This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/yI2_jcAcbIO5GQpFvysLwWrwaUA.roa File: yI2_jcAcbIO5GQpFvysLwWrwaUA.roa (raw, json) Hash identifier: 6xVEyyEN138hMaVXY4BZPz3hgVUWj9aS1/UjuF5iwQw= Subject key identifier: C8:8D:BF:8D:C0:1C:6C:83:B9:19:0A:45:BF:2B:0B:C1:6A:F0:69:40 Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Certificate serial: 019B7AC7C6ABCC32CA9867C8EBD5A47573DA Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/yI2_jcAcbIO5GQpFvysLwWrwaUA.roa Signing time: Thu 01 Jan 2026 18:17:51 +0000 ROA not before: Thu 01 Jan 2026 18:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25004 IP address blocks: 46.19.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 16:55:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c7:c6:ab:cc:32:ca:98:67:c8:eb:d5:a4:75:73:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec Validity Not Before: Jan 1 18:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c88dbf8dc01c6c83b9190a45bf2b0bc16af06940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:08:17:3f:f9:aa:5f:5c:5d:64:31:69:79:99: e1:84:2f:aa:6f:71:49:dd:3a:94:4e:9d:0e:a0:fe: 11:9f:d4:4a:21:f2:97:26:8a:28:ab:fa:cd:95:66: d6:a6:87:32:ed:02:51:2b:a5:16:fe:58:be:27:ab: ea:cb:d7:87:dd:1d:57:80:29:76:99:e7:81:d1:c1: 32:f3:a4:1c:05:e4:b5:0f:88:91:ff:8e:0d:0c:77: a0:4b:02:bd:b7:7e:44:97:3f:af:1c:4f:6d:49:db: ec:50:b7:3b:0d:b8:bb:0b:0c:40:09:26:2e:1b:68: 45:8b:4f:fc:14:8c:e7:cf:6d:5a:63:f9:0a:cd:2f: ac:35:1b:bb:62:3c:81:18:ff:4a:fb:cd:91:7e:c5: de:97:fc:f2:34:ad:99:1b:52:be:37:24:ba:8a:83: 04:9a:5a:2e:88:e2:ff:ff:64:f1:3b:f9:08:88:b8: 82:c2:8e:b1:a7:78:03:be:47:6d:5c:dc:c4:07:40: 68:4d:96:95:9c:64:fa:32:84:53:13:19:93:c4:f1: 0e:c5:e7:8e:83:9a:39:d7:3f:04:33:91:43:c1:00: 60:d3:26:ac:e5:71:51:c1:4c:81:d1:db:d1:7e:93: 5d:0f:bb:93:66:4b:5e:3d:41:8b:c9:28:24:f6:5a: 94:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:8D:BF:8D:C0:1C:6C:83:B9:19:0A:45:BF:2B:0B:C1:6A:F0:69:40 X509v3 Authority Key Identifier: keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/yI2_jcAcbIO5GQpFvysLwWrwaUA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.19.203.0/24 Signature Algorithm: sha256WithRSAEncryption 9e:ef:4b:f8:12:2e:38:b0:cc:ca:b0:19:44:cf:8e:dd:bc:2f: 63:5d:05:fe:5b:cd:0f:36:71:60:f7:59:cd:3b:05:35:70:49: 21:46:e1:55:ff:26:56:8b:a9:ac:9a:14:d3:8d:4e:45:13:a1: 95:a9:52:c3:71:6e:16:a5:0a:88:f4:bf:8b:61:5a:8a:13:2f: e2:33:b8:14:b9:00:80:d2:70:ae:7b:96:cc:cc:f3:bc:7d:f4: 68:eb:32:f8:84:75:e7:70:ba:67:2b:e8:4e:0d:e0:4e:b3:bd: e8:d0:fd:c2:5d:2e:0f:43:0c:a1:35:3b:29:9e:8c:27:49:cd: 82:a3:f3:70:95:88:5a:0e:66:6b:3a:f4:52:f3:90:3c:a0:b1: d1:27:84:18:24:72:28:27:0b:30:5a:ce:36:c6:5f:2b:db:31: 05:11:4c:4d:f1:dd:fd:31:67:80:76:13:a8:47:60:e2:cd:5a: 1a:74:51:a3:72:4b:4d:96:44:73:3d:17:f6:17:22:a5:e1:cd: 7d:10:b9:b4:63:86:06:4f:75:d2:59:cb:5c:aa:41:ae:a3:af: 1c:b6:ba:cb:57:46:bf:49:65:80:ea:c4:01:45:f6:c6:26:00: f2:9b:2d:51:34:97:d1:11:3e:c5:bf:6d:36:c3:56:77:8a:e0: e1:da:3b:2f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6x8arzDLKmGfI69WkdXPaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm YzQxZWMwHhcNMjYwMTAxMTgxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjODhkYmY4ZGMwMWM2YzgzYjkxOTBhNDViZjJiMGJjMTZhZjA2OTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwgXP/mqX1xdZDFpeZnhhC+qb3FJ 3TqUTp0OoP4Rn9RKIfKXJoooq/rNlWbWpocy7QJRK6UW/li+J6vqy9eH3R1XgCl2 meeB0cEy86QcBeS1D4iR/44NDHegSwK9t35Elz+vHE9tSdvsULc7Dbi7CwxACSYu G2hFi0/8FIznz21aY/kKzS+sNRu7YjyBGP9K+82RfsXel/zyNK2ZG1K+NyS6ioME mlouiOL//2TxO/kIiLiCwo6xp3gDvkdtXNzEB0BoTZaVnGT6MoRTExmTxPEOxeeO g5o51z8EM5FDwQBg0yas5XFRwUyB0dvRfpNdD7uTZktePUGLySgk9lqU/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMiNv43AHGyDuRkKRb8rC8Fq8GlAMB8GA1UdIwQY MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt NTU1NGQ2ZTE2ODZmLzEveUkyX2pjQWNiSU81R1FwRnZ5c0x3V3J3YVVBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALhPLMA0G CSqGSIb3DQEBCwUAA4IBAQCe70v4Ei44sMzKsBlEz47dvC9jXQX+W80PNnFg91nN OwU1cEkhRuFV/yZWi6msmhTTjU5FE6GVqVLDcW4WpQqI9L+LYVqKEy/iM7gUuQCA 0nCue5bMzPO8ffRo6zL4hHXncLpnK+hODeBOs73o0P3CXS4PQwyhNTspnownSc2C o/NwlYhaDmZrOvRS85A8oLHRJ4QYJHIoJwswWs42xl8r2zEFEUxN8d39MWeAdhOo R2DizVoadFGjcktNlkRzPRf2FyKl4c19ELm0Y4YGT3XSWctcqkGuo68ctrrLV0a/ SWWA6sQBRfbGJgDymy1RNJfRET7Fv202w1Z3iuDh2jsv -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:06 2026 by rpki-client