This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/zmXY1OTT6NQXEmsjJD2BX4c7b7c.roa File: zmXY1OTT6NQXEmsjJD2BX4c7b7c.roa (raw, json) Hash identifier: 26+rkNPDulDua9fC+YQZGyXCc/EBwd+QOh+NkG5ORq4= Subject key identifier: CE:65:D8:D4:E4:D3:E8:D4:17:12:6B:23:24:3D:81:5F:87:3B:6F:B7 Certificate issuer: /CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b Certificate serial: 019B79EC8C685237137A2213D03815F8F22E Authority key identifier: 53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/zmXY1OTT6NQXEmsjJD2BX4c7b7c.roa Signing time: Thu 01 Jan 2026 14:18:24 +0000 ROA not before: Thu 01 Jan 2026 14:18:24 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59746 IP address blocks: 46.16.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.mft rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:8c:68:52:37:13:7a:22:13:d0:38:15:f8:f2:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5336a106cecdeba92e0b80e5e9a5c789ba74c62b Validity Not Before: Jan 1 14:18:24 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ce65d8d4e4d3e8d417126b23243d815f873b6fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9c:67:23:97:5f:8e:ad:89:ef:78:fb:cb:72: 49:db:73:19:0f:e0:3b:2e:ee:50:51:cf:f5:65:70: e8:88:9f:e7:e8:36:07:27:19:ed:07:a9:0d:28:e7: 83:96:91:5f:8d:67:54:dc:39:08:aa:bb:f1:7e:28: 94:fb:82:9b:d2:98:fd:7f:94:c0:58:80:21:5b:b0: 6c:0a:f9:a1:e0:d2:a2:7f:06:4f:eb:35:56:cb:64: cc:b8:c5:94:fb:b2:ee:16:9d:0a:0e:6b:40:1c:df: 0b:3d:32:15:4d:f0:20:b3:7f:94:fc:5a:5a:2c:4c: d6:e1:45:2b:bd:b0:eb:3f:f7:03:84:ef:22:74:06: c2:53:d8:62:a0:26:0e:03:24:e0:f4:07:e3:91:87: 9f:d7:b2:fb:9d:de:d7:01:8e:31:18:a4:31:27:ee: 98:1c:1c:b1:75:dd:90:5c:06:20:7a:ec:12:a5:81: 69:6a:5c:69:17:b5:45:c6:05:89:e7:5b:d6:75:78: 2c:43:e1:fb:14:0a:83:0d:e3:a8:02:c8:f4:34:49: 23:94:90:72:c5:84:ae:2d:0a:b9:ac:d2:7a:29:35: 8e:ca:07:27:1a:ee:ec:b7:17:42:65:56:68:66:e5: f6:66:37:00:ed:25:58:ea:ed:ea:5b:b2:71:ac:af: 4b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:65:D8:D4:E4:D3:E8:D4:17:12:6B:23:24:3D:81:5F:87:3B:6F:B7 X509v3 Authority Key Identifier: keyid:53:36:A1:06:CE:CD:EB:A9:2E:0B:80:E5:E9:A5:C7:89:BA:74:C6:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzahBs7N66kuC4Dl6aXHibp0xis.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/zmXY1OTT6NQXEmsjJD2BX4c7b7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/2669ee-4ba7-4110-8370-dd803c5b85db/1/UzahBs7N66kuC4Dl6aXHibp0xis.