This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/tZ7C1MYt9I9U0h7GnvEIm9NToaE.roa File: tZ7C1MYt9I9U0h7GnvEIm9NToaE.roa (raw, json) Hash identifier: sb1ZYmGZNktATZIUUN0if0MQ6BfFbZD5jVek7sbME7Q= Subject key identifier: B5:9E:C2:D4:C6:2D:F4:8F:54:D2:1E:C6:9E:F1:08:9B:D3:53:A1:A1 Certificate issuer: /CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94 Certificate serial: 019B7B3674501DDB9EFFF1021C71E5C225E4 Authority key identifier: 9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/tZ7C1MYt9I9U0h7GnvEIm9NToaE.roa Signing time: Thu 01 Jan 2026 20:18:44 +0000 ROA not before: Thu 01 Jan 2026 20:18:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397373 IP address blocks: 46.70.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.mft rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:74:50:1d:db:9e:ff:f1:02:1c:71:e5:c2:25:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9bff15278f53f7761c2f3d33dd9be77a8a4fbd94 Validity Not Before: Jan 1 20:18:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b59ec2d4c62df48f54d21ec69ef1089bd353a1a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:2e:88:f5:cf:0d:57:12:71:c7:4c:d7:38:93: 3c:0e:46:60:0f:c4:92:05:d0:67:57:52:8e:d9:f8: 2d:c9:c6:49:a6:15:a3:c2:50:07:2d:25:82:96:79: f3:d2:8e:d5:f6:92:4b:54:dd:22:af:b9:c5:1c:2c: 5b:58:36:75:02:e9:9f:dc:de:24:46:22:b5:36:97: 55:a5:73:3e:b2:9c:07:01:46:c3:88:07:4b:2a:94: 1e:0e:de:47:0e:23:aa:86:f0:07:4d:f2:8b:8a:a0: bd:d2:1d:3c:29:ab:39:c7:1e:35:97:43:2f:0a:38: d0:09:e8:bf:ce:32:c2:51:e8:b2:43:52:dc:f9:da: f6:12:25:4f:22:b3:ab:e9:9c:dc:11:de:de:13:5a: c1:dd:5d:d7:9c:30:9d:de:82:da:98:f9:f0:cd:8e: 28:81:92:5f:f4:20:d7:b6:9c:27:c6:97:8a:26:80: 49:27:9e:40:4e:d2:f0:53:7a:d3:cb:46:a6:ca:c7: e7:c0:b2:df:0d:a1:60:24:ac:75:c1:17:38:da:d7: e2:ec:2a:95:a4:f6:59:c1:67:fc:72:06:0e:63:bd: 2d:e8:ca:76:aa:20:5c:8e:1a:aa:e5:5d:d4:cf:d8: 91:09:ef:1a:52:c7:59:94:ea:11:64:b3:b2:88:78: ea:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:9E:C2:D4:C6:2D:F4:8F:54:D2:1E:C6:9E:F1:08:9B:D3:53:A1:A1 X509v3 Authority Key Identifier: keyid:9B:FF:15:27:8F:53:F7:76:1C:2F:3D:33:DD:9B:E7:7A:8A:4F:BD:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_8VJ49T93YcLz0z3ZvneopPvZQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/tZ7C1MYt9I9U0h7GnvEIm9NToaE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/aa7b33-deeb-4abd-b8d2-5697249f5124/1/m_8VJ49T93YcLz0z3ZvneopPvZQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.70.192.0/19 Signature Algorithm: sha256WithRSAEncryption 