This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/x7X970YopYql2_ORGb5JC0O5FPc.roa File: x7X970YopYql2_ORGb5JC0O5FPc.roa (raw, json) Hash identifier: 1D4r8OdwFq2JIgRIm8qX+PHxe35m1r8nAHe0FHGqqlU= Subject key identifier: C7:B5:FD:EF:46:28:A5:8A:A5:DB:F3:91:19:BE:49:0B:43:B9:14:F7 Certificate issuer: /CN=88775003f7d9e8e6e1ef48db06728e668ed187bc Certificate serial: 019B77C6DB213C0DC07C29A322A455EB64FA Authority key identifier: 88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/x7X970YopYql2_ORGb5JC0O5FPc.roa Signing time: Thu 01 Jan 2026 04:17:59 +0000 ROA not before: Thu 01 Jan 2026 04:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57000 IP address blocks: 46.149.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.mft rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:db:21:3c:0d:c0:7c:29:a3:22:a4:55:eb:64:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88775003f7d9e8e6e1ef48db06728e668ed187bc Validity Not Before: Jan 1 04:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c7b5fdef4628a58aa5dbf39119be490b43b914f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:10:4e:d9:68:da:54:b4:6d:f2:58:a0:2f:19: 79:6c:49:df:04:44:95:06:99:a6:01:6c:0b:9a:c0: 29:10:86:68:d1:e4:e3:80:20:d7:1d:ee:6c:4a:ec: 88:f6:e4:ac:82:dd:be:cf:05:15:ec:cd:6f:6e:f4: 87:f9:0d:fd:45:c3:51:02:d6:eb:21:d7:b2:11:05: 70:9a:21:98:10:3f:ec:a4:2d:40:e8:73:50:da:6c: 0c:44:0c:ce:1f:c3:40:44:e8:f8:2c:6d:2c:16:61: 76:a7:53:b5:63:14:79:0a:2e:8d:fd:96:4f:d3:49: 22:8a:9d:70:10:10:3c:6b:53:04:38:48:96:2c:d2: e0:5e:5a:78:e5:bd:f0:de:eb:d9:c6:b3:eb:f2:4a: 3f:f0:13:64:f0:6d:4d:87:06:89:64:59:4d:2a:a4: 5a:82:73:7d:68:f5:5e:9f:8a:45:a2:9b:05:9d:f1: b6:2b:ce:0d:5e:aa:52:a0:86:6d:14:74:9b:f9:bb: a8:67:ae:99:a7:36:00:35:83:a6:3b:c9:12:ae:7d: 19:87:91:d9:52:6b:dd:8f:d5:cf:10:35:5d:98:59: 29:59:63:24:e9:0b:2c:40:63:24:49:cb:8a:45:29: 0d:4b:49:df:8e:9a:b1:91:50:06:2c:b7:36:86:15: af:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:B5:FD:EF:46:28:A5:8A:A5:DB:F3:91:19:BE:49:0B:43:B9:14:F7 X509v3 Authority Key Identifier: keyid:88:77:50:03:F7:D9:E8:E6:E1:EF:48:DB:06:72:8E:66:8E:D1:87:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/x7X970YopYql2_ORGb5JC0O5FPc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/9b8d3b-0c03-4591-bd0f-87750d6f77a8/1/iHdQA_fZ6Obh70jbBnKOZo7Rh7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.149.96.0/24 Signature Algorithm: sha256WithRSAEncryption 10:cc:44:05:25:b2:dd:14:4d:db:58:ac:35:f4:54:b3:cd:df: