This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/SnVvAfcjIMxlHBXXj54NLAer-cU.roa File: SnVvAfcjIMxlHBXXj54NLAer-cU.roa (raw, json) Hash identifier: 602GAj5HXQsqsecSxsKjOsPy02tEc740y7FVgVkvoYc= Subject key identifier: 4A:75:6F:01:F7:23:20:CC:65:1C:15:D7:8F:9E:0D:2C:07:AB:F9:C5 Certificate issuer: /CN=66f90e75df98afb43019ce750350e769b99fbc13 Certificate serial: 019B7CED4D372418D2A3BE199E6F6359538F Authority key identifier: 66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/SnVvAfcjIMxlHBXXj54NLAer-cU.roa Signing time: Fri 02 Jan 2026 04:18:05 +0000 ROA not before: Fri 02 Jan 2026 04:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3356 IP address blocks: 46.23.240.0/20 maxlen: 20 46.23.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.mft rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:4d:37:24:18:d2:a3:be:19:9e:6f:63:59:53:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66f90e75df98afb43019ce750350e769b99fbc13 Validity Not Before: Jan 2 04:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4a756f01f72320cc651c15d78f9e0d2c07abf9c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5a:2b:73:f1:04:71:ce:b2:97:1f:5a:50:c0: 96:3c:bf:ac:71:5e:31:33:a1:0b:f0:2c:65:50:d1: 49:74:b9:24:28:6c:f2:f5:19:80:a2:a4:e9:1f:df: fa:be:af:d6:96:d3:82:b8:2b:db:41:25:d3:ed:1d: b6:04:09:ae:d2:65:87:db:87:76:6e:bd:a6:29:05: 27:6a:7b:3b:96:c7:2a:b7:e6:84:ac:b5:ea:86:59: 78:a0:0b:39:29:f3:f1:06:8d:69:01:7d:a9:25:27: 7b:58:07:8f:93:63:33:d9:30:f8:ab:b3:fb:9a:b0: 90:c2:5c:25:99:89:18:9c:4f:ed:61:38:d3:8d:45: 1d:55:bc:26:0c:da:93:9b:dd:b7:38:75:ae:a8:e5: 56:2f:bf:b5:65:df:a4:b9:57:71:b1:27:14:e9:67: 04:6e:0e:5a:5e:0e:fa:ef:3b:af:df:23:8c:f7:70: 83:4a:c5:fa:a3:9c:a9:ae:87:57:1e:f2:a0:ee:17: 7a:19:bd:fe:4e:22:ed:03:ad:f1:cb:a9:7f:17:53: a8:c0:ce:94:98:cf:3e:8f:f4:cb:c3:96:7c:69:74: c8:b0:25:20:d4:39:a4:c3:1b:47:58:d3:88:73:e4: a7:25:bd:a4:7b:9a:3b:73:20:0b:62:0c:7c:89:53: aa:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:75:6F:01:F7:23:20:CC:65:1C:15:D7:8F:9E:0D:2C:07:AB:F9:C5 X509v3 Authority Key Identifier: keyid:66:F9:0E:75:DF:98:AF:B4:30:19:CE:75:03:50:E7:69:B9:9F:BC:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZvkOdd-Yr7QwGc51A1DnabmfvBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/SnVvAfcjIMxlHBXXj54NLAer-cU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5a698d-998a-48ba-8dc5-333f0c99279e/1/ZvkOdd-Yr7QwGc51A1DnabmfvBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.23.240.0/20 Signature Algorithm: