This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/PduOZpjbTeguYPPjxKOu2HUXPEI.roa File: PduOZpjbTeguYPPjxKOu2HUXPEI.roa (raw, json) Hash identifier: SoXp68gYkw1NyEZV0z5P/scUXUAiACXBu/NIFOs1SQM= Subject key identifier: 3D:DB:8E:66:98:DB:4D:E8:2E:60:F3:E3:C4:A3:AE:D8:75:17:3C:42 Certificate issuer: /CN=9e4274f139bd669aaef774d6503b28d996637bbd Certificate serial: 019B7EA71C531AE895F11051B1FB62E03A7F Authority key identifier: 9E:42:74:F1:39:BD:66:9A:AE:F7:74:D6:50:3B:28:D9:96:63:7B:BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/PduOZpjbTeguYPPjxKOu2HUXPEI.roa Signing time: Fri 02 Jan 2026 12:20:39 +0000 ROA not before: Fri 02 Jan 2026 12:20:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9136 IP address blocks: 46.17.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.mft rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 03:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:1c:53:1a:e8:95:f1:10:51:b1:fb:62:e0:3a:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9e4274f139bd669aaef774d6503b28d996637bbd Validity Not Before: Jan 2 12:20:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3ddb8e6698db4de82e60f3e3c4a3aed875173c42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:a7:f1:40:c0:9f:2d:c0:83:60:31:41:7d:df: b6:7a:d1:2a:b4:4a:6a:62:ae:39:cd:dd:0f:38:ac: 6b:45:ee:c2:96:1e:8e:68:00:35:bf:21:08:4e:66: ef:cb:71:c5:5e:89:25:ef:5c:ef:91:86:1b:12:83: 67:3d:bb:1d:59:ec:61:d9:fc:71:b6:44:49:35:83: f1:6e:0a:9f:41:f5:eb:63:a6:2f:31:0b:5a:cd:d4: 02:71:d3:55:7c:d5:d3:ce:bc:f7:f8:42:d6:1f:9a: d8:44:b6:e3:03:ec:9f:96:41:2e:7d:87:d5:26:ec: 6b:ee:0d:b0:af:14:eb:89:04:4a:84:ea:7c:4b:28: 16:83:e2:c2:15:1c:00:3c:de:36:25:2d:2f:c5:e6: 00:1d:e3:82:7a:e8:9b:17:4d:46:53:e9:d7:ae:91: 3d:c8:5f:6b:25:76:8e:61:03:09:7d:e5:7d:09:9c: 87:f4:c6:a7:28:1b:fc:8c:42:d8:28:a1:f0:78:5c: 93:3c:95:33:08:de:aa:7d:ba:0d:21:29:b3:e7:5b: b2:5b:27:66:95:19:1f:c3:07:7d:cc:ea:24:7c:ce: fa:5d:d4:b6:1d:2f:e0:5a:a1:99:b6:bf:23:d1:32: 3a:0d:7b:c5:c6:a5:e1:77:33:9c:55:7b:84:f4:e6: 7b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:DB:8E:66:98:DB:4D:E8:2E:60:F3:E3:C4:A3:AE:D8:75:17:3C:42 X509v3 Authority Key Identifier: keyid:9E:42:74:F1:39:BD:66:9A:AE:F7:74:D6:50:3B:28:D9:96:63:7B:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkJ08Tm9Zpqu93TWUDso2ZZje70.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/PduOZpjbTeguYPPjxKOu2HUXPEI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/32b61c-ce82-463c-8f64-2775de5202fb/1/nkJ08Tm9Zpqu93TWUDso2ZZje70.