This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/7ZlxFMTrvWHxaDQj8cGRFKFOYRs.roa File: 7ZlxFMTrvWHxaDQj8cGRFKFOYRs.roa (raw, json) Hash identifier: cMX6h6ESvCK8kLWWGv+cii+7hJJzZRIJOKQPIQ2Prc4= Subject key identifier: ED:99:71:14:C4:EB:BD:61:F1:68:34:23:F1:C1:91:14:A1:4E:61:1B Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65 Certificate serial: 019B7EA69692DD1C4507475C6A41EF147D2D Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/7ZlxFMTrvWHxaDQj8cGRFKFOYRs.roa Signing time: Fri 02 Jan 2026 12:20:05 +0000 ROA not before: Fri 02 Jan 2026 12:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49581 IP address blocks: 46.20.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:96:92:dd:1c:45:07:47:5c:6a:41:ef:14:7d:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67499595a65aab0b53768def08091e31061e9e65 Validity Not Before: Jan 2 12:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ed997114c4ebbd61f1683423f1c19114a14e611b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:c3:a1:79:60:34:41:71:ba:16:a0:c6:36:25: d3:9d:24:95:97:b8:8f:50:40:92:42:a0:7a:45:71: 9a:78:56:b8:3e:48:ba:fa:fa:db:db:be:25:1b:83: 0f:93:61:76:14:18:12:59:10:4f:1e:7c:a8:24:27: 1b:f6:0d:8c:06:2b:52:2f:41:99:a0:8e:e6:8a:68: 11:46:e2:cb:17:c1:64:6c:db:34:a3:8d:33:47:ca: 7f:21:cd:5e:3c:75:de:dd:ba:17:1f:7b:87:ba:f4: 0c:c7:0f:d2:fa:91:c1:c8:0e:d0:0f:36:a1:36:9b: a6:8c:47:3a:a0:80:d8:7f:67:df:31:0f:c2:a5:4b: ec:18:c9:41:86:12:4a:51:5b:38:c9:5a:49:c2:52: f9:55:c6:49:ba:82:83:1f:83:11:80:f8:8e:bb:10: a0:56:a5:01:a1:3a:e0:f1:5b:bc:1f:94:16:18:87: 8e:88:62:af:6c:bb:41:36:79:ef:78:e3:c4:c6:d8: 23:ab:95:29:ae:e3:04:23:42:1f:16:92:9f:b4:73: b1:26:f0:5e:85:37:9b:5d:7a:82:44:83:43:fe:0a: 35:ef:69:66:07:b1:cd:04:b4:09:e1:fc:34:24:20: 2a:22:85:ae:85:7b:a1:59:75:75:16:a4:96:cb:ff: 04:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:99:71:14:C4:EB:BD:61:F1:68:34:23:F1:C1:91:14:A1:4E:61:1B X509v3 Authority Key Identifier: keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/7ZlxFMTrvWHxaDQj8cGRFKFOYRs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.20.111.0/24 Signature Algorithm: sha256WithRSAEncryption 94:c2:f6:9c:7a:4a:de:c6:46:b0:e8:a7:c3:ac:2f:51:16:8a: ad:35:f8:87:55:2f:33:8d:cc:f7:38:f6:4d:d2:2e:93:3b:14: f3:0f:f4:2b:64:3e:30:d0:7b:20:df:68:98:60:d7:90:83:df: e0:bf:fc:c4:20:1b:54:ae:32:87:57:41:2e:b9:9b:70:c1:09: 9a:21:25:d1:81:ec:40:97:0d:54:f6:29:84:6c:7c:7c:41:46: 57:e7:27:88:f1:69:f3:f3:cf:e9:74:df:29:f9:ea:12:e4:a4: 2b:6f:8c:f4:d8:73:e1:ea:5c:6c:0e:9c:52:af:ce:6a:90:55: e7:5d:f2:e6:43:0a:6e:7f:ef:48:4d:03:bf:bb:01:2e:9c:fb: c5:3f:73:2a:30:52:a3:c5:b6:c6:97:39:a0:dd:d4:38:46:de: 46:3b:48:94:63:dc:dc:83:7a:c9:52:c7:0e:40:eb:e0:44:fd: 63:3d:75:ec:43:87:cf:23:99:3a:c3:b7:ff:3b:60:01:93:e6: 20:86:ae:5f:d9:13:61:81:42:c6:71:d8:b4:31:b9:85:77:4c: d0:8f:50:7e:bf:67:a6:47:26:c7:51:3f:e7:bd:f6:13:98:30: 22:73:18:ea:f1:3d:e5:d4:c6:1a:a8:75:d4:88:ee:76:36:88: 55:e5:4b:40 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ppaS3RxFB0dcakHvFH0tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx ZTllNjUwHhcNMjYwMTAyMTIyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlZDk5NzExNGM0ZWJiZDYxZjE2ODM0MjNmMWMxOTExNGExNGU2MTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA88OheWA0QXG6FqDGNiXTnSSVl7iP UECSQqB6RXGaeFa4Pki6+vrb274lG4MPk2F2FBgSWRBPHnyoJCcb9g2MBitSL0GZ oI7mimgRRuLLF8FkbNs0o40zR8p/Ic1ePHXe3boXH3uHuvQMxw/S+pHByA7QDzah NpumjEc6oIDYf2ffMQ/CpUvsGMlBhhJKUVs4yVpJwlL5VcZJuoKDH4MRgPiOuxCg VqUBoTrg8Vu8H5QWGIeOiGKvbLtBNnnveOPExtgjq5UpruMEI0IfFpKftHOxJvBe hTebXXqCRIND/go172lmB7HNBLQJ4fw0JCAqIoWuhXuhWXV1FqSWy/8EUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFO2ZcRTE671h8Wg0I/HBkRShTmEbMB8GA1UdIwQY MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct MzU1MDgwNDE2NTJkLzEvN1pseEZNVHJ2V0h4YURRajhjR1JGS0ZPWVJzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALhRvMA0G CSqGSIb3DQEBCwUAA4IBAQCUwvacekrexkaw6KfDrC9RFoqtNfiHVS8zjcz3OPZN 0i6TOxTzD/QrZD4w0Hsg32iYYNeQg9/gv/zEIBtUrjKHV0EuuZtwwQmaISXRgexA lw1U9imEbHx8QUZX5yeI8Wnz88/pdN8p+eoS5KQrb4z02HPh6lxsDpxSr85qkFXn XfLmQwpuf+9ITQO/uwEunPvFP3MqMFKjxbbGlzmg3dQ4Rt5GO0iUY9zcg3rJUscO QOvgRP1jPXXsQ4fPI5k6w7f/O2ABk+Yghq5f2RNhgULGcdi0MbmFd0zQj1B+v2em RybHUT/nvfYTmDAicxjq8T3l1MYaqHXUiO52NohV5UtA -----END CERTIFICATE-----Generated at Wed Jan 21 09:14:51 2026 by rpki-client