This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d4751e-7534-437d-9a9f-408740420f57/1/xNaG9yupsGn_e9NSvvb5UpSSc7Y.roa File: xNaG9yupsGn_e9NSvvb5UpSSc7Y.roa (raw, json) Hash identifier: WgXYfiXVtcnJk2B1S+HBE+pdFZ7RQwgkyoascy6eaVs= Subject key identifier: C4:D6:86:F7:2B:A9:B0:69:FF:7B:D3:52:BE:F6:F9:52:94:92:73:B6 Certificate issuer: /CN=9f949276e3a60b52fc46741d71d820afb5ee6060 Certificate serial: 019B5507240B4B73D0A9D6580664F6B8F2BD Authority key identifier: 9F:94:92:76:E3:A6:0B:52:FC:46:74:1D:71:D8:20:AF:B5:EE:60:60 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5SSduOmC1L8RnQdcdggr7XuYGA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d4751e-7534-437d-9a9f-408740420f57/1/xNaG9yupsGn_e9NSvvb5UpSSc7Y.roa Signing time: Thu 25 Dec 2025 10:21:29 +0000 ROA not before: Thu 25 Dec 2025 10:21:29 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 202983 IP address blocks: 46.247.58.0/24 maxlen: 24 46.247.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d4751e-7534-437d-9a9f-408740420f57/1/n5SSduOmC1L8RnQdcdggr7XuYGA.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/d4751e-7534-437d-9a9f-408740420f57/1/n5SSduOmC1L8RnQdcdggr7XuYGA.mft rsync://rpki.ripe.net/repository/DEFAULT/n5SSduOmC1L8RnQdcdggr7XuYGA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Dec 2025 11:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:55:07:24:0b:4b:73:d0:a9:d6:58:06:64:f6:b8:f2:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f949276e3a60b52fc46741d71d820afb5ee6060 Validity Not Before: Dec 25 10:21:29 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=c4d686f72ba9b069ff7bd352bef6f952949273b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:58:64:db:96:a4:c2:26:f8:b6:c9:30:59:e0: 9f:54:63:d7:da:3c:7e:9e:84:31:e0:cb:23:5b:6a: 65:1e:a0:91:df:65:63:a6:95:44:84:94:08:04:1d: 15:41:98:43:ce:6e:01:3c:93:cf:17:76:9e:05:64: ea:1b:46:6c:39:7d:eb:cc:fc:b6:d1:ec:ab:7b:71: be:c7:23:f6:ea:c7:e3:d7:89:37:21:d3:dd:3a:80: a0:d3:90:b3:41:42:8e:08:1d:c5:ea:30:ff:da:3d: 0e:75:e9:65:65:e7:c7:08:b0:b4:11:b1:d7:d7:c8: aa:54:03:b4:02:3d:84:48:64:84:94:4e:9a:2a:0f: cd:59:e7:f2:5a:38:79:83:cb:b5:9f:bd:5b:a8:2a: 5a:41:fa:c4:0b:b1:9e:7c:7a:bc:89:3d:3c:ca:7c: 0a:bb:a0:9a:91:77:89:3a:b0:9c:ca:0a:aa:f7:a3: 2f:fa:7c:dc:3f:b2:e6:56:69:69:f0:46:4d:a0:55: 01:d0:19:98:31:dc:62:6c:0e:f7:7b:25:8c:bd:96: 73:0c:b8:51:88:97:b1:87:53:88:28:d0:aa:73:91: 95:da:01:0f:30:fd:f5:6e:81:33:41:da:11:ba:b7: 4a:97:68:31:31:b7:fb:87:2c:66:0f:f1:87:87:6c: aa:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D6:86:F7:2B:A9:B0:69:FF:7B:D3:52:BE:F6:F9:52:94:92:73:B6 X509v3 Authority Key Identifier: keyid:9F:94:92:76:E3:A6:0B:52:FC:46:74:1D:71:D8:20:AF:B5:EE:60:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5SSduOmC1L8RnQdcdggr7XuYGA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d4751e-7534-437d-9a9f-408740420f57/1/xNaG9yupsGn_e9NSvvb5UpSSc7Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d4751e-7534-437d-9a9f-408740420f57/1/n5SSduOmC1L8RnQdcdggr7XuYGA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.247.58.0/23 Signature Algorithm: sha256WithRSAEncryption 43:c5:99:bf:ed:36:ad:eb:0d:58:53:c4:13:45:8a:6b:8b:55: d1:33:01:52:b5:ff:ff:ca:36:60:ab:a7:2a:75:1a:a0:7c:91: cf:c5:8a:b8:43:c1:e1:12:de:34:a4:2d:f9:1f:6c:89:1c:00: bb:81:39:7a:ee:1a:d2:0c:61:43:b3:ec:f9:07:2b:b1:e2:62: 60:49:df:64:52:54:6b:2d:76:ac:d6:5c:a7:ae:7e:a2:f0:0b: 8a:cb:8e:c5:33:45:de:c0:79:43:8a:85:3d:f5:84:55:3b:52: 2c:43:ed:d2:e8:f7:10:e4:bc:75:7b:f5:75:6d:1d:4b:99:c2: 53:f3:4b:6e:7c:c9:5f:9e:68:c7:b5:03:77:70:ab:0b:ef:48: e9:32:07:03:a1:1b:1d:01:19:37:59:1c:c8:ba:9d:cc:99:f3: de:bf:2d:58:ba:3b:c7:4e:6f:a1:97:e6:74:c5:16:7d:28:c0: 5e:12:cd:cc:73:14:35:af:02:bc:d5:11:63:a8:3b:28:01:b7: 4e:43:7b:3e:38:ee:d9:a6:5b:e5:c7:87:8f:be:07:dc:c1:9c: 63:bc:e0:69:dc:e7:ac:2e:06:b7:1f:34:b3:21:66:16:2b:b3: e5:fa:f0:86:5f:92:18:95:c5:50:b9:82:80:1b:40:9c:81:71: a3:3c:c4:a1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZtVByQLS3PQqdZYBmT2uPK9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmOTQ5Mjc2ZTNhNjBiNTJmYzQ2NzQxZDcxZDgyMGFmYjVl ZTYwNjAwHhcNMjUxMjI1MTAyMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjNGQ2ODZmNzJiYTliMDY5ZmY3YmQzNTJiZWY2Zjk1Mjk0OTI3M2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFhk25akwib4tskwWeCfVGPX2jx+ noQx4MsjW2plHqCR32VjppVEhJQIBB0VQZhDzm4BPJPPF3aeBWTqG0ZsOX3rzPy2 0eyre3G+xyP26sfj14k3IdPdOoCg05CzQUKOCB3F6jD/2j0OdellZefHCLC0EbHX 18iqVAO0Aj2ESGSElE6aKg/NWefyWjh5g8u1n71bqCpaQfrEC7GefHq8iT08ynwK u6CakXeJOrCcygqq96Mv+nzcP7LmVmlp8EZNoFUB0BmYMdxibA73eyWMvZZzDLhR iJexh1OIKNCqc5GV2gEPMP31boEzQdoRurdKl2gxMbf7hyxmD/GHh2yqIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFMTWhvcrqbBp/3vTUr72+VKUknO2MB8GA1UdIwQY MBaAFJ+UknbjpgtS/EZ0HXHYIK+17mBgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjVTU2R1T21DMUw4Um5RZGNkZ2dyN1h1WUdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kNDc1MWUtNzUzNC00MzdkLTlhOWYt NDA4NzQwNDIwZjU3LzEveE5hRzl5dXBzR25fZTlOU3Z2YjVVcFNTYzdZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9kNDc1MWUtNzUzNC00MzdkLTlhOWYtNDA4NzQwNDIwZjU3 LzEvbjVTU2R1T21DMUw4Um5RZGNkZ2dyN1h1WUdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLvc6MA0G CSqGSIb3DQEBCwUAA4IBAQBDxZm/7Tat6w1YU8QTRYpri1XRMwFStf//yjZgq6cq dRqgfJHPxYq4Q8HhEt40pC35H2yJHAC7gTl67hrSDGFDs+z5Byux4mJgSd9kUlRr LXas1lynrn6i8AuKy47FM0XewHlDioU99YRVO1IsQ+3S6PcQ5Lx1e/V1bR1LmcJT 80tufMlfnmjHtQN3cKsL70jpMgcDoRsdARk3WRzIup3MmfPevy1YujvHTm+hl+Z0 xRZ9KMBeEs3McxQ1rwK81RFjqDsoAbdOQ3s+OO7Zplvlx4ePvgfcwZxjvOBp3Oes Lga3HzSzIWYWK7Pl+vCGX5IYlcVQuYKAG0CcgXGjPMSh -----END CERTIFICATE-----Generated at Fri Dec 26 17:19:36 2025 by rpki-client