This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/yS-0BxtvAt6IeR55AkgaLECC9TA.roa File: yS-0BxtvAt6IeR55AkgaLECC9TA.roa (raw, json) Hash identifier: R3FujKz/FTazeX7vxtoHKe8ijVfIAf1K0lV4khxwtAM= Subject key identifier: C9:2F:B4:07:1B:6F:02:DE:88:79:1E:79:02:48:1A:2C:40:82:F5:30 Certificate issuer: /CN=4a471cd6ce60abedd74762b101aa5e6f4207efce Certificate serial: 019B7C134F54BB580319A4A451DA612664F3 Authority key identifier: 4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/yS-0BxtvAt6IeR55AkgaLECC9TA.roa Signing time: Fri 02 Jan 2026 00:19:58 +0000 ROA not before: Fri 02 Jan 2026 00:19:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25369 IP address blocks: 46.34.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.mft rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:13:4f:54:bb:58:03:19:a4:a4:51:da:61:26:64:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a471cd6ce60abedd74762b101aa5e6f4207efce Validity Not Before: Jan 2 00:19:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=c92fb4071b6f02de88791e7902481a2c4082f530 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a4:1a:b3:63:ca:ec:d3:d6:d0:ad:e6:45:52: 99:24:fc:a2:a7:44:0e:e9:3b:6a:b4:e5:0e:00:17: 22:85:2e:0a:50:d3:8f:bc:6d:c8:88:78:66:d9:dd: 5d:93:61:93:eb:c0:e1:2a:9b:5d:18:05:f8:be:1e: e9:bf:ff:fb:69:1d:74:fc:48:4a:40:9e:22:5c:7e: c7:85:8a:86:3a:15:c9:22:40:70:43:a9:25:41:13: 83:d5:bd:89:21:19:d6:d1:2d:92:4e:a8:b9:e8:af: 5b:8f:1f:80:25:0e:aa:f2:1c:bc:33:78:47:4e:8c: e6:a8:43:c9:f4:91:89:d7:1e:3f:a8:39:33:a8:54: ea:f6:da:89:6b:50:b3:c0:a9:7a:fd:c7:29:00:cc: 2f:f7:92:5d:af:9c:c5:e7:70:ed:99:07:43:43:a7: d8:d9:3c:d6:50:da:6e:80:81:4b:8f:05:d1:6e:17: 73:ef:aa:53:52:8b:43:48:3e:91:6e:8b:5f:d2:50: 95:f0:05:fd:2b:e1:91:7f:05:d0:e2:58:56:39:8f: 06:44:f0:c6:65:2d:5f:97:08:34:51:1d:b6:53:41: 62:f7:2e:58:7e:bf:60:d0:b9:20:e1:9e:da:6e:7e: c9:b9:35:ec:6e:28:83:93:78:2f:d9:34:f9:4e:8a: 96:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:2F:B4:07:1B:6F:02:DE:88:79:1E:79:02:48:1A:2C:40:82:F5:30 X509v3 Authority Key Identifier: keyid:4A:47:1C:D6:CE:60:AB:ED:D7:47:62:B1:01:AA:5E:6F:42:07:EF:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Skcc1s5gq-3XR2KxAapeb0IH784.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/yS-0BxtvAt6IeR55AkgaLECC9TA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/e17714-467b-4433-9b7d-a6b991f4faf8/1/Skcc1s5gq-3XR2KxAapeb0IH784.