This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/JDP8uo8q3PiGhX8fC6HQLbfWnys.roa File: JDP8uo8q3PiGhX8fC6HQLbfWnys.roa (raw, json) Hash identifier: xSPXepbCAbboKAUc/7j/hy2rpJWReo1T0TGkyUPMAyw= Subject key identifier: 24:33:FC:BA:8F:2A:DC:F8:86:85:7F:1F:0B:A1:D0:2D:B7:D6:9F:2B Certificate issuer: /CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79 Certificate serial: 019B7AC853EB98546714D6E03E989C312FF3 Authority key identifier: A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/JDP8uo8q3PiGhX8fC6HQLbfWnys.roa Signing time: Thu 01 Jan 2026 18:18:27 +0000 ROA not before: Thu 01 Jan 2026 18:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 396982 IP address blocks: 46.19.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.crl rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.mft rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 21:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:c8:53:eb:98:54:67:14:d6:e0:3e:98:9c:31:2f:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2f6bc8f163af49c03d9ad69e716b42c5b96ee79 Validity Not Before: Jan 1 18:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=2433fcba8f2adcf886857f1f0ba1d02db7d69f2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:98:62:9d:70:8d:7d:27:98:b2:f1:cd:ce:07: ec:95:bc:01:c6:07:02:5d:64:fe:ba:9d:64:a0:31: 23:6b:ef:02:66:05:04:3d:3c:1c:85:b1:db:63:33: c1:02:a5:64:2a:c4:53:a3:9d:95:4c:ab:33:0a:ca: 88:32:dc:e9:d5:e3:b8:91:f4:ce:58:55:96:5e:0e: 5a:b0:a8:2c:6b:0f:57:22:23:bc:76:af:a3:80:d6: 66:8b:78:5c:f7:90:99:bb:d2:b8:c8:82:5f:0f:f1: 16:c2:24:fc:5f:61:fb:99:26:61:22:33:a2:1c:ba: 62:6a:9f:4a:03:7f:69:62:e1:25:88:03:5a:ed:76: 10:38:33:69:7b:08:e5:d2:54:89:35:b3:67:40:29: b3:c4:2d:87:bd:de:b0:ca:ad:1d:22:9d:8a:22:39: ac:b4:d6:6b:4a:9b:7e:8f:1b:71:bb:05:7f:f1:48: 78:d5:cd:eb:30:36:91:6e:e8:e7:4e:32:5b:86:2e: ba:6a:33:c6:70:6f:52:56:3c:32:69:78:84:de:d1: 8d:7d:2f:42:78:43:73:a7:d1:62:b9:ab:ab:8c:b8: b8:c0:12:72:94:de:57:4c:5e:a5:8d:a6:9e:7b:87: 99:26:c8:8d:ae:a9:3f:50:1a:85:12:7d:5f:59:0c: 56:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:33:FC:BA:8F:2A:DC:F8:86:85:7F:1F:0B:A1:D0:2D:B7:D6:9F:2B X509v3 Authority Key Identifier: keyid:A2:F6:BC:8F:16:3A:F4:9C:03:D9:AD:69:E7:16:B4:2C:5B:96:EE:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ova8jxY69JwD2a1p5xa0LFuW7nk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/JDP8uo8q3PiGhX8fC6HQLbfWnys.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/2851b6-2e65-4859-9c05-506bb6c679ce/1/ova8jxY69JwD2a1p5xa0LFuW7nk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.19.170.