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.16.196.0/24 Signature Algorithm: sha256WithRSAEncryption 74:fb:77:b3:31:cf:06:08:89:cd:c5:24:1e:2d:74:d7:84:b6: 50:f6:d8:e9:e7:25:43:5b:6d:98:fd:97:f1:0e:11:39:9d:b3: 20:73:e7:63:4e:6f:bb:ad:71:a5:cf:34:66:d9:06:f4:7f:1c: c6:f4:96:9f:1f:cb:75:ce:ef:23:16:57:c6:4f:c5:7c:8f:c8: 37:c7:e2:36:7a:07:65:11:24:71:1f:7e:6f:d8:e4:de:5c:17: 5c:fd:7c:79:4c:41:1b:72:ca:b6:e7:22:5c:63:52:ea:e1:7b: 57:7f:48:da:c8:23:0c:83:64:2a:0d:78:41:df:57:8d:ac:bd: db:41:2c:7d:0d:29:39:37:94:ea:78:cd:98:09:6e:4e:9b:40: 3f:a6:f0:d8:54:67:03:af:fa:4c:49:a7:99:65:d5:19:87:0e: 05:08:83:68:38:fd:aa:34:fd:16:1d:18:1a:2b:6b:8b:d5:73: 4c:29:25:e2:5f:dd:f3:2b:6e:91:39:7e:98:e9:2c:bd:98:15: 22:49:25:31:47:7b:16:f1:58:68:d9:21:2f:c9:71:d7:aa:01: 6f:c4:7c:a1:03:b5:fa:c8:3a:02:cf:8a:6a:bd:43:80:2a:b7: 76:15:29:0e:6a:ab:e7:b1:7c:e3:3c:f9:c0:f2:4e:8e:92:7d: 70:06:70:d2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57IxoUjcTeiIT0DgV+PIuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUzMzZhMTA2Y2VjZGViYTkyZTBiODBlNWU5YTVjNzg5YmE3 NGM2MmIwHhcNMjYwMTAxMTQxODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZTY1ZDhkNGU0ZDNlOGQ0MTcxMjZiMjMyNDNkODE1Zjg3M2I2ZmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35xnI5dfjq2J73j7y3JJ23MZD+A7 Lu5QUc/1ZXDoiJ/n6DYHJxntB6kNKOeDlpFfjWdU3DkIqrvxfiiU+4Kb0pj9f5TA WIAhW7BsCvmh4NKifwZP6zVWy2TMuMWU+7LuFp0KDmtAHN8LPTIVTfAgs3+U/Fpa LEzW4UUrvbDrP/cDhO8idAbCU9hioCYOAyTg9AfjkYef17L7nd7XAY4xGKQxJ+6Y HByxdd2QXAYgeuwSpYFpalxpF7VFxgWJ51vWdXgsQ+H7FAqDDeOoAsj0NEkjlJBy xYSuLQq5rNJ6KTWOygcnGu7stxdCZVZoZuX2ZjcA7SVY6u3qW7JxrK9LmwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM5l2NTk0+jUFxJrIyQ9gV+HO2+3MB8GA1UdIwQY MBaAFFM2oQbOzeupLguA5emlx4m6dMYrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXphaEJzN042Nmt1QzREbDZhWEhpYnAweGlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8yNjY5ZWUtNGJhNy00MTEwLTgzNzAt ZGQ4MDNjNWI4NWRiLzEvem1YWTFPVFQ2TlFYRW1zakpEMkJYNGM3YjdjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8yNjY5ZWUtNGJhNy00MTEwLTgzNzAtZGQ4MDNjNWI4NWRi LzEvVXphaEJzN042Nmt1QzREbDZhWEhpYnAweGlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALhDEMA0G CSqGSIb3DQEBCwUAA4IBAQB0+3ezMc8GCInNxSQeLXTXhLZQ9tjp5yVDW22Y/Zfx DhE5nbMgc+djTm+7rXGlzzRm2Qb0fxzG9JafH8t1zu8jFlfGT8V8j8g3x+I2egdl ESRxH35v2OTeXBdc/Xx5TEEbcsq25yJcY1Lq4XtXf0jayCMMg2QqDXhB31eNrL3b QSx9DSk5N5TqeM2YCW5Om0A/pvDYVGcDr/pMSaeZZdUZhw4FCINoOP2qNP0WHRga K2uL1XNMKSXiX93zK26ROX6Y6Sy9mBUiSSUxR3sW8Vho2SEvyXHXqgFvxHyhA7X6 yDoCz4pqvUOAKrd2FSkOaqvnsXzjPPnA8k6Okn1wBnDS -----END CERTIFICATE-----Generated at Wed Jan 21 10:28:41 2026 by rpki-client