This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/SRu3Oj_JR0Aqw1_pXOqCkyqZiNM.roa File: SRu3Oj_JR0Aqw1_pXOqCkyqZiNM.roa (raw, json) Hash identifier: OXGfPj6oOrbejLX45mK4NILgwBe4FcCaUI2RA3UNsvQ= Subject key identifier: 49:1B:B7:3A:3F:C9:47:40:2A:C3:5F:E9:5C:EA:82:93:2A:99:88:D3 Certificate issuer: /CN=67499595a65aab0b53768def08091e31061e9e65 Certificate serial: 019B7EA696566E6D1523D56CD9150B5253AE Authority key identifier: 67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/SRu3Oj_JR0Aqw1_pXOqCkyqZiNM.roa Signing time: Fri 02 Jan 2026 12:20:05 +0000 ROA not before: Fri 02 Jan 2026 12:20:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49020 IP address blocks: 46.20.100.0/24 maxlen: 24 46.20.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.mft rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 07:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:96:56:6e:6d:15:23:d5:6c:d9:15:0b:52:53:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67499595a65aab0b53768def08091e31061e9e65 Validity Not Before: Jan 2 12:20:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=491bb73a3fc947402ac35fe95cea82932a9988d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:31:46:0d:ba:b9:3d:e8:bc:ac:50:00:c2:d3: 1b:49:ad:a1:7f:14:48:fc:eb:c0:54:50:94:81:90: cd:75:f4:cb:45:1c:23:f4:58:3d:3f:88:8e:ce:df: 60:a6:0e:ed:d9:fc:ba:3c:99:d4:8d:a1:27:11:44: 4e:23:bb:df:41:95:c0:93:d0:da:61:b5:37:36:a1: 62:4d:f6:22:c9:e6:3a:a2:25:4a:b2:88:6b:63:35: fe:43:2d:0c:d5:8e:69:d9:fe:13:e0:80:5c:74:16: d7:ca:e6:32:80:27:b3:b2:73:93:1a:67:d2:ac:86: d5:44:d7:df:0f:d7:ff:aa:cf:89:db:2f:c4:04:0b: 28:43:25:d6:6c:f7:11:97:98:9e:d3:46:80:24:20: 51:55:78:99:56:1a:b9:2a:81:68:9b:46:c3:cd:e0: 3c:c7:eb:56:be:b6:6f:14:e5:3a:0f:f7:4c:5a:05: d6:b6:90:b9:96:09:4e:ee:77:e9:2e:18:de:ee:ba: ca:36:6a:9d:85:a1:a1:b5:ac:79:f3:24:1a:b5:1a: cd:e3:29:6e:2a:5d:54:3c:14:6c:cb:b2:be:2b:60: ee:c4:b6:59:65:ba:c3:54:70:65:d9:3b:fb:97:d9: 2e:40:08:87:06:51:27:b6:78:65:e4:46:8b:27:33: f2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:1B:B7:3A:3F:C9:47:40:2A:C3:5F:E9:5C:EA:82:93:2A:99:88:D3 X509v3 Authority Key Identifier: keyid:67:49:95:95:A6:5A:AB:0B:53:76:8D:EF:08:09:1E:31:06:1E:9E:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z0mVlaZaqwtTdo3vCAkeMQYenmU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/SRu3Oj_JR0Aqw1_pXOqCkyqZiNM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b744b8-f39d-495b-b217-35508041652d/1/Z0mVlaZaqwtTdo3vCAkeMQYenmU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.20.100.0/24 46.20.103.