This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/dR0zpIqq8tLg1OamhsPNo_J5QBg.roa File: dR0zpIqq8tLg1OamhsPNo_J5QBg.roa (raw, json) Hash identifier: oBSo9M/Eu7aDbt6HN3S3ca9KyP+2wEB/H+NG+mj4DOQ= Subject key identifier: 75:1D:33:A4:8A:AA:F2:D2:E0:D4:E6:A6:86:C3:CD:A3:F2:79:40:18 Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce Certificate serial: 019B7C134D75DB2B9734C0618B73FED5503C Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/dR0zpIqq8tLg1OamhsPNo_J5QBg.roa Signing time: Fri 02 Jan 2026 00:19:58 +0000 ROA not before: Fri 02 Jan 2026 00:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7018 IP address blocks: 46.34.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 06:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:4d:75:db:2b:97:34:c0:61:8b:73:fe:d5:50:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce Validity Not Before: Jan 2 00:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=751d33a48aaaf2d2e0d4e6a686c3cda3f2794018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:70:0c:b4:ae:e4:ec:a0:97:66:58:ea:4b:0c: c7:10:b9:73:e8:f2:07:77:1f:7f:02:5a:70:9d:81: dd:95:33:cd:cf:02:92:51:fb:43:7d:ba:e5:49:f3: 72:17:d6:16:9f:78:3a:d3:fa:5d:a0:97:69:f7:f4: 78:e7:0d:29:db:2d:87:b8:89:97:42:58:98:9d:10: 42:7f:cc:36:37:67:4a:bb:47:76:4f:32:21:d3:ec: 3e:25:4c:06:25:c7:d0:7d:ff:4d:bf:01:83:2f:f0: 1b:da:51:d2:ba:ab:ed:dc:b2:49:17:9a:07:10:51: 5f:6a:59:e1:51:12:95:4f:c9:4a:c1:d7:fb:bb:09: 64:6c:f8:48:2a:26:92:00:04:42:76:0c:28:b1:9c: ad:db:73:7f:0e:fb:40:1d:de:29:24:5b:5d:96:24: c1:d9:6f:fd:7c:04:4d:81:ac:3d:73:e5:37:82:63: 37:a4:7a:3d:32:4e:90:98:66:58:0c:d1:bc:74:b4: 31:ae:c3:25:ce:8c:a6:0e:e3:8a:76:03:fd:11:cd: c2:62:72:e2:78:47:bf:cb:54:2a:be:be:7d:70:5d: 9e:50:1c:71:5e:17:20:70:b6:62:9d:5e:bd:ab:b2: 3a:7c:f9:b7:df:7b:0d:e1:51:16:fb:b0:2a:00:fb: 7d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:1D:33:A4:8A:AA:F2:D2:E0:D4:E6:A6:86:C3:CD:A3:F2:79:40:18 X509v3 Authority Key Identifier: keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/dR0zpIqq8tLg1OamhsPNo_J5QBg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.34.37.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:bb:0e:fa:96:4a:94:b9:41:59:6b:77:7e:2e:25:91:e0:50: 20:94:6a:b2:da:39:66:9e:1e:fb:d5:05:57:fb:0d:ac:fc:01: d2:01:07:18:8a:e7:02:3c:e2:00:fb:5f:2d:d8:ac:15:76:30: ee:5b:d4:db:82:3b:71:99:60:08:c5:be:b6:9f:34:89:e3:31: 55:b7:dc:a0:23:21:82:03:e3:71:c4:4d:c1:2d:df:1d:19:21: bf:ca:79:dc:c5:fa:ad:c9:e5:e9:ca:84:c3:1f:9b:a6:5a:d1: b2:6c:17:00:39:0f:e8:19:fd:9e:5a:01:ad:88:c5:2d:26:87: 7c:9f:10:fd:bb:0e:15:b0:ce:74:a5:d8:91:d5:56:1e:c9:cd: a9:b7:bc:0f:75:4b:9f:67:0b:ab:62:5a:40:ed:c1:13:31:56: 4c:5a:bd:29:bb:01:85:03:25:fc:21:fe:8f:90:10:a1:82:6d: 3b:bf:dc:23:9b:78:06:03:04:09:61:d2:57:7b:cf:10:99:c4: fc:14:f1:13:83:e0:70:74:80:00:65:29:29:ef:bb:04:8a:33: 57:39:f9:c6:67:b9:b3:40:29:c2:60:7d:ab:76:87:dc:f6:d8: d0:6c:9a:89:9f:e8:b4:34:fc:ca:d9:f0:60:50:19:ed:0e:21: c3:b6:af:1a -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E0112yuXNMBhi3P+1VA8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw N2VmY2UwHhcNMjYwMTAyMDAxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3NTFkMzNhNDhhYWFmMmQyZTBkNGU2YTY4NmMzY2RhM2YyNzk0MDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHAMtK7k7KCXZljqSwzHELlz6PIH dx9/AlpwnYHdlTPNzwKSUftDfbrlSfNyF9YWn3g60/pdoJdp9/R45w0p2y2HuImX QliYnRBCf8w2N2dKu0d2TzIh0+w+JUwGJcfQff9NvwGDL/Ab2lHSuqvt3LJJF5oH EFFfalnhURKVT8lKwdf7uwlkbPhIKiaSAARCdgwosZyt23N/DvtAHd4pJFtdliTB 2W/9fARNgaw9c+U3gmM3pHo9Mk6QmGZYDNG8dLQxrsMlzoymDuOKdgP9Ec3CYnLi eEe/y1Qqvr59cF2eUBxxXhcgcLZinV69q7I6fPm333sN4VEW+7AqAPt9lQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHUdM6SKqvLS4NTmpobDzaPyeUAYMB8GA1UdIwQY MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt YTZiOTkxZjRmYWY4LzEvZFIwenBJcXE4dExnMU9hbWhzUE5vX0o1UUJnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4 LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiIlMA0G CSqGSIb3DQEBCwUAA4IBAQBOuw76lkqUuUFZa3d+LiWR4FAglGqy2jlmnh771QVX +w2s/AHSAQcYiucCPOIA+18t2KwVdjDuW9TbgjtxmWAIxb62nzSJ4zFVt9ygIyGC A+NxxE3BLd8dGSG/ynncxfqtyeXpyoTDH5umWtGybBcAOQ/oGf2eWgGtiMUtJod8 nxD9uw4VsM50pdiR1VYeyc2pt7wPdUufZwurYlpA7cETMVZMWr0puwGFAyX8If6P kBChgm07v9wjm3gGAwQJYdJXe88QmcT8FPETg+BwdIAAZSkp77sEijNXOfnGZ7mz QCnCYH2rdofc9tjQbJqJn+i0NPzK2fBgUBntDiHDtq8a -----END CERTIFICATE-----Generated at Sun Jan 18 11:04:23 2026 by rpki-client