This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/9qGo67yr4HRrxBkAO69NOfH1xyM.roa File: 9qGo67yr4HRrxBkAO69NOfH1xyM.roa (raw, json) Hash identifier: 9kV8qye+hDokGEdQvc6wx6xFhzWb+QDG85qAmFrrRNc= Subject key identifier: F6:A1:A8:EB:BC:AB:E0:74:6B:C4:19:00:3B:AF:4D:39:F1:F5:C7:23 Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Certificate serial: 019B77C7538D99609EC1E2AE8682F3D398E1 Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/9qGo67yr4HRrxBkAO69NOfH1xyM.roa Signing time: Thu 01 Jan 2026 04:18:30 +0000 ROA not before: Thu 01 Jan 2026 04:18:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 42532 IP address blocks: 46.32.184.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c7:53:8d:99:60:9e:c1:e2:ae:86:82:f3:d3:98:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Validity Not Before: Jan 1 04:18:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f6a1a8ebbcabe0746bc419003baf4d39f1f5c723 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d8:c4:79:1c:db:c1:32:eb:12:a5:f4:80:51: 31:94:00:53:8a:d5:10:d3:fe:b3:f9:85:57:ca:4b: ce:4c:a5:36:fe:29:e7:2e:16:4e:c9:b5:f8:f5:ae: e1:5a:8b:e1:20:84:39:40:16:5f:6c:2c:33:92:8e: 5b:65:e4:70:67:71:d0:25:29:18:2c:56:4d:30:bb: 84:87:96:db:de:e0:31:95:a9:41:89:48:e5:cc:a8: 01:f8:24:fa:fd:c5:e6:58:35:fd:c2:78:b2:16:80: 19:e6:cf:9e:d2:d9:3b:6a:19:ac:c4:59:de:e5:d3: b8:1b:70:62:d3:eb:25:c4:0f:7e:fa:15:03:b8:fb: ae:b9:b5:3c:28:e9:1e:c8:44:d1:f5:d3:85:c2:e5: a5:d1:47:42:64:c7:36:99:fa:ca:a5:a1:9e:a0:fb: bd:a5:d4:5c:8f:34:68:53:a8:c7:a0:f5:69:92:36: 89:c3:06:39:82:a9:72:db:5a:b5:6c:49:e2:bf:0b: 47:4c:34:29:f3:63:69:0f:cf:fb:ba:a1:5b:33:2c: 97:60:e4:f3:e2:2d:ed:78:54:a0:db:db:f7:45:54: e0:dd:1c:ee:c6:dc:08:be:ca:ca:cd:72:3f:03:f0: a2:97:f8:88:ae:32:28:e7:17:10:3e:d4:e6:dd:be: 79:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:A1:A8:EB:BC:AB:E0:74:6B:C4:19:00:3B:AF:4D:39:F1:F5:C7:23 X509v3 Authority Key Identifier: keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/9qGo67yr4HRrxBkAO69NOfH1xyM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.32.184.0/22 Signature Algorithm: sha256WithRSAEncryption 35:b4:9f:ea:cf:47:b2:10:11:f8:c8:d4:63:2c:d4:51:f6:1d: af:dc:4c:bc:e1:cd:37:d0:00:72:92:f7:c0:a0:43:38:14:dc: 87:6f:98:8a:cb:df:85:4f:d8:7f:cf:cb:83:91:46:9c:67:2f: aa:7c:85:cc:9f:f9:11:6e:81:33:d1:78:b4:ac:4e:ab:0c:7e: 2a:02:42:d2:1c:27:11:30:ba:44:bd:b6:b0:6f:e0:6d:aa:17: 37:50:b2:73:93:dd:ba:36:86:7b:19:a6:ff:4b:cf:71:2f:8b: 65:8f:6c:49:17:08:a7:4b:f4:29:a3:65:4f:44:22:d0:6b:3d: a6:c3:cb:10:f9:18:66:3a:7e:1e:ec:b9:8c:a4:38:ae:f1:59: f8:33:36:99:a4:4e:9c:46:95:ca:53:eb:37:9c:c2:8d:4c:7f: dd:43:68:39:a7:5b:19:15:71:11:db:74:bf:86:5d:e2:0f:6a: 89:58:e2:c1:0e:f9:eb:28:8f:f3:a2:f5:59:e8:50:23:45:24: 30:6c:5e:c6:ff:b1:1f:26:cf:63:32:72:78:ba:e4:e5:7e:a7: 3d:3e:a9:74:06:90:65:ce:29:37:38:20:df:12:ea:56:e7:c5: 37:d6:6f:24:d4:b3:2c:28:91:01:96:f3:86:5c:3a:a3:e4:01: ee:45:10:63 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3x1ONmWCeweKuhoLz05jhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzN2VlMWVjZWQxOWY4YTBhM2E2MzViZmFhMjY0MjkzZTM0 Mzc3OTUwHhcNMjYwMTAxMDQxODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNmExYThlYmJjYWJlMDc0NmJjNDE5MDAzYmFmNGQzOWYxZjVjNzIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tjEeRzbwTLrEqX0gFExlABTitUQ 0/6z+YVXykvOTKU2/innLhZOybX49a7hWovhIIQ5QBZfbCwzko5bZeRwZ3HQJSkY LFZNMLuEh5bb3uAxlalBiUjlzKgB+CT6/cXmWDX9wniyFoAZ5s+e0tk7ahmsxFne 5dO4G3Bi0+slxA9++hUDuPuuubU8KOkeyETR9dOFwuWl0UdCZMc2mfrKpaGeoPu9 pdRcjzRoU6jHoPVpkjaJwwY5gqly21q1bEnivwtHTDQp82NpD8/7uqFbMyyXYOTz 4i3teFSg29v3RVTg3RzuxtwIvsrKzXI/A/Cil/iIrjIo5xcQPtTm3b55jwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPahqOu8q+B0a8QZADuvTTnx9ccjMB8GA1UdIwQY MBaAFON+4eztGfigo6Y1v6omQpPjQ3eVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMt MzZlMzQ0YWJjOWQzLzEvOXFHbzY3eXI0SFJyeEJrQU82OU5PZkgxeHlNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMtMzZlMzQ0YWJjOWQz LzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLiC4MA0G CSqGSIb3DQEBCwUAA4IBAQA1tJ/qz0eyEBH4yNRjLNRR9h2v3Ey84c030ABykvfA oEM4FNyHb5iKy9+FT9h/z8uDkUacZy+qfIXMn/kRboEz0Xi0rE6rDH4qAkLSHCcR MLpEvbawb+Btqhc3ULJzk926NoZ7Gab/S89xL4tlj2xJFwinS/Qpo2VPRCLQaz2m w8sQ+RhmOn4e7LmMpDiu8Vn4MzaZpE6cRpXKU+s3nMKNTH/dQ2g5p1sZFXER23S/ hl3iD2qJWOLBDvnrKI/zovVZ6FAjRSQwbF7G/7EfJs9jMnJ4uuTlfqc9Pql0BpBl zik3OCDfEupW58U31m8k1LMsKJEBlvOGXDqj5AHuRRBj -----END CERTIFICATE-----Generated at Wed Jan 21 14:47:15 2026 by rpki-client