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.17.108.0/22 Signature Algorithm: sha256WithRSAEncryption ad:64:d8:45:b9:25:d5:98:ec:fa:89:60:29:eb:bb:6a:2e:75: e8:4b:17:65:f9:ec:c5:d5:0e:20:ea:87:f3:2f:84:41:ae:90: 84:31:4c:7b:53:95:7a:34:77:2c:3a:29:5c:e7:6f:e4:2c:96: 80:32:aa:fc:f3:ba:dc:12:da:07:7d:8b:0f:07:ce:18:96:85: 50:af:b8:ff:64:78:10:84:a2:5e:da:80:0d:e7:4d:95:17:53: 72:14:e1:94:bc:e9:24:bf:30:b2:21:fd:b7:c5:b4:a9:68:da: 42:08:94:d4:76:50:e7:35:6f:99:75:e7:a3:b6:0c:d2:1c:1f: d7:ca:30:bb:d8:43:74:bb:51:65:47:d2:8c:8e:e6:4e:f7:ce: 30:18:f6:0a:66:30:df:08:45:16:34:d9:56:15:1f:2f:7e:5c: f5:40:e8:ed:36:c3:69:12:fe:82:56:f2:6b:c9:f2:4e:12:eb: 1b:57:3f:b9:bd:b9:df:ab:52:a7:e0:3b:0b:a9:74:e6:43:0b: 33:4d:58:f4:71:ad:3e:d4:2d:b9:2a:ee:e4:24:3a:d3:27:4a: 0f:3c:fd:a0:29:9f:1d:ca:e4:d5:b8:a9:65:ab:30:55:22:d6: 6a:20:4c:b8:9a:a2:a7:88:65:d7:f2:b6:02:7f:c1:15:c6:9a: 0b:bd:67:8a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pxxTGuiV8RBRsfti4Dp/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDllNDI3NGYxMzliZDY2OWFhZWY3NzRkNjUwM2IyOGQ5OTY2 MzdiYmQwHhcNMjYwMTAyMTIyMDM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZGRiOGU2Njk4ZGI0ZGU4MmU2MGYzZTNjNGEzYWVkODc1MTczYzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6fxQMCfLcCDYDFBfd+2etEqtEpq Yq45zd0POKxrRe7Clh6OaAA1vyEITmbvy3HFXokl71zvkYYbEoNnPbsdWexh2fxx tkRJNYPxbgqfQfXrY6YvMQtazdQCcdNVfNXTzrz3+ELWH5rYRLbjA+yflkEufYfV Juxr7g2wrxTriQRKhOp8SygWg+LCFRwAPN42JS0vxeYAHeOCeuibF01GU+nXrpE9 yF9rJXaOYQMJfeV9CZyH9ManKBv8jELYKKHweFyTPJUzCN6qfboNISmz51uyWydm lRkfwwd9zOokfM76XdS2HS/gWqGZtr8j0TI6DXvFxqXhdzOcVXuE9OZ7eQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD3bjmaY203oLmDz48Sjrth1FzxCMB8GA1UdIwQY MBaAFJ5CdPE5vWaarvd01lA7KNmWY3u9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmtKMDhUbTlacHF1OTNUV1VEc28yWlpqZTcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8zMmI2MWMtY2U4Mi00NjNjLThmNjQt Mjc3NWRlNTIwMmZiLzEvUGR1T1pwamJUZWd1WVBQanhLT3UySFVYUEVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8zMmI2MWMtY2U4Mi00NjNjLThmNjQtMjc3NWRlNTIwMmZi LzEvbmtKMDhUbTlacHF1OTNUV1VEc28yWlpqZTcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLhFsMA0G CSqGSIb3DQEBCwUAA4IBAQCtZNhFuSXVmOz6iWAp67tqLnXoSxdl+ezF1Q4g6ofz L4RBrpCEMUx7U5V6NHcsOilc52/kLJaAMqr887rcEtoHfYsPB84YloVQr7j/ZHgQ hKJe2oAN502VF1NyFOGUvOkkvzCyIf23xbSpaNpCCJTUdlDnNW+ZdeejtgzSHB/X yjC72EN0u1FlR9KMjuZO984wGPYKZjDfCEUWNNlWFR8vflz1QOjtNsNpEv6CVvJr yfJOEusbVz+5vbnfq1Kn4DsLqXTmQwszTVj0ca0+1C25Ku7kJDrTJ0oPPP2gKZ8d yuTVuKllqzBVItZqIEy4mqKniGXX8rYCf8EVxpoLvWeK -----END CERTIFICATE-----Generated at Tue Jan 20 07:47:13 2026 by rpki-client