This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/9LdPykNZeXV9TgPfmM-EGl7Gtyg.roa File: 9LdPykNZeXV9TgPfmM-EGl7Gtyg.roa (raw, json) Hash identifier: A15KaO5jS+sOax5wrVIE6LFbgUntOJ9pEvZQVObAuXI= Subject key identifier: F4:B7:4F:CA:43:59:79:75:7D:4E:03:DF:98:CF:84:1A:5E:C6:B7:28 Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255 Certificate serial: 019B797DDF2A79E3A380A2DB0AAD6F6CB8FD Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/9LdPykNZeXV9TgPfmM-EGl7Gtyg.roa Signing time: Thu 01 Jan 2026 12:17:30 +0000 ROA not before: Thu 01 Jan 2026 12:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51200 IP address blocks: 46.29.232.0/23 maxlen: 24 46.29.232.0/24 maxlen: 24 46.29.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 21:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:df:2a:79:e3:a3:80:a2:db:0a:ad:6f:6c:b8:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255 Validity Not Before: Jan 1 12:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f4b74fca435979757d4e03df98cf841a5ec6b728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:cd:44:ce:6e:09:2e:b8:35:dc:28:0d:8c:ce: f7:9e:7a:42:ae:a0:eb:5a:1e:66:fb:66:d4:23:89: 7d:6d:8f:97:f4:40:d5:70:47:19:ab:37:a6:17:4a: 04:eb:dd:67:35:e3:b4:09:f0:0c:fa:fb:56:91:ad: 70:eb:fb:fa:ac:1c:3a:53:0b:c7:11:58:25:35:2a: 44:98:73:4b:a1:ca:a0:50:e2:1e:30:13:4d:17:82: 17:c0:1c:75:44:58:4a:0a:8f:c2:81:4f:1a:ef:32: a7:30:a7:61:3a:f8:6f:f8:8e:47:fa:b2:71:8d:0a: f8:35:85:f0:ec:42:90:05:0f:08:19:64:f5:2c:2d: 1a:d2:e6:f4:9b:85:69:dd:1e:e8:38:c4:af:95:ff: 15:36:df:e4:10:f4:24:ef:73:b3:9a:37:fa:bb:b1: 97:9f:13:2b:d3:b7:aa:9f:79:ac:74:12:e4:a9:2b: ca:d6:aa:e4:2e:3a:e2:75:2f:b0:a1:95:ec:cc:d5: 65:22:ae:52:f7:c8:2e:b4:df:47:a9:b7:76:e2:f7: 03:6e:a1:fd:1b:08:5f:80:c3:6c:ed:db:ff:ee:1f: 71:aa:b1:2c:c8:69:65:e2:e2:42:63:9b:27:22:cb: 68:95:c4:65:64:26:fe:b1:a5:80:9a:cf:c5:19:c6: 11:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:B7:4F:CA:43:59:79:75:7D:4E:03:DF:98:CF:84:1A:5E:C6:B7:28 X509v3 Authority Key Identifier: keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/9LdPykNZeXV9TgPfmM-EGl7Gtyg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.29.232.0/23 Signature Algorithm: sha256WithRSAEncryption 5e:e4:23:1b:b0:d0:49:c7:95:e3:2c:89:21:3d:78:53:52:95: de:fc:4d:f0:9c:f0:34:38:68:7f:6b:53:ab:af:50:af:6d:a8: 56:89:eb:38:61:c6:4c:be:64:68:95:f8:3a:54:25:70:45:c3: 7a:12:97:05:46:e5:b3:73:65:e4:07:16:32:3b:1b:88:44:6a: c9:28:72:8a:ce:b5:38:90:fa:46:21:73:a4:01:ba:5b:0a:73: 7e:19:a6:5c:62:af:ba:c5:16:fb:dd:39:cf:c3:d0:cd:66:79: ac:91:e1:5e:f7:7d:b0:3e:4c:f1:1b:eb:65:8b:94:32:88:73: 61:e4:e6:12:ae:38:d2:3b:db:18:ce:9a:5f:1e:1b:42:f1:e4: 46:69:c8:61:c7:37:59:6a:13:11:7e:76:3b:72:ca:b6:11:bd: 96:00:b3:6a:46:0f:2b:99:63:44:b6:37:ec:09:a2:be:09:dd: 2d:cc:96:ee:74:c9:8b:82:d9:43:29:80:2a:e1:7c:9e:d7:78: e7:6d:36:de:90:1c:af:31:33:ce:ef:ca:6c:d2:41:5a:30:6d: 73:b9:39:e2:f7:4b:49:fe:b4:95:98:e5:61:d1:75:98:27:1f: 92:1e:f4:36:fb:91:75:57:36:97:8c:5e:bc:0e:1d:12:c4:ae: 5f:14:31:c0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5fd8qeeOjgKLbCq1vbLj9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMzZkZTI3OTc0NzI3YWEwMDQ2YjNlOWM4ZDA2MjQ2NzQ1 NDEyNTUwHhcNMjYwMTAxMTIxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNGI3NGZjYTQzNTk3OTc1N2Q0ZTAzZGY5OGNmODQxYTVlYzZiNzI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmc1Ezm4JLrg13CgNjM73nnpCrqDr Wh5m+2bUI4l9bY+X9EDVcEcZqzemF0oE691nNeO0CfAM+vtWka1w6/v6rBw6UwvH EVglNSpEmHNLocqgUOIeMBNNF4IXwBx1RFhKCo/CgU8a7zKnMKdhOvhv+I5H+rJx jQr4NYXw7EKQBQ8IGWT1LC0a0ub0m4Vp3R7oOMSvlf8VNt/kEPQk73Ozmjf6u7GX nxMr07eqn3msdBLkqSvK1qrkLjridS+woZXszNVlIq5S98gutN9Hqbd24vcDbqH9 GwhfgMNs7dv/7h9xqrEsyGll4uJCY5snIstolcRlZCb+saWAms/FGcYRCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPS3T8pDWXl1fU4D35jPhBpexrcoMB8GA1UdIwQY MBaAFB423ieXRyeqAEaz6cjQYkZ0VBJVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGpiZUo1ZEhKNm9BUnJQcHlOQmlSblJVRWxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81OWU4YzMtNjI2Yi00ZWNlLThlMzkt ZGY3OTNhOTQwYmFiLzEvOUxkUHlrTlplWFY5VGdQZm1NLUVHbDdHdHlnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy81OWU4YzMtNjI2Yi00ZWNlLThlMzktZGY3OTNhOTQwYmFi LzEvSGpiZUo1ZEhKNm9BUnJQcHlOQmlSblJVRWxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBLh3oMA0G CSqGSIb3DQEBCwUAA4IBAQBe5CMbsNBJx5XjLIkhPXhTUpXe/E3wnPA0OGh/a1Or r1CvbahWies4YcZMvmRolfg6VCVwRcN6EpcFRuWzc2XkBxYyOxuIRGrJKHKKzrU4 kPpGIXOkAbpbCnN+GaZcYq+6xRb73TnPw9DNZnmskeFe932wPkzxG+tli5QyiHNh 5OYSrjjSO9sYzppfHhtC8eRGachhxzdZahMRfnY7csq2Eb2WALNqRg8rmWNEtjfs CaK+Cd0tzJbudMmLgtlDKYAq4Xye13jnbTbekByvMTPO78ps0kFaMG1zuTni90tJ /rSVmOVh0XWYJx+SHvQ2+5F1VzaXjF68Dh0SxK5fFDHA -----END CERTIFICATE-----Generated at Tue Jan 20 07:29:40 2026 by rpki-client