This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/Av7Tod1G7bVf0RLE6AF_1uspRQ4.roa File: Av7Tod1G7bVf0RLE6AF_1uspRQ4.roa (raw, json) Hash identifier: PKJbe7R30nXLIKZVxr4PxR3DgHe3p9fuHQbiz5PGfP0= Subject key identifier: 02:FE:D3:A1:DD:46:ED:B5:5F:D1:12:C4:E8:01:7F:D6:EB:29:45:0E Certificate issuer: /CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1 Certificate serial: 019B7EA6708365173501EF94479643F797EA Authority key identifier: 8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/Av7Tod1G7bVf0RLE6AF_1uspRQ4.roa Signing time: Fri 02 Jan 2026 12:19:55 +0000 ROA not before: Fri 02 Jan 2026 12:19:55 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43584 IP address blocks: 46.16.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.mft rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:70:83:65:17:35:01:ef:94:47:96:43:f7:97:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d298d63970ab03cdfbf514fa0e8ed21310985f1 Validity Not Before: Jan 2 12:19:55 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02fed3a1dd46edb55fd112c4e8017fd6eb29450e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:00:d6:ae:3c:38:b7:f9:ef:fb:37:fa:8f:6e: 3e:63:c9:35:5a:46:b8:f8:fa:53:0d:90:83:84:be: ac:78:e6:13:4b:24:c5:4d:48:ef:20:fa:33:ff:ed: f5:20:08:aa:1a:3b:df:82:35:bf:fc:f5:b7:30:6d: 35:b2:f6:d6:a2:74:fc:ee:c4:0f:3c:8a:c8:b7:62: d0:75:9f:96:a3:9f:fe:0e:f3:d7:c7:8d:38:55:1c: 5b:9e:fb:22:ae:c1:00:31:f4:ef:2a:2e:24:10:b3: 54:68:fc:19:19:79:df:4d:5e:48:02:03:c6:be:20: 69:bd:75:4e:70:7c:67:a7:ca:04:7d:e4:ef:f1:b3: 32:10:35:a4:e9:8e:60:f6:80:49:3a:73:45:28:f3: 75:32:cb:41:d2:9f:bc:1e:24:04:99:77:ba:97:d0: 5b:50:24:fc:74:d9:53:77:78:9c:fe:bf:14:2e:4e: 34:1d:a7:7f:c6:ba:c3:a6:fe:71:d4:b8:be:79:74: ca:e6:ed:48:84:e5:1f:be:7c:8c:d1:2d:85:d1:fa: a3:86:d3:e9:4a:ff:61:2b:3e:09:73:1b:7e:07:e4: 41:40:4d:a6:5c:63:12:29:62:2c:7c:f7:e4:27:2b: d3:b8:8d:b4:e1:16:73:f7:31:84:cf:c5:2b:98:f2: 73:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:FE:D3:A1:DD:46:ED:B5:5F:D1:12:C4:E8:01:7F:D6:EB:29:45:0E X509v3 Authority Key Identifier: keyid:8D:29:8D:63:97:0A:B0:3C:DF:BF:51:4F:A0:E8:ED:21:31:09:85:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jSmNY5cKsDzfv1FPoOjtITEJhfE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/Av7Tod1G7bVf0RLE6AF_1uspRQ4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/7d00e0-cf41-4142-99d2-494713a9963a/1/jSmNY5cKsDzfv1FPoOjtITEJhfE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.16.167.0/24 Signature Algorithm: sha256WithRSAEncryption 