This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/rT_Kt6pwMc_Vos1dQ4JEbXZXE6Y.roa File: rT_Kt6pwMc_Vos1dQ4JEbXZXE6Y.roa (raw, json) Hash identifier: MbMjgVirW/O9r5VhnuSLEFmJXnKto2qtS9XCt9qnLmw= Subject key identifier: AD:3F:CA:B7:AA:70:31:CF:D5:A2:CD:5D:43:82:44:6D:76:57:13:A6 Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255 Certificate serial: 019B797DDFBFAFB4D196F3A86209461F9DA8 Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/rT_Kt6pwMc_Vos1dQ4JEbXZXE6Y.roa Signing time: Thu 01 Jan 2026 12:17:30 +0000 ROA not before: Thu 01 Jan 2026 12:17:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207713 IP address blocks: 46.29.234.0/24 maxlen: 24 46.29.235.0/24 maxlen: 24 46.29.238.0/24 maxlen: 24 85.159.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.mft rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 18:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7d:df:bf:af:b4:d1:96:f3:a8:62:09:46:1f:9d:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255 Validity Not Before: Jan 1 12:17:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ad3fcab7aa7031cfd5a2cd5d4382446d765713a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d9:de:62:fe:86:81:9a:5c:ee:17:af:6f:20: af:2c:39:88:66:69:35:0d:ed:8e:91:7b:b3:23:9b: 4a:48:e3:32:fb:35:6b:5d:f4:86:f3:a0:ea:ee:6c: 7b:ca:72:e9:f6:19:24:d5:37:03:db:0c:4a:30:a2: 4a:26:3b:e3:71:6b:6f:77:bf:59:55:13:14:39:39: 48:90:ba:14:c1:c7:93:93:73:c2:11:db:f9:94:ee: 49:02:29:73:6f:03:5b:fa:61:c9:31:94:c9:c6:12: 21:f6:6a:b2:aa:93:bb:31:ad:5f:fb:17:05:e4:f3: 88:62:c3:f2:88:56:7f:52:2d:4d:a6:9d:5a:e8:66: bc:2b:b3:5c:3a:c3:7f:61:be:05:2d:31:1f:a8:bb: e0:c6:16:bb:9a:81:08:cf:e1:50:06:05:5b:da:af: 6f:c7:fe:f7:b3:49:c8:95:15:48:ec:1d:1e:dc:2d: 8d:0f:6a:96:b2:ea:dd:43:05:7d:c2:00:b3:19:e8: a4:e8:8d:e7:84:21:6a:b1:4f:0c:d1:c4:d2:65:eb: 40:a3:57:53:8b:8b:75:5a:ae:c5:89:e6:1d:e2:e6: b7:42:6f:a7:47:9b:f5:0b:f4:94:4a:16:15:9d:8c: c1:5b:8b:f8:d9:e5:9c:67:e7:78:70:fa:b0:99:ef: bf:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:3F:CA:B7:AA:70:31:CF:D5:A2:CD:5D:43:82:44:6D:76:57:13:A6 X509v3 Authority Key Identifier: keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/rT_Kt6pwMc_Vos1dQ4JEbXZXE6Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.29.234.0/23 46.29.238.0/24 85.159.228.0/24 Signature Algorithm: sha256WithRSAEncryption 95:9d:e9:7d:1c:44:7d:c2:91:60:be:b2:b3:f9:fa:91:0a:b7: 18:f7:7b:06:36:ba:58:52:ee:2e:ff:5a:07:8a:71:56:ed:43: