This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/fSZZKOuB5KK-se0CvAX2ai3vIes.roa File: fSZZKOuB5KK-se0CvAX2ai3vIes.roa (raw, json) Hash identifier: 41qoR63pBaesV73QkxPPfyJWZIs0CCnXJTfBdkmKA8s= Subject key identifier: 7D:26:59:28:EB:81:E4:A2:BE:B1:ED:02:BC:05:F6:6A:2D:EF:21:EB Certificate issuer: /CN=38837e48aaf598bcab54a5fc8ae43b17be254229 Certificate serial: 019B7B36931543F76E63D5FD601E8E87D6CD Authority key identifier: 38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/fSZZKOuB5KK-se0CvAX2ai3vIes.roa Signing time: Thu 01 Jan 2026 20:18:52 +0000 ROA not before: Thu 01 Jan 2026 20:18:52 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212816 IP address blocks: 46.18.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.mft rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:93:15:43:f7:6e:63:d5:fd:60:1e:8e:87:d6:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38837e48aaf598bcab54a5fc8ae43b17be254229 Validity Not Before: Jan 1 20:18:52 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7d265928eb81e4a2beb1ed02bc05f66a2def21eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:79:22:1e:8b:32:f0:11:0d:70:66:56:08:e6: ac:b9:80:f3:14:19:ba:ce:cc:42:fe:16:6e:e2:f3: f4:87:21:b7:ad:1b:90:54:c0:2a:cb:a7:c0:e5:61: d3:24:77:03:84:0d:51:9e:74:26:ef:a8:03:14:d5: 60:86:cb:f4:1a:fc:6a:c2:c7:f8:15:8e:f4:40:80: 9d:ef:a3:e1:75:04:83:14:4a:bf:25:6d:e2:ab:25: 57:3d:84:9f:58:65:0b:a1:bf:3b:95:6c:89:82:d6: a9:03:e7:d7:b7:0a:74:ae:d2:4e:7c:1c:1a:f8:af: 45:b7:7a:ca:42:0d:bc:ac:61:03:5c:a3:8b:f7:8a: 92:f3:ef:3c:98:3c:56:d8:d1:21:f5:29:0b:cb:1a: a2:2a:a5:f4:ac:8e:62:ab:51:23:27:a9:73:4f:64: 8b:fc:6d:78:44:7e:a4:33:e1:94:66:0c:a2:39:d8: ea:7c:db:5e:57:92:e8:1a:85:82:69:02:d9:93:e0: 61:3b:65:29:2a:73:18:b7:8e:30:0c:3d:47:38:e8: 84:05:5c:9f:98:a4:63:7e:e6:ab:9c:5d:4f:32:73: ae:e4:c1:64:c2:75:fc:79:77:2d:1b:00:dc:91:25: 40:f6:cd:d4:d9:ee:28:05:ab:09:33:1e:bf:e5:63: e8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:26:59:28:EB:81:E4:A2:BE:B1:ED:02:BC:05:F6:6A:2D:EF:21:EB X509v3 Authority Key Identifier: keyid:38:83:7E:48:AA:F5:98:BC:AB:54:A5:FC:8A:E4:3B:17:BE:25:42:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIN-SKr1mLyrVKX8iuQ7F74lQik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/fSZZKOuB5KK-se0CvAX2ai3vIes.