This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/L9jpwXDS-vYpi4qR-JKeAkBEf-o.roa File: L9jpwXDS-vYpi4qR-JKeAkBEf-o.roa (raw, json) Hash identifier: DInUHVPHkb1b0chwDIDO63EENvDAowPZs43OgE4KgXg= Subject key identifier: 2F:D8:E9:C1:70:D2:FA:F6:29:8B:8A:91:F8:92:9E:02:40:44:7F:EA Certificate issuer: /CN=7e2cb3d0a641769c7801c481612015c2ccb3b655 Certificate serial: 019B7AC86C33D051D4193FDDAC6B0D7630F6 Authority key identifier: 7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/L9jpwXDS-vYpi4qR-JKeAkBEf-o.roa Signing time: Thu 01 Jan 2026 18:18:33 +0000 ROA not before: Thu 01 Jan 2026 18:18:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8943 IP address blocks: 46.255.72.0/21 maxlen: 21 46.255.72.0/22 maxlen: 22 2a00:a400::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:6c:33:d0:51:d4:19:3f:dd:ac:6b:0d:76:30:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e2cb3d0a641769c7801c481612015c2ccb3b655 Validity Not Before: Jan 1 18:18:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2fd8e9c170d2faf6298b8a91f8929e0240447fea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:90:e2:93:71:4a:29:bb:64:6d:0b:94:a8:54: a9:21:42:d5:2c:9a:a8:71:8a:da:cf:95:ef:73:00: af:95:e3:d7:8c:95:c3:66:58:03:b6:87:cd:43:17: 18:8a:8c:df:58:57:51:d5:c3:52:e6:67:07:77:b4: ce:4d:4d:0d:cd:62:6e:94:ac:f3:1d:0b:0c:1e:ee: b0:07:59:6a:a1:c6:3b:f5:8c:4e:95:c3:19:d2:eb: 39:c3:36:7b:60:57:8b:f3:14:5b:06:20:1b:b4:88: bc:a4:ea:ac:27:75:19:a2:d5:ea:ce:04:21:30:a1: b1:88:45:d4:ed:d1:ab:8a:16:e5:44:d3:62:d9:a5: 56:45:58:21:2e:d0:7e:73:54:99:88:a8:b2:7b:62: b5:9a:68:00:f4:c8:a6:ef:19:b5:52:af:4a:1f:16: 74:ea:d5:aa:47:34:b3:ee:c1:ce:08:45:cb:4d:b3: 03:b0:eb:36:8b:6e:24:03:b4:d4:be:c9:fb:77:cd: 20:78:f2:41:43:47:8e:3e:3d:96:7e:b2:25:4f:34: 40:ed:8e:20:0f:b4:3f:5b:93:fc:26:49:97:2e:09: 1f:37:86:90:1d:99:a8:7a:1f:86:5a:e9:95:11:02: 90:7c:d1:88:13:d0:d3:f6:bf:98:20:10:cb:a0:bb: ec:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D8:E9:C1:70:D2:FA:F6:29:8B:8A:91:F8:92:9E:02:40:44:7F:EA X509v3 Authority Key Identifier: keyid:7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/L9jpwXDS-vYpi4qR-JKeAkBEf-o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.255.72.0/21 IPv6: 2a00:a400::/32 Signature Algorithm: sha256WithRSAEncryption a8:e2:fc:d1:0c:52:80:ec:25:f6:61:8e:22:48:93:f2:d4:31: 33:f8:68:87:60:06:74:64:ff:b1:8b:df:ae:47:aa:bd:71:05: 