE8ag6EFucpkg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.182.96.0/21 78.154.64.0/19 185.9.124.0/22 217.28.144.0/20 Signature Algorithm: sha256WithRSAEncryption 7b:73:09:1d:07:65:e2:d7:8e:ae:29:df:8d:a6:5d:6b:00:8e: 12:f7:2e:a1:bf:02:43:f7:bb:94:ce:d5:c2:f8:0d:70:3f:50: a3:50:0e:96:71:e6:84:5d:43:19:7d:99:79:a0:69:fc:ea:28: 6f:0c:f6:00:6e:ba:6a:e6:66:f0:c3:95:26:f4:d2:8f:74:04: 7e:76:14:ad:a3:f5:62:87:ea:3b:07:30:95:8e:69:a6:af:6d: 31:f7:95:72:43:84:a2:08:35:34:7b:f2:46:71:eb:c4:08:26: 52:f5:a4:09:2a:0b:67:ae:21:10:1d:a8:07:a7:3c:a6:bc:6e: 56:98:2f:ab:44:ae:ca:9d:66:66:ff:86:10:06:12:39:90:55: e2:6f:59:0d:29:e8:c5:0a:2c:d8:83:bc:7c:e6:ee:8e:4f:da: 84:fe:c3:e6:e2:ab:d7:b4:0f:bd:07:98:a5:3e:6e:d6:ab:ae: 82:8a:e6:ec:e7:9b:ba:29:0a:45:7a:36:70:d6:4e:d6:62:05: 42:ab:e5:56:98:16:d8:9f:58:fe:f9:68:8e:7a:1b:cb:e9:2e: d7:80:3f:3d:49:7b:40:71:f9:64:0c:02:5f:7b:cc:50:65:61: ac:4c:d9:b2:16:5a:91:be:27:3c:09:92:a9:83:ed:eb:f6:cc: f6:ce:37:ac -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt262u/YCY+bAWNGtW+gr8VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJlNjE0NGI0NTliY2UxMzlmMjczNGE0NGZiZGI0NmM5ODEz MjliMmIwHhcNMjYwMTAxMDAxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2ODI2N2RkZWY4MDNmYzlhZTc4NGM1NDRmMWE4M2ExMDViOWNhNjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6mwPoHxz5yZ8b1NJu2fc+G2Lxu6 knLKioOYDYQ5kUP+5VOL4CXY7Opl558gfq84YLchF7BTs9scQwLv1+AySYbd6nuS DgpRwhvyPtDN4seYX0Z/PlYaHwuWAX+IE+iCIkwHp6GwOcmXfpb8aPszQq43vc66 90Tjc7wRSFWdEQuAu7rC8E9npRMClcaP6MtBW2vcqqk3clLtrwnuWhotNzQClvAY +D+dOADe9YL/p+xdZspW9TwiR2aC07f9pbSgmQEibBWQDECcIqeK5SPBYBFI7cwk bMrK/rSti51K8bXBuJDLjYkacC5Yrxnl5bzTIdU9P/dsGg9t2mUh1zjASwIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFGgmfd74A/ya54TFRPGoOhBbnKZIMB8GA1UdIwQY MBaAFL5hRLRZvOE58nNKRPvbRsmBMpsrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdm1GRXRGbTg0VG55YzBwRS05dEd5WUV5bXlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zYjg0YmQtMTMzYi00M2Q5LWI5Y2Yt MTdlZmE1N2IzOWQ3LzEvYUNaOTN2Z0RfSnJuaE1WRThhZzZFRnVjcGtnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS8zYjg0YmQtMTMzYi00M2Q5LWI5Y2YtMTdlZmE1N2IzOWQ3 LzEvdm1GRXRGbTg0VG55YzBwRS05dEd5WUV5bXlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDLrZgAwQF TppAAwQCuQl8AwQE2RyQMA0GCSqGSIb3DQEBCwUAA4IBAQB7cwkdB2Xi146uKd+N pl1rAI4S9y6hvwJD97uUztXC+A1wP1CjUA6WceaEXUMZfZl5oGn86ihvDPYAbrpq 5mbww5Um9NKPdAR+dhSto/Vih+o7BzCVjmmmr20x95VyQ4SiCDU0e/JGcevECCZS 9aQJKgtnriEQHagHpzymvG5WmC+rRK7KnWZm/4YQBhI5kFXib1kNKejFCizYg7x8 5u6OT9qE/sPm4qvXtA+9B5ilPm7Wq66Ciubs55u6KQpFejZw1k7WYgVCq+VWmBbY n1j++WiOehvL6S7XgD89SXtAcflkDAJfe8xQZWGsTNmyFlqRvic8CZKpg+3r9sz2 zjes -----END CERTIFICATE-----Generated at Mon Jan 26 03:27:55 2026 by rpki-client