This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/nLhpxF_vYMtPztaP2Ob2bwrsO-c.roa File: nLhpxF_vYMtPztaP2Ob2bwrsO-c.roa (raw, json) Hash identifier: X8qVQYMo7q02YZkTCY5KKMS/PXISC65xUOcTfDXBI/8= Subject key identifier: 9C:B8:69:C4:5F:EF:60:CB:4F:CE:D6:8F:D8:E6:F6:6F:0A:EC:3B:E7 Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Certificate serial: 019B77C755747D2D525F7B58C700E876C353 Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/nLhpxF_vYMtPztaP2Ob2bwrsO-c.roa Signing time: Thu 01 Jan 2026 04:18:30 +0000 ROA not before: Thu 01 Jan 2026 04:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202492 IP address blocks: 46.32.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Jan 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:55:74:7d:2d:52:5f:7b:58:c7:00:e8:76:c3:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Validity Not Before: Jan 1 04:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9cb869c45fef60cb4fced68fd8e6f66f0aec3be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1f:91:00:93:97:cc:cf:b3:66:ee:aa:b4:ef: d4:c4:25:e7:90:5b:53:24:1c:b5:9c:9e:c6:0d:5b: 76:e6:e7:44:39:27:7a:a4:c7:32:9a:c9:dd:1c:22: 79:61:d7:2d:04:dd:38:de:28:e4:f0:cc:8b:1f:99: 1c:45:67:2f:42:04:22:52:77:39:28:a6:7a:76:e1: 7e:12:0d:5c:96:74:66:8a:2e:aa:ca:97:92:cf:e7: 05:f9:a7:f6:ad:bb:22:c6:78:06:8c:ab:41:b3:21: 89:35:43:cd:7f:29:3f:9e:dd:e1:93:36:2e:cd:c7: e6:3f:57:e9:ea:08:ea:3d:a5:b8:4e:81:0d:03:9c: 6d:68:89:fa:18:94:4a:71:39:1c:ba:84:66:80:0b: a9:34:32:dd:ee:77:62:05:0e:6f:00:f6:5c:15:3c: 6a:45:5b:2b:2d:39:5f:7d:cd:15:48:5c:59:ab:c5: 56:5c:fa:7e:56:e8:7d:39:27:fd:e9:e4:fe:e7:02: 5b:62:a0:4c:d1:83:2e:e7:e6:38:8a:c1:6d:da:38: 81:41:fe:e8:a2:4d:a8:d0:ee:70:51:63:b6:13:34: 43:5f:e2:51:6a:8d:95:a3:14:27:80:a8:df:85:2a: a0:04:ab:47:96:66:91:cb:b3:5e:c6:4b:1a:a9:4f: ee:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B8:69:C4:5F:EF:60:CB:4F:CE:D6:8F:D8:E6:F6:6F:0A:EC:3B:E7 X509v3 Authority Key Identifier: keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/nLhpxF_vYMtPztaP2Ob2bwrsO-c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.32.180.0/22 Signature Algorithm: sha256WithRSAEncryption 68:fe:28:c5:fc:d2:48:a4:a8:83:81:9d:54:54:2a:87:0c:d3: 6f:ec:a5:2d:37:a4:52:a5:a7:1b:11:56:7e:a6:f2:c0:77:13: cd:b9:0c:29:83:40:5f:a6:00:7a:3b:44:6b:c2:88:5f:4a:6d: 3c:5e:67:58:70:2f:4f:f6:ab:9a:15:e3:b6:1d:41:76:76:c1: 2a:49:de:ba:ca:2f:a0:3a:04:66:e7:54:8a:51:9b:3f:e1:da: bb:76:ad:2e:8b:e5:31:2f:44:e4:e4:82:b7:47:96:c3:c2:c2: 49:7b:ee:22:ac:c9:f9:20:be:5a:f0:07:98:d9:7d:4c:cf:4b: cf:f6:28:f1:ae:b6:79:66:c1:95:d6:24:ad:c1:0c:18:ad:de: a6:f7:fc:47:c2:76:f7:d0:e1:d7:fd:f7:9c:67:a9:e9:dc:78: de:2b:be:99:62:80:28:b8:b8:64:d6:68:e1:af:7a:4f:6c:f4: 53:a1:97:77:94:8f:99:56:d1:5c:da:91:d6:0e:59:7c:fc:13: 45:69:7e:88:08:3e:66:b0:4d:24:8d:78:80:9c:f7:b3:3a:e1: 98:32:04:98:71:37:de:ad:80:26:b5:80:3f:09:36:18:71:33: 39:86:72:82:a6:27:aa:e5:3b:34:dc:1e:9e:3c:e2:41:ed:5c: 28:e3:f9:fb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x1V0fS1SX3tYxwDodsNTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzN2VlMWVjZWQxOWY4YTBhM2E2MzViZmFhMjY0MjkzZTM0 Mzc3OTUwHhcNMjYwMTAxMDQxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Y2I4NjljNDVmZWY2MGNiNGZjZWQ2OGZkOGU2ZjY2ZjBhZWMzYmU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqR+RAJOXzM+zZu6qtO/UxCXnkFtT JBy1nJ7GDVt25udEOSd6pMcymsndHCJ5YdctBN043ijk8MyLH5kcRWcvQgQiUnc5 KKZ6duF+Eg1clnRmii6qypeSz+cF+af2rbsixngGjKtBsyGJNUPNfyk/nt3hkzYu zcfmP1fp6gjqPaW4ToENA5xtaIn6GJRKcTkcuoRmgAupNDLd7ndiBQ5vAPZcFTxq RVsrLTlffc0VSFxZq8VWXPp+Vuh9OSf96eT+5wJbYqBM0YMu5+Y4isFt2jiBQf7o ok2o0O5wUWO2EzRDX+JRao2VoxQngKjfhSqgBKtHlmaRy7NexksaqU/uawIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJy4acRf72DLT87Wj9jm9m8K7DvnMB8GA1UdIwQY MBaAFON+4eztGfigo6Y1v6omQpPjQ3eVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMt MzZlMzQ0YWJjOWQzLzEvbkxocHhGX3ZZTXRQenRhUDJPYjJid3JzTy1jLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMtMzZlMzQ0YWJjOWQz LzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLiC0MA0G CSqGSIb3DQEBCwUAA4IBAQBo/ijF/NJIpKiDgZ1UVCqHDNNv7KUtN6RSpacbEVZ+ pvLAdxPNuQwpg0BfpgB6O0RrwohfSm08XmdYcC9P9quaFeO2HUF2dsEqSd66yi+g OgRm51SKUZs/4dq7dq0ui+UxL0Tk5IK3R5bDwsJJe+4irMn5IL5a8AeY2X1Mz0vP 9ijxrrZ5ZsGV1iStwQwYrd6m9/xHwnb30OHX/fecZ6np3HjeK76ZYoAouLhk1mjh r3pPbPRToZd3lI+ZVtFc2pHWDll8/BNFaX6ICD5msE0kjXiAnPezOuGYMgSYcTfe rYAmtYA/CTYYcTM5hnKCpieq5Ts03B6ePOJB7Vwo4/n7 -----END CERTIFICATE-----Generated at Fri Jan 23 12:53:04 2026 by rpki-client