This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/1Jxi3AriRg31UMXbMH3OPiY-5HA.roa File: 1Jxi3AriRg31UMXbMH3OPiY-5HA.roa (raw, json) Hash identifier: 3Mxy5Zs+xxbHjoz6LYDQ1mtzuO64bgmhPoqFp9H+W6U= Subject key identifier: D4:9C:62:DC:0A:E2:46:0D:F5:50:C5:DB:30:7D:CE:3E:26:3E:E4:70 Certificate issuer: /CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e Certificate serial: 019B7FF1B276FC1930009C5C4AE55230EA4C Authority key identifier: 0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/1Jxi3AriRg31UMXbMH3OPiY-5HA.roa Signing time: Fri 02 Jan 2026 18:21:44 +0000 ROA not before: Fri 02 Jan 2026 18:21:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208043 IP address blocks: 46.236.110.0/24 maxlen: 24 80.244.64.0/24 maxlen: 24 83.209.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 03:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:b2:76:fc:19:30:00:9c:5c:4a:e5:52:30:ea:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e Validity Not Before: Jan 2 18:21:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d49c62dc0ae2460df550c5db307dce3e263ee470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:80:51:0f:0c:4e:fe:45:6c:3a:d8:0d:9e:a9: eb:3c:bb:2d:6e:88:71:52:70:10:90:5b:d4:77:5d: da:7e:dd:ba:64:37:bb:0d:26:b4:c0:c6:64:c2:6c: f6:91:dc:77:94:c9:46:4b:42:bb:64:bd:c4:a2:44: c0:e1:f1:98:67:0d:e8:ca:85:b4:6d:c8:bd:e2:44: 5b:77:bd:d7:6a:fb:b4:7a:e8:e1:4f:96:03:67:01: 98:22:4d:a1:dc:e2:9e:38:46:7a:e5:58:81:b2:44: ef:b4:05:fd:59:74:1a:b3:db:ec:61:bc:73:dc:90: f7:07:12:35:f1:39:05:68:60:d7:01:79:76:40:26: 08:ee:47:65:70:15:f3:e8:9d:4e:df:bb:4b:dc:ac: fd:ea:41:c3:7e:cd:54:b3:f1:bd:0b:e6:fe:a4:cf: 56:6d:96:83:3d:5d:5b:c4:c8:5d:58:a1:e1:b6:f3: e3:ba:94:59:bd:18:f6:7f:39:64:16:ae:7f:94:24: a0:91:e9:12:2b:4f:dc:2c:ac:11:73:62:66:65:08: f6:42:98:e9:ca:ab:65:2b:28:6c:81:9d:4e:c9:85: ab:2a:46:a3:26:0a:92:17:68:ca:93:87:c7:eb:26: 5c:c0:0f:2b:7d:80:70:6f:01:d8:71:a0:b7:a7:69: 4c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:9C:62:DC:0A:E2:46:0D:F5:50:C5:DB:30:7D:CE:3E:26:3E:E4:70 X509v3 Authority Key Identifier: keyid:0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/1Jxi3AriRg31UMXbMH3OPiY-5HA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.236.110.0/24 80.244.64.0/24 83.209.153.0/24 Signature Algorithm: sha256WithRSAEncryption 21:30:59:4e:11:7b:ec:65:6b:83:5b:fb:a9:81:bc:8b:72:6c: f2:68:40:be:7c:23:77:54:00:3d:13:a3:53:b6:02:4a:9a:98: 