This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/CqnSPAR5hx5wngRbC5k9LUXkoA8.roa File: CqnSPAR5hx5wngRbC5k9LUXkoA8.roa (raw, json) Hash identifier: aGbrhbaxU+LsZBoIPFkr4v6QWHwOe3+O/Syqf2zUoUE= Subject key identifier: 0A:A9:D2:3C:04:79:87:1E:70:9E:04:5B:0B:99:3D:2D:45:E4:A0:0F Certificate issuer: /CN=a7f00d1bffff3a53e94f867d743d031b922db5b1 Certificate serial: 019B7C8027DD4B6059F2057DC12A6C2BC4EC Authority key identifier: A7:F0:0D:1B:FF:FF:3A:53:E9:4F:86:7D:74:3D:03:1B:92:2D:B5:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_ANG___OlPpT4Z9dD0DG5IttbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/CqnSPAR5hx5wngRbC5k9LUXkoA8.roa Signing time: Fri 02 Jan 2026 02:18:51 +0000 ROA not before: Fri 02 Jan 2026 02:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6663 IP address blocks: 46.29.0.0/22 maxlen: 22 46.29.4.0/22 maxlen: 22 2a03:6e0:8000::/33 maxlen: 33 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.mft rsync://rpki.ripe.net/repository/DEFAULT/p_ANG___OlPpT4Z9dD0DG5IttbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 15:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:80:27:dd:4b:60:59:f2:05:7d:c1:2a:6c:2b:c4:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7f00d1bffff3a53e94f867d743d031b922db5b1 Validity Not Before: Jan 2 02:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=0aa9d23c0479871e709e045b0b993d2d45e4a00f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:fa:12:b9:36:01:3b:32:cd:f7:80:fc:5a:9c: 87:10:f2:4c:70:d2:e2:f0:ce:53:6a:ce:3d:67:f9: a8:54:25:ca:dc:ee:c9:48:53:a1:ea:ad:1d:67:f2: d2:e4:3c:dd:bb:24:17:52:5b:b5:53:fa:c7:19:4d: c5:dc:c6:b1:2c:cb:4c:b2:e4:e8:ac:6d:b0:eb:8a: fe:78:96:3f:26:2c:10:fe:d6:13:d9:13:78:60:74: cf:55:4f:ae:d4:d7:24:d3:bb:08:66:26:49:88:95: 20:cf:b9:97:a6:1a:da:52:ca:d7:51:53:22:be:a0: 7a:5c:a3:88:08:df:6c:d5:1f:5d:ae:cf:e6:75:d9: f3:b2:c3:64:d3:4b:eb:93:64:58:c1:18:b2:26:96: 7a:68:76:7d:69:8a:f5:e3:e1:c7:37:6e:23:87:e1: f5:b5:19:e7:4f:24:c2:82:d3:55:c4:74:8c:0b:21: dd:53:17:35:4a:22:b1:35:6c:4f:e6:1e:ff:e6:ed: ac:3e:fb:8a:ce:00:29:1b:84:d4:22:2f:d2:58:e0: 6d:20:bb:1a:43:e0:35:bf:99:f5:1d:58:13:ac:87: 2f:b6:11:a2:de:02:d4:1c:34:3b:4f:0c:a6:1b:00: a2:2b:88:52:14:66:3a:65:a1:31:39:10:0b:16:9c: 56:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:A9:D2:3C:04:79:87:1E:70:9E:04:5B:0B:99:3D:2D:45:E4:A0:0F X509v3 Authority Key Identifier: keyid:A7:F0:0D:1B:FF:FF:3A:53:E9:4F:86:7D:74:3D:03:1B:92:2D:B5:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_ANG___OlPpT4Z9dD0DG5IttbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/CqnSPAR5hx5wngRbC5k9LUXkoA8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/4ff06f-e97f-4c5a-9da7-7ee090504fba/1/p_ANG___OlPpT4Z9dD0DG5IttbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.29.0.0/21 