This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/46_JUF6I8LuWWlQVDZjveS1MG70.roa File: 46_JUF6I8LuWWlQVDZjveS1MG70.roa (raw, json) Hash identifier: zmjRqOgv+LmnwMA28qTsq4IhP5jc4gEGlF98MXJ035k= Subject key identifier: E3:AF:C9:50:5E:88:F0:BB:96:5A:54:15:0D:98:EF:79:2D:4C:1B:BD Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B791059BBDB52D519628F58273CA3D37F Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/46_JUF6I8LuWWlQVDZjveS1MG70.roa Signing time: Thu 01 Jan 2026 10:17:53 +0000 ROA not before: Thu 01 Jan 2026 10:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201178 IP address blocks: 188.132.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:59:bb:db:52:d5:19:62:8f:58:27:3c:a3:d3:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3afc9505e88f0bb965a54150d98ef792d4c1bbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ad:2f:8f:af:fb:2e:f6:92:44:81:28:8c:22: 09:c1:74:9c:96:cd:69:29:bc:54:43:14:47:53:47: 61:11:43:07:aa:d1:25:c4:8c:1f:85:b0:27:f7:78: 46:fd:7d:d7:3d:f5:dd:7d:74:bb:61:06:76:a9:5f: 1e:02:50:50:6b:45:08:74:be:95:cd:08:a5:8d:57: 07:dc:28:d1:67:39:a9:03:57:93:d8:d9:9a:ed:16: 09:eb:f4:eb:16:2c:b3:9f:69:a0:a2:c2:ce:3e:5a: 1e:ae:2e:fc:be:44:54:c5:cd:0a:c3:1b:dd:05:36: 14:23:78:20:48:28:e3:01:f5:6c:1f:c2:34:d2:41: 41:c1:92:bf:fc:70:ee:dc:9f:c0:b2:c0:55:9c:ed: ca:a0:9f:6a:e6:6b:b7:86:86:f0:2b:ae:c7:6c:80: aa:6e:1d:46:0f:5e:ba:fc:77:0e:30:d6:a2:33:1c: 64:22:a7:94:af:eb:83:84:d4:1b:da:c7:c8:07:0e: a8:c5:17:c9:af:40:75:c6:6f:94:ff:cc:c4:0b:ad: c1:12:d0:56:8a:ac:ad:36:8d:c6:7d:f1:b3:bc:dd: 60:94:77:f7:59:46:ae:16:f8:ec:b4:ad:11:ae:ff: b4:6a:9c:d9:c1:d4:0b:ba:ae:57:e5:0e:e7:05:c4: e1:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:AF:C9:50:5E:88:F0:BB:96:5A:54:15:0D:98:EF:79:2D:4C:1B:BD X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/46_JUF6I8LuWWlQVDZjveS1MG70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 188.132.210.0/24 Signature Algorithm: sha256WithRSAEncryption 58:41:d5:96:76:3f:41:98:15:dc:d0:49:92:35:ca:fd:51:88: 5d:91:27:63:ab:1c:16:7c:5c:ea:03:26:cd:5f:ee:3e:bb:a5: c2:0d:29:30:8e:06:43:79:fd:da:dc:e1:11:eb:4a:09:d5:9c: 58:2f:a0:80:c5:74:2d:b8:b7:92:7c:36:e8:e6:2c:c2:6e:cb: 63:05:c6:19:7d:86:76:84:be:68:3d:34:37:26:c8:b5:b7:6f: 9f:24:2b:73:96:a7:d7:17:9f:b9:1c:3a:4f:9c:e2:b4:73:c7: 81:b1:2c:1a:4c:83:dc:fa:51:85:57:84:b8:0e:5f:4e:01:3c: 1d:aa:b2:51:4a:0c:6e:4e:f0:70:fa:a2:18:29:32:e6:47:ed: 78:6d:90:52:a6:61:8d:88:03:c8:07:77:ae:24:36:93:50:51: 70:ce:9e:ec:e2:0e:2f:0e:42:0e:e5:69:f1:9d:99:b7:1c:3d: 4d:1c:d9:98:5b:02:dc:4d:06:e1:bd:27:73:6a:0f:97:cc:ec: a1:8f:6b:4e:fe:09:4f:89:96:21:04:03:68:17:6a:62:e8:cd: 00:64:a2:4e:c2:95:46:06:13:57:5e:14:4b:5a:13:c7:08:2c: f9:74:f8:cd:0f:3b:85:22:ff:f6:18:53:4a:69:dc:aa:b1:43: fd:5e:03:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EFm721LVGWKPWCc8o9N/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2FmYzk1MDVlODhmMGJiOTY1YTU0MTUwZDk4ZWY3OTJkNGMxYmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4K0vj6/7LvaSRIEojCIJwXScls1p KbxUQxRHU0dhEUMHqtElxIwfhbAn93hG/X3XPfXdfXS7YQZ2qV8eAlBQa0UIdL6V zQiljVcH3CjRZzmpA1eT2Nma7RYJ6/TrFiyzn2mgosLOPloeri78vkRUxc0Kwxvd BTYUI3ggSCjjAfVsH8I00kFBwZK//HDu3J/AssBVnO3KoJ9q5mu3hobwK67HbICq bh1GD166/HcOMNaiMxxkIqeUr+uDhNQb2sfIBw6oxRfJr0B1xm+U/8zEC63BEtBW iqytNo3GffGzvN1glHf3WUauFvjstK0Rrv+0apzZwdQLuq5X5Q7nBcThhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOOvyVBeiPC7llpUFQ2Y73ktTBu9MB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvNDZfSlVGNkk4THVXV2xRVkRaanZlUzFNRzcwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvITSMA0G CSqGSIb3DQEBCwUAA4IBAQBYQdWWdj9BmBXc0EmSNcr9UYhdkSdjqxwWfFzqAybN X+4+u6XCDSkwjgZDef3a3OER60oJ1ZxYL6CAxXQtuLeSfDbo5izCbstjBcYZfYZ2 hL5oPTQ3Jsi1t2+fJCtzlqfXF5+5HDpPnOK0c8eBsSwaTIPc+lGFV4S4Dl9OATwd qrJRSgxuTvBw+qIYKTLmR+14bZBSpmGNiAPIB3euJDaTUFFwzp7s4g4vDkIO5Wnx nZm3HD1NHNmYWwLcTQbhvSdzag+XzOyhj2tO/glPiZYhBANoF2pi6M0AZKJOwpVG BhNXXhRLWhPHCCz5dPjNDzuFIv/2GFNKadyqsUP9XgMc -----END CERTIFICATE-----Generated at Wed Jan 21 13:34:19 2026 by rpki-client