This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/nD5UUoUGQF8Rxq4gzZbVuJa8PJE.roa File: nD5UUoUGQF8Rxq4gzZbVuJa8PJE.roa (raw, json) Hash identifier: RvmrVvYCv5AOaoQZhyeX78k0GCJb5MBQlGW4Cu7wFrA= Subject key identifier: 9C:3E:54:52:85:06:40:5F:11:C6:AE:20:CD:96:D5:B8:96:BC:3C:91 Certificate issuer: /CN=50980fb6ade858f2652e736993126c85759f06d9 Certificate serial: 019B7DCA08EC65B250A636B7CB774D60A8D1 Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/nD5UUoUGQF8Rxq4gzZbVuJa8PJE.roa Signing time: Fri 02 Jan 2026 08:19:11 +0000 ROA not before: Fri 02 Jan 2026 08:19:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 46.148.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.mft rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 02:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:08:ec:65:b2:50:a6:36:b7:cb:77:4d:60:a8:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9 Validity Not Before: Jan 2 08:19:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9c3e54528506405f11c6ae20cd96d5b896bc3c91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d2:7f:0d:81:64:d7:0e:58:2a:59:3a:12:79: e7:2e:ca:f7:42:31:b1:91:35:00:19:e4:43:ca:04: d2:41:ab:19:ca:91:8d:9a:a9:bf:4f:cc:87:51:07: 51:5a:27:ba:84:db:09:cc:de:78:43:1e:8e:db:ad: 68:c4:32:94:7e:23:c7:3d:ee:76:53:d0:aa:c3:38: 74:c5:36:d5:0c:95:59:0f:ae:de:12:66:c0:8e:ad: 67:9a:67:00:6e:3c:31:10:1c:04:08:ab:80:3f:24: 0b:60:76:8e:50:b2:55:ae:4c:b0:e3:b1:f6:31:ec: fb:f1:e1:29:c6:79:e7:55:2d:2e:cf:21:5f:0d:a4: 99:93:e3:ca:52:9d:7b:5f:6d:c3:a7:f9:ef:3b:7e: 2b:7d:a1:2e:7c:42:96:d0:b2:d8:7f:81:a0:80:89: fe:51:a6:bd:5d:58:d6:47:4f:ce:e1:85:aa:c2:83: 4c:bd:8b:70:64:f4:29:cd:98:03:38:b9:a0:ac:51: 94:36:21:f6:af:cf:79:46:df:df:60:8b:43:09:7b: 21:6d:ec:58:ae:a8:b3:27:83:4c:01:fc:b7:34:a1: 88:b9:f9:d2:66:8d:55:6a:32:89:8f:09:6a:d0:28: 61:81:e7:e2:9e:2c:f4:bc:4b:5a:52:2c:15:6b:be: 71:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:3E:54:52:85:06:40:5F:11:C6:AE:20:CD:96:D5:B8:96:BC:3C:91 X509v3 Authority Key Identifier: keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/nD5UUoUGQF8Rxq4gzZbVuJa8PJE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.148.209.0/24 Signature Algorithm: sha256WithRSAEncryption 20:e8:c7:20:d6:05:66:20:bc:2a:c8:e0:1b:c0:4b:52:6f:1b: e1:38:29:6e:89:2d:c4:97:2a:33:7f:eb:c1:86:17:b0:60:16: 61:18:8c:ca:5e:2c:2d:13:8f:c3:6a:33:c9:7f:ef:59:a5:9a: d9:2b:ab:83:ec:68:ad:1e:db:09:66:4b:61:7f:c9:26:2a:88: b5:ea:d9:16:32:e2:89:e1:a4:24:b4:fc:d8:e7:9f:f6:26:a0: 19:0a:7b:fb:34:66:70:cf:67:d2:68:a4:95:17:a8:b9:7c:f0: a5:ad:4d:7e:09:14:c6:90:23:ec:14:66:21:04:e2:00:c6:4b: 95:5a:aa:64:2e:62:b8:12:22:61:b7:8e:98:98:32:2c:c8:44: 54:b9:6c:3f:16:00:2c:a1:7d:d0:4f:62:f6:b0:e6:6b:9a:3b: 45:ab:de:eb:04:3b:ac:5d:21:a2:9f:d4:72:1d:b9:c6:77:71: d4:31:26:22:74:76:50:6e:ae:ec:b9:88:66:d9:32:be:c5:1d: 60:9d:93:07:d4:81:33:08:e3:2c:2f:0f:b1:22:3e:20:29:cb: b2:e7:f0:30:8a:9d:05:61:a0:a0:49:b5:17:96:d4:a3:5e:83: 4b:df:d8:23:c6:3e:1c:f6:6b:b5:f9:d9:07:d8:df:d4:42:37: 11:38:f0:76 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9ygjsZbJQpja3y3dNYKjRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUwOTgwZmI2YWRlODU4ZjI2NTJlNzM2OTkzMTI2Yzg1NzU5 ZjA2ZDkwHhcNMjYwMTAyMDgxOTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5YzNlNTQ1Mjg1MDY0MDVmMTFjNmFlMjBjZDk2ZDViODk2YmMzYzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNJ/DYFk1w5YKlk6EnnnLsr3QjGx kTUAGeRDygTSQasZypGNmqm/T8yHUQdRWie6hNsJzN54Qx6O261oxDKUfiPHPe52 U9Cqwzh0xTbVDJVZD67eEmbAjq1nmmcAbjwxEBwECKuAPyQLYHaOULJVrkyw47H2 Mez78eEpxnnnVS0uzyFfDaSZk+PKUp17X23Dp/nvO34rfaEufEKW0LLYf4GggIn+ Uaa9XVjWR0/O4YWqwoNMvYtwZPQpzZgDOLmgrFGUNiH2r895Rt/fYItDCXshbexY rqizJ4NMAfy3NKGIufnSZo1VajKJjwlq0Chhgefiniz0vEtaUiwVa75xCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJw+VFKFBkBfEcauIM2W1biWvDyRMB8GA1UdIwQY MBaAFFCYD7at6FjyZS5zaZMSbIV1nwbZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVUpnUHRxM29XUEpsTG5OcGt4SnNoWFdmQnRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEt Y2NhNzlhNjk4MjBhLzEvbkQ1VVVvVUdRRjhSeHE0Z3paYlZ1SmE4UEpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEtY2NhNzlhNjk4MjBh LzEvVUpnUHRxM29XUEpsTG5OcGt4SnNoWFdmQnRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALpTRMA0G CSqGSIb3DQEBCwUAA4IBAQAg6Mcg1gVmILwqyOAbwEtSbxvhOCluiS3Elyozf+vB hhewYBZhGIzKXiwtE4/DajPJf+9ZpZrZK6uD7GitHtsJZkthf8kmKoi16tkWMuKJ 4aQktPzY55/2JqAZCnv7NGZwz2fSaKSVF6i5fPClrU1+CRTGkCPsFGYhBOIAxkuV WqpkLmK4EiJht46YmDIsyERUuWw/FgAsoX3QT2L2sOZrmjtFq97rBDusXSGin9Ry HbnGd3HUMSYidHZQbq7suYhm2TK+xR1gnZMH1IEzCOMsLw+xIj4gKcuy5/Awip0F YaCgSbUXltSjXoNL39gjxj4c9mu1+dkH2N/UQjcROPB2 -----END CERTIFICATE-----Generated at Sun Jan 18 08:54:46 2026 by rpki-client