This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/nQE3bGEbjM6OpBVVSm2YC_6oWgI.roa File: nQE3bGEbjM6OpBVVSm2YC_6oWgI.roa (raw, json) Hash identifier: Ho+aVhsVcSM72ZGhR58VKNtxF0cVDscps+IEINsdQjg= Subject key identifier: 9D:01:37:6C:61:1B:8C:CE:8E:A4:15:55:4A:6D:98:0B:FE:A8:5A:02 Certificate issuer: /CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b Certificate serial: 019B79EC8CAFC878BFA4C15CA9CB2C128A7E Authority key identifier: 53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/nQE3bGEbjM6OpBVVSm2YC_6oWgI.roa Signing time: Thu 01 Jan 2026 14:18:24 +0000 ROA not before: Thu 01 Jan 2026 14:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202864 IP address blocks: 46.16.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 02:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:8c:af:c8:78:bf:a4:c1:5c:a9:cb:2c:12:8a:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b Validity Not Before: Jan 1 14:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9d01376c611b8cce8ea415554a6d980bfea85a02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:3b:72:dc:ea:4d:db:bf:96:40:23:7e:3c:a5: 62:e4:f2:9d:8a:74:b4:58:25:49:ff:d1:20:77:b0: 15:ac:06:fe:bf:b5:dd:0f:1b:49:05:e7:28:b4:a1: 56:c5:1d:bf:9c:e1:02:85:30:cc:55:56:a4:dd:9c: d7:10:45:db:ac:d6:c9:c3:78:55:9d:55:82:da:aa: 27:73:30:f9:f1:bd:7a:ab:8f:70:2d:f7:50:f8:4b: 55:aa:47:04:b2:26:52:c9:14:7c:b7:a7:26:f3:e5: 03:c0:af:9a:48:14:4c:f6:c1:08:0c:38:7e:f5:c9: 4e:b4:d3:50:19:34:bd:02:9f:dd:a1:c7:73:b3:56: 22:5b:d4:58:94:1d:c8:af:0c:cd:dd:87:ec:96:35: ef:5f:09:ba:a6:ef:8d:d1:20:b0:61:ab:35:bb:0a: 3a:71:c3:b6:47:90:4f:04:4a:99:b2:16:88:8a:eb: f5:c6:17:67:1f:9e:a4:20:96:8e:52:b1:71:05:d2: 40:68:7f:16:b0:d7:a9:89:08:69:01:8f:a2:67:15: ae:d4:16:4d:98:4d:35:b6:cb:13:a8:c4:71:5b:8e: f8:6c:27:60:22:aa:bd:29:d6:82:74:55:05:8d:a7: af:d9:0e:d6:b8:4b:df:96:4a:db:e6:98:30:38:2a: 7c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:01:37:6C:61:1B:8C:CE:8E:A4:15:55:4A:6D:98:0B:FE:A8:5A:02 X509v3 Authority Key Identifier: keyid:53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/nQE3bGEbjM6OpBVVSm2YC_6oWgI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.16.197.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:36:37:86:9f:47:f0:8a:3b:38:74:9a:16:87:4e:cf:f8:a2: f4:c5:65:63:c4:7f:a1:f6:3d:4a:76:63:86:44:fb:cd:c3:b2: 7e:91:12:09:cb:67:a5:d3:28:4f:80:7a:08:e0:9f:bf:61:ed: 56:e5:5d:4c:09:d2:2d:bc:eb:09:c0:53:04:3c:fc:5e:a3:d7: 66:81:e3:3e:57:2a:c6:7e:8e:92:70:c3:a4:90:93:f3:ba:a5: 0c:44:df:ac:d8:63:71:ed:30:f2:cf:5b:b1:4a:fb:5a:04:d1: 0f:04:84:1b:aa:b1:3c:9d:5a:b2:6b:e3:4c:38:fc:0a:52:25: 30:b1:0c:0e:7e:a5:18:b7:82:98:5b:59:0b:39:b2:bc:67:6b: c8:7f:a3:1f:9b:44:f0:52:bb:e8:cf:ed:25:a1:f1:bb:a2:8e: c2:cc:f3:47:34:f6:54:1c:3c:ef:1d:ed:7b:85:d8:da:86:cd: 52:10:df:84:84:a5:49:b4:1a:bc:38:37:c6:a3:b6:9a:68:64: c2:a5:82:d2:04:ed:06:0e:7e:0f:4b:d1:6d:54:b5:d5:06:0f: 56:db:f0:8f:20:be:0b:b8:e7:eb:4e:0f:e4:13:e8:dd:42:d0: 89:9e:c0:0b:5e:38:26:57:07:84:0d:92:05:73:b7:dc:6f:28: 92:d2:a0:32 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57IyvyHi/pMFcqcssEop+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMzZhMTA2Y2VjZGViYTkyZTBiODBlNWU5YTVjNzg5YmE3 NGM2MmIwHhcNMjYwMTAxMTQxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZDAxMzc2YzYxMWI4Y2NlOGVhNDE1NTU0YTZkOTgwYmZlYTg1YTAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTty3OpN27+WQCN+PKVi5PKdinS0 WCVJ/9Egd7AVrAb+v7XdDxtJBecotKFWxR2/nOEChTDMVVak3ZzXEEXbrNbJw3hV nVWC2qonczD58b16q49wLfdQ+EtVqkcEsiZSyRR8t6cm8+UDwK+aSBRM9sEIDDh+ 9clOtNNQGTS9Ap/docdzs1YiW9RYlB3IrwzN3YfsljXvXwm6pu+N0SCwYas1uwo6 ccO2R5BPBEqZshaIiuv1xhdnH56kIJaOUrFxBdJAaH8WsNepiQhpAY+iZxWu1BZN mE01tssTqMRxW474bCdgIqq9KdaCdFUFjaev2Q7WuEvflkrb5pgwOCp8uQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ0BN2xhG4zOjqQVVUptmAv+qFoCMB8GA1UdIwQY MBaAFFM2oQbOzeupLguA5emlx4m6dMYrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXphaEJzN042Nmt1QzREbDZhWEhpYnAweGlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8yNjY5ZWUtNGJhNy00MTEwLTgzNzAt ZGQ4MDNjNWI4NWRiLzEvblFFM2JHRWJqTTZPcEJWVlNtMllDXzZvV2dJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8yNjY5ZWUtNGJhNy00MTEwLTgzNzAtZGQ4MDNjNWI4NWRi LzEvVXphaEJzN042Nmt1QzREbDZhWEhpYnAweGlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALhDFMA0G CSqGSIb3DQEBCwUAA4IBAQBKNjeGn0fwijs4dJoWh07P+KL0xWVjxH+h9j1KdmOG RPvNw7J+kRIJy2el0yhPgHoI4J+/Ye1W5V1MCdItvOsJwFMEPPxeo9dmgeM+VyrG fo6ScMOkkJPzuqUMRN+s2GNx7TDyz1uxSvtaBNEPBIQbqrE8nVqya+NMOPwKUiUw sQwOfqUYt4KYW1kLObK8Z2vIf6Mfm0TwUrvoz+0lofG7oo7CzPNHNPZUHDzvHe17 hdjahs1SEN+EhKVJtBq8ODfGo7aaaGTCpYLSBO0GDn4PS9FtVLXVBg9W2/CPIL4L uOfrTg/kE+jdQtCJnsALXjgmVweEDZIFc7fcbyiS0qAy -----END CERTIFICATE-----Generated at Wed Jan 21 10:29:17 2026 by rpki-client