This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/1PJVy80sUt-YChpQFNLUpK8IvQ0.roa File: 1PJVy80sUt-YChpQFNLUpK8IvQ0.roa (raw, json) Hash identifier: nqFKbKbJhPRbJeEpGIojepPcvvFOxg7enXqUgRjFJQM= Subject key identifier: D4:F2:55:CB:CD:2C:52:DF:98:0A:1A:50:14:D2:D4:A4:AF:08:BD:0D Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce Certificate serial: 019BB2D9758BC241A4D811A5ED497AC8833B Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/1PJVy80sUt-YChpQFNLUpK8IvQ0.roa Signing time: Mon 12 Jan 2026 15:35:54 +0000 ROA not before: Mon 12 Jan 2026 15:35:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197100 IP address blocks: 46.34.32.0/22 maxlen: 22 46.34.36.0/24 maxlen: 24 46.34.40.0/24 maxlen: 24 46.34.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 21:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:b2:d9:75:8b:c2:41:a4:d8:11:a5:ed:49:7a:c8:83:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce Validity Not Before: Jan 12 15:35:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d4f255cbcd2c52df980a1a5014d2d4a4af08bd0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:93:26:91:da:f5:86:cc:0b:43:71:99:5b:38: 63:d9:a2:74:c8:04:13:f1:3a:fe:37:e3:b9:d7:b4: 22:e5:cc:e8:80:1d:72:81:25:cc:3b:d0:6d:77:f0: 9d:a0:6a:e7:fa:35:fe:1f:73:59:c8:27:34:55:e2: 5b:dc:66:3c:19:d4:e6:9e:04:db:98:3f:76:8d:2f: d0:ee:76:0d:c7:93:14:5d:4d:a6:ec:1b:53:b1:5f: 7a:e8:c7:f7:4f:8f:02:0e:30:01:54:04:91:0e:a3: 32:9d:fb:59:f3:b3:6b:c7:f3:66:fd:7c:6f:f8:ba: 2b:79:0e:e3:81:5d:0f:bc:5f:57:9b:d5:63:31:f4: 1a:5e:06:3d:4c:46:02:43:41:aa:97:9c:53:3f:c1: 37:9a:42:1d:f9:e9:16:4c:86:c9:ce:8c:54:1b:47: 53:da:c3:84:dc:9b:be:b5:98:a2:b3:fa:e7:14:99: f5:63:bb:0a:5a:1d:4f:94:14:52:1a:52:31:4b:82: 42:0d:39:7c:0b:96:b3:4b:c7:bf:99:53:8f:9a:4d: 5f:4a:86:4f:e9:6e:af:82:a7:4a:65:53:66:99:11: e7:d5:b8:d3:3f:79:3c:e6:90:a4:cb:cc:be:3a:9c: 58:7c:d2:5f:9b:59:94:27:68:78:11:f8:67:42:9e: 8e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F2:55:CB:CD:2C:52:DF:98:0A:1A:50:14:D2:D4:A4:AF:08:BD:0D X509v3 Authority Key Identifier: keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/1PJVy80sUt-YChpQFNLUpK8IvQ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.34.32.0-46.34.36.255 46.34.40.0/24 46.34.63.0/24 Signature Algorithm: sha256WithRSAEncryption 14:80:4c:65:01:f0:4c:b6:ba:e5:c7:a6:9f:bc:73:3d:83:21: 42:f8:c5:1c:b0:c6:ac:e3:23:98:31:a2:ae:78:23:0a:8b:5c: a7:a6:03:b7:ed:0c:5d:1b:9d:23:60:72:05:c8:80:5d:6e:af: 2d:95:6d:2e:48:91:7a:f7:7e:8c:9c:f7:e4:a7:06:23:06:20: 35:d2:13:1b:3f:90:34:4b:da:0f:7f:80:67:53:90:24:ca:32: 34:6f:9f:75:3b:e6:29:ca:06:f6:e9:b7:22:07:b9:40:0e:e6: 44:18:01:16:ba:bd:42:ef:28:53:27:09:52:dd:28:1e:11:97: a8:75:b7:0e:a0:47:99:04:e2:a9:ec:b8:2c:a5:b6:64:0f:8a: 84:b9:b0:07:3b:e2:13:c4:6a:da:b3:a9:b2:4f:d8:b1:17:65: 45:55:04:6c:0d:8c:4b:44:d5:a1:59:eb:e5:b9:6a:71:8b:ac: d4:ed:7d:a6:21:9a:1b:fc:fa:8f:a1:16:38:be:c8:25:09:16: 78:89:6a:4a:d4:57:4a:ad:00:dd:cb:9d:2b:53:88:62:fe:55: 51:a7:fa:b1:27:f5:da:ba:e4:f5:96:5b:ad:a7:89:ba:56:b3: c8:0d:ee:7a:29:e4:f8:0c:c2:74:ec:ce:09:91:90:fa:77:f2: 30:c8:68:89 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZuy2XWLwkGk2BGl7Ul6yIM7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw N2VmY2UwHhcNMjYwMTEyMTUzNTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNGYyNTVjYmNkMmM1MmRmOTgwYTFhNTAxNGQyZDRhNGFmMDhiZDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJMmkdr1hswLQ3GZWzhj2aJ0yAQT 8Tr+N+O517Qi5czogB1ygSXMO9Btd/CdoGrn+jX+H3NZyCc0VeJb3GY8GdTmngTb mD92jS/Q7nYNx5MUXU2m7BtTsV966Mf3T48CDjABVASRDqMynftZ87Nrx/Nm/Xxv +LoreQ7jgV0PvF9Xm9VjMfQaXgY9TEYCQ0Gql5xTP8E3mkId+ekWTIbJzoxUG0dT 2sOE3Ju+tZiis/rnFJn1Y7sKWh1PlBRSGlIxS4JCDTl8C5azS8e/mVOPmk1fSoZP 6W6vgqdKZVNmmRHn1bjTP3k85pCky8y+OpxYfNJfm1mUJ2h4EfhnQp6OEwIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFNTyVcvNLFLfmAoaUBTS1KSvCL0NMB8GA1UdIwQY MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt YTZiOTkxZjRmYWY4LzEvMVBKVnk4MHNVdC1ZQ2hwUUZOTFVwSzhJdlEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4 LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAUuIiAD BAAuIiQDBAAuIigDBAAuIj8wDQYJKoZIhvcNAQELBQADggEBABSATGUB8Ey2uuXH pp+8cz2DIUL4xRywxqzjI5gxoq54IwqLXKemA7ftDF0bnSNgcgXIgF1ury2VbS5I kXr3foyc9+SnBiMGIDXSExs/kDRL2g9/gGdTkCTKMjRvn3U75inKBvbptyIHuUAO 5kQYARa6vULvKFMnCVLdKB4Rl6h1tw6gR5kE4qnsuCyltmQPioS5sAc74hPEatqz qbJP2LEXZUVVBGwNjEtE1aFZ6+W5anGLrNTtfaYhmhv8+o+hFji+yCUJFniJakrU V0qtAN3LnStTiGL+VVGn+rEn9dq65PWWW62nibpWs8gN7nop5PgMwnTszgmRkPp3 8jDIaIk= -----END CERTIFICATE-----Generated at Wed Jan 21 01:50:09 2026 by rpki-client