This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/uK6_ifWLoIZv8VuYRndlwMy_4bU.roa File: uK6_ifWLoIZv8VuYRndlwMy_4bU.roa (raw, json) Hash identifier: bzZHRyxvv4u3wzZyj+e9ebfI0EsjjmajKyBNoIA9GYk= Subject key identifier: B8:AE:BF:89:F5:8B:A0:86:6F:F1:5B:98:46:77:65:C0:CC:BF:E1:B5 Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce Certificate serial: 019B7C13508AF3D13E102570070B22CE5F58 Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/uK6_ifWLoIZv8VuYRndlwMy_4bU.roa Signing time: Fri 02 Jan 2026 00:19:59 +0000 ROA not before: Fri 02 Jan 2026 00:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42689 IP address blocks: 46.34.48.0/24 maxlen: 24 46.34.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:50:8a:f3:d1:3e:10:25:70:07:0b:22:ce:5f:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce Validity Not Before: Jan 2 00:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b8aebf89f58ba0866ff15b98467765c0ccbfe1b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:54:4f:3a:3c:81:f1:0f:3c:d9:72:62:a6:c5: 91:75:09:1a:72:f1:22:c3:16:ec:2a:df:9f:00:36: f4:ba:de:52:34:61:f4:cb:ca:f4:bd:6c:dd:9d:90: 5d:25:ad:ab:8d:ae:e4:5c:eb:fa:3f:47:66:8c:9c: d6:17:80:66:4a:d2:1d:8f:af:93:74:2b:d5:64:2f: 16:81:f2:3b:0f:32:96:25:0e:f2:d4:01:6d:63:4f: 6c:ab:22:6b:75:8c:5b:ea:a4:74:80:70:44:55:57: 3f:64:e6:46:62:8a:e2:1a:d3:4e:ff:9b:74:34:f5: 4e:c1:10:44:03:35:01:8a:f4:c7:e4:26:71:33:64: aa:ac:b2:d2:cd:5c:8c:4c:f3:91:e4:aa:8a:a2:6a: 70:49:5a:df:f5:4d:c9:c5:47:21:55:b1:75:a3:b5: ed:e4:e2:74:a5:49:ae:eb:9c:fc:6c:6f:8a:af:13: 93:0c:37:18:29:f8:b9:3b:1a:23:be:aa:2e:17:5c: f4:33:55:f1:47:76:51:78:a5:8c:92:33:91:2e:1b: 6d:09:d1:59:15:9d:f8:76:07:b7:df:47:e8:47:de: 8e:25:ae:18:15:5e:e1:d5:3e:18:1b:ea:e2:90:e1: f9:bd:55:7f:c9:42:cb:8e:03:91:a3:71:d0:1d:f1: 46:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:AE:BF:89:F5:8B:A0:86:6F:F1:5B:98:46:77:65:C0:CC:BF:E1:B5 X509v3 Authority Key Identifier: keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/uK6_ifWLoIZv8VuYRndlwMy_4bU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.34.48.0/24 46.34.59.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:0a:99:9a:ff:3b:8b:58:64:a2:95:54:62:36:c6:35:ee:bb: 1f:ee:13:a4:c6:83:17:4f:3e:f1:79:f2:8b:c0:4b:cb:ad:31: 74:f0:9d:d2:12:71:8e:a8:14:9e:68:a0:7b:97:6b:e4:2d:eb: 38:38:7d:53:b6:58:84:77:aa:99:3e:61:53:0c:b6:e8:dd:e4: b2:0f:1f:9d:81:12:0c:e8:01:81:cf:1b:71:b2:45:c4:33:1d: 20:3e:1f:46:b4:76:46:d9:66:19:96:35:a6:e2:71:bf:ae:ac: 1d:71:48:2e:7d:77:2c:77:97:df:60:a6:c2:97:ce:bc:e2:67: 2c:4c:04:29:10:0d:f0:67:9b:8a:c4:15:b8:95:1c:b9:fa:21: 76:64:6f:db:ff:5c:7f:bc:5c:d3:a1:bf:60:19:d7:45:7a:6e: 36:61:5a:d4:6d:2d:bc:9e:41:35:83:75:b6:6a:0a:ca:ba:2f: 72:94:7d:b7:6f:82:87:06:e2:93:5a:5a:64:5e:a7:08:52:6d: b4:fb:0f:be:d0:81:cf:fd:51:d6:51:a7:53:1a:ce:05:fb:e8: 98:89:3e:ee:75:36:3e:8f:12:c8:92:64:1e:d5:2f:ac:08:b7: 14:86:de:26:09:89:4a:cb:16:be:9a:d4:ed:1b:22:5e:97:ae: 6d:fe:b7:29 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt8E1CK89E+ECVwBwsizl9YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw N2VmY2UwHhcNMjYwMTAyMDAxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOGFlYmY4OWY1OGJhMDg2NmZmMTViOTg0Njc3NjVjMGNjYmZlMWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1RPOjyB8Q882XJipsWRdQkacvEi wxbsKt+fADb0ut5SNGH0y8r0vWzdnZBdJa2rja7kXOv6P0dmjJzWF4BmStIdj6+T dCvVZC8WgfI7DzKWJQ7y1AFtY09sqyJrdYxb6qR0gHBEVVc/ZOZGYoriGtNO/5t0 NPVOwRBEAzUBivTH5CZxM2SqrLLSzVyMTPOR5KqKompwSVrf9U3JxUchVbF1o7Xt 5OJ0pUmu65z8bG+KrxOTDDcYKfi5OxojvqouF1z0M1XxR3ZReKWMkjORLhttCdFZ FZ34dge330foR96OJa4YFV7h1T4YG+rikOH5vVV/yULLjgORo3HQHfFGiQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFLiuv4n1i6CGb/FbmEZ3ZcDMv+G1MB8GA1UdIwQY MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt YTZiOTkxZjRmYWY4LzEvdUs2X2lmV0xvSVp2OFZ1WVJuZGx3TXlfNGJVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4 LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALiIwAwQA LiI7MA0GCSqGSIb3DQEBCwUAA4IBAQBcCpma/zuLWGSilVRiNsY17rsf7hOkxoMX Tz7xefKLwEvLrTF08J3SEnGOqBSeaKB7l2vkLes4OH1TtliEd6qZPmFTDLbo3eSy Dx+dgRIM6AGBzxtxskXEMx0gPh9GtHZG2WYZljWm4nG/rqwdcUgufXcsd5ffYKbC l8684mcsTAQpEA3wZ5uKxBW4lRy5+iF2ZG/b/1x/vFzTob9gGddFem42YVrUbS28 nkE1g3W2agrKui9ylH23b4KHBuKTWlpkXqcIUm20+w++0IHP/VHWUadTGs4F++iY iT7udTY+jxLIkmQe1S+sCLcUht4mCYlKyxa+mtTtGyJel65t/rcp -----END CERTIFICATE-----Generated at Mon Jan 19 23:22:16 2026 by rpki-client