This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/fAkVmSuP4C8Tt3ysLgXTuPqL4JM.roa File: fAkVmSuP4C8Tt3ysLgXTuPqL4JM.roa (raw, json) Hash identifier: new7s/Zw+Z3LxE1g27Tl/cjYXZW77+lOLNDzxaXxgPs= Subject key identifier: 7C:09:15:99:2B:8F:E0:2F:13:B7:7C:AC:2E:05:D3:B8:FA:8B:E0:93 Certificate issuer: /CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Certificate serial: 019C240E1C1F66EB2887B1C359AB45E3A47F Authority key identifier: E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/fAkVmSuP4C8Tt3ysLgXTuPqL4JM.roa Signing time: Tue 03 Feb 2026 15:10:30 +0000 ROA not before: Tue 03 Feb 2026 15:10:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200154 IP address blocks: 46.32.163.0/24 maxlen: 24 46.32.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.mft rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 15:10:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:24:0e:1c:1f:66:eb:28:87:b1:c3:59:ab:45:e3:a4:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e37ee1eced19f8a0a3a635bfaa264293e3437795 Validity Not Before: Feb 3 15:10:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c0915992b8fe02f13b77cac2e05d3b8fa8be093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c9:8c:ff:ae:e0:c7:13:47:53:7b:13:c7:64: c6:6d:e9:f2:83:6c:70:12:b3:49:e9:ca:ce:56:77: ef:97:cd:b5:2e:f4:9b:60:9a:7f:b5:f0:4f:2f:a2: 18:8d:ec:71:19:74:64:bf:b7:71:e9:9a:0e:e8:bd: f5:f5:56:c7:30:05:79:d6:44:23:f6:93:33:39:c7: a5:16:b2:00:70:3e:dd:be:77:5a:b5:07:6f:e7:35: ed:62:33:c4:62:76:b4:b2:87:63:d7:72:76:48:cc: 14:e3:0f:f1:f0:84:13:15:34:77:d4:64:e7:5b:a8: 98:bf:d6:f7:d8:54:1d:9c:b9:c6:82:8a:47:a5:81: 39:86:e9:ca:ac:d0:66:7b:10:31:b0:5f:ba:e9:16: f6:8d:fa:20:28:56:6d:22:7c:3e:eb:7b:d8:e6:62: 96:f9:5b:36:94:6e:dc:50:cc:1c:b4:d6:38:52:13: 6d:b2:c9:18:c8:7a:0b:80:2f:61:ae:21:31:e6:32: 7b:71:4e:df:a4:20:9b:d6:84:87:b0:9d:4b:d5:12: f8:fd:4b:97:95:33:f4:63:83:21:66:be:49:c4:c5: b6:e7:ca:28:dd:62:49:69:19:bb:7f:53:88:ed:25: b0:67:4b:82:56:2c:19:6d:52:48:3b:05:e0:6c:2d: 14:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:09:15:99:2B:8F:E0:2F:13:B7:7C:AC:2E:05:D3:B8:FA:8B:E0:93 X509v3 Authority Key Identifier: keyid:E3:7E:E1:EC:ED:19:F8:A0:A3:A6:35:BF:AA:26:42:93:E3:43:77:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/437h7O0Z-KCjpjW_qiZCk-NDd5U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/fAkVmSuP4C8Tt3ysLgXTuPqL4JM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d5d75-4d1e-4697-b1d3-36e344abc9d3/1/437h7O0Z-KCjpjW_qiZCk-NDd5U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.32.163.0/24 