e0:d7:e0:41:e0:f1:c8:cd:c3:5e:61:9c:b8:3f:b0:e0:d4:52: 3c:a7:0f:10:a0:51:1e:8d:67:ae:aa:1d:fc:d2:9b:80:2e:45: 04:9d:2a:ea:c1:08:78:87:ca:a8:fb:8a:a7:fe:a5:3c:66:cb: 8a:d7:5c:98:7d:ce:e0:41:27:65:51:55:b7:40:a7:43:e6:c8: e6:e9:48:6d:77:88:0a:97:e1:a8:af:33:54:c7:b4:5f:83:14: 5c:89:95:74:b5:78:2a:3b:6b:34:e5:db:d0:28:3c:9e:aa:e4: 37:17:87:5e:fa:3b:4f:77:d2:b9:5f:76:be:87:2a:41:f5:d6: 2a:3e:50:05:e3:bc:b2:6a:ac:e5:bc:1d:cf:ed:5a:3b:8b:34: 41:1e:6f:0e:65:9d:27:c3:7c:51:79:c1:72:e5:6e:1d:01:9c: 72:02:b8:88:fb:24:5c:39:88:65:7d:89:8c:d5:c9:ed:78:0f: 73:22:fa:3d:84:cc:ab:0f:6f:9a:0d:62:ed:35:a1:c0:b9:c3: fa:68:56:68:12:6e:01:a7:80:aa:b8:aa:57:ab:18:21:ab:9f: 39:e6:01:ce -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt5fd+/r7TRlvOoYglGH52oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlMzZkZTI3OTc0NzI3YWEwMDQ2YjNlOWM4ZDA2MjQ2NzQ1 NDEyNTUwHhcNMjYwMTAxMTIxNzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZDNmY2FiN2FhNzAzMWNmZDVhMmNkNWQ0MzgyNDQ2ZDc2NTcxM2E2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNneYv6GgZpc7hevbyCvLDmIZmk1 De2OkXuzI5tKSOMy+zVrXfSG86Dq7mx7ynLp9hkk1TcD2wxKMKJKJjvjcWtvd79Z VRMUOTlIkLoUwceTk3PCEdv5lO5JAilzbwNb+mHJMZTJxhIh9mqyqpO7Ma1f+xcF 5POIYsPyiFZ/Ui1Npp1a6Ga8K7NcOsN/Yb4FLTEfqLvgxha7moEIz+FQBgVb2q9v x/73s0nIlRVI7B0e3C2ND2qWsurdQwV9wgCzGeik6I3nhCFqsU8M0cTSZetAo1dT i4t1Wq7FieYd4ua3Qm+nR5v1C/SUShYVnYzBW4v42eWcZ+d4cPqwme+/MwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFK0/yreqcDHP1aLNXUOCRG12VxOmMB8GA1UdIwQY MBaAFB423ieXRyeqAEaz6cjQYkZ0VBJVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSGpiZUo1ZEhKNm9BUnJQcHlOQmlSblJVRWxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy81OWU4YzMtNjI2Yi00ZWNlLThlMzkt ZGY3OTNhOTQwYmFiLzEvclRfS3Q2cHdNY19Wb3MxZFE0SkViWFpYRTZZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy81OWU4YzMtNjI2Yi00ZWNlLThlMzktZGY3OTNhOTQwYmFi LzEvSGpiZUo1ZEhKNm9BUnJQcHlOQmlSblJVRWxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBLh3qAwQA Lh3uAwQAVZ/kMA0GCSqGSIb3DQEBCwUAA4IBAQCVnel9HER9wpFgvrKz+fqRCrcY 93sGNrpYUu4u/1oHinFW7UPg1+BB4PHIzcNeYZy4P7Dg1FI8pw8QoFEejWeuqh38 0puALkUEnSrqwQh4h8qo+4qn/qU8ZsuK11yYfc7gQSdlUVW3QKdD5sjm6Uhtd4gK l+GorzNUx7RfgxRciZV0tXgqO2s05dvQKDyequQ3F4de+jtPd9K5X3a+hypB9dYq PlAF47yyaqzlvB3P7Vo7izRBHm8OZZ0nw3xRecFy5W4dAZxyAriI+yRcOYhlfYmM 1cnteA9zIvo9hMyrD2+aDWLtNaHAucP6aFZoEm4Bp4CquKpXqxghq5855gHO -----END CERTIFICATE-----Generated at Sat Jan 10 03:17:02 2026 by rpki-client