This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/99pLW5NSdSWyy1K_KuBziUqycLU.roa File: 99pLW5NSdSWyy1K_KuBziUqycLU.roa (raw, json) Hash identifier: iIMALiQte4M3j2/lLwOQNkJ4eCV7WxTe0kTN8g67L1E= Subject key identifier: F7:DA:4B:5B:93:52:75:25:B2:CB:52:BF:2A:E0:73:89:4A:B2:70:B5 Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65 Certificate serial: 019B7EA69953FBBF24B16C7955166AD6D325 Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/99pLW5NSdSWyy1K_KuBziUqycLU.roa Signing time: Fri 02 Jan 2026 12:20:06 +0000 ROA not before: Fri 02 Jan 2026 12:20:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199239 IP address blocks: 46.20.104.0/24 maxlen: 24 185.100.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:99:53:fb:bf:24:b1:6c:79:55:16:6a:d6:d3:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67499595a65aab0b53768def08091e31061e9e65 Validity Not Before: Jan 2 12:20:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7da4b5b93527525b2cb52bf2ae073894ab270b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:63:6a:3c:14:a8:fb:93:44:41:bb:02:af:ea: e4:2f:1c:4c:7d:41:22:13:b3:5b:2d:50:e4:2d:ae: be:b9:1a:ae:a9:a4:1b:f0:82:06:6a:b9:e3:e1:64: 23:13:d6:aa:b9:6d:59:b3:52:65:a5:07:b4:1b:5c: 65:35:e6:39:32:02:87:d6:41:81:ac:a3:f1:73:63: 32:85:93:eb:47:38:86:7d:b8:be:79:e3:8b:fb:4c: e2:1f:ed:cc:4c:24:6f:d3:2c:d6:a5:dc:15:c9:36: 87:f1:0a:a4:b7:23:ec:e3:00:eb:91:91:d1:fa:c8: f0:a3:43:e5:82:b9:17:67:69:36:7a:24:0a:8d:4b: 77:b6:ca:f6:91:8d:5f:35:00:67:f6:ef:6f:6c:f3: 12:24:f5:9b:95:d6:92:28:b7:b9:57:f8:2c:f7:f6: f2:7a:f1:6d:b0:ed:ae:77:98:7f:48:be:43:3e:07: 54:14:df:0e:a6:88:54:d2:95:cc:9f:c7:5a:26:17: 5d:ba:1e:a0:4d:b8:d1:95:54:93:c3:f6:c8:f2:d8: 9e:ac:b6:63:33:e8:18:65:67:fa:93:18:cc:4c:27: 21:ae:36:f0:3e:8b:11:a1:0a:5a:9a:6f:82:2c:93: 76:8c:8a:0c:17:71:44:b6:16:3e:1a:c1:d9:0e:4c: d3:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:DA:4B:5B:93:52:75:25:B2:CB:52:BF:2A:E0:73:89:4A:B2:70:B5 X509v3 Authority Key Identifier: keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/99pLW5NSdSWyy1K_KuBziUqycLU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.20.104.0/24 185.100.171.0/24 Signature Algorithm: sha256WithRSAEncryption 03:e7:15:23:2d:c5:69:29:12:ea:c5:54:13:b8:89:ed:e8:16: 7f:c4:07:be:0d:66:73:f2:5f:0f:d2:0f:2f:be:cf:f7:e7:ab: f3:66:7f:c0:dc:36:d1:34:d6:c5:d5:23:e9:89:57:8a:c3:18: 28:c6:2e:bd:0b:56:f3:30:ac:c5:d8:0f:52:eb:b0:fa:ec:4b: a7:d9:a6:09:54:0d:cd:99:02:cc:a5:42:91:e7:24:22:0f:14: f9:2d:1c:52:49:f2:b4:bb:81:ef:7d:17:ec:0b:5c:48:c8:08: 1f:4d:7c:73:8c:d3:38:66:8c:b8:bf:b9:2c:45:f4:78:d2:f5: d7:11:55:74:af:25:30:53:84:e1:db:57:61:69:a4:ff:2b:00: e8:0f:cf:24:92:c6:72:21:b3:a0:f5:c9:60:71:1b:76:bf:6b: 3b:27:66:e6:be:80:7f:08:5b:be:df:08:f0:2a:8a:a5:06:b8: 8b:39:8b:0d:af:17:da:1e:f1:23:17:9d:78:71:7d:5d:8e:0f: 6f:4a:ee:18:71:9d:07:9c:7a:45:6a:51:84:fb:a3:f9:65:d1: 7f:a4:bf:78:95:eb:79:b5:03:7b:e8:8d:09:43:db:0e:f2:e9: 9b:a7:89:3e:33:25:d6:fc:29:6e:c9:d1:dd:b2:62:ca:fc:8b: d9:9f:1f:2e -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+pplT+78ksWx5VRZq1tMlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx ZTllNjUwHhcNMjYwMTAyMTIyMDA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2RhNGI1YjkzNTI3NTI1YjJjYjUyYmYyYWUwNzM4OTRhYjI3MGI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGNqPBSo+5NEQbsCr+rkLxxMfUEi E7NbLVDkLa6+uRquqaQb8IIGarnj4WQjE9aquW1Zs1JlpQe0G1xlNeY5MgKH1kGB rKPxc2MyhZPrRziGfbi+eeOL+0ziH+3MTCRv0yzWpdwVyTaH8QqktyPs4wDrkZHR +sjwo0PlgrkXZ2k2eiQKjUt3tsr2kY1fNQBn9u9vbPMSJPWbldaSKLe5V/gs9/by evFtsO2ud5h/SL5DPgdUFN8OpohU0pXMn8daJhdduh6gTbjRlVSTw/bI8tierLZj M+gYZWf6kxjMTCchrjbwPosRoQpamm+CLJN2jIoMF3FEthY+GsHZDkzTEQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPfaS1uTUnUlsstSvyrgc4lKsnC1MB8GA1UdIwQY MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct MzU1MDgwNDE2NTJkLzEvOTlwTFc1TlNkU1d5eTFLX0t1QnppVXF5Y0xVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALhRoAwQA uWSrMA0GCSqGSIb3DQEBCwUAA4IBAQAD5xUjLcVpKRLqxVQTuInt6BZ/xAe+DWZz 8l8P0g8vvs/356vzZn/A3DbRNNbF1SPpiVeKwxgoxi69C1bzMKzF2A9S67D67Eun 2aYJVA3NmQLMpUKR5yQiDxT5LRxSSfK0u4HvfRfsC1xIyAgfTXxzjNM4Zoy4v7ks RfR40vXXEVV0ryUwU4Th21dhaaT/KwDoD88kksZyIbOg9clgcRt2v2s7J2bmvoB/ CFu+3wjwKoqlBriLOYsNrxfaHvEjF514cX1djg9vSu4YcZ0HnHpFalGE+6P5ZdF/ pL94let5tQN76I0JQ9sO8umbp4k+MyXW/CluydHdsmLK/IvZnx8u -----END CERTIFICATE-----Generated at Wed Jan 21 14:12:48 2026 by rpki-client