This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/remQI3vXY-CwDxRRv5Pj5NwA140.roa File: remQI3vXY-CwDxRRv5Pj5NwA140.roa (raw, json) Hash identifier: LH+kG9be4lJ6veGuO7nsYdrnjEkQS1MlDMWHJ7NAdZg= Subject key identifier: AD:E9:90:23:7B:D7:63:E0:B0:0F:14:51:BF:93:E3:E4:DC:00:D7:8D Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f Certificate serial: 019B7E37E01289286557A41D8BAF0D1A6D7D Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/remQI3vXY-CwDxRRv5Pj5NwA140.roa Signing time: Fri 02 Jan 2026 10:19:09 +0000 ROA not before: Fri 02 Jan 2026 10:19:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 58087 IP address blocks: 46.247.108.0/24 maxlen: 24 46.247.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:37:e0:12:89:28:65:57:a4:1d:8b:af:0d:1a:6d:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f Validity Not Before: Jan 2 10:19:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ade990237bd763e0b00f1451bf93e3e4dc00d78d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:88:e1:72:ca:a0:7e:53:e3:fe:b6:51:16:19: 3b:57:ec:8a:db:1d:c8:84:1a:0d:35:9c:e1:57:3b: 09:7a:9a:f9:c6:60:73:6b:58:0d:ee:40:b3:f8:2e: 49:62:b1:3f:f7:35:c5:06:30:05:fa:c8:55:4a:db: e6:ec:b3:0e:cf:60:4a:ca:12:06:1a:89:b9:cd:62: 47:9f:15:51:e6:34:79:50:fa:4e:b5:9c:61:83:a3: fb:75:4e:af:47:bf:6e:84:15:5a:af:76:9b:8e:01: b8:5c:c5:22:b8:9d:be:02:86:85:bb:cc:2f:c4:66: 17:e5:ab:45:e8:a9:f1:81:fd:34:fb:8a:8f:d4:7f: 2f:26:04:66:a5:c7:75:3a:14:db:18:74:2e:d8:75: 1e:b6:09:11:4d:50:16:ef:be:5d:13:dc:23:2a:f1: 99:5f:01:97:7a:0b:58:bb:a0:72:a6:92:48:9f:0a: 1d:63:75:78:da:31:c4:87:a6:1f:ee:ef:d4:31:dd: cf:f1:8d:fc:9c:59:d2:e1:23:bd:65:83:77:43:f0: 93:16:e4:f6:3f:35:b0:10:bc:dc:7c:a2:71:36:bd: 40:cd:bb:39:5c:d0:7e:27:81:a8:86:fe:05:53:17: 33:de:19:a1:11:21:45:53:42:d3:44:93:99:ea:65: ab:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:E9:90:23:7B:D7:63:E0:B0:0F:14:51:BF:93:E3:E4:DC:00:D7:8D X509v3 Authority Key Identifier: keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/remQI3vXY-CwDxRRv5Pj5NwA140.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.247.108.0/23 Signature Algorithm: sha256WithRSAEncryption 92:9b:f3:c7:e5:1e:6f:7b:7f:3f:e4:fa:ea:c6:3e:f1:b5:2a: e1:6b:5c:ad:67:2a:67:9e:ac:e4:d6:5f:92:e5:54:fe:37:01: 2e:33:b2:93:5e:cf:2f:cb:52:45:05:a2:d9:fd:66:8e:8b:83: 9a:5e:a0:5c:39:55:1c:1e:42:4d:7f:7c:e6:6d:d1:5b:a5:1f: 83:1b:c9:a3:1f:8d:d1:6e:66:d0:cf:81:22:51:1c:b7:9e:8a: 2a:99:cc:f0:66:46:62:23:95:6a:d0:c2:ff:32:21:a2:2d:76: 0c:3b:f4:eb:2a:5c:f5:06:77:91:94:a2:d5:7f:f2:50:6b:ed: f1:6c:00:30:bc:ee:f7:4d:59:cf:41:21:b0:a0:1d:b0:eb:7d: f5:93:c9:1f:6a:af:c8:b0:8a:57:4d:bf:c6:ab:78:2d:90:06: 82:db:cb:f1:c2:c4:59:61:7b:8d:88:3b:35:c3:ce:10:51:54: 8e:2d:67:02:a9:fc:b3:80:ae:59:be:d1:ef:1b:a2:81:14:4b: be:ae:0f:15:5c:10:c4:4a:b2:1e:d7:c4:81:ea:22:90:f6:9d: 3d:2a:eb:95:0a:f2:09:98:d9:03:22:c0:ad:00:6d:40:88:1c: cb:ae:8b:cc:a8:fd:54:14:1a:d1:cb:a8:21:46:f0:18:b4:ea: bf:f5:c2:b8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+N+ASiShlV6Qdi68NGm19MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyYmUyOWM5NTY4OTRjNDljNmQ0YmUwZWQ5ODg4MmI5MGQx YmM3N2YwHhcNMjYwMTAyMTAxOTA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZGU5OTAyMzdiZDc2M2UwYjAwZjE0NTFiZjkzZTNlNGRjMDBkNzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YjhcsqgflPj/rZRFhk7V+yK2x3I hBoNNZzhVzsJepr5xmBza1gN7kCz+C5JYrE/9zXFBjAF+shVStvm7LMOz2BKyhIG Gom5zWJHnxVR5jR5UPpOtZxhg6P7dU6vR79uhBVar3abjgG4XMUiuJ2+AoaFu8wv xGYX5atF6Knxgf00+4qP1H8vJgRmpcd1OhTbGHQu2HUetgkRTVAW775dE9wjKvGZ XwGXegtYu6ByppJInwodY3V42jHEh6Yf7u/UMd3P8Y38nFnS4SO9ZYN3Q/CTFuT2 PzWwELzcfKJxNr1Azbs5XNB+J4Gohv4FUxcz3hmhESFFU0LTRJOZ6mWrRwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK3pkCN712PgsA8UUb+T4+TcANeNMB8GA1UdIwQY MBaAFBK+KclWiUxJxtS+DtmIgrkNG8d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjIt YWE2ZWQ0ZGFmYjNiLzEvcmVtUUkzdlhZLUN3RHhSUnY1UGo1TndBMTQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9jMjc4OGYtOGM4Yy00N2JiLWI5MjItYWE2ZWQ0ZGFmYjNi LzEvRXI0cHlWYUpURW5HMUw0TzJZaUN1UTBieDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLvdsMA0G CSqGSIb3DQEBCwUAA4IBAQCSm/PH5R5ve38/5Prqxj7xtSrha1ytZypnnqzk1l+S 5VT+NwEuM7KTXs8vy1JFBaLZ/WaOi4OaXqBcOVUcHkJNf3zmbdFbpR+DG8mjH43R bmbQz4EiURy3nooqmczwZkZiI5Vq0ML/MiGiLXYMO/TrKlz1BneRlKLVf/JQa+3x bAAwvO73TVnPQSGwoB2w6331k8kfaq/IsIpXTb/Gq3gtkAaC28vxwsRZYXuNiDs1 w84QUVSOLWcCqfyzgK5ZvtHvG6KBFEu+rg8VXBDESrIe18SB6iKQ9p09KuuVCvIJ mNkDIsCtAG1AiBzLrovMqP1UFBrRy6ghRvAYtOq/9cK4 -----END CERTIFICATE-----Generated at Wed Jan 21 09:23:29 2026 by rpki-client