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.34.51.0/24 Signature Algorithm: sha256WithRSAEncryption 37:05:08:86:72:56:66:e3:73:d3:f0:27:18:05:ef:ef:ae:c9: 99:e0:5a:67:a1:79:25:30:38:16:44:27:fa:b0:2d:b0:66:d3: 15:fb:43:95:92:21:a2:bb:b3:4c:67:31:cb:d6:a6:87:93:15: cf:72:43:47:68:e8:9e:0e:ea:12:dc:6d:8c:09:ef:c9:00:9e: 6f:ce:53:5b:04:a9:2e:45:c3:47:92:de:80:16:03:3d:55:a3: df:e7:de:3a:38:43:a8:5e:f1:44:db:79:b8:15:f9:c0:07:01: b7:43:df:5b:91:b5:56:28:e4:bd:fc:6c:e4:14:af:fe:03:d9: 81:e9:e8:fd:db:ed:64:82:ef:d9:ab:bd:bf:cd:eb:2f:66:0a: 93:76:72:3c:18:a2:ee:13:0d:99:b6:11:47:ae:e0:c1:a1:1c: 31:3a:09:7c:a9:e4:60:bf:3d:45:2e:96:5a:8e:e2:71:3b:c3: 6d:45:1b:82:2f:86:f9:f7:7d:09:83:07:73:9e:74:6b:72:01: 46:17:3e:bb:89:d3:56:f3:3f:3c:2a:c4:b8:45:95:c5:c4:95: 5e:74:01:c3:77:24:68:80:95:64:9c:f6:01:45:2f:58:87:f3: 1d:3c:2e:96:24:50:80:2f:99:39:e9:d4:da:a8:07:5f:24:00: 99:a8:52:b7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8E09Uu1gDGaSkUdphJmTzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRhNDcxY2Q2Y2U2MGFiZWRkNzQ3NjJiMTAxYWE1ZTZmNDIw N2VmY2UwHhcNMjYwMTAyMDAxOTU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjOTJmYjQwNzFiNmYwMmRlODg3OTFlNzkwMjQ4MWEyYzQwODJmNTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaQas2PK7NPW0K3mRVKZJPyip0QO 6TtqtOUOABcihS4KUNOPvG3IiHhm2d1dk2GT68DhKptdGAX4vh7pv//7aR10/EhK QJ4iXH7HhYqGOhXJIkBwQ6klQROD1b2JIRnW0S2STqi56K9bjx+AJQ6q8hy8M3hH TozmqEPJ9JGJ1x4/qDkzqFTq9tqJa1CzwKl6/ccpAMwv95Jdr5zF53DtmQdDQ6fY 2TzWUNpugIFLjwXRbhdz76pTUotDSD6Rbotf0lCV8AX9K+GRfwXQ4lhWOY8GRPDG ZS1flwg0UR22U0Fi9y5Yfr9g0Lkg4Z7abn7JuTXsbiiDk3gv2TT5ToqWnwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMkvtAcbbwLeiHkeeQJIGixAgvUwMB8GA1UdIwQY MBaAFEpHHNbOYKvt10disQGqXm9CB+/OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2Qt YTZiOTkxZjRmYWY4LzEveVMtMEJ4dHZBdDZJZVI1NUFrZ2FMRUNDOVRBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS9lMTc3MTQtNDY3Yi00NDMzLTliN2QtYTZiOTkxZjRmYWY4 LzEvU2tjYzFzNWdxLTNYUjJLeEFhcGViMElINzg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiIzMA0G CSqGSIb3DQEBCwUAA4IBAQA3BQiGclZm43PT8CcYBe/vrsmZ4FpnoXklMDgWRCf6 sC2wZtMV+0OVkiGiu7NMZzHL1qaHkxXPckNHaOieDuoS3G2MCe/JAJ5vzlNbBKku RcNHkt6AFgM9VaPf5946OEOoXvFE23m4FfnABwG3Q99bkbVWKOS9/GzkFK/+A9mB 6ej92+1kgu/Zq72/zesvZgqTdnI8GKLuEw2ZthFHruDBoRwxOgl8qeRgvz1FLpZa juJxO8NtRRuCL4b5930JgwdznnRrcgFGFz67idNW8z88KsS4RZXFxJVedAHDdyRo gJVknPYBRS9Yh/MdPC6WJFCAL5k56dTaqAdfJACZqFK3 -----END CERTIFICATE-----Generated at Mon Jan 19 17:04:01 2026 by rpki-client