This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/0NqeGlWZDzCjZCDWy4QOQl-n2DY.roa File: 0NqeGlWZDzCjZCDWy4QOQl-n2DY.roa (raw, json) Hash identifier: 8iXrSdtjq3/hG24zElfh5zhWwb7toZX38vGMt5k8Nqw= Subject key identifier: D0:DA:9E:1A:55:99:0F:30:A3:64:20:D6:CB:84:0E:42:5F:A7:D8:36 Certificate issuer: /CN=e0a00292c2a1062bb32980a3c443fff383a41002 Certificate serial: 019B7DCAEF4DFFAA3A6C7E9605E83EC08B65 Authority key identifier: E0:A0:02:92:C2:A1:06:2B:B3:29:80:A3:C4:43:FF:F3:83:A4:10:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/0NqeGlWZDzCjZCDWy4QOQl-n2DY.roa Signing time: Fri 02 Jan 2026 08:20:10 +0000 ROA not before: Fri 02 Jan 2026 08:20:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 34047 IP address blocks: 46.151.40.0/21 maxlen: 21 91.211.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Jan 2026 08:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:ef:4d:ff:aa:3a:6c:7e:96:05:e8:3e:c0:8b:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e0a00292c2a1062bb32980a3c443fff383a41002 Validity Not Before: Jan 2 08:20:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0da9e1a55990f30a36420d6cb840e425fa7d836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:df:9b:6d:77:9c:ee:51:36:94:ea:78:b2:56: 4a:07:2f:e8:ff:26:eb:68:ce:6d:f2:14:d7:6d:85: 81:f9:1a:dc:19:44:25:26:7d:c6:2c:ca:ee:5b:3b: 40:3b:91:ca:39:ef:a1:cc:c2:ea:90:3b:7c:14:8e: 5a:65:8c:9e:23:a6:39:30:8a:42:1f:53:e1:91:ba: 67:35:a1:bb:22:74:f2:66:b6:6c:d4:f7:58:06:fc: d8:31:5d:4a:c9:10:45:c7:e9:a0:b8:03:f3:5d:61: b8:43:52:aa:d6:98:29:ed:9d:f1:37:e5:9e:d9:fd: a6:ef:4c:b4:0e:ac:1a:b8:33:87:c8:1a:72:4b:74: 9b:d4:22:43:a7:ca:b6:d5:7f:7a:6d:15:67:4b:70: 66:ac:82:36:a9:3a:b0:0e:cc:5e:be:d7:32:15:8c: 98:f7:d5:14:81:78:fd:69:c9:30:fc:31:e2:1d:75: 66:b4:4c:e3:1a:96:bf:67:31:75:2e:b7:01:88:c1: 54:8f:20:85:76:8a:5c:a3:a6:44:7d:92:65:d9:9d: b8:58:44:05:a4:15:52:89:c0:aa:67:4d:b4:f2:2c: 0e:73:48:c7:f4:82:2b:67:cc:1b:4c:16:cf:fd:f9: c3:59:ca:50:e4:95:27:65:79:52:50:79:a9:e5:b9: 08:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:DA:9E:1A:55:99:0F:30:A3:64:20:D6:CB:84:0E:42:5F:A7:D8:36 X509v3 Authority Key Identifier: keyid:E0:A0:02:92:C2:A1:06:2B:B3:29:80:A3:C4:43:FF:F3:83:A4:10:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/0NqeGlWZDzCjZCDWy4QOQl-n2DY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.151.40.0/21 91.211.172.0/22 Signature Algorithm: sha256WithRSAEncryption 5c:ae:81:8f:97:c3:06:9d:fa:e6:88:17:f1:6c:65:94:4a:7a: f6:90:f9:ac:ac:ef:8a:89:ed:a9:f7:63:38:6a:41:d9:a2:1c: 30:2b:b6:bf:db:b1:16:fa:b7:fa:d7:f9:a5:14:9c:d9:8b:60: 55:2e:f5:34:b0:61:8a:28:58:ad:6d:bd:55:47:34:78:9e:ed: 99:28:7a:a1:4f:d6:e0:dc:34:16:e3:5b:b0:d4:fd:a4:84:58: ec:01:8a:f2:63:58:2e:b5:49:91:7b:fa:e8:24:53:16:65:7f: f5:5b:06:d8:c7:ef:f2:d2:1e:9c:71:8e:f7:fa:e2:d0:bd:dc: 2a:fb:cf:d8:65:03:56:e6:41:5a:a7:08:15:9b:ff:94:67:0f: 68:4d:eb:be:9e:81:88:82:33:36:48:6a:3c:7f:b4:54:62:a0: d3:54:80:64:84:e2:c1:42:a3:7f:64:03:88:83:78:73:33:cb: 6b:3d:bd:3d:f9:75:d9:3a:da:71:5a:82:d3:8b:64:9b:bf:58: ae:dd:02:e1:38:63:79:1e:e1:ed:00:5d:b1:da:63:11:34:96: b4:11:5a:22:a5:ee:dc:9e:cc:33:e0:2c:bf:e0:0f:55:64:94: 21:dd:bc:bf:ae:f7:b1:45:9b:47:ce:bb:35:e1:48:93:cf:a7: 90:c2:cc:cc -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt9yu9N/6o6bH6WBeg+wItlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUwYTAwMjkyYzJhMTA2MmJiMzI5ODBhM2M0NDNmZmYzODNh NDEwMDIwHhcNMjYwMTAyMDgyMDEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGRhOWUxYTU1OTkwZjMwYTM2NDIwZDZjYjg0MGU0MjVmYTdkODM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxt+bbXec7lE2lOp4slZKBy/o/ybr aM5t8hTXbYWB+RrcGUQlJn3GLMruWztAO5HKOe+hzMLqkDt8FI5aZYyeI6Y5MIpC H1PhkbpnNaG7InTyZrZs1PdYBvzYMV1KyRBFx+mguAPzXWG4Q1Kq1pgp7Z3xN+We 2f2m70y0DqwauDOHyBpyS3Sb1CJDp8q21X96bRVnS3BmrII2qTqwDsxevtcyFYyY 99UUgXj9ackw/DHiHXVmtEzjGpa/ZzF1LrcBiMFUjyCFdopco6ZEfZJl2Z24WEQF pBVSicCqZ0208iwOc0jH9IIrZ8wbTBbP/fnDWcpQ5JUnZXlSUHmp5bkIawIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFNDanhpVmQ8wo2Qg1suEDkJfp9g2MB8GA1UdIwQY MBaAFOCgApLCoQYrsymAo8RD//ODpBACMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNEtBQ2tzS2hCaXV6S1lDanhFUF84NE9rRUFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy82YzA1NjMtNmExYy00NDMyLWE1OGQt M2I2NGNjMzM2Yzc5LzEvME5xZUdsV1pEekNqWkNEV3k0UU9RbC1uMkRZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy82YzA1NjMtNmExYy00NDMyLWE1OGQtM2I2NGNjMzM2Yzc5 LzEvNEtBQ2tzS2hCaXV6S1lDanhFUF84NE9rRUFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLpcoAwQC W9OsMA0GCSqGSIb3DQEBCwUAA4IBAQBcroGPl8MGnfrmiBfxbGWUSnr2kPmsrO+K ie2p92M4akHZohwwK7a/27EW+rf61/mlFJzZi2BVLvU0sGGKKFitbb1VRzR4nu2Z KHqhT9bg3DQW41uw1P2khFjsAYryY1gutUmRe/roJFMWZX/1WwbYx+/y0h6ccY73 +uLQvdwq+8/YZQNW5kFapwgVm/+UZw9oTeu+noGIgjM2SGo8f7RUYqDTVIBkhOLB QqN/ZAOIg3hzM8trPb09+XXZOtpxWoLTi2Sbv1iu3QLhOGN5HuHtAF2x2mMRNJa0 EVoipe7cnswz4Cy/4A9VZJQh3by/rvexRZtHzrs14UiTz6eQwszM -----END CERTIFICATE-----Generated at Thu Jan 15 16:58:28 2026 by rpki-client