This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/1-5fTi6s1Kplp75lWlcBDMf3u4o.roa File: 1-5fTi6s1Kplp75lWlcBDMf3u4o.roa (raw, json) Hash identifier: tkr93CENCQMU8I4CRf7NT1nfm7qY9AruXpGRBogFjDc= Subject key identifier: D7:EE:5F:4E:2E:AC:D4:AA:65:A7:BE:65:5A:57:01:0C:C7:F7:BB:8A Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce Certificate serial: 019B7C134E82C8607CB122CFA651D5BA4935 Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/1-5fTi6s1Kplp75lWlcBDMf3u4o.roa Signing time: Fri 02 Jan 2026 00:19:58 +0000 ROA not before: Fri 02 Jan 2026 00:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8881 IP address blocks: 46.34.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:4e:82:c8:60:7c:b1:22:cf:a6:51:d5:ba:49:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce Validity Not Before: Jan 2 00:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d7ee5f4e2eacd4aa65a7be655a57010cc7f7bb8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e1:b2:1f:8e:28:e5:25:07:68:03:66:1f:92: b9:4f:57:a2:56:5b:4a:9b:fa:ca:0f:42:bf:10:55: df:c6:1e:a1:92:d7:80:fe:5f:75:d4:70:0b:49:c8: 14:15:be:c5:97:4a:73:14:b4:b9:1e:a0:59:e9:1d: 26:4e:13:37:bf:5c:b4:93:1d:49:f9:65:f5:28:4b: 3b:52:98:21:2a:cd:db:66:0a:0e:bc:55:cc:06:b1: fe:77:9f:31:60:f0:39:ef:b9:60:6d:61:f1:b1:aa: c7:5d:ac:c8:39:89:54:fa:11:40:6c:52:41:3e:ae: c8:d2:cf:f5:b8:cf:85:73:76:36:d2:49:b5:85:ba: 05:ab:42:fa:38:28:f4:32:aa:0e:8d:70:cb:a3:1b: bd:98:21:1b:a2:a5:b4:94:45:2e:10:73:3b:c6:f7: 89:8a:eb:f2:2c:de:bc:07:d4:c4:80:51:1c:60:24: 7a:59:ef:a9:8c:33:09:63:a0:3a:3d:73:eb:0e:f4: 48:71:64:47:69:2a:b6:bc:97:3a:da:88:7a:85:cc: 8e:54:5b:13:8f:a1:bc:7e:40:ca:0c:6a:7f:17:a6: dd:15:7a:e9:ac:34:00:3d:12:a7:5a:67:72:5c:6e: a1:58:13:a6:f0:92:1f:49:a1:8d:c0:99:e8:69:cd: cb:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:EE:5F:4E:2E:AC:D4:AA:65:A7:BE:65:5A:57:01:0C:C7:F7:BB:8A X509v3 Authority Key Identifier: keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/1-5fTi6s1Kplp75lWlcBDMf3u4o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.34.41.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:3a:22:9f:1a:ec:0f:1b:9a:5d:0a:68:b3:f5:bc:70:b5:c5: 35:57:79:d1:30:23:42:1d:4d:c2:06:a2:e6:35:4a:c6:ef:f7: 8a:7f:ef:c9:c3:e6:bd:c7:19:d4:35:57:3e:e0:f1:5c:fd:79: 22:b2:b5:df:6b:c6:ab:22:e1:97:89:bf:33:2d:28:92:a5:44: 05:c3:fc:32:ab:b3:e0:02:60:62:b4:d6:17:56:ff:d2:8f:30: 63:cc:74:8e:00:ef:9f:6f:3e:49:60:5e:73:87:88:c2:f5:f2: 76:54:2a:a8:8f:2c:40:9f:5f:4e:ed:e8:0a:65:29:82:3d:a7: af:55:37:fd:2b:94:2b:1f:4f:69:bc:23:4b:13:bf:1b:1d:57: 20:ce:aa:89:6d:8b:0f:8e:f3:0d:fe:40:8b:08:60:c0:39:0c: df:f0:33:78:c2:71:75:c2:10:8d:41:b7:78:7c:36:37:a7:c4: 0b:21:35:b3:dd:fb:f2:79:5d:8b:ac:33:84:60:07:a3:1d:d7: 14:93:70:0d:ee:e1:db:ee:37:73:24:42:0a:93:e6:02:2f:10: 3c:a9:03:f4:db:bd:79:9b:86:70:61:b1:72:1f:a0:6c:ae:2b: e4:48:64:d4:14:cf:29:d7:7f:f2:06:60:5c:9f:1f:3c:d9:42: 24:28:3a:d4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E06CyGB8sSLPplHVukk1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw N2VmY2UwHhcNMjYwMTAyMDAxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkN2VlNWY0ZTJlYWNkNGFhNjVhN2JlNjU1YTU3MDEwY2M3ZjdiYjhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseGyH44o5SUHaANmH5K5T1eiVltK m/rKD0K/EFXfxh6hkteA/l911HALScgUFb7Fl0pzFLS5HqBZ6R0mThM3v1y0kx1J +WX1KEs7UpghKs3bZgoOvFXMBrH+d58xYPA577lgbWHxsarHXazIOYlU+hFAbFJB Pq7I0s/1uM+Fc3Y20km1hboFq0L6OCj0MqoOjXDLoxu9mCEboqW0lEUuEHM7xveJ iuvyLN68B9TEgFEcYCR6We+pjDMJY6A6PXPrDvRIcWRHaSq2vJc62oh6hcyOVFsT j6G8fkDKDGp/F6bdFXrprDQAPRKnWmdyXG6hWBOm8JIfSaGNwJnoac3LQQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNfuX04urNSqZae+ZVpXAQzH97uKMB8GA1UdIwQY MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt YTZiOTkxZjRmYWY4LzEvMS01ZlRpNnMxS3BscDc1bFdsY0JETWYzdTRvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4 LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiIpMA0G CSqGSIb3DQEBCwUAA4IBAQA+OiKfGuwPG5pdCmiz9bxwtcU1V3nRMCNCHU3CBqLm NUrG7/eKf+/Jw+a9xxnUNVc+4PFc/XkisrXfa8arIuGXib8zLSiSpUQFw/wyq7Pg AmBitNYXVv/SjzBjzHSOAO+fbz5JYF5zh4jC9fJ2VCqojyxAn19O7egKZSmCPaev VTf9K5QrH09pvCNLE78bHVcgzqqJbYsPjvMN/kCLCGDAOQzf8DN4wnF1whCNQbd4 fDY3p8QLITWz3fvyeV2LrDOEYAejHdcUk3AN7uHb7jdzJEIKk+YCLxA8qQP02715 m4ZwYbFyH6BsrivkSGTUFM8p13/yBmBcnx882UIkKDrU -----END CERTIFICATE-----Generated at Wed Jan 21 01:51:11 2026 by rpki-client