This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/SH8o9XaYeY75kSYDFek1xvvvpes.roa File: SH8o9XaYeY75kSYDFek1xvvvpes.roa (raw, json) Hash identifier: snF/ko8o9cC13jo1dYD32crG+aO3GlqBSVVV17i0l7Q= Subject key identifier: 48:7F:28:F5:76:98:79:8E:F9:91:26:03:15:E9:35:C6:FB:EF:A5:EB Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Certificate serial: 019B79101A0F37B767B8C335C4EA74655F57 Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/SH8o9XaYeY75kSYDFek1xvvvpes.roa Signing time: Thu 01 Jan 2026 10:17:36 +0000 ROA not before: Thu 01 Jan 2026 10:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58053 IP address blocks: 46.28.78.0/23 maxlen: 23 46.28.78.0/24 maxlen: 24 46.28.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:1a:0f:37:b7:67:b8:c3:35:c4:ea:74:65:5f:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Validity Not Before: Jan 1 10:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=487f28f57698798ef991260315e935c6fbefa5eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f5:bb:ce:55:c2:b5:d1:9c:2f:33:ec:18:c4: 33:bd:e9:c5:40:df:29:92:e0:bd:2a:c2:b8:d1:52: ee:2e:20:16:79:d9:28:c5:81:82:62:18:92:b8:44: 4b:e5:9e:57:30:91:0c:88:3e:56:83:04:41:80:4b: 48:3b:c9:98:a9:98:81:67:ee:83:31:61:5d:7b:b6: 83:e1:c3:cb:3a:fb:2e:4f:5f:90:4d:50:13:c7:52: f1:89:7a:df:3a:c8:f2:2f:ce:6a:ae:c2:2a:09:d9: 40:21:de:a8:f9:a9:93:e8:b0:0b:b5:bf:85:0c:4a: 53:81:a4:52:67:60:89:c1:61:c7:6f:30:98:ba:99: c0:33:03:49:b5:d2:45:fe:a6:8d:1e:3d:3b:2f:49: 4e:a0:a2:8a:a8:c0:1c:5e:1c:a9:27:a8:2f:e7:c5: 1c:5b:0c:d1:68:1d:47:46:84:9a:b4:96:2a:25:1b: 29:9d:5c:79:80:12:35:7b:88:fa:1f:4c:4d:4f:3a: e0:68:46:06:e5:81:ce:ca:08:c9:49:e6:db:11:b1: d5:59:60:b7:9d:74:da:25:a2:a2:bc:65:f9:5d:96: 27:6f:e0:4f:ff:bc:62:4f:78:d1:dd:3b:35:4f:80: e1:51:5f:92:07:15:22:e9:84:24:09:0f:a4:4b:67: 5c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:7F:28:F5:76:98:79:8E:F9:91:26:03:15:E9:35:C6:FB:EF:A5:EB X509v3 Authority Key Identifier: keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/SH8o9XaYeY75kSYDFek1xvvvpes.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.28.78.0/23 Signature Algorithm: sha256WithRSAEncryption 48:58:aa:68:25:cb:69:6c:49:66:65:ec:b5:bc:99:78:f7:3a: ce:a0:9b:43:8c:41:05:c2:34:c8:6c:98:0e:d6:17:ab:59:24: d8:86:b4:5f:2c:5b:56:5d:07:c7:f3:f8:50:8e:2c:e4:8f:a3: 97:5b:f9:d1:50:85:55:d5:ce:16:8a:d7:ce:26:48:ce:ad:76: b9:06:d1:71:f4:ef:52:85:c7:5d:bb:02:6c:d6:2a:39:ca:6b: a3:bc:b6:e6:89:ea:75:75:bc:dd:32:80:31:f6:79:7a:ac:dc: 94:00:30:5f:26:0a:00:fc:04:57:bb:c9:0d:1a:06:9e:92:0e: 6f:5a:f5:10:1d:b3:b8:b9:33:a8:9f:9a:74:71:ec:cd:59:a7: 10:8c:79:e4:f5:c6:92:28:1c:ba:03:5f:81:c4:c4:cf:9e:fa: 3c:de:c8:36:c7:96:24:bf:94:a9:66:00:76:08:89:b3:78:e6: 1d:dd:1b:7c:76:7d:ae:8e:6c:d1:2a:f9:f7:2a:b9:2e:50:88: 9b:39:75:10:53:8e:85:7f:fb:c4:60:3b:51:4a:70:5e:53:34: e6:65:ae:ce:e3:ea:5f:44:86:e8:3c:51:2d:dc:39:54:36:4e: 8b:b9:66:bd:f9:ac:3f:5f:42:ee:b2:d4:3f:bd:54:1a:83:c4: 0c:a1:12:8a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EBoPN7dnuMM1xOp0ZV9XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MWI3YTIyZTUxY2ZiOWNmODQyMDVlNDQ0OTk5OGFkNTVk OGYwNjUwHhcNMjYwMTAxMTAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ODdmMjhmNTc2OTg3OThlZjk5MTI2MDMxNWU5MzVjNmZiZWZhNWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvW7zlXCtdGcLzPsGMQzvenFQN8p kuC9KsK40VLuLiAWedkoxYGCYhiSuERL5Z5XMJEMiD5WgwRBgEtIO8mYqZiBZ+6D MWFde7aD4cPLOvsuT1+QTVATx1LxiXrfOsjyL85qrsIqCdlAId6o+amT6LALtb+F DEpTgaRSZ2CJwWHHbzCYupnAMwNJtdJF/qaNHj07L0lOoKKKqMAcXhypJ6gv58Uc WwzRaB1HRoSatJYqJRspnVx5gBI1e4j6H0xNTzrgaEYG5YHOygjJSebbEbHVWWC3 nXTaJaKivGX5XZYnb+BP/7xiT3jR3Ts1T4DhUV+SBxUi6YQkCQ+kS2dcRQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEh/KPV2mHmO+ZEmAxXpNcb776XrMB8GA1UdIwQY MBaAFAgbeiLlHPuc+EIF5ESZmK1V2PBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYt MDM2NzI2OGZmODcxLzEvU0g4bzlYYVllWTc1a1NZREZlazF4dnZ2cGVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYtMDM2NzI2OGZmODcx LzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLhxOMA0G CSqGSIb3DQEBCwUAA4IBAQBIWKpoJctpbElmZey1vJl49zrOoJtDjEEFwjTIbJgO 1herWSTYhrRfLFtWXQfH8/hQjizkj6OXW/nRUIVV1c4WitfOJkjOrXa5BtFx9O9S hcdduwJs1io5ymujvLbmiep1dbzdMoAx9nl6rNyUADBfJgoA/ARXu8kNGgaekg5v WvUQHbO4uTOon5p0cezNWacQjHnk9caSKBy6A1+BxMTPnvo83sg2x5Ykv5SpZgB2 CImzeOYd3Rt8dn2ujmzRKvn3KrkuUIibOXUQU46Ff/vEYDtRSnBeUzTmZa7O4+pf RIboPFEt3DlUNk6LuWa9+aw/X0LustQ/vVQag8QMoRKK -----END CERTIFICATE-----Generated at Sun Jan 25 22:29:13 2026 by rpki-client