IPv6: 2a03:6e0:8000::/33 Signature Algorithm: sha256WithRSAEncryption 7f:ca:26:8b:43:38:97:7e:bc:0c:d0:c5:cb:6e:36:cb:ea:4b: 41:98:75:1c:1e:da:cd:21:45:f2:9c:9f:bf:2b:0c:8f:4b:ca: 84:10:36:3d:9c:63:b5:ca:b4:d2:94:7d:53:7f:65:57:fa:f4: 7a:d6:f6:1e:57:8f:22:66:8e:d5:f4:4f:44:e4:da:53:8d:49: 29:5f:4e:40:96:48:c6:00:99:52:0f:93:f6:6c:67:0b:62:e2: 4a:6d:5c:9b:2f:77:7e:08:ec:79:7a:9c:4d:a8:10:c4:1d:1a: 0c:d3:bb:c9:cb:85:b1:af:b6:ab:49:3a:ef:42:3d:f6:2b:fe: e4:71:77:53:44:99:b3:2b:b9:f0:e0:88:0a:d6:49:64:a7:d5: 48:2f:2d:98:29:73:d2:c3:12:25:f0:47:5e:40:c0:c2:8a:2c: 4a:4f:70:eb:d2:14:41:23:ae:3e:2d:8c:cb:3d:02:1d:44:70: 9f:a1:81:0b:39:0a:38:d6:9f:65:b1:b8:b7:01:b4:c8:a9:d6: 13:69:fe:95:09:ff:fc:fe:ce:e4:9b:18:95:00:1b:67:fc:ef: 24:ee:bc:dd:e5:83:61:63:22:f9:89:63:ba:61:3e:6b:58:a9: 45:84:c9:95:cb:b9:d6:7e:d7:5a:d5:53:8a:79:8a:3f:70:12: 01:e6:c9:f6 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgISAZt8gCfdS2BZ8gV9wSpsK8TsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZjAwZDFiZmZmZjNhNTNlOTRmODY3ZDc0M2QwMzFiOTIy ZGI1YjEwHhcNMjYwMTAyMDIxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwYWE5ZDIzYzA0Nzk4NzFlNzA5ZTA0NWIwYjk5M2QyZDQ1ZTRhMDBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfoSuTYBOzLN94D8WpyHEPJMcNLi 8M5Tas49Z/moVCXK3O7JSFOh6q0dZ/LS5DzduyQXUlu1U/rHGU3F3MaxLMtMsuTo rG2w64r+eJY/JiwQ/tYT2RN4YHTPVU+u1Nck07sIZiZJiJUgz7mXphraUsrXUVMi vqB6XKOICN9s1R9drs/mddnzssNk00vrk2RYwRiyJpZ6aHZ9aYr14+HHN24jh+H1 tRnnTyTCgtNVxHSMCyHdUxc1SiKxNWxP5h7/5u2sPvuKzgApG4TUIi/SWOBtILsa Q+A1v5n1HVgTrIcvthGi3gLUHDQ7TwymGwCiK4hSFGY6ZaExORALFpxWwQIDAQAB o4ICGTCCAhUwHQYDVR0OBBYEFAqp0jwEeYcecJ4EWwuZPS1F5KAPMB8GA1UdIwQY MBaAFKfwDRv//zpT6U+GfXQ9AxuSLbWxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcF9BTkdfX19PbFBwVDRaOWREMERHNUl0dGJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi80ZmYwNmYtZTk3Zi00YzVhLTlkYTct N2VlMDkwNTA0ZmJhLzEvQ3FuU1BBUjVoeDV3bmdSYkM1azlMVVhrb0E4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi80ZmYwNmYtZTk3Zi00YzVhLTlkYTctN2VlMDkwNTA0ZmJh LzEvcF9BTkdfX19PbFBwVDRaOWREMERHNUl0dGJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQDLh0AMA4E AgACMAgDBgcqAwbggDANBgkqhkiG9w0BAQsFAAOCAQEAf8omi0M4l368DNDFy242 y+pLQZh1HB7azSFF8pyfvysMj0vKhBA2PZxjtcq00pR9U39lV/r0etb2HlePImaO 1fRPROTaU41JKV9OQJZIxgCZUg+T9mxnC2LiSm1cmy93fgjseXqcTagQxB0aDNO7 ycuFsa+2q0k670I99iv+5HF3U0SZsyu58OCICtZJZKfVSC8tmClz0sMSJfBHXkDA woosSk9w69IUQSOuPi2Myz0CHURwn6GBCzkKONafZbG4twG0yKnWE2n+lQn//P7O 5JsYlQAbZ/zvJO683eWDYWMi+YljumE+a1ipRYTJlcu51n7XWtVTinmKP3ASAebJ 9g== -----END CERTIFICATE-----Generated at Mon Jan 26 22:31:59 2026 by rpki-client