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/dffbc8-b149-46b4-bbb8-31ea2094b557/1/OIN-SKr1mLyrVKX8iuQ7F74lQik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.18.108.0/24 Signature Algorithm: sha256WithRSAEncryption a3:ae:0a:4d:03:9a:39:11:2c:c8:1a:5f:c2:56:6f:63:81:40: f7:cc:c5:14:89:8b:d0:3f:5e:c6:bf:68:8b:b1:1e:d3:65:dc: a0:68:df:0a:a1:a3:3a:3d:d2:8b:11:12:27:02:a2:ee:9f:60: 1f:61:08:1c:26:c4:40:8f:f3:eb:dc:94:87:a4:f5:03:58:28: 29:6f:45:d0:7a:4e:f9:ea:e3:ce:29:43:dc:c4:cc:0c:f2:af: 4e:23:55:56:e3:fa:61:40:83:48:87:94:d4:77:e9:f1:e4:98: 8e:3a:ac:47:15:d1:a0:c2:76:9e:78:89:aa:b5:e3:09:37:98: b6:c1:c5:04:49:2e:57:41:71:58:24:a5:55:2b:91:52:c5:2c: cb:49:08:10:2b:5f:89:2a:1a:2d:f4:64:45:30:3a:f1:d2:82: 44:e1:11:1c:d7:1e:32:cb:5e:98:ee:00:16:dd:56:04:0a:42: 6f:a2:6f:8d:f9:91:15:c7:69:4a:a2:82:50:1a:e9:b0:70:7d: db:79:8d:da:e0:8d:41:86:51:b5:dd:28:e3:95:0b:99:9e:90: b3:01:3a:7a:10:83:8b:4e:f0:73:c1:4e:15:14:b5:17:b3:1c: 7e:20:28:1a:7d:a2:23:57:62:79:00:c6:40:fd:10:53:e7:6d: 9d:c2:4d:ce -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NpMVQ/duY9X9YB6Oh9bNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM4ODM3ZTQ4YWFmNTk4YmNhYjU0YTVmYzhhZTQzYjE3YmUy NTQyMjkwHhcNMjYwMTAxMjAxODUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZDI2NTkyOGViODFlNGEyYmViMWVkMDJiYzA1ZjY2YTJkZWYyMWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHkiHosy8BENcGZWCOasuYDzFBm6 zsxC/hZu4vP0hyG3rRuQVMAqy6fA5WHTJHcDhA1RnnQm76gDFNVghsv0Gvxqwsf4 FY70QICd76PhdQSDFEq/JW3iqyVXPYSfWGULob87lWyJgtapA+fXtwp0rtJOfBwa +K9Ft3rKQg28rGEDXKOL94qS8+88mDxW2NEh9SkLyxqiKqX0rI5iq1EjJ6lzT2SL /G14RH6kM+GUZgyiOdjqfNteV5LoGoWCaQLZk+BhO2UpKnMYt44wDD1HOOiEBVyf mKRjfuarnF1PMnOu5MFkwnX8eXctGwDckSVA9s3U2e4oBasJMx6/5WPosQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH0mWSjrgeSivrHtArwF9mot7yHrMB8GA1UdIwQY MBaAFDiDfkiq9Zi8q1Sl/IrkOxe+JUIpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT0lOLVNLcjFtTHlyVktYOGl1UTdGNzRsUWlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9kZmZiYzgtYjE0OS00NmI0LWJiYjgt MzFlYTIwOTRiNTU3LzEvZlNaWktPdUI1S0stc2UwQ3ZBWDJhaTN2SWVzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9kZmZiYzgtYjE0OS00NmI0LWJiYjgtMzFlYTIwOTRiNTU3 LzEvT0lOLVNLcjFtTHlyVktYOGl1UTdGNzRsUWlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALhJsMA0G CSqGSIb3DQEBCwUAA4IBAQCjrgpNA5o5ESzIGl/CVm9jgUD3zMUUiYvQP17Gv2iL sR7TZdygaN8KoaM6PdKLERInAqLun2AfYQgcJsRAj/Pr3JSHpPUDWCgpb0XQek75 6uPOKUPcxMwM8q9OI1VW4/phQINIh5TUd+nx5JiOOqxHFdGgwnaeeImqteMJN5i2 wcUESS5XQXFYJKVVK5FSxSzLSQgQK1+JKhot9GRFMDrx0oJE4REc1x4yy16Y7gAW 3VYECkJvom+N+ZEVx2lKooJQGumwcH3beY3a4I1BhlG13SjjlQuZnpCzATp6EIOL TvBzwU4VFLUXsxx+ICgafaIjV2J5AMZA/RBT522dwk3O -----END CERTIFICATE-----Generated at Mon Jan 26 01:00:21 2026 by rpki-client