This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/A1ZPfrRu8o9Owxr8rnTdvW9MjSc.roa File: A1ZPfrRu8o9Owxr8rnTdvW9MjSc.roa (raw, json) Hash identifier: kH/WTsSPnQpLKCHSGHr5NlR3/PpERnHd4RJbM4sqilM= Subject key identifier: 03:56:4F:7E:B4:6E:F2:8F:4E:C3:1A:FC:AE:74:DD:BD:6F:4C:8D:27 Certificate issuer: /CN=d515f2e9149ce1b428c8f1edfc009215e2847f55 Certificate serial: 019BFE35FFA73B0CAE2F6F1AC7793B8EFE5A Authority key identifier: D5:15:F2:E9:14:9C:E1:B4:28:C8:F1:ED:FC:00:92:15:E2:84:7F:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1RXy6RSc4bQoyPHt_ACSFeKEf1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/A1ZPfrRu8o9Owxr8rnTdvW9MjSc.roa Signing time: Tue 27 Jan 2026 06:48:30 +0000 ROA not before: Tue 27 Jan 2026 06:48:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 214368 IP address blocks: 46.183.16.0/24 maxlen: 24 2a01:ea05::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft rsync://rpki.ripe.net/repository/DEFAULT/1RXy6RSc4bQoyPHt_ACSFeKEf1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 21:01:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:fe:35:ff:a7:3b:0c:ae:2f:6f:1a:c7:79:3b:8e:fe:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d515f2e9149ce1b428c8f1edfc009215e2847f55 Validity Not Before: Jan 27 06:48:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=03564f7eb46ef28f4ec31afcae74ddbd6f4c8d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8b:8e:f2:4e:2a:86:fc:ff:a9:14:43:c1:27: 8d:30:d1:8f:3d:c7:93:08:64:53:4f:99:ae:62:f2: 95:4b:62:ad:92:f2:7a:f2:b8:df:c8:e1:70:30:fe: 25:1b:32:1a:67:10:31:d2:5e:5e:32:b1:a5:85:fa: eb:71:f5:ca:db:d8:0c:10:30:22:43:0f:72:56:2c: aa:a2:52:61:a1:35:ec:f7:c8:e2:b3:b3:b1:2c:c1: 20:df:0a:d7:ae:50:91:b1:7a:3d:59:37:6c:63:ab: 09:d7:c2:2f:ff:15:40:2b:d8:1b:ef:f6:c2:e4:e1: 2f:7f:16:3c:8a:cc:dc:8a:c9:07:a9:8d:3e:b3:19: 6c:40:29:30:09:9b:cd:fe:68:5f:45:99:9e:25:1f: ce:ac:3b:7d:83:6b:c1:67:c6:00:bc:f8:b1:3e:53: 7a:6d:f1:65:98:bd:45:74:50:32:0b:89:c6:0c:56: 9b:20:5c:1f:90:f0:34:77:f5:f8:5c:68:71:7d:7f: fe:7c:71:45:5c:68:fb:86:10:0f:3d:e0:d4:bb:ca: 4a:43:08:98:e4:e7:27:19:f9:5f:d6:cc:a3:a3:8d: fe:e8:73:aa:fa:90:9e:5f:8c:cb:84:da:cb:b8:72: 70:88:1a:9a:f7:81:e3:5b:30:ea:63:2e:83:ea:ea: 42:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:56:4F:7E:B4:6E:F2:8F:4E:C3:1A:FC:AE:74:DD:BD:6F:4C:8D:27 X509v3 Authority Key Identifier: keyid:D5:15:F2:E9:14:9C:E1:B4:28:C8:F1:ED:FC:00:92:15:E2:84:7F:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1RXy6RSc4bQoyPHt_ACSFeKEf1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/A1ZPfrRu8o9Owxr8rnTdvW9MjSc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.183.16.0/24 