This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/oTNGV0Y7SaXlCklNzwFHJ1qEeUI.roa File: oTNGV0Y7SaXlCklNzwFHJ1qEeUI.roa (raw, json) Hash identifier: 1MTRBJjbkgRiCWVR5beZsUo8EaPKlW5X/iPni1dYgA8= Subject key identifier: A1:33:46:57:46:3B:49:A5:E5:0A:49:4D:CF:01:47:27:5A:84:79:42 Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519 Certificate serial: 019B7EA48107A1259A4317B87F71456F6579 Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/oTNGV0Y7SaXlCklNzwFHJ1qEeUI.roa Signing time: Fri 02 Jan 2026 12:17:48 +0000 ROA not before: Fri 02 Jan 2026 12:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 26383 IP address blocks: 46.102.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:81:07:a1:25:9a:43:17:b8:7f:71:45:6f:65:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519 Validity Not Before: Jan 2 12:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a1334657463b49a5e50a494dcf0147275a847942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ce:ff:a5:ee:5a:53:52:bb:2b:b0:25:fe:08: e3:36:69:0f:59:35:2d:31:8b:c9:af:09:64:77:e7: f5:88:ac:e8:5a:92:ac:d3:34:90:ed:0a:66:e4:a7: 3d:68:c4:c3:45:73:cb:79:2f:6f:fd:2b:b1:25:34: 6f:9d:2b:97:7e:b7:fb:5c:12:f3:07:4e:7e:89:e3: 5e:38:07:45:cb:ca:13:19:34:9a:81:86:2c:7b:44: 90:8f:81:78:dc:67:d0:26:03:ad:6a:f6:3b:7f:45: 7f:78:a2:18:a9:80:d7:17:75:0f:96:c2:c2:de:c9: c6:28:86:46:01:84:95:1c:44:ac:94:b8:b4:c9:5a: 3f:c6:63:a4:72:50:de:5c:f7:64:bc:a6:52:1b:e9: 80:74:86:d6:04:5f:ce:fc:55:a8:f0:63:a1:2c:c6: 88:ee:6d:77:0a:fd:39:f6:cd:af:67:fb:93:e3:05: c4:8b:6f:9f:58:16:a9:f7:c2:ac:6a:65:b0:35:89: 88:c2:eb:05:80:18:ef:49:57:50:24:bf:91:42:ce: 2d:1f:05:c7:c8:31:8e:00:1e:a2:a3:42:3e:c2:5f: 33:45:50:c9:fb:db:58:0e:22:c8:57:fd:45:17:72: 6d:f0:b3:c5:74:3d:3d:8c:ec:cb:4e:09:c7:cb:a0: b8:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:33:46:57:46:3B:49:A5:E5:0A:49:4D:CF:01:47:27:5A:84:79:42 X509v3 Authority Key Identifier: keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/oTNGV0Y7SaXlCklNzwFHJ1qEeUI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.102.255.0/24 Signature Algorithm: sha256WithRSAEncryption 55:c7:88:5b:32:55:de:d7:3c:9b:e0:8c:ab:ce:08:56:7a:68: 78:3c:5c:f5:d3:cf:a7:62:dc:a4:7b:20:f0:f2:e8:44:0e:3b: 0c:e2:03:5d:e1:07:6d:8e:73:eb:4a:ff:9b:59:26:04:f6:fc: 52:8f:88:62:70:c3:cc:67:54:6e:1b:41:d4:b8:66:60:67:c1: 72:50:6a:46:d4:91:f9:03:52:cc:ce:b0:22:6e:ac:3a:2b:c8: c3:86:3d:0f:a5:a3:c3:ec:26:5a:ba:0e:31:d5:4a:10:ec:51: 0d:e1:a6:32:61:58:e2:34:d3:94:37:f8:78:8f:ae:87:d9:a1: 78:36:35:00:4f:a1:76:da:1d:d0:96:fd:2e:aa:93:ac:da:a3: aa:43:e8:94:51:0a:cf:7f:b1:86:6f:c3:1f:5c:d1:42:32:bc: b7:f0:30:86:b4:35:81:a1:f4:3d:1a:f1:a5:cd:17:6b:2f:a5: fb:cf:e0:97:72:de:22:d8:4d:e6:73:f0:de:1d:d0:cc:4e:bd: 92:eb:84:1a:8e:7f:fc:c0:2f:00:73:14:7a:d2:bc:6a:f6:5b: c0:59:5e:fe:9e:d4:24:67:f6:48:3b:a6:b6:7d:48:1f:db:95: 21:34:78:78:7b:3c:7b:b9:81:40:14:0a:41:3a:9a:51:36:02: e6:c9:8f:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pIEHoSWaQxe4f3FFb2V5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZmE2NmZiODRhNzgxYTA1ODRmZDBkMWMyZGYzOWJkYTQ3 NjA1MTkwHhcNMjYwMTAyMTIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhMTMzNDY1NzQ2M2I0OWE1ZTUwYTQ5NGRjZjAxNDcyNzVhODQ3OTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM7/pe5aU1K7K7Al/gjjNmkPWTUt MYvJrwlkd+f1iKzoWpKs0zSQ7Qpm5Kc9aMTDRXPLeS9v/SuxJTRvnSuXfrf7XBLz B05+ieNeOAdFy8oTGTSagYYse0SQj4F43GfQJgOtavY7f0V/eKIYqYDXF3UPlsLC 3snGKIZGAYSVHESslLi0yVo/xmOkclDeXPdkvKZSG+mAdIbWBF/O/FWo8GOhLMaI 7m13Cv059s2vZ/uT4wXEi2+fWBap98KsamWwNYmIwusFgBjvSVdQJL+RQs4tHwXH yDGOAB6io0I+wl8zRVDJ+9tYDiLIV/1FF3Jt8LPFdD09jOzLTgnHy6C4GQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKEzRldGO0ml5QpJTc8BRydahHlCMB8GA1UdIwQY MBaAFGT6ZvuEp4GgWE/Q0cLfOb2kdgUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQt NzQwOGViOGJjNTg2LzEvb1ROR1YwWTdTYVhsQ2tsTnp3RkhKMXFFZVVJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQtNzQwOGViOGJjNTg2 LzEvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALmb/MA0G CSqGSIb3DQEBCwUAA4IBAQBVx4hbMlXe1zyb4IyrzghWemh4PFz108+nYtykeyDw 8uhEDjsM4gNd4QdtjnPrSv+bWSYE9vxSj4hicMPMZ1RuG0HUuGZgZ8FyUGpG1JH5 A1LMzrAibqw6K8jDhj0PpaPD7CZaug4x1UoQ7FEN4aYyYVjiNNOUN/h4j66H2aF4 NjUAT6F22h3Qlv0uqpOs2qOqQ+iUUQrPf7GGb8MfXNFCMry38DCGtDWBofQ9GvGl zRdrL6X7z+CXct4i2E3mc/DeHdDMTr2S64Qajn/8wC8AcxR60rxq9lvAWV7+ntQk Z/ZIO6a2fUgf25UhNHh4ezx7uYFAFApBOppRNgLmyY8k -----END CERTIFICATE-----Generated at Fri Jan 9 08:22:20 2026 by rpki-client