This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/pdjWyCsS6vRt3qgRpmz1-t9Lw4w.roa File: pdjWyCsS6vRt3qgRpmz1-t9Lw4w.roa (raw, json) Hash identifier: iNpMVvC5UiWrjFC/YV4kYZVM+3Z5N79XJuNaeg291pc= Subject key identifier: A5:D8:D6:C8:2B:12:EA:F4:6D:DE:A8:11:A6:6C:F5:FA:DF:4B:C3:8C Certificate issuer: /CN=c592a06090f016940d31eb1b09bae12d94b195b0 Certificate serial: 019B7F835300BCCCAAB2FE3B69C74EE79809 Authority key identifier: C5:92:A0:60:90:F0:16:94:0D:31:EB:1B:09:BA:E1:2D:94:B1:95:B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZKgYJDwFpQNMesbCbrhLZSxlbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/pdjWyCsS6vRt3qgRpmz1-t9Lw4w.roa Signing time: Fri 02 Jan 2026 16:21:11 +0000 ROA not before: Fri 02 Jan 2026 16:21:11 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215234 IP address blocks: 46.102.118.0/23 maxlen: 23 46.102.118.0/24 maxlen: 24 194.0.59.0/24 maxlen: 24 2a14:2e40::/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.mft rsync://rpki.ripe.net/repository/DEFAULT/xZKgYJDwFpQNMesbCbrhLZSxlbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:53:00:bc:cc:aa:b2:fe:3b:69:c7:4e:e7:98:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c592a06090f016940d31eb1b09bae12d94b195b0 Validity Not Before: Jan 2 16:21:11 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a5d8d6c82b12eaf46ddea811a66cf5fadf4bc38c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d6:0e:3e:c3:cd:f5:01:6b:01:5c:cf:86:42: 89:b3:71:70:ac:fe:6b:0c:40:09:26:37:25:c5:47: 5c:ae:2c:c3:5b:8a:54:df:12:dd:e8:23:2a:f3:3e: 8a:65:5c:89:4d:d8:a0:4b:db:e0:9a:67:70:b7:54: 6e:09:fa:dc:e7:f9:69:22:23:cf:91:3d:e7:75:a7: 93:ee:83:4e:ab:43:56:cd:09:b6:d0:86:f2:9f:3e: eb:53:68:c7:75:37:a9:68:b4:62:0c:6e:30:95:ee: 2f:39:28:d1:be:7f:8f:b0:50:22:3c:38:5a:21:72: d3:4c:38:c0:44:65:7b:eb:b7:4c:d3:3a:00:26:1c: e3:49:bf:f2:66:44:22:0c:6a:44:19:d3:d3:49:ce: 74:75:ae:36:fd:f9:86:84:a1:f7:c2:b4:1b:7f:75: 5b:bf:8f:af:38:bf:c9:b8:ce:52:f8:0a:75:a5:69: 71:67:90:74:4f:ab:f4:51:fa:8b:48:0c:10:be:b1: 8a:76:6a:ee:e5:0d:d1:f2:0e:be:a3:fd:18:ba:54: d9:52:33:e0:25:d7:59:3c:9d:3a:e2:f3:de:cc:d5: a8:d2:b6:dc:8f:89:df:a1:c9:03:98:57:01:52:1f: 99:d4:89:ef:a1:10:c3:39:28:33:dd:83:1b:b9:d6: fa:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D8:D6:C8:2B:12:EA:F4:6D:DE:A8:11:A6:6C:F5:FA:DF:4B:C3:8C X509v3 Authority Key Identifier: keyid:C5:92:A0:60:90:F0:16:94:0D:31:EB:1B:09:BA:E1:2D:94:B1:95:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZKgYJDwFpQNMesbCbrhLZSxlbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/pdjWyCsS6vRt3qgRpmz1-t9Lw4w.