This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Xa3aUsiQYVlNZ5VcrIIK_jAKctk.roa File: Xa3aUsiQYVlNZ5VcrIIK_jAKctk.roa (raw, json) Hash identifier: kmDj33CZwukfWzcqZSB35AY27WE1Fo7eUVsk7tTOXog= Subject key identifier: 5D:AD:DA:52:C8:90:61:59:4D:67:95:5C:AC:82:0A:FE:30:0A:72:D9 Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce Certificate serial: 019B7C1353965CBFB6D693780DE4B1D74DF5 Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Xa3aUsiQYVlNZ5VcrIIK_jAKctk.roa Signing time: Fri 02 Jan 2026 00:19:59 +0000 ROA not before: Fri 02 Jan 2026 00:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211439 IP address blocks: 46.34.56.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:53:96:5c:bf:b6:d6:93:78:0d:e4:b1:d7:4d:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce Validity Not Before: Jan 2 00:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5dadda52c89061594d67955cac820afe300a72d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e8:a4:11:58:5e:47:7f:0b:49:f4:93:59:78: 09:40:10:7d:56:91:de:4e:5d:84:4e:26:94:85:02: 1f:e5:ab:b7:f1:21:76:4b:31:16:0a:36:78:36:78: 3c:b9:04:41:bb:48:ab:8f:b9:b7:3b:0d:1a:d9:de: 1d:df:c6:8a:92:d6:3c:52:bb:cf:93:bc:fb:0f:e4: ac:79:be:59:ab:27:41:12:76:a5:77:d1:63:57:8e: 89:6a:40:de:c7:0e:c3:81:ba:ea:84:5d:17:ef:44: d8:6d:96:5c:60:80:a6:10:6e:45:06:32:ac:14:7f: 5b:c1:a5:46:d4:47:a5:e9:7e:08:d8:6c:15:53:a2: 64:90:cd:e8:47:d8:04:f8:fb:77:92:e0:d2:eb:39: c3:06:71:c6:e4:fb:91:30:d0:13:2c:50:20:5c:21: fe:5b:57:e2:82:45:c8:3f:8b:ae:13:7b:57:ad:18: e9:87:12:92:ba:f1:28:74:48:00:de:bb:4c:2b:00: 76:cd:85:46:20:31:61:be:bd:ec:9f:7f:30:6e:09: b9:74:a0:a8:2c:72:9e:a6:be:2e:3d:be:07:98:c1: 12:99:2b:0f:d7:f4:30:7a:0a:71:b2:a8:53:a1:10: 65:92:80:d9:a6:b2:6f:d4:6d:f3:56:5b:62:08:2b: ad:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:AD:DA:52:C8:90:61:59:4D:67:95:5C:AC:82:0A:FE:30:0A:72:D9 X509v3 Authority Key Identifier: keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Xa3aUsiQYVlNZ5VcrIIK_jAKctk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.34.56.0/23 Signature Algorithm: sha256WithRSAEncryption 0e:21:8b:82:27:77:83:7c:06:01:f3:2c:22:c5:1f:0b:78:77: cc:cb:17:7a:43:41:47:2d:fe:1f:6f:3b:f0:16:af:36:d0:af: e5:a7:3b:f3:60:b0:7a:49:51:c3:08:8a:5b:30:05:bf:59:49: 02:ff:f8:10:ef:a1:ce:72:ac:09:57:c7:86:12:42:9d:9e:9f: ef:6f:66:82:27:20:53:64:fa:e9:0c:9f:4f:ba:f9:2a:ee:fe: 67:b1:b3:1c:c9:dd:c6:f1:aa:9e:8b:f6:d2:c0:a5:fa:70:67: 98:85:a7:d8:fa:39:80:9c:dc:28:98:61:17:0a:3c:af:9b:cc: 3d:aa:90:7b:6e:ee:a8:ad:6a:a4:42:ce:55:85:3d:9e:bf:2e: 66:36:c3:07:42:4f:05:70:09:77:c5:c8:04:1f:9b:a5:87:82: 4b:72:f3:d6:ea:f0:9d:db:1a:95:56:62:45:54:f3:20:46:53: 90:19:57:b1:f0:41:65:ce:c7:41:35:0a:e1:16:3c:e7:d2:76: 1f:87:63:89:a7:35:ca:a4:99:48:50:c7:e2:48:92:e9:15:96: 38:cb:98:45:0c:c0:e4:e7:c4:f8:c7:84:b5:07:2c:eb:c1:71: d8:48:59:71:cb:32:61:3f:b4:bc:8a:59:c9:9e:b8:5b:f5:ba: 94:6a:27:58 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E1OWXL+21pN4DeSx1031MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw N2VmY2UwHhcNMjYwMTAyMDAxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ZGFkZGE1MmM4OTA2MTU5NGQ2Nzk1NWNhYzgyMGFmZTMwMGE3MmQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+ikEVheR38LSfSTWXgJQBB9VpHe Tl2ETiaUhQIf5au38SF2SzEWCjZ4Nng8uQRBu0irj7m3Ow0a2d4d38aKktY8UrvP k7z7D+Sseb5ZqydBEnald9FjV46JakDexw7DgbrqhF0X70TYbZZcYICmEG5FBjKs FH9bwaVG1Eel6X4I2GwVU6JkkM3oR9gE+Pt3kuDS6znDBnHG5PuRMNATLFAgXCH+ W1figkXIP4uuE3tXrRjphxKSuvEodEgA3rtMKwB2zYVGIDFhvr3sn38wbgm5dKCo LHKepr4uPb4HmMESmSsP1/QwegpxsqhToRBlkoDZprJv1G3zVltiCCutJwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFF2t2lLIkGFZTWeVXKyCCv4wCnLZMB8GA1UdIwQY MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt YTZiOTkxZjRmYWY4LzEvWGEzYVVzaVFZVmxOWjVWY3JJSUtfakFLY3RrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4 LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLiI4MA0G CSqGSIb3DQEBCwUAA4IBAQAOIYuCJ3eDfAYB8ywixR8LeHfMyxd6Q0FHLf4fbzvw Fq820K/lpzvzYLB6SVHDCIpbMAW/WUkC//gQ76HOcqwJV8eGEkKdnp/vb2aCJyBT ZPrpDJ9Puvkq7v5nsbMcyd3G8aqei/bSwKX6cGeYhafY+jmAnNwomGEXCjyvm8w9 qpB7bu6orWqkQs5VhT2evy5mNsMHQk8FcAl3xcgEH5ulh4JLcvPW6vCd2xqVVmJF VPMgRlOQGVex8EFlzsdBNQrhFjzn0nYfh2OJpzXKpJlIUMfiSJLpFZY4y5hFDMDk 58T4x4S1ByzrwXHYSFlxyzJhP7S8ilnJnrhb9bqUaidY -----END CERTIFICATE-----Generated at Mon Jan 19 17:09:57 2026 by rpki-client