This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/jOzeQvG-CSKEb84_kKnAL1PAC6Y.roa File: jOzeQvG-CSKEb84_kKnAL1PAC6Y.roa (raw, json) Hash identifier: CUYbXow71FwfWTHYT6HzHF7ERdH4KcdRAJs9h9PrlE4= Subject key identifier: 8C:EC:DE:42:F1:BE:09:22:84:6F:CE:3F:90:A9:C0:2F:53:C0:0B:A6 Certificate issuer: /CN=816684a2958e0190f270a80a98789319e1cee4d8 Certificate serial: 019B77C679F64236D5D47B754740A7245E5C Authority key identifier: 81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/jOzeQvG-CSKEb84_kKnAL1PAC6Y.roa Signing time: Thu 01 Jan 2026 04:17:34 +0000 ROA not before: Thu 01 Jan 2026 04:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 14618 IP address blocks: 46.17.72.0/21 maxlen: 24 46.17.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 16:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:79:f6:42:36:d5:d4:7b:75:47:40:a7:24:5e:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=816684a2958e0190f270a80a98789319e1cee4d8 Validity Not Before: Jan 1 04:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=8cecde42f1be0922846fce3f90a9c02f53c00ba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f9:6d:ac:df:13:3b:4b:9c:4b:7c:32:bb:d8: 54:81:2c:27:54:dc:85:14:4c:16:1a:1a:13:4d:e4: b8:df:f6:66:f7:c5:13:13:1f:33:28:61:33:85:cf: 00:d6:b5:9c:d1:96:70:5c:ed:4b:1e:c9:fb:31:61: ab:4a:33:b2:14:4b:49:bb:48:92:2b:ff:dd:23:d7: 90:ae:1b:fb:7d:6b:34:6b:2a:25:cd:b9:f6:03:9f: 75:92:27:fb:da:ad:db:0e:28:5a:0d:ab:f9:5c:0c: 09:74:1d:5c:e2:5c:b5:da:2e:77:32:a2:3a:c5:bb: 8f:4a:22:49:b6:c3:c0:01:39:26:fc:24:94:76:9e: c7:05:4a:72:49:0f:72:25:d1:98:1a:10:42:6b:fa: 0a:dd:79:c5:37:32:a2:33:10:36:77:b7:d1:57:c2: d6:2e:9a:bb:89:ea:9f:fe:07:f4:12:7a:82:f2:55: 00:29:a7:3a:83:19:a7:d7:ab:c1:92:60:07:53:3b: 82:21:1c:74:38:37:e7:73:b2:bc:b2:24:9b:31:ac: f8:c3:96:eb:02:da:6c:dc:d7:f0:f2:28:4d:d3:ea: 5e:c9:6f:d9:8e:f9:99:63:8e:b9:f5:c7:75:f1:ba: 87:90:2c:1f:17:a9:78:37:8e:62:86:6f:9b:23:d4: ea:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:EC:DE:42:F1:BE:09:22:84:6F:CE:3F:90:A9:C0:2F:53:C0:0B:A6 X509v3 Authority Key Identifier: keyid:81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/jOzeQvG-CSKEb84_kKnAL1PAC6Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.17.72.0/21 Signature Algorithm: sha256WithRSAEncryption 51:ca:b2:a2:e1:f3:d6:ee:3f:ae:48:ca:f1:6b:d0:e7:2f:f2: 33:92:fa:1d:e6:d8:3a:ce:af:48:85:e7:48:61:33:b0:1c:a8: 