f2:73:35:c1:9d:91:78:ab:8f:20:1f:be:77:08:93:74:76:54: da:8f:9c:7f:9a:ab:cd:ac:d7:23:6e:07:e1:16:98:d2:aa:db: 88:ad:ac:02:0b:73:f7:4b:a8:41:2e:c4:e3:d7:70:43:c4:38: fc:96:a9:e1:d0:06:ad:ef:59:31:56:76:be:69:dc:82:88:1b: dd:ed:0c:ad:14:5b:43:18:35:a8:f7:5e:9b:ed:d0:5d:a8:88: 54:9c:7d:84:3f:88:f7:26:f0:a4:3a:4d:3d:5d:42:81:c1:f9: dd:1a:7e:d1:2b:6b:eb:34:81:01:75:02:08:32:df:d5:7b:c0: d3:27:1b:6d:2d:d8:14:0e:59:55:93:4b:bc:85:e4:e6:d5:9e: aa:3b:cc:62:c5:e5:8a:45:b2:ed:c3:7c:09:62:1c:aa:d4:f8: c3:39:23:85:ac:05:08:36:64:f2:2f:34:d8:eb:3f:ac:14:f7: 78:af:38:cd:86:a1:94:4c:5c:a2:f4:a9:2f:64:84:ce:5d:0b: 6b:58:86:16:36:59:58:c4:8b:93:ee:2c:04:e9:ca:a3:17:b7: 05:95:3e:3b:6e:fb:c5:6a:07:a2:31:9b:14:6c:79:d6:14:e0: 3f:0f:f5:86 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xtshPA3AfCmjIqRV62T6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4Nzc1MDAzZjdkOWU4ZTZlMWVmNDhkYjA2NzI4ZTY2OGVk MTg3YmMwHhcNMjYwMTAxMDQxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjN2I1ZmRlZjQ2MjhhNThhYTVkYmYzOTExOWJlNDkwYjQzYjkxNGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BBO2WjaVLRt8ligLxl5bEnfBESV BpmmAWwLmsApEIZo0eTjgCDXHe5sSuyI9uSsgt2+zwUV7M1vbvSH+Q39RcNRAtbr IdeyEQVwmiGYED/spC1A6HNQ2mwMRAzOH8NAROj4LG0sFmF2p1O1YxR5Ci6N/ZZP 00kiip1wEBA8a1MEOEiWLNLgXlp45b3w3uvZxrPr8ko/8BNk8G1NhwaJZFlNKqRa gnN9aPVen4pFopsFnfG2K84NXqpSoIZtFHSb+buoZ66ZpzYANYOmO8kSrn0Zh5HZ Umvdj9XPEDVdmFkpWWMk6QssQGMkScuKRSkNS0nfjpqxkVAGLLc2hhWvkwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMe1/e9GKKWKpdvzkRm+SQtDuRT3MB8GA1UdIwQY MBaAFIh3UAP32ejm4e9I2wZyjmaO0Ye8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUhkUUFfZlo2T2JoNzBqYkJuS09abzdSaDd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi85YjhkM2ItMGMwMy00NTkxLWJkMGYt ODc3NTBkNmY3N2E4LzEveDdYOTcwWW9wWXFsMl9PUkdiNUpDME81RlBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi85YjhkM2ItMGMwMy00NTkxLWJkMGYtODc3NTBkNmY3N2E4 LzEvaUhkUUFfZlo2T2JoNzBqYkJuS09abzdSaDd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALpVgMA0G CSqGSIb3DQEBCwUAA4IBAQAQzEQFJbLdFE3bWKw19FSzzd/yczXBnZF4q48gH753 CJN0dlTaj5x/mqvNrNcjbgfhFpjSqtuIrawCC3P3S6hBLsTj13BDxDj8lqnh0Aat 71kxVna+adyCiBvd7QytFFtDGDWo916b7dBdqIhUnH2EP4j3JvCkOk09XUKBwfnd Gn7RK2vrNIEBdQIIMt/Ve8DTJxttLdgUDllVk0u8heTm1Z6qO8xixeWKRbLtw3wJ Yhyq1PjDOSOFrAUINmTyLzTY6z+sFPd4rzjNhqGUTFyi9KkvZITOXQtrWIYWNllY xIuT7iwE6cqjF7cFlT47bvvFageiMZsUbHnWFOA/D/WG -----END CERTIFICATE-----Generated at Sun Jan 25 19:35:49 2026 by rpki-client