93:ae:52:d6:d0:d0:9b:9d:08:d1:2b:92:83:e4:e4:59:b9:c8: e0:4d:10:0c:0d:7a:d3:02:54:03:1b:60:e8:7f:aa:8d:84:19: 7a:62:69:f2:e7:33:20:43:37:b0:54:ce:fc:a5:c4:f4:b5:00: 7a:b0:37:73:89:20:4c:e0:d2:08:0d:66:ce:af:6e:34:58:13: d5:fe:93:a0:e7:d6:72:59:e2:fe:9f:67:28:41:d0:f3:8e:74: b7:f2:0e:79:81:1a:1c:97:48:50:dd:5f:84:c6:cd:a1:99:df: 12:50:da:f1:47:35:77:71:b8:18:07:82:66:78:bc:44:d7:51: a5:b3:60:20:23:4e:b3:7a:af:64:d3:90:84:08:eb:e8:6e:e0: 6e:f9:9d:8a:a2:7f:e6:b6:d3:bb:58:f4:9d:95:7a:f1:fb:df: d5:99:2b:1d:10:68:25:1d:19:7a:3b:65:a7:36:a2:99:74:5c: 6e:87:d2:e7:51:26:44:a5:1f:85:8a:84:d9:0a:64:a7:c8:46: ff:91:0f:67:44:c6:98:a6:13:e4:29:6c:bd:f0:4c:1e:c8:35: 52:eb:5b:55:c3:55:f8:55:85:8e:22:16:72:b1:be:e0:a7:e6: 7a:28:40:5d:bb:27:7d:21:51:04:00:1f:0b:bf:e8:22:15:30: 95:8e:77:ba -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pnCDZRc1Ae+UR5ZD95fqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMjk4ZDYzOTcwYWIwM2NkZmJmNTE0ZmEwZThlZDIxMzEw OTg1ZjEwHhcNMjYwMTAyMTIxOTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmZlZDNhMWRkNDZlZGI1NWZkMTEyYzRlODAxN2ZkNmViMjk0NTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwDWrjw4t/nv+zf6j24+Y8k1Wka4 +PpTDZCDhL6seOYTSyTFTUjvIPoz/+31IAiqGjvfgjW//PW3MG01svbWonT87sQP PIrIt2LQdZ+Wo5/+DvPXx404VRxbnvsirsEAMfTvKi4kELNUaPwZGXnfTV5IAgPG viBpvXVOcHxnp8oEfeTv8bMyEDWk6Y5g9oBJOnNFKPN1MstB0p+8HiQEmXe6l9Bb UCT8dNlTd3ic/r8ULk40Had/xrrDpv5x1Li+eXTK5u1IhOUfvnyM0S2F0fqjhtPp Sv9hKz4Jcxt+B+RBQE2mXGMSKWIsfPfkJyvTuI204RZz9zGEz8UrmPJzCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFAL+06HdRu21X9ESxOgBf9brKUUOMB8GA1UdIwQY MBaAFI0pjWOXCrA8379RT6Do7SExCYXxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalNtTlk1Y0tzRHpmdjFGUG9PanRJVEVKaGZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi83ZDAwZTAtY2Y0MS00MTQyLTk5ZDIt NDk0NzEzYTk5NjNhLzEvQXY3VG9kMUc3YlZmMFJMRTZBRl8xdXNwUlE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi83ZDAwZTAtY2Y0MS00MTQyLTk5ZDItNDk0NzEzYTk5NjNh LzEvalNtTlk1Y0tzRHpmdjFGUG9PanRJVEVKaGZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALhCnMA0G CSqGSIb3DQEBCwUAA4IBAQCTrlLW0NCbnQjRK5KD5ORZucjgTRAMDXrTAlQDG2Do f6qNhBl6Ymny5zMgQzewVM78pcT0tQB6sDdziSBM4NIIDWbOr240WBPV/pOg59Zy WeL+n2coQdDzjnS38g55gRocl0hQ3V+Exs2hmd8SUNrxRzV3cbgYB4JmeLxE11Gl s2AgI06zeq9k05CECOvobuBu+Z2Kon/mttO7WPSdlXrx+9/VmSsdEGglHRl6O2Wn NqKZdFxuh9LnUSZEpR+FioTZCmSnyEb/kQ9nRMaYphPkKWy98EweyDVS61tVw1X4 VYWOIhZysb7gp+Z6KEBduyd9IVEEAB8Lv+giFTCVjne6 -----END CERTIFICATE-----Generated at Sun Jan 25 20:58:36 2026 by rpki-client