24:b4:fd:66:51:42:96:12:d2:a3:cd:af:56:2a:d2:b1:e0:c7: 10:9a:c9:08:14:4e:08:d9:32:7e:b5:76:11:be:8d:b3:19:ee: 7d:1b:ef:bb:1a:5f:9a:aa:0a:5d:5a:b7:9f:e1:a0:48:fd:ad: 1e:8a:1c:0d:db:91:bb:70:51:c9:ad:63:36:1d:fe:80:44:c2: 56:ee:d6:a4:f6:4e:cb:a7:e9:cc:f7:28:e6:58:3c:fa:54:92: ef:4a:31:5b:c2:bb:fc:d8:7a:53:2f:e2:35:da:41:3a:b2:6f: 85:71:4d:c9:8f:dc:38:5b:75:09:a2:79:83:76:83:42:af:73: 27:46:5c:e0:11:b4:9e:b8:11:c2:e9:c4:5e:b4:58:c6:ce:12: 5f:4f:f0:e4:34:53:1b:56:ee:87:83:92:ad:3a:d5:71:a0:80: 5d:b6:91:0b:ab:d5:24:6a:11:66:09:2a:95:b5:64:dd:a0:5f: 1b:a9:a3:6b:80:2a:1b:ec:6b:0f:bc:a4:02:dc:1e:ff:28:58: 72:41:c3:a9:a8:c8:5d:04:a7:9a:48:af:5f:42:c8:db:97:30: b5:e8:1a:f9 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt6yGwz0FHUGT/drGsNdjD2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMmNiM2QwYTY0MTc2OWM3ODAxYzQ4MTYxMjAxNWMyY2Ni M2I2NTUwHhcNMjYwMTAxMTgxODMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyZmQ4ZTljMTcwZDJmYWY2Mjk4YjhhOTFmODkyOWUwMjQwNDQ3ZmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJDik3FKKbtkbQuUqFSpIULVLJqo cYraz5XvcwCvlePXjJXDZlgDtofNQxcYiozfWFdR1cNS5mcHd7TOTU0NzWJulKzz HQsMHu6wB1lqocY79YxOlcMZ0us5wzZ7YFeL8xRbBiAbtIi8pOqsJ3UZotXqzgQh MKGxiEXU7dGrihblRNNi2aVWRVghLtB+c1SZiKiye2K1mmgA9Mim7xm1Uq9KHxZ0 6tWqRzSz7sHOCEXLTbMDsOs2i24kA7TUvsn7d80gePJBQ0eOPj2WfrIlTzRA7Y4g D7Q/W5P8JkmXLgkfN4aQHZmoeh+GWumVEQKQfNGIE9DT9r+YIBDLoLvs1wIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFC/Y6cFw0vr2KYuKkfiSngJARH/qMB8GA1UdIwQY MBaAFH4ss9CmQXaceAHEgWEgFcLMs7ZVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZml5ejBLWkJkcHg0QWNTQllTQVZ3c3l6dGxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80MzFkZjEtMDlmNC00NzVjLWEwNDUt ZjViYjI4NDNjODllLzEvTDlqcHdYRFMtdllwaTRxUi1KS2VBa0JFZi1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC80MzFkZjEtMDlmNC00NzVjLWEwNDUtZjViYjI4NDNjODll LzEvZml5ejBLWkJkcHg0QWNTQllTQVZ3c3l6dGxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDLv9IMA0E AgACMAcDBQAqAKQAMA0GCSqGSIb3DQEBCwUAA4IBAQCo4vzRDFKA7CX2YY4iSJPy 1DEz+GiHYAZ0ZP+xi9+uR6q9cQUktP1mUUKWEtKjza9WKtKx4McQmskIFE4I2TJ+ tXYRvo2zGe59G++7Gl+aqgpdWref4aBI/a0eihwN25G7cFHJrWM2Hf6ARMJW7tak 9k7Lp+nM9yjmWDz6VJLvSjFbwrv82HpTL+I12kE6sm+FcU3Jj9w4W3UJonmDdoNC r3MnRlzgEbSeuBHC6cRetFjGzhJfT/DkNFMbVu6Hg5KtOtVxoIBdtpELq9UkahFm CSqVtWTdoF8bqaNrgCob7GsPvKQC3B7/KFhyQcOpqMhdBKeaSK9fQsjblzC16Br5 -----END CERTIFICATE-----Generated at Sat Jan 10 14:12:48 2026 by rpki-client