This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/77h1Q6qUz5qlMm7h_AznswYtOZ0.roa File: 77h1Q6qUz5qlMm7h_AznswYtOZ0.roa (raw, json) Hash identifier: sRXxLopp6/463zgP26zWNJzhuSr+AeItnoxYVZGJazU= Subject key identifier: EF:B8:75:43:AA:94:CF:9A:A5:32:6E:E1:FC:0C:E7:B3:06:2D:39:9D Certificate issuer: /CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf Certificate serial: 019B7C117EF8732D819DBCCC81CE1B77A491 Authority key identifier: C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/77h1Q6qUz5qlMm7h_AznswYtOZ0.roa Signing time: Fri 02 Jan 2026 00:17:59 +0000 ROA not before: Fri 02 Jan 2026 00:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 46071 IP address blocks: 46.40.203.0/24 maxlen: 24 46.40.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.mft rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:7e:f8:73:2d:81:9d:bc:cc:81:ce:1b:77:a4:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c35f03949e661e24be0f1e08c64dad05e31c4eaf Validity Not Before: Jan 2 00:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=efb87543aa94cf9aa5326ee1fc0ce7b3062d399d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:67:ad:10:22:7f:ba:44:bf:ad:fe:79:31:7d: 51:38:3e:ef:59:09:98:01:01:25:c9:f6:78:55:e8: ab:87:56:71:6b:35:33:f6:98:e8:7a:87:6c:cd:8e: 51:a7:5e:d8:1f:4b:f5:d2:dd:21:ba:b7:82:93:1e: 43:55:f2:b0:7a:20:11:28:81:4e:89:89:d2:05:08: 75:53:d6:d7:28:80:62:0a:48:d7:13:04:d0:a3:49: 1f:a2:68:00:d6:fd:5e:b2:eb:cf:a0:10:d5:fd:ed: e4:86:9f:8b:7c:f1:ce:f8:26:a5:64:48:90:de:b8: 10:3e:66:44:0c:aa:b3:65:ee:4a:d6:4a:fa:32:21: ca:50:cf:77:0a:5b:fe:0d:b0:fb:be:f3:8c:1a:ab: 84:4c:b9:d3:59:45:c5:14:3f:da:77:25:5e:f7:db: d8:3a:53:17:5d:5a:7a:eb:be:a0:00:bf:61:a1:f1: 1c:6e:f8:49:92:bb:24:f2:7b:40:0a:1b:ff:30:61: 0a:24:b0:aa:7e:a2:98:17:9e:6d:bf:32:af:2e:15: 60:99:b6:23:c4:9e:48:82:b2:e2:73:5a:bb:bf:68: a2:98:3c:a2:76:f6:3c:bf:b4:99:42:b6:fd:7e:a3: 0f:b9:c1:a9:11:2a:84:d3:fa:0f:e8:c6:06:59:ef: e8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:B8:75:43:AA:94:CF:9A:A5:32:6E:E1:FC:0C:E7:B3:06:2D:39:9D X509v3 Authority Key Identifier: keyid:C3:5F:03:94:9E:66:1E:24:BE:0F:1E:08:C6:4D:AD:05:E3:1C:4E:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/77h1Q6qUz5qlMm7h_AznswYtOZ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/289fc2-f278-4f66-b8ec-c743cb6d2fc3/1/w18DlJ5mHiS-Dx4Ixk2tBeMcTq8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.40.203.0/24 46.40.205.0/24 Signature Algorithm: sha256WithRSAEncryption