This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/RnEHdu41-R4PcF7uA7NCq1ymq-o.roa File: RnEHdu41-R4PcF7uA7NCq1ymq-o.roa (raw, json) Hash identifier: 1QIkC6nLYEKLiQP1dxQtxmlssoU62izuT6vjCEpQfEc= Subject key identifier: 46:71:07:76:EE:35:F9:1E:0F:70:5E:EE:03:B3:42:AB:5C:A6:AB:EA Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd Certificate serial: 019B7BA3B1734E1F36AA2B69B8A4ABEC823E Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/RnEHdu41-R4PcF7uA7NCq1ymq-o.roa Signing time: Thu 01 Jan 2026 22:18:03 +0000 ROA not before: Thu 01 Jan 2026 22:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 138195 IP address blocks: 194.126.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 01:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:b1:73:4e:1f:36:aa:2b:69:b8:a4:ab:ec:82:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd Validity Not Before: Jan 1 22:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46710776ee35f91e0f705eee03b342ab5ca6abea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4d:fc:dc:44:18:9c:81:c7:6d:bd:d4:70:eb: 96:87:e2:98:86:08:ac:5a:15:c6:c3:32:94:30:b8: 40:82:23:04:da:5d:1f:7a:f0:76:3a:fc:c7:43:6b: da:06:a8:57:4a:73:99:0f:b5:df:ad:c6:5e:bf:81: a3:89:ac:8c:0e:ad:d5:e0:e5:52:92:0a:ff:4d:46: 68:3a:15:32:5f:a4:ae:d5:78:00:87:a6:9e:22:31: 6c:05:6f:ed:03:99:6a:5f:e7:c6:4e:a2:fd:dd:31: 05:ad:8b:35:b1:b2:45:42:26:88:e0:1c:14:3b:b7: 3a:aa:56:1c:9b:01:87:c4:6f:1c:8f:a4:61:a9:24: e1:d9:64:9c:71:85:52:6f:b9:58:89:03:7b:57:d5: 62:7a:06:6a:da:35:48:74:1f:c8:62:a9:e9:03:b4: 82:6e:57:57:0c:81:73:3d:03:70:04:38:31:c7:dc: a8:07:ec:b7:13:da:f8:d0:96:49:e4:c3:cf:11:fc: 33:62:5c:07:27:df:fb:64:ae:11:55:b5:b6:a5:8f: 14:14:4c:14:69:42:5c:3a:89:9d:19:b0:99:62:d5: 71:de:d2:04:8b:76:68:07:a1:5e:a1:f1:83:c8:cd: 35:e9:16:06:22:bd:d4:0f:d4:c6:45:af:bd:60:41: a6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:71:07:76:EE:35:F9:1E:0F:70:5E:EE:03:B3:42:AB:5C:A6:AB:EA X509v3 Authority Key Identifier: keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/RnEHdu41-R4PcF7uA7NCq1ymq-o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.126.215.0/24 Signature Algorithm: sha256WithRSAEncryption 04:c5:b9:eb:93:b8:ce:7e:83:1f:9f:79:ff:8b:64:3f:10:89: e9:1a:d6:73:8f:0b:0b:a4:a1:80:69:13:e5:77:b3:3c:dd:26: c3:7f:94:3b:4d:10:03:2c:f0:d5:e2:3c:05:4f:c1:4a:8f:43: 10:ac:1f:3b:f0:dc:72:24:c1:cc:a8:a8:73:13:55:dc:86:70: 13:88:96:4a:1e:0c:63:24:a7:57:b5:0a:3a:e3:ea:34:42:d1: 9c:d3:3e:84:3b:07:da:e6:ac:2a:a3:6a:46:c0:7f:af:01:9e: 57:bf:f1:e1:b4:70:9f:30:90:0e:33:ca:6d:f6:11:a8:cd:b9: ed:b7:d8:ff:bb:9b:1e:ae:fc:66:be:08:13:58:36:55:9f:76: 75:08:d9:2b:75:ec:88:ae:37:20:22:16:09:a6:34:df:8a:fe: 76:52:e1:4c:0f:d8:6a:11:0f:f6:a6:5c:bc:af:ad:60:06:b4: ce:74:e7:25:91:89:b5:70:18:ec:25:9f:9e:34:b7:76:46:09: 07:66:58:c8:0a:37:c3:35:77:45:ae:94:e8:af:00:e1:c6:c1: 80:8e:36:dd:41:a3:cd:06:b1:43:24:5e:dc:d7:2f:cf:3e:2d: 9c:71:fc:23:4c:6c:c9:6f:ec:35:5b:60:41:40:dd:c0:aa:55: dd:c4:a1:02 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o7FzTh82qitpuKSr7II+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTA4YzIyNWYyNDc4Y2Q0MjMwMTc5ODkwZDA3Mjg0YmUx NjM2Y2QwHhcNMjYwMTAxMjIxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjcxMDc3NmVlMzVmOTFlMGY3MDVlZWUwM2IzNDJhYjVjYTZhYmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3k383EQYnIHHbb3UcOuWh+KYhgis WhXGwzKUMLhAgiME2l0fevB2OvzHQ2vaBqhXSnOZD7XfrcZev4GjiayMDq3V4OVS kgr/TUZoOhUyX6Su1XgAh6aeIjFsBW/tA5lqX+fGTqL93TEFrYs1sbJFQiaI4BwU O7c6qlYcmwGHxG8cj6RhqSTh2WSccYVSb7lYiQN7V9ViegZq2jVIdB/IYqnpA7SC bldXDIFzPQNwBDgxx9yoB+y3E9r40JZJ5MPPEfwzYlwHJ9/7ZK4RVbW2pY8UFEwU aUJcOomdGbCZYtVx3tIEi3ZoB6FeofGDyM016RYGIr3UD9TGRa+9YEGmOwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEZxB3buNfkeD3Be7gOzQqtcpqvqMB8GA1UdIwQY MBaAFM0QjCJfJHjNQjAXmJDQcoS+FjbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt YWU1MDI3MzY4MWE3LzEvUm5FSGR1NDEtUjRQY0Y3dUE3TkNxMXltcS1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3 LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwn7XMA0G CSqGSIb3DQEBCwUAA4IBAQAExbnrk7jOfoMfn3n/i2Q/EInpGtZzjwsLpKGAaRPl d7M83SbDf5Q7TRADLPDV4jwFT8FKj0MQrB878NxyJMHMqKhzE1XchnATiJZKHgxj JKdXtQo64+o0QtGc0z6EOwfa5qwqo2pGwH+vAZ5Xv/HhtHCfMJAOM8pt9hGozbnt t9j/u5servxmvggTWDZVn3Z1CNkrdeyIrjcgIhYJpjTfiv52UuFMD9hqEQ/2ply8 r61gBrTOdOclkYm1cBjsJZ+eNLd2RgkHZljICjfDNXdFrpTorwDhxsGAjjbdQaPN BrFDJF7c1y/PPi2ccfwjTGzJb+w1W2BBQN3AqlXdxKEC -----END CERTIFICATE-----Generated at Wed Jan 21 10:28:40 2026 by rpki-client