IPv6: 2a01:ea05::/32 Signature Algorithm: sha256WithRSAEncryption 53:2a:39:fd:43:18:be:4f:8e:9b:79:6f:92:13:9c:b4:ef:f7: 2a:d8:92:47:ee:9c:ee:1d:94:92:05:8a:31:f1:87:64:5d:fe: e1:37:2d:dc:7e:12:61:37:e2:db:72:fd:b1:2f:8b:b2:fe:81: d4:e0:fc:f0:b7:13:ac:99:c4:48:6f:84:eb:5b:cf:6c:c7:17: 2b:80:f1:80:84:6b:4c:c9:4d:03:03:cb:0e:c0:09:a2:f4:f6: c7:1a:67:5b:87:99:47:39:46:d1:41:0b:12:f4:b8:64:69:d9: 62:a6:48:33:2f:4b:9d:59:ce:8e:8d:7b:5f:57:3c:ac:0a:c6: 7d:59:29:ed:f3:61:70:f9:a8:79:2a:0f:04:96:d3:84:a6:6f: e6:3a:84:ef:b6:17:d5:1b:6f:56:10:8e:63:f7:ff:b5:30:43: 75:7f:55:d8:2f:fa:6f:af:af:c8:ec:87:b9:b6:1c:0c:3a:7d: 61:6c:6f:25:93:cf:f0:74:2f:fb:2e:5e:5b:d5:12:7f:fe:db: 40:b4:65:21:01:d2:ae:2d:1d:df:c4:cf:16:df:71:0b:05:8c: 37:c6:c3:9c:5f:83:fd:5d:e3:16:99:0e:18:f5:ce:5a:c2:af: 4d:48:69:cd:32:ab:25:6f:02:d8:1f:ee:38:92:6a:a6:20:11: ee:b6:b6:c5 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZv+Nf+nOwyuL28ax3k7jv5aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1MTVmMmU5MTQ5Y2UxYjQyOGM4ZjFlZGZjMDA5MjE1ZTI4 NDdmNTUwHhcNMjYwMTI3MDY0ODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMzU2NGY3ZWI0NmVmMjhmNGVjMzFhZmNhZTc0ZGRiZDZmNGM4ZDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIuO8k4qhvz/qRRDwSeNMNGPPceT CGRTT5muYvKVS2KtkvJ68rjfyOFwMP4lGzIaZxAx0l5eMrGlhfrrcfXK29gMEDAi Qw9yViyqolJhoTXs98jis7OxLMEg3wrXrlCRsXo9WTdsY6sJ18Iv/xVAK9gb7/bC 5OEvfxY8iszciskHqY0+sxlsQCkwCZvN/mhfRZmeJR/OrDt9g2vBZ8YAvPixPlN6 bfFlmL1FdFAyC4nGDFabIFwfkPA0d/X4XGhxfX/+fHFFXGj7hhAPPeDUu8pKQwiY 5OcnGflf1syjo43+6HOq+pCeX4zLhNrLuHJwiBqa94HjWzDqYy6D6upCJwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFANWT360bvKPTsMa/K503b1vTI0nMB8GA1UdIwQY MBaAFNUV8ukUnOG0KMjx7fwAkhXihH9VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVJYeTZSU2M0YlFveVBIdF9BQ1NGZUtFZjFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84MzY2YWUtNTc1ZC00ZmRlLThlOTIt MDA4OTk0NDk4MGNhLzEvQTFaUGZyUnU4bzlPd3hyOHJuVGR2VzlNalNjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS84MzY2YWUtNTc1ZC00ZmRlLThlOTItMDA4OTk0NDk4MGNh LzEvMVJYeTZSU2M0YlFveVBIdF9BQ1NGZUtFZjFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALrcQMA0E AgACMAcDBQAqAeoFMA0GCSqGSIb3DQEBCwUAA4IBAQBTKjn9Qxi+T46beW+SE5y0 7/cq2JJH7pzuHZSSBYox8YdkXf7hNy3cfhJhN+Lbcv2xL4uy/oHU4PzwtxOsmcRI b4TrW89sxxcrgPGAhGtMyU0DA8sOwAmi9PbHGmdbh5lHOUbRQQsS9Lhkadlipkgz L0udWc6OjXtfVzysCsZ9WSnt82Fw+ah5Kg8EltOEpm/mOoTvthfVG29WEI5j9/+1 MEN1f1XYL/pvr6/I7Ie5thwMOn1hbG8lk8/wdC/7Ll5b1RJ//ttAtGUhAdKuLR3f xM8W33ELBYw3xsOcX4P9XeMWmQ4Y9c5awq9NSGnNMqslbwLYH+44kmqmIBHutrbF -----END CERTIFICATE-----Generated at Thu Feb 5 05:53:05 2026 by rpki-client