This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/CB7H3J350jvkZWJ-BDbnwxxYoc4.roa File: CB7H3J350jvkZWJ-BDbnwxxYoc4.roa (raw, json) Hash identifier: F9928b30Q4x7IFvCKPMF5WNU+doZLy+Bmr5oTjG0NLg= Subject key identifier: 08:1E:C7:DC:9D:F9:D2:3B:E4:65:62:7E:04:36:E7:C3:1C:58:A1:CE Certificate issuer: /CN=48f47a31172fb549c696132880c6824fb0777b55 Certificate serial: 019B78356000A3F1555FD9C62C783D5D5EBE Authority key identifier: 48:F4:7A:31:17:2F:B5:49:C6:96:13:28:80:C6:82:4F:B0:77:7B:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SPR6MRcvtUnGlhMogMaCT7B3e1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/CB7H3J350jvkZWJ-BDbnwxxYoc4.roa Signing time: Thu 01 Jan 2026 06:18:42 +0000 ROA not before: Thu 01 Jan 2026 06:18:42 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209983 IP address blocks: 46.31.48.0/21 maxlen: 24 2a02:23ea::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/SPR6MRcvtUnGlhMogMaCT7B3e1U.crl rsync://rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/SPR6MRcvtUnGlhMogMaCT7B3e1U.mft rsync://rpki.ripe.net/repository/DEFAULT/SPR6MRcvtUnGlhMogMaCT7B3e1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:35:60:00:a3:f1:55:5f:d9:c6:2c:78:3d:5d:5e:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48f47a31172fb549c696132880c6824fb0777b55 Validity Not Before: Jan 1 06:18:42 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=081ec7dc9df9d23be465627e0436e7c31c58a1ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:51:11:90:30:a4:60:a3:00:93:fd:47:dd:df: ac:70:de:56:1d:47:f9:e4:3e:d6:2e:5e:2b:ab:70: d0:f5:4a:ff:f3:d0:6d:2e:58:41:4b:c2:43:16:63: 28:d4:53:b6:d4:76:24:c0:3e:e6:11:6e:e0:dc:9a: 3a:12:76:39:20:bc:86:92:7f:cd:ec:22:1b:8a:08: ea:61:63:38:f1:34:5e:f0:6f:5a:54:70:e2:72:49: f5:29:00:6d:c1:b9:1e:18:ad:f7:17:35:fb:e6:64: 4e:d5:8e:69:96:61:e0:0e:4a:13:6c:d1:6a:56:0c: 2e:18:45:46:bf:73:0d:47:3d:ce:74:f7:1b:b1:35: 3c:c1:81:8f:c6:51:05:09:c5:b5:3f:f6:ee:05:88: 6c:fa:55:0c:5f:db:f8:a1:34:45:92:40:17:70:27: 55:56:59:55:92:e1:7f:14:34:4b:a5:6d:9f:0b:b2: 74:8b:2d:52:26:86:0a:a3:e5:e2:e4:f3:59:40:c5: d0:06:ca:20:bb:ec:3e:b1:fe:dd:64:77:7e:73:45: c1:95:02:e6:8a:fb:4c:06:4f:86:0c:e6:ee:08:56: 6b:5a:ec:b7:79:32:8e:19:8f:43:6e:65:3b:02:df: b1:a0:e2:f4:be:79:df:7d:83:cb:d6:e0:f6:cc:92: 43:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:1E:C7:DC:9D:F9:D2:3B:E4:65:62:7E:04:36:E7:C3:1C:58:A1:CE X509v3 Authority Key Identifier: keyid:48:F4:7A:31:17:2F:B5:49:C6:96:13:28:80:C6:82:4F:B0:77:7B:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SPR6MRcvtUnGlhMogMaCT7B3e1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/CB7H3J350jvkZWJ-BDbnwxxYoc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/090638-8a99-4063-93a0-6e9938972708/1/SPR6MRcvtUnGlhMogMaCT7B3e1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.31.48.0/21 