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:a4:4a:42:b2:ce:f6:38:6d:4c:77:e2:e7:d7:3e:22:e5:e8: 2f:2b:5b:cd:53:14:bc:a0:9c:b5:44:8d:7a:c7:c5:cc:eb:7a: 48:65:b9:5b:1a:f2:d4:6b:af:d8:5d:2f:33:9b:34:64:e9:22: a3:aa:d2:d3:ff:14:0a:2e:57:19:f7:4d:20:1b:8f:66:ac:5a: 2f:4f:d5:4b:7e:49:d9:37:51:a7:11:b3:99:49:b8:7c:0b:44: 51:39:e8:a4:7e:a7:38:34:14:a4:e0:62:5c:3d:db:7b:e5:e2: 43:f3:d1:fd:e9:18:a0:ba:42:af:9a:b8:c2:b1:7e:eb:78:76: ef:ce:6a:50:dc:5d:43:d7:d7:04:af:f7:c1:7f:0d:96:46:b0: 05:db:49:a4:87:ab:59:be:a8:f4:9c:2e:36:53:d5:c3:8d:83: 64:f1:7c:8e:7b:d5:91:0a:47:33:43:c5:5f:75:33:f2:fc:ce: 74:80:a6:55:e8:98:6d:4f:40:ea:38:01:1c:97:3f:4a:aa:28: d3:fc:db:70:36:6c:05:56:d5:35:cb:ab:8e:1f:89:37:b9:b3: a7:bb:c8:85:61:7b:8d:30:08:8f:cf:c3:5a:91:44:c0:51:71: 8c:60:fa:f2:c8:92:95:08:b8:e5:77:ac:8a:f2:fc:a7:e5:2e: 45:8b:99:f0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6yFPrmFRnFNbgPpicMS/zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyZjZiYzhmMTYzYWY0OWMwM2Q5YWQ2OWU3MTZiNDJjNWI5 NmVlNzkwHhcNMjYwMTAxMTgxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNDMzZmNiYThmMmFkY2Y4ODY4NTdmMWYwYmExZDAyZGI3ZDY5ZjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9phinXCNfSeYsvHNzgfslbwBxgcC XWT+up1koDEja+8CZgUEPTwchbHbYzPBAqVkKsRTo52VTKszCsqIMtzp1eO4kfTO WFWWXg5asKgsaw9XIiO8dq+jgNZmi3hc95CZu9K4yIJfD/EWwiT8X2H7mSZhIjOi HLpiap9KA39pYuEliANa7XYQODNpewjl0lSJNbNnQCmzxC2Hvd6wyq0dIp2KIjms tNZrSpt+jxtxuwV/8Uh41c3rMDaRbujnTjJbhi66ajPGcG9SVjwyaXiE3tGNfS9C eENzp9FiuaurjLi4wBJylN5XTF6ljaaee4eZJsiNrqk/UBqFEn1fWQxWSwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCQz/LqPKtz4hoV/Hwuh0C231p8rMB8GA1UdIwQY MBaAFKL2vI8WOvScA9mtaecWtCxblu55MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3ZhOGp4WTY5SndEMmExcDV4YTBMRnVXN25rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8yODUxYjYtMmU2NS00ODU5LTljMDUt NTA2YmI2YzY3OWNlLzEvSkRQOHVvOHEzUGlHaFg4ZkM2SFFMYmZXbnlzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny8yODUxYjYtMmU2NS00ODU5LTljMDUtNTA2YmI2YzY3OWNl LzEvb3ZhOGp4WTY5SndEMmExcDV4YTBMRnVXN25rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALhOqMA0G CSqGSIb3DQEBCwUAA4IBAQBMpEpCss72OG1Md+Ln1z4i5egvK1vNUxS8oJy1RI16 x8XM63pIZblbGvLUa6/YXS8zmzRk6SKjqtLT/xQKLlcZ900gG49mrFovT9VLfknZ N1GnEbOZSbh8C0RROeikfqc4NBSk4GJcPdt75eJD89H96RigukKvmrjCsX7reHbv zmpQ3F1D19cEr/fBfw2WRrAF20mkh6tZvqj0nC42U9XDjYNk8XyOe9WRCkczQ8Vf dTPy/M50gKZV6JhtT0DqOAEclz9KqijT/NtwNmwFVtU1y6uOH4k3ubOnu8iFYXuN MAiPz8NakUTAUXGMYPryyJKVCLjld6yK8vyn5S5Fi5nw -----END CERTIFICATE-----Generated at Fri Jan 9 06:24:37 2026 by rpki-client