aa:7e:80:0f:39:1a:d3:56:38:45:ea:e0:b3:18:86:bc:af:96: e4:47:bc:13:61:9c:1b:e8:5b:ac:a9:a8:50:15:9c:dd:57:27: 8b:39:4d:da:f7:41:f8:6a:11:2e:e8:65:ee:61:48:5d:a3:23: 1b:6e:cf:15:36:26:32:80:9a:57:10:62:cc:c4:12:73:6e:4e: b8:6f:a3:d6:63:c2:0c:2a:c8:a8:0e:9d:13:2a:ff:53:a4:77: 8d:9d:22:76:29:ac:11:f0:ca:81:2a:de:0e:e6:71:1e:70:94: 6d:b8:a0:40:3b:de:68:da:4a:57:59:a7:50:91:7e:43:de:06: 3d:b5:03:b9:3d:ed:c5:de:4d:c7:b2:cd:77:34:42:b9:57:e3: 0b:8f:13:ec:2c:20:fc:6d:55:53:53:f3:be:89:b7:c2:3c:33: 55:19:ba:75:dd:72:91:b9:dd:f8:52:d8:88:c7:f1:fd:56:6f: 3e:df:8e:a1:60:8a:8a:c0:09:d3:8c:56:25:11:f9:a1:17:02: 97:14:2a:8b:6f:2e:77:e8:cf:c5:d9:ca:8f:47:46:38:39:0d: 6a:34:14:9a:ed:62:19:66:d2:8c:0d:19:2a:8f:83:e0:17:39: e7:04:07:0f:b1:e1:1f:cd:b7:b5:d1:a6:15:9b:58:40:96:c9: 72:2a:0b:b6 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8EX74cy2BnbzMgc4bd6SRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzNWYwMzk0OWU2NjFlMjRiZTBmMWUwOGM2NGRhZDA1ZTMx YzRlYWYwHhcNMjYwMTAyMDAxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZmI4NzU0M2FhOTRjZjlhYTUzMjZlZTFmYzBjZTdiMzA2MmQzOTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmetECJ/ukS/rf55MX1ROD7vWQmY AQElyfZ4Veirh1ZxazUz9pjoeodszY5Rp17YH0v10t0hureCkx5DVfKweiARKIFO iYnSBQh1U9bXKIBiCkjXEwTQo0kfomgA1v1esuvPoBDV/e3khp+LfPHO+CalZEiQ 3rgQPmZEDKqzZe5K1kr6MiHKUM93Clv+DbD7vvOMGquETLnTWUXFFD/adyVe99vY OlMXXVp6676gAL9hofEcbvhJkrsk8ntAChv/MGEKJLCqfqKYF55tvzKvLhVgmbYj xJ5IgrLic1q7v2iimDyidvY8v7SZQrb9fqMPucGpESqE0/oP6MYGWe/oewIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFO+4dUOqlM+apTJu4fwM57MGLTmdMB8GA1UdIwQY MBaAFMNfA5SeZh4kvg8eCMZNrQXjHE6vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdzE4RGxKNW1IaVMtRHg0SXhrMnRCZU1jVHE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8yODlmYzItZjI3OC00ZjY2LWI4ZWMt Yzc0M2NiNmQyZmMzLzEvNzdoMVE2cVV6NXFsTW03aF9Bem5zd1l0T1owLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8yODlmYzItZjI3OC00ZjY2LWI4ZWMtYzc0M2NiNmQyZmMz LzEvdzE4RGxKNW1IaVMtRHg0SXhrMnRCZU1jVHE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALijLAwQA LijNMA0GCSqGSIb3DQEBCwUAA4IBAQCqfoAPORrTVjhF6uCzGIa8r5bkR7wTYZwb 6FusqahQFZzdVyeLOU3a90H4ahEu6GXuYUhdoyMbbs8VNiYygJpXEGLMxBJzbk64 b6PWY8IMKsioDp0TKv9TpHeNnSJ2KawR8MqBKt4O5nEecJRtuKBAO95o2kpXWadQ kX5D3gY9tQO5Pe3F3k3Hss13NEK5V+MLjxPsLCD8bVVTU/O+ibfCPDNVGbp13XKR ud34UtiIx/H9Vm8+346hYIqKwAnTjFYlEfmhFwKXFCqLby536M/F2cqPR0Y4OQ1q NBSa7WIZZtKMDRkqj4PgFznnBAcPseEfzbe10aYVm1hAlslyKgu2 -----END CERTIFICATE-----Generated at Sun Jan 25 16:38:52 2026 by rpki-client