IPv6: 2a02:23ea::/32 Signature Algorithm: sha256WithRSAEncryption 3c:77:ba:b8:48:9e:7f:7d:b9:b0:8b:26:aa:89:76:07:9a:ad: 2a:07:5f:9a:0f:1d:57:db:81:eb:91:6c:2f:5e:dd:b1:ec:51: 61:b7:45:44:61:bf:43:4c:ee:98:61:1e:37:ea:a2:f6:02:70: 9b:95:56:21:ae:bb:09:6b:db:66:7d:43:d7:45:c6:21:7f:79: 40:06:d4:c8:39:a0:ef:5f:2e:c3:89:8c:e0:8c:0b:51:6c:ea: df:37:55:dd:b7:aa:6c:24:28:a6:44:79:26:8f:6e:66:07:b7: cb:a6:3f:b1:60:9a:24:6b:d4:9a:5e:d7:a8:4d:1e:61:b3:06: eb:11:f5:f6:17:2d:6b:a0:df:a6:c2:25:93:59:c6:9b:cb:7f: 28:b7:e1:f0:03:74:46:62:a8:c9:be:a0:45:23:9c:9a:82:c4: 35:1f:61:02:3e:aa:7c:14:37:6a:36:8a:95:a8:95:83:f1:29: ca:70:d8:ae:85:24:bd:20:eb:e0:f0:c4:ea:02:1e:12:75:c2: e7:38:a6:91:00:26:a3:52:aa:6b:57:b0:25:eb:1b:9a:e0:d3: 92:8b:6c:80:5f:3f:c3:2e:ff:80:87:57:e8:99:9c:b7:97:6c: d6:3b:59:b0:85:04:59:be:e7:3b:57:70:b0:fe:d1:6c:c9:69: 8c:30:54:f5 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt4NWAAo/FVX9nGLHg9XV6+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4ZjQ3YTMxMTcyZmI1NDljNjk2MTMyODgwYzY4MjRmYjA3 NzdiNTUwHhcNMjYwMTAxMDYxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwODFlYzdkYzlkZjlkMjNiZTQ2NTYyN2UwNDM2ZTdjMzFjNThhMWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFERkDCkYKMAk/1H3d+scN5WHUf5 5D7WLl4rq3DQ9Ur/89BtLlhBS8JDFmMo1FO21HYkwD7mEW7g3Jo6EnY5ILyGkn/N 7CIbigjqYWM48TRe8G9aVHDickn1KQBtwbkeGK33FzX75mRO1Y5plmHgDkoTbNFq VgwuGEVGv3MNRz3OdPcbsTU8wYGPxlEFCcW1P/buBYhs+lUMX9v4oTRFkkAXcCdV VllVkuF/FDRLpW2fC7J0iy1SJoYKo+Xi5PNZQMXQBsogu+w+sf7dZHd+c0XBlQLm ivtMBk+GDObuCFZrWuy3eTKOGY9DbmU7At+xoOL0vnnffYPL1uD2zJJDjwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAgex9yd+dI75GVifgQ258McWKHOMB8GA1UdIwQY MBaAFEj0ejEXL7VJxpYTKIDGgk+wd3tVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1BSNk1SY3Z0VW5HbGhNb2dNYUNUN0IzZTFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8wOTA2MzgtOGE5OS00MDYzLTkzYTAt NmU5OTM4OTcyNzA4LzEvQ0I3SDNKMzUwanZrWldKLUJEYm53eHhZb2M0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS8wOTA2MzgtOGE5OS00MDYzLTkzYTAtNmU5OTM4OTcyNzA4 LzEvU1BSNk1SY3Z0VW5HbGhNb2dNYUNUN0IzZTFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDLh8wMA0E AgACMAcDBQAqAiPqMA0GCSqGSIb3DQEBCwUAA4IBAQA8d7q4SJ5/fbmwiyaqiXYH mq0qB1+aDx1X24HrkWwvXt2x7FFht0VEYb9DTO6YYR436qL2AnCblVYhrrsJa9tm fUPXRcYhf3lABtTIOaDvXy7DiYzgjAtRbOrfN1Xdt6psJCimRHkmj25mB7fLpj+x YJoka9SaXteoTR5hswbrEfX2Fy1roN+mwiWTWcaby38ot+HwA3RGYqjJvqBFI5ya gsQ1H2ECPqp8FDdqNoqVqJWD8SnKcNiuhSS9IOvg8MTqAh4SdcLnOKaRACajUqpr V7Al6xua4NOSi2yAXz/DLv+Ah1fomZy3l2zWO1mwhQRZvuc7V3Cw/tFsyWmMMFT1 -----END CERTIFICATE-----Generated at Mon Feb 9 19:55:27 2026 by rpki-client