This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/IwnuHUcrSyqTDj2R1SrfqJthDz0.roa File: IwnuHUcrSyqTDj2R1SrfqJthDz0.roa (raw, json) Hash identifier: SAYzINhAcM78pjeHDBOp09qDlTIFRrqRQDRqGfJbZ6g= Subject key identifier: 23:09:EE:1D:47:2B:4B:2A:93:0E:3D:91:D5:2A:DF:A8:9B:61:0F:3D Certificate issuer: /CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771 Certificate serial: 019B79EC9F60CE5AEF6A67FFF7508546008B Authority key identifier: 15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/IwnuHUcrSyqTDj2R1SrfqJthDz0.roa Signing time: Thu 01 Jan 2026 14:18:29 +0000 ROA not before: Thu 01 Jan 2026 14:18:29 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 39636 IP address blocks: 46.233.128.0/18 maxlen: 18 89.184.96.0/19 maxlen: 19 89.184.118.0/24 maxlen: 24 94.74.0.0/18 maxlen: 18 185.182.116.0/22 maxlen: 22 2a01:8320::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.mft rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 08:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:9f:60:ce:5a:ef:6a:67:ff:f7:50:85:46:00:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1501c845f13dd4ad6e9dae470d5ff69c5cca3771 Validity Not Before: Jan 1 14:18:29 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2309ee1d472b4b2a930e3d91d52adfa89b610f3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3d:3e:83:2d:ac:4a:e0:58:e7:6c:f1:2c:ac: 0e:fe:9f:e3:9a:43:17:76:e5:c8:6f:0a:47:b1:fe: f7:bf:a0:99:e1:44:72:37:23:28:cf:2c:04:29:17: 42:08:2d:50:4c:c8:ef:ea:26:c1:a2:5a:ad:51:49: 4a:1d:9a:65:0b:3b:40:8c:42:e7:13:25:57:b9:3d: f9:75:4f:cd:e1:f6:2b:98:b7:c9:ae:a6:dd:a2:16: 34:29:78:66:6d:11:79:76:55:a9:94:2d:f7:f2:cb: ca:f7:c0:80:44:72:be:50:a6:f6:cc:05:fe:57:f2: ac:92:01:b2:c8:de:03:61:ac:f0:b1:53:cc:19:9e: db:01:b5:20:6b:18:13:b0:24:14:5d:70:6f:72:c9: 9e:ca:0b:13:b3:2b:a6:e7:64:87:77:c9:8a:75:91: 7a:fe:15:ad:f9:13:8c:45:ae:e9:49:7c:19:a0:5e: bc:93:c6:8c:1d:e8:ce:c3:ad:66:41:67:22:44:1d: 9f:19:a7:cf:11:68:d8:f8:56:09:fd:61:6a:64:3c: 4b:9a:97:fd:5e:1a:10:fd:6d:01:0c:34:2a:1f:be: 41:15:b4:e2:e7:db:fa:a2:0f:02:28:a6:11:a3:40: b3:46:12:48:7c:f6:7d:87:4f:0e:7c:fe:db:75:43: 5f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:09:EE:1D:47:2B:4B:2A:93:0E:3D:91:D5:2A:DF:A8:9B:61:0F:3D X509v3 Authority Key Identifier: keyid:15:01:C8:45:F1:3D:D4:AD:6E:9D:AE:47:0D:5F:F6:9C:5C:CA:37:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQHIRfE91K1una5HDV_2nFzKN3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/IwnuHUcrSyqTDj2R1SrfqJthDz0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/0376a1-49d6-4a4d-8c2a-ed7915436b27/1/FQHIRfE91K1una5HDV_2nFzKN3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.233.128.0/18 