This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/cnQVXsjXrao1YqnaQ83x_ejyGco.roa File: cnQVXsjXrao1YqnaQ83x_ejyGco.roa (raw, json) Hash identifier: +XOZIpswIk5KNwpxBMYpz+E9jZodoc2Jm7RIiTE+ZY8= Subject key identifier: 72:74:15:5E:C8:D7:AD:AA:35:62:A9:DA:43:CD:F1:FD:E8:F2:19:CA Certificate issuer: /CN=88775003f7d9e8e6e1ef48db06728e668ed187bc Certificate serial: 019B77C6DCDA4199EE1601B79DF07E0256FF Authority key identifier: 88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/cnQVXsjXrao1YqnaQ83x_ejyGco.roa Signing time: Thu 01 Jan 2026 04:17:59 +0000 ROA not before: Thu 01 Jan 2026 04:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211908 IP address blocks: 46.149.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:dc:da:41:99:ee:16:01:b7:9d:f0:7e:02:56:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88775003f7d9e8e6e1ef48db06728e668ed187bc Validity Not Before: Jan 1 04:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7274155ec8d7adaa3562a9da43cdf1fde8f219ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4f:70:bc:5a:2c:ef:ea:75:68:1b:2e:03:a8: 61:12:e7:3e:e9:92:53:0f:19:de:86:de:38:49:56: 98:34:ba:25:86:dd:dc:20:56:c6:ad:e1:bd:9b:be: e5:0d:cf:59:76:0b:2d:e8:86:76:c8:65:19:12:8b: 18:2e:00:eb:be:64:73:e3:ba:fb:68:f4:a0:a9:93: fe:42:6b:0b:75:59:54:08:37:67:1f:e9:42:4c:92: 25:60:69:73:91:b8:7a:88:c7:f8:22:06:4b:ff:31: f7:83:57:eb:88:5a:2a:74:34:9e:4a:e2:6e:e6:44: 05:c3:1a:23:e9:d2:d7:88:57:9f:a7:a1:f8:c8:75: c1:d1:ce:20:24:68:cf:61:17:3a:d9:f1:37:4e:10: 1d:bf:83:ca:05:04:73:a9:35:98:57:b0:5b:d7:ca: b2:a6:16:24:7b:4d:25:f0:3e:70:ed:a2:f7:30:52: 97:a6:cc:19:a5:50:1b:8f:3f:c0:da:b0:0e:43:d0: 9f:44:bc:69:20:41:83:0d:72:12:09:ca:5b:80:ee: 7a:ec:60:05:cd:4d:fd:ab:73:88:c5:21:f7:85:03: 5f:03:1a:34:72:58:21:72:5b:31:1f:ba:ae:2c:67: 9e:13:82:25:90:c7:c9:c6:9f:b2:12:f4:ef:46:96: 06:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:74:15:5E:C8:D7:AD:AA:35:62:A9:DA:43:CD:F1:FD:E8:F2:19:CA X509v3 Authority Key Identifier: keyid:88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/cnQVXsjXrao1YqnaQ83x_ejyGco.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.149.96.0/24 Signature Algorithm: sha256WithRSAEncryption 63:79:dc:bd:0a:ed:4e:93:74:cf:01:b5:d7:88:a6:ea:16:de: 69:21:18:da:83:05:44:7d:2f:0c:1d:11:03:f2:4b:c7:31:52: bd:e3:52:2e:f8:6d:bc:ac:ee:4c:74:7d:27:1e:94:1c:5a:03: aa:e6:72:5a:97:e4:ca:b7:06:03:e4:f9:b6:d9:8d:29:ee:29: 90:be:1c:c3:4b:28:c9:40:cc:44:7c:5c:d5:49:c4:5c:28:de: 0a:50:cb:4a:ef:22:fc:bd:34:f1:ae:0e:cc:ab:66:6d:2b:bb: 46:6e:b7:4e:cf:d6:52:da:7d:22:54:58:ab:0b:ee:1c:37:c9: 8f:a6:27:17:73:7a:30:52:8e:8a:b8:42:28:fc:d4:81:29:e9: aa:ee:16:2b:f9:2f:2e:31:bd:9f:94:ba:8e:4e:71:ab:fa:8a: 4d:79:62:10:c0:be:25:2c:11:9f:8c:09:71:1e:17:e8:ea:05: 4a:68:d4:7a:ee:71:c8:35:76:91:5c:5a:60:e3:f5:cc:50:d2: 02:a4:bd:d3:e3:44:7c:ba:dc:e6:a4:1c:69:3f:f2:d8:c3:6d: 55:b2:14:bf:6e:93:87:9a:57:9b:45:60:5b:03:cb:ce:76:61: ac:37:b2:e0:b9:84:90:36:2c:a3:10:35:3e:dd:2f:af:30:f0: 2b:88:a2:fe -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xtzaQZnuFgG3nfB+Alb/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4Nzc1MDAzZjdkOWU4ZTZlMWVmNDhkYjA2NzI4ZTY2OGVk MTg3YmMwHhcNMjYwMTAxMDQxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3Mjc0MTU1ZWM4ZDdhZGFhMzU2MmE5ZGE0M2NkZjFmZGU4ZjIxOWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtE9wvFos7+p1aBsuA6hhEuc+6ZJT Dxneht44SVaYNLolht3cIFbGreG9m77lDc9Zdgst6IZ2yGUZEosYLgDrvmRz47r7 aPSgqZP+QmsLdVlUCDdnH+lCTJIlYGlzkbh6iMf4IgZL/zH3g1friFoqdDSeSuJu 5kQFwxoj6dLXiFefp6H4yHXB0c4gJGjPYRc62fE3ThAdv4PKBQRzqTWYV7Bb18qy phYke00l8D5w7aL3MFKXpswZpVAbjz/A2rAOQ9CfRLxpIEGDDXISCcpbgO567GAF zU39q3OIxSH3hQNfAxo0clghclsxH7quLGeeE4IlkMfJxp+yEvTvRpYGsQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHJ0FV7I162qNWKp2kPN8f3o8hnKMB8GA1UdIwQY MBaAFIh3UAP32ejm4e9I2wZyjmaO0Ye8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUhkUUFfZlo2T2JoNzBqYkJuS09abzdSaDd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi85YjhkM2ItMGMwMy00NTkxLWJkMGYt ODc3NTBkNmY3N2E4LzEvY25RVlhzalhyYW8xWXFuYVE4M3hfZWp5R2NvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi85YjhkM2ItMGMwMy00NTkxLWJkMGYtODc3NTBkNmY3N2E4 LzEvaUhkUUFfZlo2T2JoNzBqYkJuS09abzdSaDd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALpVgMA0G CSqGSIb3DQEBCwUAA4IBAQBjedy9Cu1Ok3TPAbXXiKbqFt5pIRjagwVEfS8MHRED 8kvHMVK941Iu+G28rO5MdH0nHpQcWgOq5nJal+TKtwYD5Pm22Y0p7imQvhzDSyjJ QMxEfFzVScRcKN4KUMtK7yL8vTTxrg7Mq2ZtK7tGbrdOz9ZS2n0iVFirC+4cN8mP picXc3owUo6KuEIo/NSBKemq7hYr+S8uMb2flLqOTnGr+opNeWIQwL4lLBGfjAlx Hhfo6gVKaNR67nHINXaRXFpg4/XMUNICpL3T40R8utzmpBxpP/LYw21VshS/bpOH mlebRWBbA8vOdmGsN7LguYSQNiyjEDU+3S+vMPAriKL+ -----END CERTIFICATE-----Generated at Sun Jan 25 16:40:39 2026 by rpki-client