0e:13:d8:04:d4:18:86:3e:49:da:68:9c:3c:28:29:62:45:ca: 82:65:b4:eb:af:da:fd:22:aa:84:71:c5:a5:95:bf:2e:88:f3: 74:ac:c3:4b:bb:71:37:7b:a9:8b:85:49:a2:9a:45:28:3a:0b: 58:fe:d5:1b:6c:ed:61:47:8a:b2:f1:15:97:26:8e:bc:8c:4c: dc:96:34:4c:ac:7d:25:20:43:6e:40:1f:ad:17:a4:bb:d3:13: b7:db:c2:4c:88:f5:61:88:30:40:9e:a1:b6:10:35:f6:84:91: a0:aa:69:11:eb:28:ab:01:c9:40:23:e4:cc:78:0a:1b:6a:95: 1a:a6:23:0d:ea:d9:3d:a4:c6:6e:7e:50:90:64:34:38:8b:ed: 85:ad:d0:9d:2d:ee:6e:bd:42:17:7f:26:f7:7b:96:f5:15:0b: 6c:61:47:a7:05:9b:c5:dc:72:44:f9:96:54:63:a5:9c:06:04: 46:b6:7b:73:40:10:40:06:e4:cf:03:96:da:b7:cb:1a:39:a7: 06:9d:1a:65:52:59:15:c2:41:64:89:ce:38:3f:0a:6f:04:0e: b3:4b:27:64:6b:21:47:10:a1:d2:1a:8a:a2:aa:e7:71:32:a8: f0:6c:ad:b7:ae:fc:b5:4b:73:fb:c5:6a:1d:e9:3e:49:71:2c: a7:c8:27:93 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NnRQHdue//ECHHHlwiXkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliZmYxNTI3OGY1M2Y3NzYxYzJmM2QzM2RkOWJlNzdhOGE0 ZmJkOTQwHhcNMjYwMTAxMjAxODQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNTllYzJkNGM2MmRmNDhmNTRkMjFlYzY5ZWYxMDg5YmQzNTNhMWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAly6I9c8NVxJxx0zXOJM8DkZgD8SS BdBnV1KO2fgtycZJphWjwlAHLSWClnnz0o7V9pJLVN0ir7nFHCxbWDZ1Aumf3N4k RiK1NpdVpXM+spwHAUbDiAdLKpQeDt5HDiOqhvAHTfKLiqC90h08Kas5xx41l0Mv CjjQCei/zjLCUeiyQ1Lc+dr2EiVPIrOr6ZzcEd7eE1rB3V3XnDCd3oLamPnwzY4o gZJf9CDXtpwnxpeKJoBJJ55ATtLwU3rTy0amysfnwLLfDaFgJKx1wRc42tfi7CqV pPZZwWf8cgYOY70t6Mp2qiBcjhqq5V3Uz9iRCe8aUsdZlOoRZLOyiHjqUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLWewtTGLfSPVNIexp7xCJvTU6GhMB8GA1UdIwQY MBaAFJv/FSePU/d2HC89M92b53qKT72UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbV84Vko0OVQ5M1ljTHowejNadm5lb3BQdlpRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9hYTdiMzMtZGVlYi00YWJkLWI4ZDIt NTY5NzI0OWY1MTI0LzEvdFo3QzFNWXQ5STlVMGg3R252RUltOU5Ub2FFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9hYTdiMzMtZGVlYi00YWJkLWI4ZDItNTY5NzI0OWY1MTI0 LzEvbV84Vko0OVQ5M1ljTHowejNadm5lb3BQdlpRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLkbAMA0G CSqGSIb3DQEBCwUAA4IBAQAOE9gE1BiGPknaaJw8KCliRcqCZbTrr9r9IqqEccWl lb8uiPN0rMNLu3E3e6mLhUmimkUoOgtY/tUbbO1hR4qy8RWXJo68jEzcljRMrH0l IENuQB+tF6S70xO328JMiPVhiDBAnqG2EDX2hJGgqmkR6yirAclAI+TMeAobapUa piMN6tk9pMZuflCQZDQ4i+2FrdCdLe5uvUIXfyb3e5b1FQtsYUenBZvF3HJE+ZZU Y6WcBgRGtntzQBBABuTPA5bat8saOacGnRplUlkVwkFkic44PwpvBA6zSydkayFH EKHSGoqiqudxMqjwbK23rvy1S3P7xWod6T5JcSynyCeT -----END CERTIFICATE-----Generated at Mon Jan 19 23:21:53 2026 by rpki-client