This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/POpf16JTfJb3ZTTDt9B0oJ0533g.roa File: POpf16JTfJb3ZTTDt9B0oJ0533g.roa (raw, json) Hash identifier: rQVzrT/0k1e9bsX7W+CGzINAzGb8c3B2wWbzfmIqa5o= Subject key identifier: 3C:EA:5F:D7:A2:53:7C:96:F7:65:34:C3:B7:D0:74:A0:9D:39:DF:78 Certificate issuer: /CN=88775003f7d9e8e6e1ef48db06728e668ed187bc Certificate serial: 019B77C6DC7CDD91342A97538D25291B8F2E Authority key identifier: 88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/POpf16JTfJb3ZTTDt9B0oJ0533g.roa Signing time: Thu 01 Jan 2026 04:17:59 +0000 ROA not before: Thu 01 Jan 2026 04:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57588 IP address blocks: 46.149.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:dc:7c:dd:91:34:2a:97:53:8d:25:29:1b:8f:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88775003f7d9e8e6e1ef48db06728e668ed187bc Validity Not Before: Jan 1 04:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3cea5fd7a2537c96f76534c3b7d074a09d39df78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:a8:1a:40:09:99:c6:fc:df:55:3e:a2:44:7e: d1:6d:2b:3e:b5:60:c8:a0:5b:fa:f3:69:bf:27:be: 36:29:76:db:79:35:96:26:56:e3:68:cf:cf:ef:77: 38:92:d8:0b:7b:c8:60:dc:86:86:b8:3d:86:05:11: f7:f2:c4:40:2b:f8:81:33:10:a2:0c:9b:98:7b:a0: 1b:63:13:55:2d:7f:c7:2e:4a:36:1d:35:12:59:38: a2:f3:d7:92:8e:e5:0a:39:7b:bd:7d:07:95:fb:3c: 11:32:e3:3a:24:49:f4:33:6f:20:16:04:98:a7:97: f8:e3:65:cf:25:7c:e2:31:56:9d:f1:29:39:df:70: 85:7f:f7:a4:d9:c2:97:0f:35:84:18:28:1c:df:d4: 1f:e5:c0:a0:3a:62:d1:d1:3d:10:54:09:dc:fb:0b: 45:25:f9:1f:df:4d:fa:a9:81:a5:f9:33:7f:68:18: d4:31:5e:d5:83:ca:31:71:e0:34:01:b7:16:d2:07: 6f:d0:59:b2:66:57:09:03:87:68:3e:26:30:63:66: a7:01:bd:35:2f:c0:21:7e:78:c4:8d:00:98:c4:d5: c8:77:40:ec:f9:7d:e7:b7:a0:14:e2:68:4c:7d:23: 43:0c:6b:23:ad:cc:72:da:95:f1:b0:03:5a:22:ca: 87:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:EA:5F:D7:A2:53:7C:96:F7:65:34:C3:B7:D0:74:A0:9D:39:DF:78 X509v3 Authority Key Identifier: keyid:88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/POpf16JTfJb3ZTTDt9B0oJ0533g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.149.96.0/24 Signature Algorithm: sha256WithRSAEncryption 65:7f:14:92:1b:b4:14:03:7e:15:05:58:15:df:ba:ae:b5:d6: e2:7c:22:38:89:1c:e1:c8:31:44:8c:76:b8:7f:6a:67:bc:24: 6f:6f:d8:df:40:d5:f1:f2:4a:94:09:d6:d1:42:91:0b:ae:3c: 12:b2:71:69:a1:bc:73:65:99:21:45:ca:a3:d6:b5:c5:f9:0f: ca:fd:23:b8:a1:55:c9:a0:7f:0c:18:63:ac:cf:77:24:2e:f8: db:6d:92:96:18:c8:2c:aa:f2:5a:cf:f1:83:e1:7d:1a:cd:f4: ab:1e:49:8a:db:02:e7:c9:3c:a2:8b:d6:1f:4c:a6:b3:b9:00: fa:4d:c1:e3:ec:43:b3:13:bf:c0:8c:87:46:f9:e2:8b:da:b6: e6:b9:db:37:5b:5a:d8:dc:aa:04:16:27:17:ea:5a:af:3c:75: 01:22:b9:fd:5e:6e:19:bf:3d:c1:db:54:68:e3:ce:f0:c2:17: 04:8d:e6:d7:15:18:19:6a:f7:7b:85:8a:45:53:e1:07:bf:f4: 86:d6:27:c8:23:f6:4c:9b:4a:16:c8:43:af:b0:e7:78:69:e7: fe:0b:25:28:a9:c0:5f:93:df:e2:d6:cb:5f:05:7f:2f:87:a8: 58:7c:dc:ba:f1:c6:13:64:93:b7:f4:89:11:23:ea:61:9e:71: cd:47:5f:e1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xtx83ZE0KpdTjSUpG48uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4Nzc1MDAzZjdkOWU4ZTZlMWVmNDhkYjA2NzI4ZTY2OGVk MTg3YmMwHhcNMjYwMTAxMDQxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzY2VhNWZkN2EyNTM3Yzk2Zjc2NTM0YzNiN2QwNzRhMDlkMzlkZjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6qgaQAmZxvzfVT6iRH7RbSs+tWDI oFv682m/J742KXbbeTWWJlbjaM/P73c4ktgLe8hg3IaGuD2GBRH38sRAK/iBMxCi DJuYe6AbYxNVLX/HLko2HTUSWTii89eSjuUKOXu9fQeV+zwRMuM6JEn0M28gFgSY p5f442XPJXziMVad8Sk533CFf/ek2cKXDzWEGCgc39Qf5cCgOmLR0T0QVAnc+wtF Jfkf3036qYGl+TN/aBjUMV7Vg8oxceA0AbcW0gdv0FmyZlcJA4doPiYwY2anAb01 L8AhfnjEjQCYxNXId0Ds+X3nt6AU4mhMfSNDDGsjrcxy2pXxsANaIsqHnQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDzqX9eiU3yW92U0w7fQdKCdOd94MB8GA1UdIwQY MBaAFIh3UAP32ejm4e9I2wZyjmaO0Ye8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUhkUUFfZlo2T2JoNzBqYkJuS09abzdSaDd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi85YjhkM2ItMGMwMy00NTkxLWJkMGYt ODc3NTBkNmY3N2E4LzEvUE9wZjE2SlRmSmIzWlRURHQ5QjBvSjA1MzNnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi85YjhkM2ItMGMwMy00NTkxLWJkMGYtODc3NTBkNmY3N2E4 LzEvaUhkUUFfZlo2T2JoNzBqYkJuS09abzdSaDd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALpVgMA0G CSqGSIb3DQEBCwUAA4IBAQBlfxSSG7QUA34VBVgV37qutdbifCI4iRzhyDFEjHa4 f2pnvCRvb9jfQNXx8kqUCdbRQpELrjwSsnFpobxzZZkhRcqj1rXF+Q/K/SO4oVXJ oH8MGGOsz3ckLvjbbZKWGMgsqvJaz/GD4X0azfSrHkmK2wLnyTyii9YfTKazuQD6 TcHj7EOzE7/AjIdG+eKL2rbmuds3W1rY3KoEFicX6lqvPHUBIrn9Xm4Zvz3B21Ro 487wwhcEjebXFRgZavd7hYpFU+EHv/SG1ifII/ZMm0oWyEOvsOd4aef+CyUoqcBf k9/i1stfBX8vh6hYfNy68cYTZJO39IkRI+phnnHNR1/h -----END CERTIFICATE-----Generated at Sun Jan 25 19:36:31 2026 by rpki-client