This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/8pXCuBWrEvdy2wZTlEp32tqPYW8.roa File: 8pXCuBWrEvdy2wZTlEp32tqPYW8.roa (raw, json) Hash identifier: uGUL/if0f5ws0TqXiUCRr04ljVZ6Fve+sjfhpDCgGM4= Subject key identifier: F2:95:C2:B8:15:AB:12:F7:72:DB:06:53:94:4A:77:DA:DA:8F:61:6F Certificate issuer: /CN=d4afe3f0c9e555e52d3505d6163278df3da18cee Certificate serial: 019B79EC5B152AEA12C384614BE8848967BD Authority key identifier: D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/8pXCuBWrEvdy2wZTlEp32tqPYW8.roa Signing time: Thu 01 Jan 2026 14:18:11 +0000 ROA not before: Thu 01 Jan 2026 14:18:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60781 IP address blocks: 46.17.14.0/23 maxlen: 23 2a02:2870:8000::/33 maxlen: 33 2a02:2871::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:5b:15:2a:ea:12:c3:84:61:4b:e8:84:89:67:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4afe3f0c9e555e52d3505d6163278df3da18cee Validity Not Before: Jan 1 14:18:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f295c2b815ab12f772db0653944a77dada8f616f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fd:f0:a6:b9:97:57:07:e0:24:6e:f0:1b:38: 2e:61:0c:3f:b0:42:f1:7e:e8:ae:7a:e1:f7:05:a6: 83:28:57:7b:a2:48:6b:09:b7:97:60:dc:57:04:8a: e3:d2:5d:b6:4f:82:cf:ee:14:69:9c:18:97:0b:e2: e0:36:c7:1b:40:5b:ff:c9:80:af:c3:35:32:7d:c3: 37:89:c1:2b:f6:b6:6f:88:53:69:a0:9c:f7:54:13: 8e:35:4e:67:06:a5:73:31:3e:0b:c0:34:9f:08:7e: ee:8a:9a:26:4a:f8:55:54:ec:14:85:1f:f4:15:16: 87:03:ab:19:75:96:ec:94:29:ab:70:3e:41:ea:d1: 4e:23:1f:fa:d1:39:f3:0d:62:0d:c0:fb:64:d1:85: d8:59:4f:57:88:11:99:16:c5:68:de:8b:d2:5a:bc: 1c:b4:1c:85:93:d4:7a:68:b6:0a:e0:e6:03:73:5e: 16:2a:57:09:da:8a:e1:52:42:c2:1f:1e:9c:83:d6: f8:88:82:e7:19:27:e1:b7:12:92:3c:48:61:b9:50: 5e:46:6a:03:6c:45:62:c5:b8:25:f7:47:f2:25:66: 67:52:73:33:53:72:ce:cd:04:87:77:ee:0b:23:f4: 18:4c:bc:db:68:4e:ef:ce:69:13:75:58:61:e8:40: bd:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:95:C2:B8:15:AB:12:F7:72:DB:06:53:94:4A:77:DA:DA:8F:61:6F X509v3 Authority Key Identifier: keyid:D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/8pXCuBWrEvdy2wZTlEp32tqPYW8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.17.14.0/23 IPv6: 2a02:2870:8000::-2a02:2871:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 3f:3d:e2:c1:a6:20:9c:57:53:61:30:92:ef:08:46:06:6e:19: e4:99:e3:6a:39:57:72:70:1e:49:fd:53:d3:b7:4e:e3:c2:ca: 