This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/4646eK1Tkwjccpu4DCzx2JumzS8.roa File: 4646eK1Tkwjccpu4DCzx2JumzS8.roa (raw, json) Hash identifier: lg2Dl0touPmWfPjJx+g7bMR8N5f9QX+NTtoNaXQCBJU= Subject key identifier: E3:AE:3A:78:AD:53:93:08:DC:72:9B:B8:0C:2C:F1:D8:9B:A6:CD:2F Certificate issuer: /CN=412ac83a27ca8723c61b1446c3e678110c650689 Certificate serial: 019B7910DBD7A4F9D0DB170CF9B7BC017912 Authority key identifier: 41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/4646eK1Tkwjccpu4DCzx2JumzS8.roa Signing time: Thu 01 Jan 2026 10:18:26 +0000 ROA not before: Thu 01 Jan 2026 10:18:26 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 24632 IP address blocks: 193.111.108.0/22 maxlen: 22 193.111.112.0/23 maxlen: 23 194.9.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.mft rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:db:d7:a4:f9:d0:db:17:0c:f9:b7:bc:01:79:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=412ac83a27ca8723c61b1446c3e678110c650689 Validity Not Before: Jan 1 10:18:26 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3ae3a78ad539308dc729bb80c2cf1d89ba6cd2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:cc:e6:31:1e:7d:ce:30:c2:13:77:72:2e:fb: c8:62:f6:b4:eb:0c:2e:4a:c6:22:de:a6:d0:47:27: 4b:36:b7:51:50:ec:7f:65:68:21:40:61:97:ed:54: 4b:26:34:9f:6d:1e:8a:89:de:d6:b6:16:70:7d:3f: f4:da:de:0a:4b:92:42:ee:aa:27:f6:0e:63:fb:7e: 1e:d8:81:4f:a4:95:75:94:6f:28:1b:77:87:94:87: e7:c6:9a:d4:ba:5f:13:73:03:db:63:87:f8:74:3a: 0d:e5:42:13:59:76:f1:c2:0b:fb:83:40:59:8e:00: 4f:37:05:50:85:3e:34:9f:6c:80:0a:81:eb:36:22: 09:15:fe:ce:c5:5f:2c:95:7e:f1:6d:f4:7b:51:b5: 6c:e7:e8:c2:a3:c1:ce:a9:39:40:52:8d:7b:2a:c6: 14:f5:35:cb:1c:46:37:1b:d6:60:f2:1b:5b:45:d5: 25:46:1a:3c:ac:a7:d1:70:17:01:46:a4:59:9b:b5: ad:88:f3:1a:40:6f:74:7c:2c:a5:2e:fe:02:92:05: 17:a2:17:77:31:9c:fe:4e:ae:65:c8:e4:b7:a4:d2: 47:a4:15:e6:18:fb:39:12:78:11:03:56:0c:2b:f6: 9d:c3:16:3a:c1:c9:dc:59:6a:f0:59:d3:1a:c0:71: 62:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:AE:3A:78:AD:53:93:08:DC:72:9B:B8:0C:2C:F1:D8:9B:A6:CD:2F X509v3 Authority Key Identifier: keyid:41:2A:C8:3A:27:CA:87:23:C6:1B:14:46:C3:E6:78:11:0C:65:06:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QSrIOifKhyPGGxRGw-Z4EQxlBok.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/4646eK1Tkwjccpu4DCzx2JumzS8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/321c0d-3671-4927-8937-1f856c093ae8/1/QSrIOifKhyPGGxRGw-Z4EQxlBok.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.111.108.0-193.111.113.255 194.9.168.