This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/YxPdqL3YUrKF4sBJisNAB3CvhwQ.roa File: YxPdqL3YUrKF4sBJisNAB3CvhwQ.roa (raw, json) Hash identifier: udUBv+bP4LcZzBvAyTz3Qp6qTussEABGdQgXJePzHPE= Subject key identifier: 63:13:DD:A8:BD:D8:52:B2:85:E2:C0:49:8A:C3:40:07:70:AF:87:04 Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA78842DAE1984DF87F500ADA341938 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/YxPdqL3YUrKF4sBJisNAB3CvhwQ.roa Signing time: Fri 02 Jan 2026 12:21:07 +0000 ROA not before: Fri 02 Jan 2026 12:21:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205576 IP address blocks: 46.61.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:88:42:da:e1:98:4d:f8:7f:50:0a:da:34:19:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:21:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6313dda8bdd852b285e2c0498ac3400770af8704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:25:32:57:9b:a8:36:30:ca:8e:c4:d7:ae:9a: 1e:45:6b:4f:67:c7:29:b1:96:59:e0:db:8e:50:dc: 35:f4:b5:e1:aa:c4:61:71:8e:c4:0b:61:3c:1c:0d: 5a:23:97:0d:cb:bb:f4:b4:77:37:80:4a:96:03:a2: 98:27:ea:00:31:e1:a7:a7:a2:54:73:70:66:61:1a: 70:04:d0:b9:75:4d:36:b2:ad:d8:ca:5f:ef:cf:77: 40:af:1f:ac:27:c2:d4:b8:3b:d9:42:52:dd:61:27: 4a:7a:d6:53:54:33:e4:eb:65:04:cd:2d:19:36:e8: 1b:7b:fd:e5:ad:b1:d5:eb:56:d1:24:4f:fa:ce:21: 29:74:53:bf:69:a6:6d:30:a1:a7:90:aa:92:10:56: 28:df:60:3c:fc:70:ad:2b:f3:41:d0:aa:bf:3f:54: 45:a5:92:1e:64:c8:71:ad:af:6f:6f:70:a8:1b:10: c8:d7:79:b1:17:ec:fd:0d:91:ee:58:6a:a8:de:a2: 0c:62:70:c7:a4:c0:55:26:71:e6:5b:b5:c5:e8:5f: 17:89:12:60:53:8b:21:30:2a:32:42:8c:a3:18:03: bb:c5:3e:60:01:cb:6e:8a:bf:2e:46:6b:7c:a0:37: 07:34:bc:e8:aa:24:c8:53:5a:d1:b6:e1:a2:84:f3: 7e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:13:DD:A8:BD:D8:52:B2:85:E2:C0:49:8A:C3:40:07:70:AF:87:04 X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/YxPdqL3YUrKF4sBJisNAB3CvhwQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.61.184.0/24 Signature Algorithm: sha256WithRSAEncryption 25:ee:19:ff:4f:fa:91:0a:c0:52:83:f6:27:94:ab:8a:d4:7c: 1f:1a:a9:81:81:ec:bd:28:c3:bc:68:3f:13:98:65:d1:1f:a2: e5:bb:a6:d0:60:8d:22:c7:a9:fd:e8:84:d2:a8:95:ff:35:1d: 99:6a:82:f8:f0:b3:8c:88:9c:62:46:99:41:3a:b7:90:a6:a7: a2:09:8e:df:1e:b8:9e:df:c3:22:55:8a:ec:4a:35:df:5e:c1: 25:cf:b6:cc:a1:54:b5:14:e4:9e:ab:d1:b6:f8:d0:b1:91:d4: 0c:09:17:13:6e:40:dd:2e:f0:0e:a3:05:7e:05:87:17:49:88: ce:f7:de:a6:69:f5:06:0c:45:d4:1a:46:84:00:c9:fa:68:22: 37:de:2d:74:6a:6d:42:bd:85:e6:45:a1:d8:f2:db:1d:75:3f: 08:9c:52:df:84:20:4f:c3:5a:dc:1e:0c:86:6e:fc:ac:0a:0f: ef:ef:60:38:e4:0f:81:41:5f:84:73:45:5f:e9:ed:76:f3:19: 32:a5:d7:6d:b2:ad:c9:2a:91:8f:ea:95:b5:a8:45:e0:25:21: 8b:53:71:68:6d:69:ba:e4:f4:d2:38:20:57:e0:54:8e:41:c1: 7b:9c:6a:18:8e:60:5c:68:70:00:85:f4:9b:b8:f1:de:0e:5b: 3a:f8:c0:84 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p4hC2uGYTfh/UAraNBk4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MzEzZGRhOGJkZDg1MmIyODVlMmMwNDk4YWMzNDAwNzcwYWY4NzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCUyV5uoNjDKjsTXrpoeRWtPZ8cp sZZZ4NuOUNw19LXhqsRhcY7EC2E8HA1aI5cNy7v0tHc3gEqWA6KYJ+oAMeGnp6JU c3BmYRpwBNC5dU02sq3Yyl/vz3dArx+sJ8LUuDvZQlLdYSdKetZTVDPk62UEzS0Z Nugbe/3lrbHV61bRJE/6ziEpdFO/aaZtMKGnkKqSEFYo32A8/HCtK/NB0Kq/P1RF pZIeZMhxra9vb3CoGxDI13mxF+z9DZHuWGqo3qIMYnDHpMBVJnHmW7XF6F8XiRJg U4shMCoyQoyjGAO7xT5gActuir8uRmt8oDcHNLzoqiTIU1rRtuGihPN+wQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGMT3ai92FKyheLASYrDQAdwr4cEMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvWXhQZHFMM1lVcktGNHNCSmlzTkFCM0N2aHdRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALj24MA0G CSqGSIb3DQEBCwUAA4IBAQAl7hn/T/qRCsBSg/YnlKuK1HwfGqmBgey9KMO8aD8T mGXRH6Llu6bQYI0ix6n96ITSqJX/NR2ZaoL48LOMiJxiRplBOreQpqeiCY7fHrie 38MiVYrsSjXfXsElz7bMoVS1FOSeq9G2+NCxkdQMCRcTbkDdLvAOowV+BYcXSYjO 996mafUGDEXUGkaEAMn6aCI33i10am1CvYXmRaHY8tsddT8InFLfhCBPw1rcHgyG bvysCg/v72A45A+BQV+Ec0Vf6e128xkypddtsq3JKpGP6pW1qEXgJSGLU3FobWm6 5PTSOCBX4FSOQcF7nGoYjmBcaHAAhfSbuPHeDls6+MCE -----END CERTIFICATE-----Generated at Mon Jan 26 03:05:45 2026 by rpki-client