89.184.96.0/19 94.74.0.0/18 185.182.116.0/22 IPv6: 2a01:8320::/32 Signature Algorithm: sha256WithRSAEncryption 2d:12:b3:92:cb:95:f1:03:34:44:ba:a5:af:b0:ee:15:44:15: fa:da:d6:b1:57:b8:65:38:40:61:96:23:1d:f8:90:df:ef:6d: 9b:21:16:a2:43:4a:fc:08:4d:11:d3:66:42:01:00:10:42:03: 1e:6b:34:26:86:52:0d:60:10:a3:d6:bd:66:c5:73:60:55:62: 0e:e4:7b:ec:52:df:7f:61:c3:2c:92:e6:6b:bc:b2:b2:1d:51: 39:13:94:15:5c:1b:ab:51:3e:84:2e:5a:08:27:53:7a:a2:fa: 1b:d1:d2:5b:b0:f5:b9:e2:c1:d9:4f:c4:39:8f:a3:e9:fa:2c: 26:b6:2c:76:8e:cf:59:29:e7:c7:c5:0b:67:f8:c3:ca:8a:05: 60:97:88:90:07:ff:29:47:c0:34:15:34:95:a8:01:b0:7a:16: a7:53:e6:95:a7:f1:c4:a7:31:79:41:4b:1c:a9:6c:a5:90:e9: 83:24:13:85:ef:fa:78:80:17:27:84:9e:a7:aa:9e:95:b2:4b: 0a:54:04:43:7b:96:0c:b1:b1:d0:ce:0c:b8:8f:c6:c5:68:9d: 64:e9:3d:e6:c2:0a:b0:67:c4:74:1c:13:55:ae:1d:3a:54:39: d1:d5:f9:46:a0:d9:ec:91:f7:77:af:71:ea:bf:07:34:03:8f: 18:9d:4b:69 -----BEGIN CERTIFICATE----- MIIFHjCCBAagAwIBAgISAZt57J9gzlrvamf/91CFRgCLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1MDFjODQ1ZjEzZGQ0YWQ2ZTlkYWU0NzBkNWZmNjljNWNj YTM3NzEwHhcNMjYwMTAxMTQxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzA5ZWUxZDQ3MmI0YjJhOTMwZTNkOTFkNTJhZGZhODliNjEwZjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwz0+gy2sSuBY52zxLKwO/p/jmkMX duXIbwpHsf73v6CZ4URyNyMozywEKRdCCC1QTMjv6ibBolqtUUlKHZplCztAjELn EyVXuT35dU/N4fYrmLfJrqbdohY0KXhmbRF5dlWplC338svK98CARHK+UKb2zAX+ V/KskgGyyN4DYazwsVPMGZ7bAbUgaxgTsCQUXXBvcsmeygsTsyum52SHd8mKdZF6 /hWt+ROMRa7pSXwZoF68k8aMHejOw61mQWciRB2fGafPEWjY+FYJ/WFqZDxLmpf9 XhoQ/W0BDDQqH75BFbTi59v6og8CKKYRo0CzRhJIfPZ9h08OfP7bdUNfPQIDAQAB o4ICKjCCAiYwHQYDVR0OBBYEFCMJ7h1HK0sqkw49kdUq36ibYQ89MB8GA1UdIwQY MBaAFBUByEXxPdStbp2uRw1f9pxcyjdxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlFISVJmRTkxSzF1bmE1SERWXzJuRnpLTjNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8wMzc2YTEtNDlkNi00YTRkLThjMmEt ZWQ3OTE1NDM2YjI3LzEvSXdudUhVY3JTeXFURGoyUjFTcmZxSnRoRHowLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYS8wMzc2YTEtNDlkNi00YTRkLThjMmEtZWQ3OTE1NDM2YjI3 LzEvRlFISVJmRTkxSzF1bmE1SERWXzJuRnpLTjNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQGLumAAwQF WbhgAwQGXkoAAwQCubZ0MA0EAgACMAcDBQAqAYMgMA0GCSqGSIb3DQEBCwUAA4IB AQAtErOSy5XxAzREuqWvsO4VRBX62taxV7hlOEBhliMd+JDf722bIRaiQ0r8CE0R 02ZCAQAQQgMeazQmhlINYBCj1r1mxXNgVWIO5HvsUt9/YcMskuZrvLKyHVE5E5QV XBurUT6ELloIJ1N6ovob0dJbsPW54sHZT8Q5j6Pp+iwmtix2js9ZKefHxQtn+MPK igVgl4iQB/8pR8A0FTSVqAGwehanU+aVp/HEpzF5QUscqWylkOmDJBOF7/p4gBcn hJ6nqp6VsksKVARDe5YMsbHQzgy4j8bFaJ1k6T3mwgqwZ8R0HBNVrh06VDnR1flG oNnskfd3r3Hqvwc0A48YnUtp -----END CERTIFICATE-----Generated at Mon Jan 26 13:13:33 2026 by rpki-client