This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/sNtqJVBgNOZKvOOoSizpNY6uXfc.roa File: sNtqJVBgNOZKvOOoSizpNY6uXfc.roa (raw, json) Hash identifier: qlkBknwlplBkW99VaChbeT/pRtq/ip6OEf221SQRDX4= Subject key identifier: B0:DB:6A:25:50:60:34:E6:4A:BC:E3:A8:4A:2C:E9:35:8E:AE:5D:F7 Certificate issuer: /CN=5f31d979b710ede2068823881aa611ad13af5459 Certificate serial: 019B7DCAEEC3166B6AD2138D85022114A864 Authority key identifier: 5F:31:D9:79:B7:10:ED:E2:06:88:23:88:1A:A6:11:AD:13:AF:54:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XzHZebcQ7eIGiCOIGqYRrROvVFk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/sNtqJVBgNOZKvOOoSizpNY6uXfc.roa Signing time: Fri 02 Jan 2026 08:20:10 +0000 ROA not before: Fri 02 Jan 2026 08:20:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47513 IP address blocks: 46.150.0.0/19 maxlen: 24 91.204.132.0/22 maxlen: 22 91.204.132.0/24 maxlen: 24 91.204.133.0/24 maxlen: 24 91.204.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.mft rsync://rpki.ripe.net/repository/DEFAULT/XzHZebcQ7eIGiCOIGqYRrROvVFk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:ee:c3:16:6b:6a:d2:13:8d:85:02:21:14:a8:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f31d979b710ede2068823881aa611ad13af5459 Validity Not Before: Jan 2 08:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b0db6a25506034e64abce3a84a2ce9358eae5df7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8c:9b:85:89:76:db:a7:c4:9b:be:de:8c:6d: f7:14:7d:2d:1b:6b:c1:23:04:20:59:d1:12:2c:51: 0a:ca:ca:e6:b6:e7:ca:34:e5:db:f8:aa:c0:a9:4f: 4e:6d:65:77:fb:a9:fb:2b:14:f9:0c:6f:d4:e9:93: d7:dd:1b:32:ca:c8:cf:a7:e5:16:ba:7e:bb:24:5b: c8:1b:fc:37:ba:6e:07:53:09:03:d6:2a:91:6e:1a: df:60:c5:21:08:e2:f2:1d:95:6b:85:b2:5b:f8:90: 82:f7:38:9a:92:60:34:e6:55:3b:46:32:bb:30:78: 02:8c:cd:ad:e4:fb:fc:49:2c:2f:96:ed:43:ca:5e: 19:42:67:a6:33:32:b5:56:d0:52:92:61:47:e7:b7: 4b:9d:0b:55:1d:92:5a:be:82:d9:5d:b4:7b:11:6e: 4e:fc:17:a6:06:f0:35:14:a3:81:7a:5b:9c:60:46: 55:5d:25:b3:9e:3c:2b:24:ad:dd:b3:de:88:d5:2e: bd:05:4b:e1:d9:d1:27:96:1e:cc:a3:d8:c9:a1:fe: 24:43:10:ea:df:9a:b4:0f:65:bf:ff:f7:dc:7b:4e: 4c:74:f4:09:62:ed:9f:c5:08:87:9a:d3:a0:92:87: 08:8a:7d:df:7b:b7:41:4b:f9:1e:d5:b0:4e:54:0c: 4c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:DB:6A:25:50:60:34:E6:4A:BC:E3:A8:4A:2C:E9:35:8E:AE:5D:F7 X509v3 Authority Key Identifier: keyid:5F:31:D9:79:B7:10:ED:E2:06:88:23:88:1A:A6:11:AD:13:AF:54:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzHZebcQ7eIGiCOIGqYRrROvVFk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/sNtqJVBgNOZKvOOoSizpNY6uXfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7de28d-3749-4d02-be9c-41c66458dd73/1/XzHZebcQ7eIGiCOIGqYRrROvVFk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.150.0.0/19 