This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/n-n0F8-smlKDKWswC1m2gxnHDDY.roa File: n-n0F8-smlKDKWswC1m2gxnHDDY.roa (raw, json) Hash identifier: q6YsSdX5hsZsNG4NcA8tNzI34ml2KRfXVRRHtJp3KRQ= Subject key identifier: 9F:E9:F4:17:CF:AC:9A:52:83:29:6B:30:0B:59:B6:83:19:C7:0C:36 Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce Certificate serial: 019B7C134FFDB128F8384B607515CDE32718 Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/n-n0F8-smlKDKWswC1m2gxnHDDY.roa Signing time: Fri 02 Jan 2026 00:19:58 +0000 ROA not before: Fri 02 Jan 2026 00:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 33652 IP address blocks: 46.34.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:4f:fd:b1:28:f8:38:4b:60:75:15:cd:e3:27:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce Validity Not Before: Jan 2 00:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9fe9f417cfac9a5283296b300b59b68319c70c36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:22:85:ef:0e:65:04:65:51:68:5f:71:f7:e0: e6:d7:71:12:e5:c7:8e:b5:07:97:28:24:f4:77:ac: 7c:82:21:03:a9:44:a1:f9:dd:67:a3:ad:f5:79:10: 7e:e9:99:62:78:b8:95:b9:47:e8:c4:01:73:a8:88: 2b:36:e5:ca:31:f0:e0:43:dd:90:b8:c8:95:96:09: 22:c2:57:90:dd:aa:e7:a6:5e:32:00:94:7c:7e:f2: 23:55:ed:46:92:50:29:ef:3c:a1:ec:6e:48:e3:33: 0b:80:f6:11:3b:6b:63:89:b4:8a:36:1b:62:63:8a: 23:e8:75:f6:84:1e:33:7e:73:3f:d8:08:7d:16:76: eb:f7:1b:34:4b:fe:0b:c4:ec:ba:b4:8c:e5:ad:41: 0e:97:ed:d5:4c:3c:a7:f4:ff:c2:d8:c9:88:be:3e: e2:49:7d:75:3a:17:69:7d:91:ec:63:22:07:f1:e3: a7:1d:16:f9:fe:96:d6:bc:7d:98:67:93:64:d6:a5: 51:8d:c8:16:76:12:b7:a8:54:db:4d:70:78:1f:aa: 78:98:1b:e6:13:80:70:ba:d9:08:25:af:3b:48:fc: bc:35:3b:79:f4:09:42:17:a0:57:18:79:7d:26:59: 02:d5:f6:6e:4a:e1:ed:0b:e1:db:89:2b:72:96:9f: 0f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E9:F4:17:CF:AC:9A:52:83:29:6B:30:0B:59:B6:83:19:C7:0C:36 X509v3 Authority Key Identifier: keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/n-n0F8-smlKDKWswC1m2gxnHDDY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.34.39.0/24 Signature Algorithm: sha256WithRSAEncryption 4b:e5:be:7c:8d:4a:fb:70:af:9d:6f:1d:13:ed:bd:fd:b0:71: c0:67:5f:1c:27:f2:80:3f:37:75:71:a3:9c:fb:c8:6e:14:4f: 37:47:a0:7d:e8:b9:82:be:cf:31:0a:82:dd:7f:9c:47:13:88: 55:d9:57:6f:c0:06:67:4a:a8:a3:ef:f3:20:b5:64:72:19:32: cd:83:48:2d:2c:f4:35:d9:04:d7:64:33:d4:e6:fe:c3:db:b2: 29:46:f7:73:f8:b3:77:29:ed:bb:65:57:b0:a3:fe:a4:28:20: 2d:db:b1:2c:2c:14:ea:a7:17:68:ac:f7:09:06:d5:21:96:95: 0f:e6:ff:04:b4:db:6e:0f:d7:e6:68:13:35:d4:1b:de:cd:3a: a0:62:9f:6c:b3:91:14:90:31:ec:5c:b2:31:e4:17:99:8d:fd: ea:02:b7:93:35:12:7c:6b:73:f6:40:4c:ec:1c:d0:ba:d0:ce: 3f:c3:ff:24:9e:52:39:bc:0c:56:e3:7e:7d:a0:83:db:58:3d: 24:d7:d0:59:54:09:a5:ad:c3:35:da:94:bf:f9:5d:ab:f5:d7: 65:ce:ae:b0:43:c0:23:2b:99:84:62:7a:d2:b0:51:d1:8c:6b: 74:d6:67:2a:25:7d:f5:03:d4:44:cc:a5:af:e2:3c:16:38:ec: 5f:e7:f2:5c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E0/9sSj4OEtgdRXN4ycYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw N2VmY2UwHhcNMjYwMTAyMDAxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5ZmU5ZjQxN2NmYWM5YTUyODMyOTZiMzAwYjU5YjY4MzE5YzcwYzM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSKF7w5lBGVRaF9x9+Dm13ES5ceO tQeXKCT0d6x8giEDqUSh+d1no631eRB+6ZlieLiVuUfoxAFzqIgrNuXKMfDgQ92Q uMiVlgkiwleQ3arnpl4yAJR8fvIjVe1GklAp7zyh7G5I4zMLgPYRO2tjibSKNhti Y4oj6HX2hB4zfnM/2Ah9Fnbr9xs0S/4LxOy6tIzlrUEOl+3VTDyn9P/C2MmIvj7i SX11OhdpfZHsYyIH8eOnHRb5/pbWvH2YZ5Nk1qVRjcgWdhK3qFTbTXB4H6p4mBvm E4BwutkIJa87SPy8NTt59AlCF6BXGHl9JlkC1fZuSuHtC+HbiStylp8PhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ/p9BfPrJpSgylrMAtZtoMZxww2MB8GA1UdIwQY MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt YTZiOTkxZjRmYWY4LzEvbi1uMEY4LXNtbEtES1dzd0MxbTJneG5IRERZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4 LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiInMA0G CSqGSIb3DQEBCwUAA4IBAQBL5b58jUr7cK+dbx0T7b39sHHAZ18cJ/KAPzd1caOc +8huFE83R6B96LmCvs8xCoLdf5xHE4hV2VdvwAZnSqij7/MgtWRyGTLNg0gtLPQ1 2QTXZDPU5v7D27IpRvdz+LN3Ke27ZVewo/6kKCAt27EsLBTqpxdorPcJBtUhlpUP 5v8EtNtuD9fmaBM11BvezTqgYp9ss5EUkDHsXLIx5BeZjf3qAreTNRJ8a3P2QEzs HNC60M4/w/8knlI5vAxW4359oIPbWD0k19BZVAmlrcM12pS/+V2r9ddlzq6wQ8Aj K5mEYnrSsFHRjGt01mcqJX31A9REzKWv4jwWOOxf5/Jc -----END CERTIFICATE-----Generated at Tue Jan 20 22:47:28 2026 by rpki-client