This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/46w3PoQLQ6mKd5nBzIN9e_n7Gf4.roa File: 46w3PoQLQ6mKd5nBzIN9e_n7Gf4.roa (raw, json) Hash identifier: TEWQBxn6HUz85rJ+5632FC4cCm6zZFAnkvJsy3J7nrU= Subject key identifier: E3:AC:37:3E:84:0B:43:A9:8A:77:99:C1:CC:83:7D:7B:F9:FB:19:FE Certificate issuer: /CN=93202129969576ce357fae26c9c7cf98a8250ea6 Certificate serial: 019B7C7EDB7D7DE60E28DFC58247373B69B7 Authority key identifier: 93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/46w3PoQLQ6mKd5nBzIN9e_n7Gf4.roa Signing time: Fri 02 Jan 2026 02:17:27 +0000 ROA not before: Fri 02 Jan 2026 02:17:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1299 IP address blocks: 31.209.192.0/18 maxlen: 24 85.220.0.0/17 maxlen: 24 157.157.0.0/16 maxlen: 24 2001:1a98::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:db:7d:7d:e6:0e:28:df:c5:82:47:37:3b:69:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=93202129969576ce357fae26c9c7cf98a8250ea6 Validity Not Before: Jan 2 02:17:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3ac373e840b43a98a7799c1cc837d7bf9fb19fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b3:1d:8d:8d:da:51:87:4d:e6:10:af:03:0f: b4:a6:da:d7:39:c4:0c:81:f3:67:c9:fe:be:2a:cf: e9:6e:d1:a0:2b:06:71:74:a9:ec:7d:1c:0a:c9:a8: 97:b6:57:2a:69:89:ca:ae:d9:d2:b8:db:3f:d4:94: b7:2b:98:99:83:2d:bb:13:dc:b5:2f:3d:43:3f:fa: 03:a4:96:26:94:3e:48:cd:19:2f:6f:c4:0c:c4:c8: bf:3b:a8:85:6d:78:9e:52:32:72:1f:03:6d:f7:00: 2a:b3:3c:3c:51:f2:d5:33:80:50:77:23:b9:79:a4: a8:cc:09:53:d3:1f:2c:e0:fc:24:5d:a2:b2:f8:48: 43:41:25:45:88:57:e7:97:c9:54:cb:30:ca:0c:f6: f4:76:8f:ec:e5:b1:49:b6:2a:cb:b6:41:33:a4:46: be:a8:ce:7d:58:65:44:24:47:18:5e:d3:b5:6e:22: 7a:44:5f:1c:1e:d4:2a:14:6a:cd:4f:a2:1f:33:f0: 69:fe:45:88:ee:13:f0:a3:41:0b:76:6d:ae:0f:39: 5d:9a:75:37:89:5a:aa:d7:f3:d8:1f:0b:e8:0f:15: 91:af:1c:82:b9:88:52:ca:47:2f:aa:94:7a:5f:20: fb:12:4b:f1:26:73:b1:f5:98:3b:2a:94:df:ca:a6: d5:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:AC:37:3E:84:0B:43:A9:8A:77:99:C1:CC:83:7D:7B:F9:FB:19:FE X509v3 Authority Key Identifier: keyid:93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/46w3PoQLQ6mKd5nBzIN9e_n7Gf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.209.192.0/18 85.220.0.0/17 157.157.0.0/16 IPv6: 2001:1a98::/32 Signature Algorithm: sha256WithRSAEncryption 82:84:ed:5b:63:a1:f9:5b:07:68:88:8e:3c:cb:f1:54:aa:6e: 33:4b:d2:e2:2a:9a:d6:2b:97:71:4c:21:6a:75:65:70:79:ad: 