46.32.176.0/24 Signature Algorithm: sha256WithRSAEncryption 5b:76:c7:5a:7f:6f:9b:5b:0f:21:2c:e2:0e:a4:23:90:03:e1: e9:36:ab:a9:ed:7d:5b:c6:d1:ea:b9:f2:5f:35:6b:eb:2c:67: 01:cb:b6:95:d7:68:c0:0d:94:59:75:d2:d9:c7:44:91:8c:22: b0:c7:f2:e8:a9:99:c1:59:c3:59:e8:2f:37:b2:76:3c:00:e8: fa:f5:6b:ed:44:69:64:13:e9:37:4a:1c:e3:b1:7c:08:94:e3: 7c:5e:3e:b4:40:f1:86:fd:f8:3f:a8:29:c4:a8:a6:22:58:ed: 03:1b:70:4d:7b:e7:0e:bd:d5:85:98:30:5f:82:b5:c5:99:39: 14:9f:cf:c2:3d:0e:8f:fc:a7:a3:38:34:64:3a:fc:ca:b5:ea: 05:39:7a:de:4e:38:2b:20:13:a0:ef:28:0a:52:83:5d:ee:cf: 04:46:a9:2b:be:fa:72:3d:a4:fb:9c:95:1c:66:8c:f2:6b:ea: 30:db:89:a7:82:a6:26:16:5d:1e:87:d4:0d:3a:ec:61:1a:e1: b7:14:77:ea:b6:60:69:f3:78:38:c0:4b:d0:00:bb:cf:e8:c3: cb:eb:8c:41:b0:20:a4:07:d5:2d:82:94:e0:e7:85:72:39:9e: 10:85:96:bc:97:bc:28:00:eb:6d:41:5f:87:a4:fb:32:37:fc: ab:01:13:46 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZwkDhwfZusoh7HDWatF46R/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUzN2VlMWVjZWQxOWY4YTBhM2E2MzViZmFhMjY0MjkzZTM0 Mzc3OTUwHhcNMjYwMjAzMTUxMDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzA5MTU5OTJiOGZlMDJmMTNiNzdjYWMyZTA1ZDNiOGZhOGJlMDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcmM/67gxxNHU3sTx2TGbenyg2xw ErNJ6crOVnfvl821LvSbYJp/tfBPL6IYjexxGXRkv7dx6ZoO6L319VbHMAV51kQj 9pMzOcelFrIAcD7dvndatQdv5zXtYjPEYna0sodj13J2SMwU4w/x8IQTFTR31GTn W6iYv9b32FQdnLnGgopHpYE5hunKrNBmexAxsF+66Rb2jfogKFZtInw+63vY5mKW +Vs2lG7cUMwctNY4UhNtsskYyHoLgC9hriEx5jJ7cU7fpCCb1oSHsJ1L1RL4/UuX lTP0Y4MhZr5JxMW258oo3WJJaRm7f1OI7SWwZ0uCViwZbVJIOwXgbC0UKwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFHwJFZkrj+AvE7d8rC4F07j6i+CTMB8GA1UdIwQY MBaAFON+4eztGfigo6Y1v6omQpPjQ3eVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMt MzZlMzQ0YWJjOWQzLzEvZkFrVm1TdVA0QzhUdDN5c0xnWFR1UHFMNEpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC82ZDVkNzUtNGQxZS00Njk3LWIxZDMtMzZlMzQ0YWJjOWQz LzEvNDM3aDdPMFotS0NqcGpXX3FpWkNrLU5EZDVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALiCjAwQA LiCwMA0GCSqGSIb3DQEBCwUAA4IBAQBbdsdaf2+bWw8hLOIOpCOQA+HpNqup7X1b xtHqufJfNWvrLGcBy7aV12jADZRZddLZx0SRjCKwx/LoqZnBWcNZ6C83snY8AOj6 9WvtRGlkE+k3ShzjsXwIlON8Xj60QPGG/fg/qCnEqKYiWO0DG3BNe+cOvdWFmDBf grXFmTkUn8/CPQ6P/KejODRkOvzKteoFOXreTjgrIBOg7ygKUoNd7s8ERqkrvvpy PaT7nJUcZozya+ow24mngqYmFl0eh9QNOuxhGuG3FHfqtmBp83g4wEvQALvP6MPL 64xBsCCkB9UtgpTg54VyOZ4QhZa8l7woAOttQV+HpPsyN/yrARNG -----END CERTIFICATE-----Generated at Tue Feb 3 19:16:30 2026 by rpki-client