09:c9:47:9f:00:2e:e0:bc:06:dc:23:a8:16:17:4e:b3:93:d8: 4a:f5:dc:5a:35:f7:7f:e5:84:af:37:86:5f:3f:16:e3:75:d1: ac:b8:59:db:a7:0b:82:60:00:0b:84:8f:07:cb:4a:cf:e2:06: c0:63:9f:98:49:a2:e5:50:fb:b3:ee:72:a0:53:3d:14:bf:a8: b4:c8:47:6f:6d:3a:b0:4a:5f:7d:2b:51:9d:4a:4d:f0:ea:00: c9:f0:a1:71:69:22:ac:9e:dd:33:e4:4b:7f:6d:8f:3d:86:ee: d8:bf:3f:de:1a:f0:b3:f5:37:eb:eb:69:0d:60:ff:79:40:65: ea:61:bb:24:08:44:3c:b4:30:60:b0:c5:0b:23:d5:b6:c3:d4: d0:76:51:29:56:ac:ee:97:95:fb:53:ea:18:3a:ba:64:c3:df: c7:c2:6a:26:ec:74:4d:36:4d:1f:aa:d2:d3:f0:a2:68:04:45: 0e:e0:a2:9a:32:e1:37:bd:35:7c:b3:85:ad:ce:c6:5d:91:46: 28:37:4d:21:1f:e5:98:ac:54:47:74:9e:3e:5b:5e:99:2f:ee: 4e:b3:6c:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZt57FsVKuoSw4RhS+iEiWe9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0YWZlM2YwYzllNTU1ZTUyZDM1MDVkNjE2MzI3OGRmM2Rh MThjZWUwHhcNMjYwMTAxMTQxODExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMjk1YzJiODE1YWIxMmY3NzJkYjA2NTM5NDRhNzdkYWRhOGY2MTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxf3wprmXVwfgJG7wGzguYQw/sELx fuiueuH3BaaDKFd7okhrCbeXYNxXBIrj0l22T4LP7hRpnBiXC+LgNscbQFv/yYCv wzUyfcM3icEr9rZviFNpoJz3VBOONU5nBqVzMT4LwDSfCH7uipomSvhVVOwUhR/0 FRaHA6sZdZbslCmrcD5B6tFOIx/60TnzDWINwPtk0YXYWU9XiBGZFsVo3ovSWrwc tByFk9R6aLYK4OYDc14WKlcJ2orhUkLCHx6cg9b4iILnGSfhtxKSPEhhuVBeRmoD bEVixbgl90fyJWZnUnMzU3LOzQSHd+4LI/QYTLzbaE7vzmkTdVhh6EC9hwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKVwrgVqxL3ctsGU5RKd9raj2FvMB8GA1UdIwQY MBaAFNSv4/DJ5VXlLTUF1hYyeN89oYzuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUtfajhNbmxWZVV0TlFYV0ZqSjQzejJoak80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xYzY3ZWYtZTgzZC00NDI3LTg2NGIt YzU5ODI1YmJjYjMyLzEvOHBYQ3VCV3JFdmR5MndaVGxFcDMydHFQWVc4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8xYzY3ZWYtZTgzZC00NDI3LTg2NGItYzU5ODI1YmJjYjMy LzEvMUtfajhNbmxWZVV0TlFYV0ZqSjQzejJoak80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAMBAIAATAGAwQBLhEOMBcE AgACMBEwDwMGByoCKHCAAwUBKgIocDANBgkqhkiG9w0BAQsFAAOCAQEAPz3iwaYg nFdTYTCS7whGBm4Z5JnjajlXcnAeSf1T07dO48LKCclHnwAu4LwG3COoFhdOs5PY SvXcWjX3f+WErzeGXz8W43XRrLhZ26cLgmAAC4SPB8tKz+IGwGOfmEmi5VD7s+5y oFM9FL+otMhHb206sEpffStRnUpN8OoAyfChcWkirJ7dM+RLf22PPYbu2L8/3hrw s/U36+tpDWD/eUBl6mG7JAhEPLQwYLDFCyPVtsPU0HZRKVas7peV+1PqGDq6ZMPf x8JqJux0TTZNH6rS0/CiaARFDuCimjLhN701fLOFrc7GXZFGKDdNIR/lmKxUR3Se PltemS/uTrNsEQ== -----END CERTIFICATE-----Generated at Mon Jan 19 16:51:42 2026 by rpki-client