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:74:af:82:81:6b:1b:87:87:1b:60:9d:b1:0e:1e:c5:01:ad: 91:01:ac:a8:49:1f:f7:57:75:e5:95:32:1f:8f:4c:f7:e0:14: 1a:de:66:7a:07:87:3d:dd:6d:28:9d:5b:55:eb:d6:a9:9f:e9: cf:91:dd:30:dc:e5:e4:ae:25:f0:21:fe:35:d9:5f:41:c6:b1: d1:71:79:9e:96:c0:e0:2b:bc:cc:38:17:f6:72:ac:e6:0c:4e: b1:12:a9:6c:a4:80:70:5e:77:78:f0:5b:80:dc:39:72:97:94: 93:f4:f3:19:87:1d:5e:c4:32:e9:8e:17:fd:03:a7:0e:91:1b: 3b:f0:3d:07:6c:44:b0:7f:90:12:f6:e0:d7:62:c1:13:93:ed: c2:a4:77:7c:4e:0d:30:fd:79:d8:6b:d9:1b:05:b0:11:5f:be: 85:63:89:92:99:46:53:b2:8c:bc:90:91:2b:58:06:e2:08:6f: 90:46:fc:1e:dc:87:d9:c2:e0:60:52:43:1d:6f:71:e1:33:04: ce:be:e9:61:ed:59:34:e3:51:28:28:97:3a:81:57:c0:89:a1: 0f:76:67:a4:7e:15:8f:68:0f:cd:17:d0:9a:10:0f:10:bb:4a: b1:7b:65:f0:57:5d:6c:01:68:eb:dc:97:3f:ec:8a:8a:4c:3b: cc:ec:8e:75 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt+ppZWbm0VI9Vs2RULUlOuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NDk5NTk1YTY1YWFiMGI1Mzc2OGRlZjA4MDkxZTMxMDYx ZTllNjUwHhcNMjYwMTAyMTIyMDA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTFiYjczYTNmYzk0NzQwMmFjMzVmZTk1Y2VhODI5MzJhOTk4OGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTFGDbq5Pei8rFAAwtMbSa2hfxRI /OvAVFCUgZDNdfTLRRwj9Fg9P4iOzt9gpg7t2fy6PJnUjaEnEUROI7vfQZXAk9Da YbU3NqFiTfYiyeY6oiVKsohrYzX+Qy0M1Y5p2f4T4IBcdBbXyuYygCezsnOTGmfS rIbVRNffD9f/qs+J2y/EBAsoQyXWbPcRl5ie00aAJCBRVXiZVhq5KoFom0bDzeA8 x+tWvrZvFOU6D/dMWgXWtpC5lglO7nfpLhje7rrKNmqdhaGhtax58yQatRrN4ylu Kl1UPBRsy7K+K2DuxLZZZbrDVHBl2Tv7l9kuQAiHBlEntnhl5EaLJzPyjwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEkbtzo/yUdAKsNf6VzqgpMqmYjTMB8GA1UdIwQY MBaAFGdJlZWmWqsLU3aN7wgJHjEGHp5lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTct MzU1MDgwNDE2NTJkLzEvU1J1M09qX0pSMEFxdzFfcFhPcUNreXFaaU5NLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNzQ0YjgtZjM5ZC00OTViLWIyMTctMzU1MDgwNDE2NTJk LzEvWjBtVmxhWmFxd3RUZG8zdkNBa2VNUVllbm1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALhRkAwQA LhRnMA0GCSqGSIb3DQEBCwUAA4IBAQCNdK+CgWsbh4cbYJ2xDh7FAa2RAayoSR/3 V3XllTIfj0z34BQa3mZ6B4c93W0onVtV69apn+nPkd0w3OXkriXwIf412V9BxrHR cXmelsDgK7zMOBf2cqzmDE6xEqlspIBwXnd48FuA3Dlyl5ST9PMZhx1exDLpjhf9 A6cOkRs78D0HbESwf5AS9uDXYsETk+3CpHd8Tg0w/XnYa9kbBbARX76FY4mSmUZT soy8kJErWAbiCG+QRvwe3IfZwuBgUkMdb3HhMwTOvulh7Vk041EoKJc6gVfAiaEP dmekfhWPaA/NF9CaEA8Qu0qxe2XwV11sAWjr3Jc/7IqKTDvM7I51 -----END CERTIFICATE-----Generated at Wed Jan 21 14:14:50 2026 by rpki-client