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:18:5e:d5:a9:15:74:c0:7f:8a:c9:43:13:06:d6:3a:7b:ae: b4:fe:05:b0:ba:b2:72:c7:23:1f:56:dd:06:10:77:24:8a:a7: 2e:49:80:64:3d:55:60:51:ea:66:69:c1:04:72:68:59:1f:da: 04:67:e3:60:ba:7e:2c:4a:16:88:1b:21:ef:5d:6f:fe:5e:7b: 51:0f:72:d9:4c:c6:47:9e:37:2f:e5:41:73:d9:6b:bf:99:37: c3:84:0b:23:4a:5d:b9:5a:68:da:96:78:e4:c9:0b:cf:c6:7c: 8b:bc:0d:9f:20:74:d0:fe:52:e9:76:f1:a7:87:5e:6d:d9:38: 0a:f3:f6:a0:1b:e0:86:66:c0:9a:5f:80:3c:46:4a:f2:b6:b7: ff:13:13:03:81:65:65:65:a4:8b:8b:29:13:d6:7f:65:6e:38: 00:ac:d7:b6:a9:28:e3:e9:e8:39:ad:eb:59:66:44:0b:bf:21: d4:13:81:36:06:01:80:d6:8e:b8:f0:77:af:f7:40:15:8d:db: a4:cd:a5:ff:5f:09:4d:13:2e:3c:21:e9:4a:e9:f7:c8:a4:d6: 59:f4:c0:4b:e0:4f:86:28:cb:e8:f6:d5:60:a4:01:f0:ce:7e: ed:ae:c6:cf:c4:f7:f8:e7:1a:04:fe:9c:09:f4:12:07:83:be: 85:5c:28:db -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt5ENvXpPnQ2xcM+be8AXkSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQxMmFjODNhMjdjYTg3MjNjNjFiMTQ0NmMzZTY3ODExMGM2 NTA2ODkwHhcNMjYwMTAxMTAxODI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2FlM2E3OGFkNTM5MzA4ZGM3MjliYjgwYzJjZjFkODliYTZjZDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6szmMR59zjDCE3dyLvvIYva06wwu SsYi3qbQRydLNrdRUOx/ZWghQGGX7VRLJjSfbR6Kid7WthZwfT/02t4KS5JC7qon 9g5j+34e2IFPpJV1lG8oG3eHlIfnxprUul8TcwPbY4f4dDoN5UITWXbxwgv7g0BZ jgBPNwVQhT40n2yACoHrNiIJFf7OxV8slX7xbfR7UbVs5+jCo8HOqTlAUo17KsYU 9TXLHEY3G9Zg8htbRdUlRho8rKfRcBcBRqRZm7WtiPMaQG90fCylLv4CkgUXohd3 MZz+Tq5lyOS3pNJHpBXmGPs5EngRA1YMK/adwxY6wcncWWrwWdMawHFieQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFOOuOnitU5MI3HKbuAws8dibps0vMB8GA1UdIwQY MBaAFEEqyDonyocjxhsURsPmeBEMZQaJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUVNySU9pZktoeVBHR3hSR3ctWjRFUXhsQm9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8zMjFjMGQtMzY3MS00OTI3LTg5Mzct MWY4NTZjMDkzYWU4LzEvNDY0NmVLMVRrd2pjY3B1NERDengySnVtelM4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy8zMjFjMGQtMzY3MS00OTI3LTg5MzctMWY4NTZjMDkzYWU4 LzEvUVNySU9pZktoeVBHR3hSR3ctWjRFUXhsQm9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBALBb2wD BAHBb3ADBAHCCagwDQYJKoZIhvcNAQELBQADggEBAF0YXtWpFXTAf4rJQxMG1jp7 rrT+BbC6snLHIx9W3QYQdySKpy5JgGQ9VWBR6mZpwQRyaFkf2gRn42C6fixKFogb Ie9db/5ee1EPctlMxkeeNy/lQXPZa7+ZN8OECyNKXblaaNqWeOTJC8/GfIu8DZ8g dND+Uul28aeHXm3ZOArz9qAb4IZmwJpfgDxGSvK2t/8TEwOBZWVlpIuLKRPWf2Vu OACs17apKOPp6Dmt61lmRAu/IdQTgTYGAYDWjrjwd6/3QBWN26TNpf9fCU0TLjwh 6Urp98ik1ln0wEvgT4Yoy+j21WCkAfDOfu2uxs/E9/jnGgT+nAn0EgeDvoVcKNs= -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:22 2026 by rpki-client