91.204.132.0/22 Signature Algorithm: sha256WithRSAEncryption 4b:b8:23:2c:9e:37:aa:20:3c:1b:0b:13:89:4d:ba:f2:88:97: c2:f6:d4:dc:01:6e:81:0e:d0:4b:2e:f3:84:36:02:20:94:1b: b1:99:25:48:3c:a4:00:1d:81:7a:78:5f:29:40:f5:47:fd:a1: 6a:40:3a:9c:20:64:0b:e5:02:99:4d:95:c3:eb:8a:4e:1c:67: 24:c5:8f:0c:e5:00:60:95:7d:34:93:8a:71:37:f1:8b:c4:a0: 4d:60:39:52:ce:98:d2:a4:c9:0c:fc:e5:77:42:2d:b9:1e:4f: 57:da:1f:f8:ae:67:ff:78:9c:da:03:c9:af:10:39:77:ea:44: f3:af:ce:81:cf:90:71:0d:bd:51:74:dd:03:7d:0a:58:71:9a: c1:13:06:61:84:47:68:37:0d:0f:9b:56:1f:7d:51:80:d9:d5: 19:a2:96:cd:72:bf:56:30:95:db:2a:64:d6:f9:22:b1:9b:68: 0c:31:ed:77:62:8a:39:0b:55:62:6d:98:c9:20:31:38:ac:d7: c7:62:94:6b:82:9d:5d:55:20:88:55:98:df:89:3a:15:79:16: 70:28:fa:81:7e:e3:77:fd:c5:6c:cd:8e:1c:9a:cb:91:5b:d9: 1f:d0:2e:83:c9:d7:62:ce:cd:6e:51:40:08:58:6f:c3:31:5f: a0:12:7d:22 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9yu7DFmtq0hONhQIhFKhkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmMzFkOTc5YjcxMGVkZTIwNjg4MjM4ODFhYTYxMWFkMTNh ZjU0NTkwHhcNMjYwMTAyMDgyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMGRiNmEyNTUwNjAzNGU2NGFiY2UzYTg0YTJjZTkzNThlYWU1ZGY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4ybhYl226fEm77ejG33FH0tG2vB IwQgWdESLFEKysrmtufKNOXb+KrAqU9ObWV3+6n7KxT5DG/U6ZPX3RsyysjPp+UW un67JFvIG/w3um4HUwkD1iqRbhrfYMUhCOLyHZVrhbJb+JCC9ziakmA05lU7RjK7 MHgCjM2t5Pv8SSwvlu1Dyl4ZQmemMzK1VtBSkmFH57dLnQtVHZJavoLZXbR7EW5O /BemBvA1FKOBelucYEZVXSWznjwrJK3ds96I1S69BUvh2dEnlh7Mo9jJof4kQxDq 35q0D2W///fce05MdPQJYu2fxQiHmtOgkocIin3fe7dBS/ke1bBOVAxM2QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLDbaiVQYDTmSrzjqEos6TWOrl33MB8GA1UdIwQY MBaAFF8x2Xm3EO3iBogjiBqmEa0Tr1RZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHpIWmViY1E3ZUlHaUNPSUdxWVJyUk92VkZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi83ZGUyOGQtMzc0OS00ZDAyLWJlOWMt NDFjNjY0NThkZDczLzEvc050cUpWQmdOT1pLdk9Pb1NpenBOWTZ1WGZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi83ZGUyOGQtMzc0OS00ZDAyLWJlOWMtNDFjNjY0NThkZDcz LzEvWHpIWmViY1E3ZUlHaUNPSUdxWVJyUk92VkZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFLpYAAwQC W8yEMA0GCSqGSIb3DQEBCwUAA4IBAQBLuCMsnjeqIDwbCxOJTbryiJfC9tTcAW6B DtBLLvOENgIglBuxmSVIPKQAHYF6eF8pQPVH/aFqQDqcIGQL5QKZTZXD64pOHGck xY8M5QBglX00k4pxN/GLxKBNYDlSzpjSpMkM/OV3Qi25Hk9X2h/4rmf/eJzaA8mv EDl36kTzr86Bz5BxDb1RdN0DfQpYcZrBEwZhhEdoNw0Pm1YffVGA2dUZopbNcr9W MJXbKmTW+SKxm2gMMe13Yoo5C1VibZjJIDE4rNfHYpRrgp1dVSCIVZjfiToVeRZw KPqBfuN3/cVszY4cmsuRW9kf0C6Dyddizs1uUUAIWG/DMV+gEn0i -----END CERTIFICATE-----Generated at Mon Feb 9 21:01:11 2026 by rpki-client