This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/1vbf4idXUPCWVm0PjanUNDzo3LM.roa File: 1vbf4idXUPCWVm0PjanUNDzo3LM.roa (raw, json) Hash identifier: /Im6rBlfP/hqnXVPz/7A/iNYH4vUpjF3xS/bQj/oQ5Q= Subject key identifier: D6:F6:DF:E2:27:57:50:F0:96:56:6D:0F:8D:A9:D4:34:3C:E8:DC:B3 Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65 Certificate serial: 019B7EA6975DCDC435B03C43BB4A0586FF33 Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/1vbf4idXUPCWVm0PjanUNDzo3LM.roa Signing time: Fri 02 Jan 2026 12:20:05 +0000 ROA not before: Fri 02 Jan 2026 12:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56902 IP address blocks: 46.20.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:97:5d:cd:c4:35:b0:3c:43:bb:4a:05:86:ff:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67499595a65aab0b53768def08091e31061e9e65 Validity Not Before: Jan 2 12:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d6f6dfe2275750f096566d0f8da9d4343ce8dcb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:37:25:fb:a0:46:3a:19:fe:5e:f3:11:7b:86: 10:a1:85:a8:fc:3c:33:cc:b4:61:4b:d9:bc:77:a8: 62:1b:29:77:e4:0c:d6:6f:55:24:9e:41:42:90:12: 76:d0:27:77:8d:27:21:04:05:e0:55:6b:1b:80:1f: da:6c:3b:f2:2a:81:a8:f5:4d:b2:85:5a:06:62:11: 4b:94:a3:8a:3b:d0:50:3c:39:bf:7b:6d:d7:d2:86: a8:17:d1:61:b8:3f:3f:60:3c:52:2e:3e:75:c0:b7: 38:f4:3c:1e:16:70:00:de:b2:b9:5c:2b:32:91:d5: 17:ed:19:0a:ba:fc:90:c7:26:f9:66:db:37:5a:0d: b8:cb:81:12:f5:be:1a:46:bb:7b:21:e6:25:21:da: f1:79:70:d9:c0:e7:d6:de:ef:61:08:33:0a:cf:8b: 92:04:ad:9c:97:2d:0d:f9:92:84:63:02:74:62:74: 22:e6:2e:86:79:09:11:6b:78:14:55:7a:40:14:ff: 96:4f:dd:73:1b:a5:1c:12:2b:09:d7:e8:7a:66:d5: fa:6e:a3:85:4c:d7:12:6e:18:30:f0:4a:db:17:2b: cf:b8:f3:14:c8:c3:b0:b3:e1:e6:95:c5:64:ad:ca: cf:f2:82:9f:ab:0e:bb:3a:15:ab:b5:11:0e:35:c4: 1f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F6:DF:E2:27:57:50:F0:96:56:6D:0F:8D:A9:D4:34:3C:E8:DC:B3 X509v3 Authority Key Identifier: keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/1vbf4idXUPCWVm0PjanUNDzo3LM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.20.103.0/24 Signature Algorithm: sha256WithRSAEncryption 57:c2:82:04:dc:55:07:aa:3a:47:98:bb:16:6d:2f:54:95:24: f3:e0:b7:2e:97:b3:a6:66:be:2a:69:48:ea:92:1f:8d:b6:22: 76:02:ff:4c:c3:fd:e7:f8:fa:6d:b2:d4:87:da:0a:8b:52:37: b0:b2:e6:27:27:54:ff:de:ac:b7:bd:9f:9f:84:b1:06:1f:50: 27:0c:9c:a5:57:fb:a0:36:70:fd:81:c3:c5:84:d9:48:76:f7: 2d:d9:13:18:43:9e:aa:77:2b:c0:9b:45:b8:40:72:6d:a6:9e: 4c:83:54:c4:4b:e3:ec:d3:69:d7:e0:80:54:15:19:7d:90:08: e4:b8:88:3f:ea:d1:1b:4c:37:ac:3c:29:23:1f:ae:99:8f:c8: 83:b6:7a:77:83:9f:dd:39:89:65:a6:80:58:db:ee:9c:78:17: 47:40:4b:3f:48:8f:43:04:17:66:8e:e5:31:ef:0e:fd:70:b9: ea:0a:e3:99:9c:a4:97:41:e0:df:3a:c7:bb:ae:1d:f0:ff:75: 42:1c:b1:ff:30:66:6b:a1:5f:e9:de:c8:93:f9:8c:30:03:11: 17:42:95:9e:37:fb:ad:f9:22:23:af:44:77:fa:d0:bc:7d:c2: 06:06:c8:c4:71:6f:be:9e:a2:fb:bf:63:62:a2:3b:03:63:a6: f4:37:0f:81 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ppddzcQ1sDxDu0oFhv8zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx ZTllNjUwHhcNMjYwMTAyMTIyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNmY2ZGZlMjI3NTc1MGYwOTY1NjZkMGY4ZGE5ZDQzNDNjZThkY2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzcl+6BGOhn+XvMRe4YQoYWo/Dwz zLRhS9m8d6hiGyl35AzWb1UknkFCkBJ20Cd3jSchBAXgVWsbgB/abDvyKoGo9U2y hVoGYhFLlKOKO9BQPDm/e23X0oaoF9FhuD8/YDxSLj51wLc49DweFnAA3rK5XCsy kdUX7RkKuvyQxyb5Zts3Wg24y4ES9b4aRrt7IeYlIdrxeXDZwOfW3u9hCDMKz4uS BK2cly0N+ZKEYwJ0YnQi5i6GeQkRa3gUVXpAFP+WT91zG6UcEisJ1+h6ZtX6bqOF TNcSbhgw8ErbFyvPuPMUyMOws+HmlcVkrcrP8oKfqw67OhWrtREONcQf2QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNb23+InV1DwllZtD42p1DQ86NyzMB8GA1UdIwQY MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct MzU1MDgwNDE2NTJkLzEvMXZiZjRpZFhVUENXVm0wUGphblVORHpvM0xNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALhRnMA0G CSqGSIb3DQEBCwUAA4IBAQBXwoIE3FUHqjpHmLsWbS9UlSTz4Lcul7OmZr4qaUjq kh+NtiJ2Av9Mw/3n+PptstSH2gqLUjewsuYnJ1T/3qy3vZ+fhLEGH1AnDJylV/ug NnD9gcPFhNlIdvct2RMYQ56qdyvAm0W4QHJtpp5Mg1TES+Ps02nX4IBUFRl9kAjk uIg/6tEbTDesPCkjH66Zj8iDtnp3g5/dOYllpoBY2+6ceBdHQEs/SI9DBBdmjuUx 7w79cLnqCuOZnKSXQeDfOse7rh3w/3VCHLH/MGZroV/p3siT+YwwAxEXQpWeN/ut +SIjr0R3+tC8fcIGBsjEcW++nqL7v2NiojsDY6b0Nw+B -----END CERTIFICATE-----Generated at Wed Jan 21 14:11:04 2026 by rpki-client