35:16:cc:cd:34:fb:ad:48:ce:c1:25:9a:de:09:aa:0d:13:1b: aa:6c:bc:3c:b7:b4:05:b6:73:94:06:f9:0f:26:44:2a:ee:7b: 25:b8:ab:79:c1:a4:ea:56:37:73:2e:2a:60:53:68:cb:37:a0: 3f:27:7c:b4:cc:ce:f0:aa:16:23:35:53:b0:18:cb:a4:22:59: c2:b4:b9:6e:c3:ac:ae:de:16:20:93:02:26:c9:18:66:00:bd: 88:88:4f:b6:85:33:cc:f5:7a:0b:00:79:17:79:e7:6a:8f:03: 78:82:1c:62:23:f8:26:e1:00:42:7d:56:2e:2b:4d:7f:d2:c7: b6:5d:7d:25:e2:1a:8e:a5:e4:72:98:4f:08:a7:a9:e7:81:fd: 17:c2:c4:97:e0:42:60:f4:08:3c:e3:ef:b0:43:03:dd:71:a7: bf:82:72:0d:28:aa:8a:82:5b:e7:7a:f0:87:9c:e6:f6:b2:42: 22:23:c4:38:cc:d9:80:58:3c:54:6a:74:29:76:72:20:90:8b: 3e:15:2b:38:43:77:45:e7:34:3c:0e:89:92:36:c6:b0:4f:c2: 3d:62:4a:c5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xnn2QjbV1Ht1R0CnJF5cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxNjY4NGEyOTU4ZTAxOTBmMjcwYTgwYTk4Nzg5MzE5ZTFj ZWU0ZDgwHhcNMjYwMTAxMDQxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4Y2VjZGU0MmYxYmUwOTIyODQ2ZmNlM2Y5MGE5YzAyZjUzYzAwYmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fltrN8TO0ucS3wyu9hUgSwnVNyF FEwWGhoTTeS43/Zm98UTEx8zKGEzhc8A1rWc0ZZwXO1LHsn7MWGrSjOyFEtJu0iS K//dI9eQrhv7fWs0ayolzbn2A591kif72q3bDihaDav5XAwJdB1c4ly12i53MqI6 xbuPSiJJtsPAATkm/CSUdp7HBUpySQ9yJdGYGhBCa/oK3XnFNzKiMxA2d7fRV8LW Lpq7ieqf/gf0EnqC8lUAKac6gxmn16vBkmAHUzuCIRx0ODfnc7K8siSbMaz4w5br Atps3Nfw8ihN0+peyW/ZjvmZY4659cd18bqHkCwfF6l4N45ihm+bI9TqXwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIzs3kLxvgkihG/OP5CpwC9TwAumMB8GA1UdIwQY MBaAFIFmhKKVjgGQ8nCoCph4kxnhzuTYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ1dhRW9wV09BWkR5Y0tnS21IaVRHZUhPNU5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8xMzQ5Y2EtOGMzYy00MTMxLTlmNTUt ZDU5MDMwNjYxOTQ5LzEvak96ZVF2Ry1DU0tFYjg0X2tLbkFMMVBBQzZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81My8xMzQ5Y2EtOGMzYy00MTMxLTlmNTUtZDU5MDMwNjYxOTQ5 LzEvZ1dhRW9wV09BWkR5Y0tnS21IaVRHZUhPNU5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLhFIMA0G CSqGSIb3DQEBCwUAA4IBAQBRyrKi4fPW7j+uSMrxa9DnL/Izkvod5tg6zq9IhedI YTOwHKg1FszNNPutSM7BJZreCaoNExuqbLw8t7QFtnOUBvkPJkQq7nsluKt5waTq VjdzLipgU2jLN6A/J3y0zM7wqhYjNVOwGMukIlnCtLluw6yu3hYgkwImyRhmAL2I iE+2hTPM9XoLAHkXeedqjwN4ghxiI/gm4QBCfVYuK01/0se2XX0l4hqOpeRymE8I p6nngf0XwsSX4EJg9Ag84++wQwPdcae/gnINKKqKglvnevCHnOb2skIiI8Q4zNmA WDxUanQpdnIgkIs+FSs4Q3dF5zQ8DomSNsawT8I9YkrF -----END CERTIFICATE-----Generated at Sat Jan 3 01:35:58 2026 by rpki-client