This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/M_cbaQptzTt6NhUHeznJ4xiGSL4.roa File: M_cbaQptzTt6NhUHeznJ4xiGSL4.roa (raw, json) Hash identifier: dVPMZyZeSLPF8jU/rG6GYsvCQzxEUGk8Kw+Q2Qe4PSY= Subject key identifier: 33:F7:1B:69:0A:6D:CD:3B:7A:36:15:07:7B:39:C9:E3:18:86:48:BE Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65 Certificate serial: 019B7EA692146F5988B64BC88CA7BB8226AD Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/M_cbaQptzTt6NhUHeznJ4xiGSL4.roa Signing time: Fri 02 Jan 2026 12:20:04 +0000 ROA not before: Fri 02 Jan 2026 12:20:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2914 IP address blocks: 46.20.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:92:14:6f:59:88:b6:4b:c8:8c:a7:bb:82:26:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67499595a65aab0b53768def08091e31061e9e65 Validity Not Before: Jan 2 12:20:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=33f71b690a6dcd3b7a3615077b39c9e3188648be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1f:d8:6c:fb:a4:fb:ec:83:e5:83:a8:6a:87: 2a:f0:ae:6d:e3:15:23:1e:1c:48:5a:5a:1a:09:36: 97:9d:a0:b7:77:16:c1:20:e2:7f:bc:a6:a6:06:99: 5e:0d:3b:84:e6:f8:7a:86:b2:2e:72:3c:9e:41:63: 4c:3e:86:49:a3:46:7b:3c:dd:83:c4:57:52:5e:03: 42:6c:d2:02:40:4d:2f:b6:6f:65:cb:ff:34:a0:82: cd:e6:fc:c4:ed:22:2a:24:eb:b9:a8:7a:d6:13:79: 93:ab:b3:f6:81:80:f8:03:1b:ca:81:2a:ae:12:bf: 8c:7a:ee:31:f4:ef:fb:0e:fb:56:8f:f5:49:12:e7: 22:f2:7e:0e:cb:8b:67:80:88:3a:7b:48:68:ea:b6: d5:5a:47:6d:76:f5:d6:3d:10:c1:a3:f9:46:a4:77: 15:6d:49:9a:c2:e6:c8:a4:ca:12:f8:49:79:ef:99: 4d:95:7a:a9:4d:ee:47:b1:b4:b9:3f:de:ef:3a:fe: fb:9f:f7:e3:8c:ff:24:a9:e0:2f:6b:14:a5:b0:0d: 37:72:28:c0:2f:ff:01:dd:d6:b3:bf:70:07:3a:55: be:c1:c1:d9:f4:dd:9d:51:c0:37:1c:a2:91:fd:c3: 14:5b:6f:28:8d:06:5a:65:17:19:63:bf:a8:5e:d7: d4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:F7:1B:69:0A:6D:CD:3B:7A:36:15:07:7B:39:C9:E3:18:86:48:BE X509v3 Authority Key Identifier: keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/M_cbaQptzTt6NhUHeznJ4xiGSL4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.20.98.0/24 Signature Algorithm: sha256WithRSAEncryption 69:e3:cc:b1:16:00:b5:e5:60:ed:aa:91:db:18:2d:91:a6:2f: a8:0e:8f:1d:4c:8a:1c:b9:4e:be:2f:d9:f6:41:d3:6a:52:d2: 8e:b7:0c:02:29:5c:62:a3:3b:84:31:03:1f:2c:a9:1f:2b:9e: 04:c8:e2:4c:73:0d:0a:f8:a0:ef:fb:b5:f1:64:ff:c7:ce:2d: 05:da:36:65:70:43:e6:a0:49:f2:96:5d:e2:26:3b:cd:2b:0d: 17:ab:1f:d9:d2:e4:c5:8b:a2:f7:85:cd:d5:c3:fc:3d:d0:57: 03:9b:8b:35:45:7e:c6:39:2e:89:3a:f9:09:45:3e:eb:4f:aa: 0c:69:08:c5:cf:72:62:05:30:5f:1a:53:de:fe:e5:2c:79:98: 63:e3:20:bb:c5:9f:f6:01:30:df:fa:2c:e6:9d:83:8c:e8:ea: 3b:d5:c2:df:d1:30:52:13:a1:8e:72:00:e6:5d:66:48:bd:1a: 03:27:84:60:d0:60:41:38:ac:37:5c:64:ec:eb:ec:60:b9:7e: f4:b2:1e:de:4c:b2:c9:71:4e:1b:bb:f8:d8:d8:49:32:6e:53: e1:d1:f2:37:f7:2d:fe:a5:9d:ff:f2:20:a5:bd:83:0a:f6:68: 17:fb:90:ed:83:2f:a1:fa:ab:1c:4b:5f:e9:88:41:be:04:ac: 31:46:1d:10 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ppIUb1mItkvIjKe7giatMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx ZTllNjUwHhcNMjYwMTAyMTIyMDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzM2Y3MWI2OTBhNmRjZDNiN2EzNjE1MDc3YjM5YzllMzE4ODY0OGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjx/YbPuk++yD5YOoaocq8K5t4xUj HhxIWloaCTaXnaC3dxbBIOJ/vKamBpleDTuE5vh6hrIucjyeQWNMPoZJo0Z7PN2D xFdSXgNCbNICQE0vtm9ly/80oILN5vzE7SIqJOu5qHrWE3mTq7P2gYD4AxvKgSqu Er+Meu4x9O/7DvtWj/VJEuci8n4Oy4tngIg6e0ho6rbVWkdtdvXWPRDBo/lGpHcV bUmawubIpMoS+El575lNlXqpTe5HsbS5P97vOv77n/fjjP8kqeAvaxSlsA03cijA L/8B3dazv3AHOlW+wcHZ9N2dUcA3HKKR/cMUW28ojQZaZRcZY7+oXtfUSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFDP3G2kKbc07ejYVB3s5yeMYhki+MB8GA1UdIwQY MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct MzU1MDgwNDE2NTJkLzEvTV9jYmFRcHR6VHQ2TmhVSGV6bko0eGlHU0w0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALhRiMA0G CSqGSIb3DQEBCwUAA4IBAQBp48yxFgC15WDtqpHbGC2Rpi+oDo8dTIocuU6+L9n2 QdNqUtKOtwwCKVxiozuEMQMfLKkfK54EyOJMcw0K+KDv+7XxZP/Hzi0F2jZlcEPm oEnyll3iJjvNKw0Xqx/Z0uTFi6L3hc3Vw/w90FcDm4s1RX7GOS6JOvkJRT7rT6oM aQjFz3JiBTBfGlPe/uUseZhj4yC7xZ/2ATDf+izmnYOM6Oo71cLf0TBSE6GOcgDm XWZIvRoDJ4Rg0GBBOKw3XGTs6+xguX70sh7eTLLJcU4bu/jY2EkyblPh0fI39y3+ pZ3/8iClvYMK9mgX+5Dtgy+h+qscS1/piEG+BKwxRh0Q -----END CERTIFICATE-----Generated at Thu Jan 8 00:11:49 2026 by rpki-client