This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/q9UCiHUCBS94qPU1QBAGbZ80Jqs.roa File: q9UCiHUCBS94qPU1QBAGbZ80Jqs.roa (raw, json) Hash identifier: tANGaCvjNSRnjvMKOyr9yjsokMbVWAtZxPPxrnZVq4g= Subject key identifier: AB:D5:02:88:75:02:05:2F:78:A8:F5:35:40:10:06:6D:9F:34:26:AB Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc Certificate serial: 019B7C11844A2485D6B6A379B586E5B19A39 Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/q9UCiHUCBS94qPU1QBAGbZ80Jqs.roa Signing time: Fri 02 Jan 2026 00:18:01 +0000 ROA not before: Fri 02 Jan 2026 00:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209809 IP address blocks: 46.151.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:11:84:4a:24:85:d6:b6:a3:79:b5:86:e5:b1:9a:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc Validity Not Before: Jan 2 00:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=abd502887502052f78a8f5354010066d9f3426ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:08:3a:7a:6c:eb:25:5d:2e:7d:5a:eb:34:dc: 87:8d:ab:55:52:5f:79:d6:61:4f:27:98:2c:cc:3e: c6:4f:15:e6:6d:c5:66:fa:96:74:b9:b1:d8:71:7f: db:93:0c:b4:2e:c4:9e:37:ff:2e:82:8e:dc:ba:db: 91:72:1d:80:f2:c7:da:45:6f:76:d2:27:0a:20:06: 14:20:83:e7:40:37:ba:eb:09:75:58:3e:d7:5b:fe: bc:75:5d:f8:32:e6:3a:98:89:bd:c6:21:af:8f:fc: 37:eb:d1:18:70:49:8e:b7:d0:5c:f4:ac:5f:cc:5c: 03:45:f6:ea:9b:8e:6f:8f:dd:e1:ee:a4:c8:bf:96: 7e:c3:82:82:91:d7:b8:03:c6:be:f2:e2:86:e7:53: f0:49:74:17:8e:10:c6:ca:49:12:68:4e:aa:73:c7: dd:3b:93:ae:da:35:02:11:9c:47:fc:85:39:4f:50: e5:0f:fa:6e:91:c1:74:e1:73:75:2e:47:8c:fb:54: 30:da:6b:bc:34:6f:5d:3c:0d:7d:3b:fe:47:57:a4: 75:27:c7:80:fe:a5:67:4c:84:71:b4:85:d1:9e:92: cd:ee:b3:c7:f7:27:0c:0e:05:d8:bb:db:bf:a5:3a: a5:ab:29:f9:70:40:69:da:18:3f:69:7e:81:3d:2f: 6e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D5:02:88:75:02:05:2F:78:A8:F5:35:40:10:06:6D:9F:34:26:AB X509v3 Authority Key Identifier: keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/q9UCiHUCBS94qPU1QBAGbZ80Jqs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.151.177.0/24 Signature Algorithm: sha256WithRSAEncryption 64:90:7c:51:30:26:13:2f:e2:b8:40:fa:07:8f:39:82:a4:8f: ab:33:02:92:38:36:35:ce:9e:28:b7:cd:eb:4d:fc:23:48:cf: 22:1a:9e:c3:c7:c6:6b:39:49:fe:9b:9c:3b:dc:94:e5:15:84: e4:7e:92:2c:ab:c4:ff:49:68:e9:8f:cf:8f:e5:ce:c3:7d:79: 81:a3:4e:3b:b1:60:84:cb:15:71:be:b7:40:9a:13:2f:c7:dd: 13:28:e0:6f:3f:df:c0:f6:69:bc:1a:36:bb:9b:df:f3:bc:47: f2:35:73:ba:a3:31:e0:59:e0:bd:96:c8:e1:22:50:21:a2:c6: f4:e4:74:e3:b8:b6:2c:e9:58:b4:67:04:38:30:f7:23:b8:02: e8:ef:87:1e:22:b0:14:88:a9:ff:19:59:ac:50:a9:59:e4:85: a6:33:52:ca:38:f4:5d:f9:58:eb:c2:e7:ad:55:2e:9e:bd:29: 44:44:e9:9b:c7:b4:ea:5e:d1:4e:a6:91:88:ca:f0:a6:b7:4c: 8d:7a:17:50:16:3b:60:96:3c:47:51:68:57:e2:d6:2b:d8:26: 16:4e:ca:0f:90:e7:59:34:8e:eb:cc:86:26:f9:fd:46:16:31: 90:70:c2:20:b7:11:7e:de:5c:e8:43:e7:d0:74:49:66:ba:f0: 23:46:8d:89 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8EYRKJIXWtqN5tYblsZo5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhlYjQ0MWRhZGJiZWNiNjk2NWQ0ZWExZjA0NmNjNWM4ZTI4 ODE3ZmMwHhcNMjYwMTAyMDAxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYmQ1MDI4ODc1MDIwNTJmNzhhOGY1MzU0MDEwMDY2ZDlmMzQyNmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQg6emzrJV0ufVrrNNyHjatVUl95 1mFPJ5gszD7GTxXmbcVm+pZ0ubHYcX/bkwy0LsSeN/8ugo7cutuRch2A8sfaRW92 0icKIAYUIIPnQDe66wl1WD7XW/68dV34MuY6mIm9xiGvj/w369EYcEmOt9Bc9Kxf zFwDRfbqm45vj93h7qTIv5Z+w4KCkde4A8a+8uKG51PwSXQXjhDGykkSaE6qc8fd O5Ou2jUCEZxH/IU5T1DlD/pukcF04XN1LkeM+1Qw2mu8NG9dPA19O/5HV6R1J8eA /qVnTIRxtIXRnpLN7rPH9ycMDgXYu9u/pTqlqyn5cEBp2hg/aX6BPS9umwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKvVAoh1AgUveKj1NUAQBm2fNCarMB8GA1UdIwQY MBaAFI60QdrbvstpZdTqHwRsxcjiiBf8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmIt NDZiOTQ5MDkyY2JlLzEvcTlVQ2lIVUNCUzk0cVBVMVFCQUdiWjgwSnFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85NzhkMGYtOTI5Ny00YzcxLTljZmItNDZiOTQ5MDkyY2Jl LzEvanJSQjJ0dS15MmxsMU9vZkJHekZ5T0tJRl93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALpexMA0G CSqGSIb3DQEBCwUAA4IBAQBkkHxRMCYTL+K4QPoHjzmCpI+rMwKSODY1zp4ot83r TfwjSM8iGp7Dx8ZrOUn+m5w73JTlFYTkfpIsq8T/SWjpj8+P5c7DfXmBo047sWCE yxVxvrdAmhMvx90TKOBvP9/A9mm8Gja7m9/zvEfyNXO6ozHgWeC9lsjhIlAhosb0 5HTjuLYs6Vi0ZwQ4MPcjuALo74ceIrAUiKn/GVmsUKlZ5IWmM1LKOPRd+Vjrwuet VS6evSlEROmbx7TqXtFOppGIyvCmt0yNehdQFjtgljxHUWhX4tYr2CYWTsoPkOdZ NI7rzIYm+f1GFjGQcMIgtxF+3lzoQ+fQdElmuvAjRo2J -----END CERTIFICATE-----Generated at Wed Jan 21 01:08:55 2026 by rpki-client