55:11:eb:14:a2:a8:5d:ae:af:b1:1b:72:1e:7c:7d:36:5f:45: 88:92:c3:96:62:50:b7:9a:7f:11:7c:be:79:e3:b8:13:ae:92: 58:5b:67:f3:53:18:ca:52:be:8d:15:51:fc:08:a3:5e:58:e3: 91:6a:3c:e9:4e:e5:01:c3:a8:65:dd:a5:67:de:2d:a1:00:6a: f1:68:c3:5a:5f:7f:62:dc:47:22:ca:4e:af:25:19:c6:8b:23: 3b:f5:c4:f8:41:e1:78:bb:48:36:c7:39:db:a7:88:75:29:71: f8:ef:95:1c:e9:04:51:39:2a:c6:96:96:e2:a4:74:dd:7e:40: 86:d3:84:3b:be:6f:9c:d8:c7:1b:56:f8:14:cc:21:47:0f:8b: a8:92:0a:0a:68:52:0a:fc:ec:f9:35:fd:b1:91:da:95:8a:72: e3:90:8b:50:ef:e2:1c:fc:28:36:a6:17:fc:d1:64:4d:28:7e: 3b:b8:c7:90:d5:1f:c7:1e:9d:be:de:9e:58:64:bf:1c:86:9c: fd:0a:0d:9b:45:01:e2:53:c8:a3:7a:0b:be:d0:97:b5:b4:2f: f0:06:65:44 -----BEGIN CERTIFICATE----- MIIFFzCCA/+gAwIBAgISAZt8ftt9feYOKN/Fgkc3O2m3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkzMjAyMTI5OTY5NTc2Y2UzNTdmYWUyNmM5YzdjZjk4YTgy NTBlYTYwHhcNMjYwMTAyMDIxNzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2FjMzczZTg0MGI0M2E5OGE3Nzk5YzFjYzgzN2Q3YmY5ZmIxOWZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7MdjY3aUYdN5hCvAw+0ptrXOcQM gfNnyf6+Ks/pbtGgKwZxdKnsfRwKyaiXtlcqaYnKrtnSuNs/1JS3K5iZgy27E9y1 Lz1DP/oDpJYmlD5IzRkvb8QMxMi/O6iFbXieUjJyHwNt9wAqszw8UfLVM4BQdyO5 eaSozAlT0x8s4PwkXaKy+EhDQSVFiFfnl8lUyzDKDPb0do/s5bFJtirLtkEzpEa+ qM59WGVEJEcYXtO1biJ6RF8cHtQqFGrNT6IfM/Bp/kWI7hPwo0ELdm2uDzldmnU3 iVqq1/PYHwvoDxWRrxyCuYhSykcvqpR6XyD7EkvxJnOx9Zg7KpTfyqbVywIDAQAB o4ICIzCCAh8wHQYDVR0OBBYEFOOsNz6EC0OpineZwcyDfXv5+xn+MB8GA1UdIwQY MBaAFJMgISmWlXbONX+uJsnHz5ioJQ6mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3lBaEtaYVZkczQxZjY0bXljZlBtS2dsRHFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9kNmU3OTYtMGUxNC00NWIxLTljZjMt NWFkNThhYmZiYjFmLzEvNDZ3M1BvUUxRNm1LZDVuQnpJTjllX243R2Y0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9kNmU3OTYtMGUxNC00NWIxLTljZjMtNWFkNThhYmZiYjFm LzEva3lBaEtaYVZkczQxZjY0bXljZlBtS2dsRHFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAXBAIAATARAwQGH9HAAwQH VdwAAwMAnZ0wDQQCAAIwBwMFACABGpgwDQYJKoZIhvcNAQELBQADggEBAIKE7Vtj oflbB2iIjjzL8VSqbjNL0uIqmtYrl3FMIWp1ZXB5rVUR6xSiqF2ur7Ebch58fTZf RYiSw5ZiULeafxF8vnnjuBOuklhbZ/NTGMpSvo0VUfwIo15Y45FqPOlO5QHDqGXd pWfeLaEAavFow1pff2LcRyLKTq8lGcaLIzv1xPhB4Xi7SDbHOduniHUpcfjvlRzp BFE5KsaWluKkdN1+QIbThDu+b5zYxxtW+BTMIUcPi6iSCgpoUgr87Pk1/bGR2pWK cuOQi1Dv4hz8KDamF/zRZE0ofju4x5DVH8cenb7enlhkvxyGnP0KDZtFAeJTyKN6 C77Ql7W0L/AGZUQ= -----END CERTIFICATE-----Generated at Wed Jan 21 07:22:15 2026 by rpki-client