1e:36:89:28:7e:09:2a:fd:b2:c3:a8:cb:9e:89:d5:fb:39:16: 84:0a:ba:fd:0a:4f:33:9e:23:bf:a1:68:ec:c0:f5:01:f9:dd: 87:91:95:0d:f0:ad:6c:1c:d1:34:1e:38:dc:c6:58:ad:e8:71: 20:a8:66:5e:97:c2:49:60:4c:34:61:28:31:b9:6b:29:44:80: 17:41:91:f5:9b:23:74:1b:29:d6:4e:16:02:ea:ed:99:c0:70: 27:35:27:19:4d:49:38:9f:b0:12:97:78:78:a2:9c:8f:51:f2: 56:d6:4e:e4:13:10:99:0e:b1:30:4d:93:8b:ae:1d:1d:a4:96: a7:c7:e4:0b:b5:ff:33:3d:52:ef:a4:49:18:d5:38:de:0c:27: 38:05:07:39:b7:d9:59:5b:6b:bc:fa:a8:b6:42:00:86:90:e6: 33:90:46:26:51:89:bb:33:a0:2d:62:42:2e:de:d6:d5:90:4b: 7a:b4:9b:73:51:5f:5a:fd:42:76:d9:4b:10:4e:bd:00:d3:70: fa:f6:df:f0:92:e2:bd:54:ed:e8:cf:c7:8d:76:32:7b:9f:0f: 41:e5:c9:ee -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt/8bJ2/BkwAJxcSuVSMOpMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTEzMDhlYWQ2YWRiMWQwODVlN2U1OTEwYTBjYjJkZTU2 YWEzMmUwHhcNMjYwMTAyMTgyMTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNDljNjJkYzBhZTI0NjBkZjU1MGM1ZGIzMDdkY2UzZTI2M2VlNDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoBRDwxO/kVsOtgNnqnrPLstbohx UnAQkFvUd13aft26ZDe7DSa0wMZkwmz2kdx3lMlGS0K7ZL3EokTA4fGYZw3oyoW0 bci94kRbd73Xavu0eujhT5YDZwGYIk2h3OKeOEZ65ViBskTvtAX9WXQas9vsYbxz 3JD3BxI18TkFaGDXAXl2QCYI7kdlcBXz6J1O37tL3Kz96kHDfs1Us/G9C+b+pM9W bZaDPV1bxMhdWKHhtvPjupRZvRj2fzlkFq5/lCSgkekSK0/cLKwRc2JmZQj2Qpjp yqtlKyhsgZ1OyYWrKkajJgqSF2jKk4fH6yZcwA8rfYBwbwHYcaC3p2lMXwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFNScYtwK4kYN9VDF2zB9zj4mPuRwMB8GA1UdIwQY MBaAFAzhMI6tatsdCF5+WRCgyy3laqMuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9Fd2pxMXEyeDBJWG41WkVLRExMZVZxb3k0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84OTkzODAtYWQyNy00NGViLThjMmUt YjBiYWQxOGYwMmQwLzEvMUp4aTNBcmlSZzMxVU1YYk1IM09QaVktNUhBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS84OTkzODAtYWQyNy00NGViLThjMmUtYjBiYWQxOGYwMmQw LzEvRE9Fd2pxMXEyeDBJWG41WkVLRExMZVZxb3k0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALuxuAwQA UPRAAwQAU9GZMA0GCSqGSIb3DQEBCwUAA4IBAQAhMFlOEXvsZWuDW/upgbyLcmzy aEC+fCN3VAA9E6NTtgJKmpgeNokofgkq/bLDqMueidX7ORaECrr9Ck8zniO/oWjs wPUB+d2HkZUN8K1sHNE0Hjjcxlit6HEgqGZel8JJYEw0YSgxuWspRIAXQZH1myN0 GynWThYC6u2ZwHAnNScZTUk4n7ASl3h4opyPUfJW1k7kExCZDrEwTZOLrh0dpJan x+QLtf8zPVLvpEkY1TjeDCc4BQc5t9lZW2u8+qi2QgCGkOYzkEYmUYm7M6AtYkIu 3tbVkEt6tJtzUV9a/UJ22UsQTr0A03D69t/wkuK9VO3oz8eNdjJ7nw9B5cnu -----END CERTIFICATE-----Generated at Sun Jan 18 13:13:35 2026 by rpki-client