This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/1kvPDiaai769V2yTG_UDq-gB8hI.roa File: 1kvPDiaai769V2yTG_UDq-gB8hI.roa (raw, json) Hash identifier: ihWbGOHePlUGrVYysYB0fMUNjr8edNlVyE2WAHzUr44= Subject key identifier: D6:4B:CF:0E:26:9A:8B:BE:BD:57:6C:93:1B:F5:03:AB:E8:01:F2:12 Certificate issuer: /CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94 Certificate serial: 019A7BEE2BFC2F7E2ECF129FD8D0E92CA662 Authority key identifier: 9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/1kvPDiaai769V2yTG_UDq-gB8hI.roa Signing time: Thu 13 Nov 2025 06:36:37 +0000 ROA not before: Thu 13 Nov 2025 06:36:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 397373 IP address blocks: 46.70.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 06 Dec 2025 02:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:7b:ee:2b:fc:2f:7e:2e:cf:12:9f:d8:d0:e9:2c:a6:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94 Validity Not Before: Nov 13 06:36:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=d64bcf0e269a8bbebd576c931bf503abe801f212 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:11:fe:51:94:ef:8b:b7:60:a9:04:55:51:16: db:c8:4a:3e:f3:61:3a:d3:1e:fe:3b:04:00:e4:a8: 03:a1:ff:69:15:e7:d1:3e:ed:6e:51:b7:27:74:de: 17:41:ea:8d:d7:2d:53:4d:45:7a:99:7b:3f:6c:1c: ae:e7:b6:4d:ba:ca:a1:3a:e4:d2:36:26:47:fc:22: ea:21:30:e3:70:b3:98:9f:a6:e0:b5:f3:c7:f7:fb: 5d:ed:fa:a2:66:0c:5c:af:a9:c5:15:d5:e3:9a:39: 20:74:55:e7:eb:51:19:55:af:40:a1:2d:57:39:2c: e1:b2:51:78:e2:ce:09:76:90:72:24:96:25:e5:0b: c3:21:b6:d2:4b:9f:d1:35:f6:da:60:a8:0b:9b:36: e4:cd:22:1f:3d:c0:93:61:d9:d8:fb:32:c5:40:83: 34:9f:fc:21:7d:08:8c:f4:8f:fc:f5:01:4f:ab:95: 2b:9d:0c:5c:59:65:fe:58:72:bc:7c:b8:0d:53:8a: 70:de:21:ac:c4:e7:84:46:86:78:a2:ad:3e:1c:34: 4f:ff:c3:f2:d1:5e:4c:09:d4:7f:5b:cc:a7:a4:53: ca:2c:05:f7:ec:b5:34:dd:ef:af:fc:ed:7e:32:9d: e4:29:2f:56:8a:be:1f:92:ee:bf:79:ec:26:72:ad: 6a:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:4B:CF:0E:26:9A:8B:BE:BD:57:6C:93:1B:F5:03:AB:E8:01:F2:12 X509v3 Authority Key Identifier: keyid:9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/1kvPDiaai769V2yTG_UDq-gB8hI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.70.192.0/19 Signature Algorithm: sha256WithRSAEncryption 88:25:ca:6c:a7:b3:45:73:87:68:a0:6a:88:df:df:ea:8f:37: f0:de:20:56:da:d0:a3:ab:fe:95:3d:f8:36:4a:6b:6e:e2:15: ee:30:59:fb:e1:77:ea:bb:07:cb:26:3b:c3:0c:ab:22:50:e2: d1:0b:ed:d6:aa:11:55:bf:0d:14:ff:db:37:13:de:2d:2a:ab: be:df:a0:85:76:03:3d:58:6c:b1:00:73:c3:81:70:8d:67:ba: 79:a3:ad:0a:a4:53:95:12:a8:21:58:6f:68:d2:9a:84:ab:d3: 2f:3a:5b:73:ba:12:07:10:85:22:70:aa:75:10:16:9a:ef:a5: 4c:ba:db:f6:73:05:c8:58:e3:1e:49:91:df:86:19:2b:ad:8a: 0f:49:78:01:9e:72:8f:98:3f:89:37:dd:d7:26:6f:76:b3:50: 25:6b:8c:ee:1e:28:37:45:ea:58:b5:e7:ce:38:18:08:06:7b: b6:8a:ec:5e:60:ce:1c:b9:5e:27:af:f4:a2:dd:74:85:fc:af: 00:c4:68:1b:a9:ea:0f:0c:55:6e:3e:9d:25:d7:8c:4c:e6:d2: 8a:d0:27:89:44:cd:c1:aa:7c:d8:f3:d7:e5:b3:73:1b:d0:49: 8b:03:d2:4a:9d:de:96:6e:11:4b:ef:c5:0d:43:a1:62:53:5d: b0:ec:d0:11 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZp77iv8L34uzxKf2NDpLKZiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZmYxNTI3OGY1M2Y3NzYxYzJmM2QzM2RkOWJlNzdhOGE0 ZmJkOTQwHhcNMjUxMTEzMDYzNjM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNjRiY2YwZTI2OWE4YmJlYmQ1NzZjOTMxYmY1MDNhYmU4MDFmMjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hH+UZTvi7dgqQRVURbbyEo+82E6 0x7+OwQA5KgDof9pFefRPu1uUbcndN4XQeqN1y1TTUV6mXs/bByu57ZNusqhOuTS NiZH/CLqITDjcLOYn6bgtfPH9/td7fqiZgxcr6nFFdXjmjkgdFXn61EZVa9AoS1X OSzhslF44s4JdpByJJYl5QvDIbbSS5/RNfbaYKgLmzbkzSIfPcCTYdnY+zLFQIM0 n/whfQiM9I/89QFPq5UrnQxcWWX+WHK8fLgNU4pw3iGsxOeERoZ4oq0+HDRP/8Py 0V5MCdR/W8ynpFPKLAX37LU03e+v/O1+Mp3kKS9Wir4fku6/eewmcq1qvwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNZLzw4mmou+vVdskxv1A6voAfISMB8GA1UdIwQY MBaAFJv/FSePU/d2HC89M92b53qKT72UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbV84Vko0OVQ5M1ljTHowejNadm5lb3BQdlpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hYTdiMzMtZGVlYi00YWJkLWI4ZDIt NTY5NzI0OWY1MTI0LzEvMWt2UERpYWFpNzY5VjJ5VEdfVURxLWdCOGhJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9hYTdiMzMtZGVlYi00YWJkLWI4ZDItNTY5NzI0OWY1MTI0 LzEvbV84Vko0OVQ5M1ljTHowejNadm5lb3BQdlpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLkbAMA0G CSqGSIb3DQEBCwUAA4IBAQCIJcpsp7NFc4dooGqI39/qjzfw3iBW2tCjq/6VPfg2 Smtu4hXuMFn74XfquwfLJjvDDKsiUOLRC+3WqhFVvw0U/9s3E94tKqu+36CFdgM9 WGyxAHPDgXCNZ7p5o60KpFOVEqghWG9o0pqEq9MvOltzuhIHEIUicKp1EBaa76VM utv2cwXIWOMeSZHfhhkrrYoPSXgBnnKPmD+JN93XJm92s1Ala4zuHig3RepYtefO OBgIBnu2iuxeYM4cuV4nr/Si3XSF/K8AxGgbqeoPDFVuPp0l14xM5tKK0CeJRM3B qnzY89fls3Mb0EmLA9JKnd6WbhFL78UNQ6FiU12w7NAR -----END CERTIFICATE-----Generated at Fri Dec 5 12:04:56 2025 by rpki-client