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/703902-7061-4ecb-9df1-c45620326491/1/xZKgYJDwFpQNMesbCbrhLZSxlbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.102.118.0/23 194.0.59.0/24 IPv6: 2a14:2e40::/29 Signature Algorithm: sha256WithRSAEncryption 29:dc:8f:aa:33:0a:41:67:ed:ad:e1:cb:0f:dc:94:99:9b:ea: 92:c9:bd:39:6d:98:3e:e1:3c:10:3a:a9:00:01:30:fb:df:43: c4:9b:d0:cc:f5:77:9a:7c:c1:bf:55:7e:4a:17:a5:79:f8:eb: e1:4b:78:90:af:52:13:6c:1a:eb:ee:87:d0:2f:3c:97:b5:c1: 1c:83:d6:1a:42:cf:ab:64:23:cc:37:31:ab:1b:30:25:09:13: 01:6b:16:c1:ef:6a:bc:b9:9e:3e:65:b6:db:bd:fd:ab:de:55: 0f:55:8e:db:b8:ce:da:90:3b:b1:bd:06:95:55:37:d8:8e:d5: ac:8c:b2:3f:f0:3e:bd:3b:29:af:db:b5:77:e6:25:b8:66:8d: df:c7:8d:eb:de:49:6b:4c:de:7d:05:c5:e6:cc:d1:ec:d6:5e: d0:d1:3a:6d:2b:6d:21:d1:ce:14:19:98:1c:67:58:b5:53:3b: 47:0b:08:ac:57:07:71:4e:3d:0a:ba:e1:16:4f:38:7f:59:51: ab:a1:8d:04:78:cc:30:56:e8:84:89:60:da:3b:a6:ed:85:9a: 58:83:89:9a:43:40:c5:41:66:81:b3:a3:ad:48:a9:2f:2d:d3: ae:c5:1b:db:c0:19:ad:e5:6d:f7:da:d5:d0:23:bc:c2:a0:1d: ff:e9:32:00 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt/g1MAvMyqsv47acdO55gJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM1OTJhMDYwOTBmMDE2OTQwZDMxZWIxYjA5YmFlMTJkOTRi MTk1YjAwHhcNMjYwMTAyMTYyMTExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNWQ4ZDZjODJiMTJlYWY0NmRkZWE4MTFhNjZjZjVmYWRmNGJjMzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9YOPsPN9QFrAVzPhkKJs3FwrP5r DEAJJjclxUdcrizDW4pU3xLd6CMq8z6KZVyJTdigS9vgmmdwt1RuCfrc5/lpIiPP kT3ndaeT7oNOq0NWzQm20Ibynz7rU2jHdTepaLRiDG4wle4vOSjRvn+PsFAiPDha IXLTTDjARGV767dM0zoAJhzjSb/yZkQiDGpEGdPTSc50da42/fmGhKH3wrQbf3Vb v4+vOL/JuM5S+Ap1pWlxZ5B0T6v0UfqLSAwQvrGKdmru5Q3R8g6+o/0YulTZUjPg JddZPJ064vPezNWo0rbcj4nfockDmFcBUh+Z1InvoRDDOSgz3YMbudb68QIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFKXY1sgrEur0bd6oEaZs9frfS8OMMB8GA1UdIwQY MBaAFMWSoGCQ8BaUDTHrGwm64S2UsZWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveFpLZ1lKRHdGcFFOTWVzYkNicmhMWlN4bGJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS83MDM5MDItNzA2MS00ZWNiLTlkZjEt YzQ1NjIwMzI2NDkxLzEvcGRqV3lDc1M2dlJ0M3FnUnBtejEtdDlMdzR3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS83MDM5MDItNzA2MS00ZWNiLTlkZjEtYzQ1NjIwMzI2NDkx LzEveFpLZ1lKRHdGcFFOTWVzYkNicmhMWlN4bGJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBLmZ2AwQA wgA7MA0EAgACMAcDBQMqFC5AMA0GCSqGSIb3DQEBCwUAA4IBAQAp3I+qMwpBZ+2t 4csP3JSZm+qSyb05bZg+4TwQOqkAATD730PEm9DM9XeafMG/VX5KF6V5+OvhS3iQ r1ITbBrr7ofQLzyXtcEcg9YaQs+rZCPMNzGrGzAlCRMBaxbB72q8uZ4+Zbbbvf2r 3lUPVY7buM7akDuxvQaVVTfYjtWsjLI/8D69Oymv27V35iW4Zo3fx43r3klrTN59 BcXmzNHs1l7Q0TptK20h0c4UGZgcZ1i1UztHCwisVwdxTj0KuuEWTzh/WVGroY0E eMwwVuiEiWDaO6bthZpYg4maQ0DFQWaBs6OtSKkvLdOuxRvbwBmt5W332tXQI7zC oB3/6TIA -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:17 2026 by rpki-client