This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/VgTdPEFDb-lQDwyfoo5k3JlfuBc.roa File: VgTdPEFDb-lQDwyfoo5k3JlfuBc.roa (raw, json) Hash identifier: q+HQWZKgY+9cCSJp/u5Q5iKVv6uw6cf08hoEK4xzuX0= Subject key identifier: 56:04:DD:3C:41:43:6F:E9:50:0F:0C:9F:A2:8E:64:DC:99:5F:B8:17 Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d Certificate serial: 019BC78AC9E1AEF82BB649463BAFC80F5C13 Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/VgTdPEFDb-lQDwyfoo5k3JlfuBc.roa Signing time: Fri 16 Jan 2026 16:02:00 +0000 ROA not before: Fri 16 Jan 2026 16:02:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 206119 IP address blocks: 46.29.26.0/24 maxlen: 24 46.29.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c7:8a:c9:e1:ae:f8:2b:b6:49:46:3b:af:c8:0f:5c:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d Validity Not Before: Jan 16 16:02:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5604dd3c41436fe9500f0c9fa28e64dc995fb817 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f7:ce:28:17:8c:27:66:f0:45:c8:e2:59:a9: 72:02:11:86:65:2c:3e:1e:16:8b:3b:87:f0:4b:84: af:67:dc:bf:4e:bb:12:c0:cb:72:d3:52:ee:76:09: 5a:57:3e:64:4a:0a:af:5a:1f:73:39:39:d8:72:83: 44:94:98:ad:32:63:a1:5f:c2:0e:19:a0:94:73:09: 5e:d2:4f:65:b3:2c:55:fa:18:0e:08:ca:be:33:54: fe:93:8b:60:75:c1:47:dc:2f:01:55:19:db:26:05: ed:14:13:99:8b:fe:7e:7d:2f:e2:5b:bf:07:6d:45: 88:f3:ec:5e:9c:83:1f:b4:f0:64:e4:f9:01:d9:57: 09:69:c4:c8:ce:77:ab:19:24:66:3a:6c:f5:15:36: b2:55:1a:f1:72:aa:24:23:84:35:12:a9:a9:b3:a0: 27:13:11:e0:e5:7e:53:aa:0c:c9:a7:81:79:d1:2e: 87:df:0f:f5:81:0f:b1:c3:dc:bb:df:59:ff:c8:91: 65:78:5c:f8:62:9c:16:b0:d1:76:f4:d6:5e:b4:0f: 78:6d:0b:90:fb:50:9f:27:d3:b0:79:8d:0c:16:9c: 00:a1:5e:e8:46:c3:3d:cb:2a:32:d1:65:90:cc:13: 01:94:f7:ad:aa:9d:5f:49:e3:5b:99:b3:5c:26:f2: fc:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:04:DD:3C:41:43:6F:E9:50:0F:0C:9F:A2:8E:64:DC:99:5F:B8:17 X509v3 Authority Key Identifier: keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/VgTdPEFDb-lQDwyfoo5k3JlfuBc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.29.26.0/23 Signature Algorithm: sha256WithRSAEncryption 42:73:d8:28:7c:cd:f8:06:f3:08:b7:19:a9:e6:3a:6f:6b:44: ca:21:d3:e4:1f:d9:cc:6f:a1:23:dc:8e:15:01:e0:0a:55:0e: 5c:ef:76:27:ba:26:89:5b:93:c4:d8:87:63:68:ab:fb:b3:8c: 2e:9b:6e:59:c6:77:a8:f8:5c:f3:64:0f:a4:36:b3:46:75:10: 8a:fd:2b:5a:4a:e7:75:25:b4:15:26:fe:0e:b0:08:50:43:58: 25:b1:54:ee:29:72:73:a1:a0:ae:86:a1:26:39:67:2a:16:ac: cd:e5:8d:10:f2:ca:fe:97:06:a2:da:55:f2:3d:69:77:af:24: f7:b5:05:1c:b6:42:9a:e9:80:f6:80:8b:e6:3b:ac:7d:bf:f8: 18:6f:3f:31:74:c4:51:1e:e9:ae:4e:c5:29:71:f0:7a:7a:d5: 12:18:22:4a:52:ef:20:02:8a:cd:b0:75:02:b7:54:b5:d9:88: 76:eb:16:b8:77:d2:5b:67:f5:e8:60:70:56:08:1a:cd:a0:54: 32:fb:cf:85:2e:9e:f3:7a:ab:6a:2d:77:fe:b9:03:67:e5:20: cb:f9:23:3d:c3:5f:72:c2:cc:bb:8f:f1:7f:25:b8:75:dc:b5: fd:73:85:e0:45:94:76:0e:76:da:da:18:63:4e:a2:e0:ac:31: 53:c4:0b:ff -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvHisnhrvgrtklGO6/ID1wTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw OTBlNGQwHhcNMjYwMTE2MTYwMjAwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1NjA0ZGQzYzQxNDM2ZmU5NTAwZjBjOWZhMjhlNjRkYzk5NWZiODE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlffOKBeMJ2bwRcjiWalyAhGGZSw+ HhaLO4fwS4SvZ9y/TrsSwMty01LudglaVz5kSgqvWh9zOTnYcoNElJitMmOhX8IO GaCUcwle0k9lsyxV+hgOCMq+M1T+k4tgdcFH3C8BVRnbJgXtFBOZi/5+fS/iW78H bUWI8+xenIMftPBk5PkB2VcJacTIznerGSRmOmz1FTayVRrxcqokI4Q1Eqmps6An ExHg5X5TqgzJp4F50S6H3w/1gQ+xw9y731n/yJFleFz4YpwWsNF29NZetA94bQuQ +1CfJ9OweY0MFpwAoV7oRsM9yyoy0WWQzBMBlPetqp1fSeNbmbNcJvL82wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFYE3TxBQ2/pUA8Mn6KOZNyZX7gXMB8GA1UdIwQY MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt MzlmZGI5ODZmMDU5LzEvVmdUZFBFRkRiLWxRRHd5Zm9vNWszSmxmdUJjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5 LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLh0aMA0G CSqGSIb3DQEBCwUAA4IBAQBCc9gofM34BvMItxmp5jpva0TKIdPkH9nMb6Ej3I4V AeAKVQ5c73YnuiaJW5PE2IdjaKv7s4wum25Zxneo+FzzZA+kNrNGdRCK/StaSud1 JbQVJv4OsAhQQ1glsVTuKXJzoaCuhqEmOWcqFqzN5Y0Q8sr+lwai2lXyPWl3ryT3 tQUctkKa6YD2gIvmO6x9v/gYbz8xdMRRHumuTsUpcfB6etUSGCJKUu8gAorNsHUC t1S12Yh26xa4d9JbZ/XoYHBWCBrNoFQy+8+FLp7zeqtqLXf+uQNn5SDL+SM9w19y wsy7j/F/Jbh13LX9c4XgRZR2Dnba2hhjTqLgrDFTxAv/ -----END CERTIFICATE-----Generated at Wed Jan 21 14:10:56 2026 by rpki-client