sha256WithRSAEncryption 70:3e:59:40:1d:39:b4:1f:21:c0:58:ff:a4:c3:4f:d7:33:4a: f8:28:f6:50:96:8a:93:47:c0:98:04:db:8b:ba:12:73:2a:c7: 2a:c7:36:4e:98:81:1b:d1:fd:a7:6d:eb:5d:13:9a:54:f3:2a: 29:bf:27:f9:b0:de:d4:f4:14:47:b1:f0:06:70:f4:e0:7c:cb: 03:75:3a:b3:5b:69:d1:ae:a5:c8:ca:f3:99:e9:eb:d7:83:1a: 35:e8:82:c5:33:24:3d:73:7e:46:1b:92:0a:b9:ac:68:7f:cb: ab:db:37:0a:1d:2c:01:98:ce:07:aa:9d:1e:90:02:96:e6:02: 53:01:b5:d2:fb:12:85:93:93:1e:1f:f0:a6:7b:cd:1b:98:6b: 55:9c:3a:45:a3:2b:80:25:99:15:e1:bd:bc:f3:43:77:f5:e5: 07:f9:34:39:f3:c9:c3:f1:9c:d6:56:fb:b8:72:1f:95:17:d8: e4:91:06:f5:5c:a4:2c:68:40:bb:a7:76:59:54:37:af:c8:11: 55:c7:04:a6:c1:68:68:1c:7f:c5:18:f8:52:b7:0f:eb:23:49: b4:7c:03:02:69:df:6a:e7:3b:f5:43:be:f7:bb:5e:d1:40:04: 6e:03:fe:77:9e:af:31:8c:6e:53:1b:46:21:f3:b6:e1:8d:4a: 01:c8:36:7b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87U03JBjSo74Znm9jWVOPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZjkwZTc1ZGY5OGFmYjQzMDE5Y2U3NTAzNTBlNzY5Yjk5 ZmJjMTMwHhcNMjYwMTAyMDQxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YTc1NmYwMWY3MjMyMGNjNjUxYzE1ZDc4ZjllMGQyYzA3YWJmOWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Vorc/EEcc6ylx9aUMCWPL+scV4x M6EL8CxlUNFJdLkkKGzy9RmAoqTpH9/6vq/WltOCuCvbQSXT7R22BAmu0mWH24d2 br2mKQUnans7lscqt+aErLXqhll4oAs5KfPxBo1pAX2pJSd7WAePk2Mz2TD4q7P7 mrCQwlwlmYkYnE/tYTjTjUUdVbwmDNqTm923OHWuqOVWL7+1Zd+kuVdxsScU6WcE bg5aXg767zuv3yOM93CDSsX6o5yprodXHvKg7hd6Gb3+TiLtA63xy6l/F1OowM6U mM8+j/TLw5Z8aXTIsCUg1DmkwxtHWNOIc+SnJb2ke5o7cyALYgx8iVOqXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEp1bwH3IyDMZRwV14+eDSwHq/nFMB8GA1UdIwQY MBaAFGb5DnXfmK+0MBnOdQNQ52m5n7wTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnZrT2RkLVlyN1F3R2M1MUExRG5hYm1mdkJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS81YTY5OGQtOTk4YS00OGJhLThkYzUt MzMzZjBjOTkyNzllLzEvU25WdkFmY2pJTXhsSEJYWGo1NE5MQWVyLWNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS81YTY5OGQtOTk4YS00OGJhLThkYzUtMzMzZjBjOTkyNzll LzEvWnZrT2RkLVlyN1F3R2M1MUExRG5hYm1mdkJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELhfwMA0G CSqGSIb3DQEBCwUAA4IBAQBwPllAHTm0HyHAWP+kw0/XM0r4KPZQloqTR8CYBNuL uhJzKscqxzZOmIEb0f2nbetdE5pU8yopvyf5sN7U9BRHsfAGcPTgfMsDdTqzW2nR rqXIyvOZ6evXgxo16ILFMyQ9c35GG5IKuaxof8ur2zcKHSwBmM4Hqp0ekAKW5gJT AbXS+xKFk5MeH/Cme80bmGtVnDpFoyuAJZkV4b2880N39eUH+TQ588nD8ZzWVvu4 ch+VF9jkkQb1XKQsaEC7p3ZZVDevyBFVxwSmwWhoHH/FGPhStw/rI0m0fAMCad9q 5zv1Q773u17RQARuA/53nq8xjG5TG0Yh87bhjUoByDZ7 -----END CERTIFICATE-----Generated at Fri Jan 23 16:03:54 2026 by rpki-client