This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Rdgwf2MP67mUBS5VYhpBLOavXC0.roa File: Rdgwf2MP67mUBS5VYhpBLOavXC0.roa (raw, json) Hash identifier: yQYNOJIFobgpH1tj+Z+IWKvRBIjMfxuL8bx2gc/2nWs= Subject key identifier: 45:D8:30:7F:63:0F:EB:B9:94:05:2E:55:62:1A:41:2C:E6:AF:5C:2D Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4 Certificate serial: 019B77C69DEE3C99594CFB548A17C5344C09 Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Rdgwf2MP67mUBS5VYhpBLOavXC0.roa Signing time: Thu 01 Jan 2026 04:17:43 +0000 ROA not before: Thu 01 Jan 2026 04:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 49357 IP address blocks: 46.8.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:9d:ee:3c:99:59:4c:fb:54:8a:17:c5:34:4c:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4 Validity Not Before: Jan 1 04:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=45d8307f630febb994052e55621a412ce6af5c2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:16:71:d0:a4:8e:2a:ff:6d:a1:97:7b:cb:cf: 5c:3b:d6:04:65:df:be:ba:dd:36:20:de:ff:23:ba: 57:3f:ef:a1:de:79:bb:26:8e:6d:46:75:ac:5a:f4: d6:87:68:f5:ad:b3:56:65:51:1b:8c:40:a1:64:af: 6a:ac:75:b2:ad:1c:ee:5b:ed:55:30:52:42:b9:c1: 06:77:9e:13:fc:3e:b2:06:36:08:fb:19:bc:33:9a: 61:03:85:33:12:90:37:db:9b:66:eb:80:88:75:c8: 0b:e9:3e:11:6b:0f:2a:2b:50:80:42:0c:88:79:c5: b4:e0:c6:c3:85:45:f8:0b:9a:e7:8a:e1:3e:1d:6e: 33:11:5a:dd:75:12:73:09:ad:61:40:4e:1e:47:bb: b7:4c:7e:7f:9e:c8:81:18:a3:f6:aa:18:1a:fb:45: 06:81:be:1c:99:58:9d:bc:66:25:d0:f2:56:76:33: 26:87:8c:fc:ca:75:b4:2a:e0:2f:48:b6:31:9f:e3: 60:a2:f8:de:26:4f:ec:8b:86:d3:18:c8:72:82:04: 03:a4:a4:36:66:f8:ba:44:5f:ac:4a:88:89:7f:05: 02:0d:36:3b:6e:aa:9a:ef:8f:fb:b4:ed:51:b4:c9: 17:5a:66:22:77:02:57:06:23:86:d1:ea:3c:2c:f7: 67:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D8:30:7F:63:0F:EB:B9:94:05:2E:55:62:1A:41:2C:E6:AF:5C:2D X509v3 Authority Key Identifier: keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Rdgwf2MP67mUBS5VYhpBLOavXC0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.8.159.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:24:13:28:e7:88:5f:ab:d5:32:a3:06:98:4c:3b:fa:65:c6: 70:ca:c0:75:ff:01:88:22:d5:fb:ca:44:3e:c7:90:83:35:f6: bd:e6:4e:35:9a:19:a8:5b:26:b3:b5:17:eb:0a:29:ba:8a:2d: d3:be:0f:62:cf:cb:9d:76:f6:54:99:f0:20:a5:7a:28:39:b8: e7:ea:70:51:1d:71:66:e1:49:63:e5:86:50:ef:47:9d:e7:f6: b2:78:44:3f:ee:3f:23:53:2d:f3:8f:4c:af:b1:10:68:e0:e4: 07:7f:c3:bb:d7:20:4f:10:4c:4e:95:86:da:bf:bc:a4:dc:19: 47:62:8e:55:1c:75:3d:2c:e5:07:88:dd:03:bc:e5:a4:84:96: ed:20:a9:10:43:24:b1:b3:3c:e6:a7:0a:2b:62:cb:1f:ac:0f: c8:c3:2f:24:73:a2:7c:62:45:f1:bc:25:dd:18:85:bc:53:40: d0:e6:e9:7c:88:b3:f9:84:0c:80:f0:68:b1:7b:38:17:3a:57: 70:9a:d5:90:29:b6:91:4a:95:30:c6:1a:7a:4e:b3:32:45:8c: 28:ea:47:68:82:cf:f8:65:39:bd:3e:db:2d:ae:1b:46:db:5d: 44:3f:48:00:4b:7b:cc:90:6a:23:82:2c:b7:43:ca:62:fe:3b: 92:ff:96:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xp3uPJlZTPtUihfFNEwJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0 MjAzYjQwHhcNMjYwMTAxMDQxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NWQ4MzA3ZjYzMGZlYmI5OTQwNTJlNTU2MjFhNDEyY2U2YWY1YzJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohZx0KSOKv9toZd7y89cO9YEZd++ ut02IN7/I7pXP++h3nm7Jo5tRnWsWvTWh2j1rbNWZVEbjEChZK9qrHWyrRzuW+1V MFJCucEGd54T/D6yBjYI+xm8M5phA4UzEpA325tm64CIdcgL6T4Raw8qK1CAQgyI ecW04MbDhUX4C5rniuE+HW4zEVrddRJzCa1hQE4eR7u3TH5/nsiBGKP2qhga+0UG gb4cmVidvGYl0PJWdjMmh4z8ynW0KuAvSLYxn+NgovjeJk/si4bTGMhyggQDpKQ2 Zvi6RF+sSoiJfwUCDTY7bqqa74/7tO1RtMkXWmYidwJXBiOG0eo8LPdnUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEXYMH9jD+u5lAUuVWIaQSzmr1wtMB8GA1UdIwQY MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt MTY2OTljOTZkZDVlLzEvUmRnd2YyTVA2N21VQlM1VllocEJMT2F2WEMwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALgifMA0G CSqGSIb3DQEBCwUAA4IBAQB7JBMo54hfq9UyowaYTDv6ZcZwysB1/wGIItX7ykQ+ x5CDNfa95k41mhmoWyaztRfrCim6ii3Tvg9iz8uddvZUmfAgpXooObjn6nBRHXFm 4Ulj5YZQ70ed5/ayeEQ/7j8jUy3zj0yvsRBo4OQHf8O71yBPEExOlYbav7yk3BlH Yo5VHHU9LOUHiN0DvOWkhJbtIKkQQySxszzmpworYssfrA/Iwy8kc6J8YkXxvCXd GIW8U0DQ5ul8iLP5hAyA8GixezgXOldwmtWQKbaRSpUwxhp6TrMyRYwo6kdogs/4 ZTm9PtstrhtG211EP0gAS3vMkGojgiy3Q8pi/juS/5Yc -----END CERTIFICATE-----Generated at Sun Jan 25 22:47:00 2026 by rpki-client