This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/3-mPYqh7oDJ6oXV02AXPNkHvo7g.roa File: 3-mPYqh7oDJ6oXV02AXPNkHvo7g.roa (raw, json) Hash identifier: 8cy0rGsaqY9F99v6IxnWk2OX+oFLYnGClYNGNq3JyMc= Subject key identifier: DF:E9:8F:62:A8:7B:A0:32:7A:A1:75:74:D8:05:CF:36:41:EF:A3:B8 Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Certificate serial: 019B7E381DB7B71EE86EDCA805D2316291CA Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/3-mPYqh7oDJ6oXV02AXPNkHvo7g.roa Signing time: Fri 02 Jan 2026 10:19:25 +0000 ROA not before: Fri 02 Jan 2026 10:19:25 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43350 IP address blocks: 46.161.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 19:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:1d:b7:b7:1e:e8:6e:dc:a8:05:d2:31:62:91:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071 Validity Not Before: Jan 2 10:19:25 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=dfe98f62a87ba0327aa17574d805cf3641efa3b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:dd:bd:66:0d:25:71:3f:73:f1:ea:49:9e:d0: 83:41:73:c5:8b:b3:cc:d3:96:83:0d:78:aa:88:7e: b7:15:c5:0c:3b:9a:8e:94:c8:6d:61:e7:ae:45:2a: d1:c3:68:7a:ec:96:2b:6e:48:4e:61:6f:0e:7f:ad: c5:5f:8b:c8:8e:1d:c0:f4:4c:6d:06:27:8e:11:49: 08:fe:13:a4:bb:19:8b:92:a9:5d:df:6d:69:4d:62: 28:20:8f:56:df:9d:94:44:cc:be:a3:6d:df:f4:1d: f9:8b:e3:cd:c3:d2:6b:fd:5b:49:0a:2b:77:b6:e8: 66:f9:b3:e2:2d:58:8e:de:7d:ab:f1:17:9e:1e:cb: a2:eb:1c:ae:e8:8b:58:8a:64:08:86:ff:81:00:ad: 4c:50:cf:e6:5c:09:7f:03:71:08:0f:71:ae:76:22: b7:e0:f5:9a:e5:da:90:b6:68:cb:05:44:98:51:0b: 25:a3:4a:f5:e5:d7:8e:5d:d6:20:82:46:eb:53:91: 4d:bc:10:39:69:83:1c:0e:8f:18:05:29:99:a6:eb: 6a:ff:9c:0b:fc:55:3b:77:cb:cb:b0:ed:d4:6d:43: dc:6c:df:af:27:14:40:1c:49:4c:7b:57:c3:c9:c4: d7:5c:f2:20:53:42:78:9a:0b:61:08:a7:ea:a7:ba: c4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E9:8F:62:A8:7B:A0:32:7A:A1:75:74:D8:05:CF:36:41:EF:A3:B8 X509v3 Authority Key Identifier: keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/3-mPYqh7oDJ6oXV02AXPNkHvo7g.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.161.27.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:2c:11:e3:ac:8a:99:cb:ef:57:fc:bb:6b:e1:cc:78:97:35: 38:aa:53:ee:8a:5b:61:4f:78:3d:f9:2c:d3:76:3d:03:4b:9d: 6f:63:41:e0:ea:72:e4:96:c9:f4:40:84:f0:56:b3:eb:30:5d: 6b:ed:31:d3:01:a1:2b:74:f7:6d:86:4c:aa:f1:29:5a:a0:f5: e1:fa:cf:0a:ad:4c:45:62:dd:ed:48:01:0f:f1:1a:5e:be:7d: c7:fa:cd:c9:50:9a:49:c6:5d:4d:16:3f:35:b9:b3:5e:ed:36: d5:36:bb:00:2e:ed:50:38:96:35:a9:d3:ca:85:cc:fd:df:73: ca:1d:80:85:19:28:f4:61:36:8f:be:99:92:66:58:4d:39:14: b2:c5:b3:95:e1:79:4b:60:8e:c5:e9:fd:49:ab:6b:cd:e6:94: 63:80:9c:53:ae:1f:33:8f:d7:0d:46:3a:2f:a4:1a:39:91:e6: e5:10:37:b5:75:91:26:77:90:f2:c8:37:c9:29:bc:d1:6b:ad: d0:91:a5:ef:b1:51:b7:a2:69:c8:58:1f:03:e4:58:69:3d:ce: bb:99:eb:c4:75:d8:39:f6:e9:bc:b9:3d:5b:a6:c7:4c:02:3b: fc:7f:f3:b9:1b:5d:23:61:88:a8:24:68:88:01:a5:f4:f1:1a: cc:62:72:7e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OB23tx7obtyoBdIxYpHKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl Y2EwNzEwHhcNMjYwMTAyMTAxOTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZmU5OGY2MmE4N2JhMDMyN2FhMTc1NzRkODA1Y2YzNjQxZWZhM2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkN29Zg0lcT9z8epJntCDQXPFi7PM 05aDDXiqiH63FcUMO5qOlMhtYeeuRSrRw2h67JYrbkhOYW8Of63FX4vIjh3A9Ext BieOEUkI/hOkuxmLkqld321pTWIoII9W352URMy+o23f9B35i+PNw9Jr/VtJCit3 tuhm+bPiLViO3n2r8ReeHsui6xyu6ItYimQIhv+BAK1MUM/mXAl/A3EID3GudiK3 4PWa5dqQtmjLBUSYUQslo0r15deOXdYggkbrU5FNvBA5aYMcDo8YBSmZputq/5wL /FU7d8vLsO3UbUPcbN+vJxRAHElMe1fDycTXXPIgU0J4mgthCKfqp7rEmQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN/pj2Koe6AyeqF1dNgFzzZB76O4MB8GA1UdIwQY MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt ODlkMDkyNDBjNDNiLzEvMy1tUFlxaDdvREo2b1hWMDJBWFBOa0h2bzdnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALqEbMA0G CSqGSIb3DQEBCwUAA4IBAQAuLBHjrIqZy+9X/Ltr4cx4lzU4qlPuilthT3g9+SzT dj0DS51vY0Hg6nLklsn0QITwVrPrMF1r7THTAaErdPdthkyq8SlaoPXh+s8KrUxF Yt3tSAEP8Rpevn3H+s3JUJpJxl1NFj81ubNe7TbVNrsALu1QOJY1qdPKhcz933PK HYCFGSj0YTaPvpmSZlhNORSyxbOV4XlLYI7F6f1Jq2vN5pRjgJxTrh8zj9cNRjov pBo5keblEDe1dZEmd5DyyDfJKbzRa63QkaXvsVG3omnIWB8D5FhpPc67mevEddg5 9um8uT1bpsdMAjv8f/O5G10jYYioJGiIAaX08RrMYnJ+ -----END CERTIFICATE-----Generated at Sat Jan 3 03:25:40 2026 by rpki-client