This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/9JiBhWSFTpZG4uWkY6bZHLtEy8E.roa File: 9JiBhWSFTpZG4uWkY6bZHLtEy8E.roa (raw, json) Hash identifier: xBA6Wqol2nOd0+Q4qs7TkzktF5SaUyh8B1lRNcW7BRY= Subject key identifier: F4:98:81:85:64:85:4E:96:46:E2:E5:A4:63:A6:D9:1C:BB:44:CB:C1 Certificate issuer: /CN=91aafcadb6c52984e35589eb7758f050aacefc76 Certificate serial: 019B78A2F0C390A7D8D7D20CA6F3D26A2310 Authority key identifier: 91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/9JiBhWSFTpZG4uWkY6bZHLtEy8E.roa Signing time: Thu 01 Jan 2026 08:18:22 +0000 ROA not before: Thu 01 Jan 2026 08:18:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51561 IP address blocks: 46.226.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:f0:c3:90:a7:d8:d7:d2:0c:a6:f3:d2:6a:23:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91aafcadb6c52984e35589eb7758f050aacefc76 Validity Not Before: Jan 1 08:18:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f498818564854e9646e2e5a463a6d91cbb44cbc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8e:bc:59:95:6f:ba:66:90:86:27:a2:ae:43: 67:3b:97:0a:29:f0:7c:3d:71:25:af:67:fb:f8:08: d0:56:af:83:bb:40:46:74:77:2f:83:59:fc:5f:20: 7b:5c:88:42:3d:65:f7:19:40:61:b3:06:d8:7e:4c: 69:36:76:c6:49:e1:79:7b:cd:a7:97:d4:e1:74:5b: ce:84:69:6b:00:1e:37:9e:0b:2d:bf:e8:4c:0b:3f: 47:a4:fb:84:e5:1e:0e:ed:a3:0e:33:04:0a:f6:86: dd:c8:6e:10:f9:48:6f:6d:ed:73:60:3f:85:a7:c2: 77:e1:da:55:cb:a2:85:ab:bc:8c:1b:b9:30:b0:e9: 2a:81:90:87:e4:61:b6:3d:bd:28:55:e1:59:c6:28: 7b:5b:2a:37:a0:14:6b:52:46:02:a8:76:fc:a2:8b: e7:5e:54:bd:3f:c0:c9:08:4a:f6:62:a6:84:1b:e6: dc:19:03:62:45:9d:ae:4f:f2:1d:01:15:07:20:4e: 59:4a:85:b3:2e:40:64:9f:c0:54:36:03:b4:f5:ca: 71:79:ff:39:94:db:56:b2:38:46:b2:5b:6d:9e:9c: 9b:61:d0:2a:b0:e1:30:ea:2c:e9:67:8f:a1:10:67: e5:fd:99:6c:8a:a6:4c:58:ee:08:a2:93:78:1f:fb: ec:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:98:81:85:64:85:4E:96:46:E2:E5:A4:63:A6:D9:1C:BB:44:CB:C1 X509v3 Authority Key Identifier: keyid:91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/9JiBhWSFTpZG4uWkY6bZHLtEy8E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.226.120.0/24 Signature Algorithm: sha256WithRSAEncryption 63:95:73:e0:97:1e:e1:63:1e:16:c3:65:9f:cc:8e:c8:1a:2b: d6:11:a9:e9:b4:de:5a:0d:1a:81:9f:2d:3d:79:4a:52:1c:06: 88:12:83:cf:ef:b7:19:5c:42:55:fb:fa:ee:c6:93:45:7c:f2: d3:28:88:b5:b1:0d:32:1b:a8:c1:72:00:63:ad:80:ce:97:da: 75:fc:9a:3a:b3:35:cb:b2:4a:e9:90:17:03:b5:ca:a4:01:2e: a3:91:6d:57:c4:a8:77:0c:1a:36:d7:47:20:f8:da:19:94:85: 08:44:02:8b:ce:e8:b1:25:27:5c:43:b8:48:82:04:b6:51:05: 57:2b:c9:b4:fc:a3:2f:bc:bf:53:80:05:9e:59:1e:90:0b:f8: 4c:da:15:9a:52:05:4f:cb:8d:fc:cc:08:87:f1:7e:cf:ef:ff: 30:a6:b3:47:81:2a:12:b5:0d:1b:0f:31:d6:cf:52:86:8e:54: e7:89:39:c3:a1:68:30:a2:19:1b:66:49:2b:c6:bf:a7:81:e8: 46:53:f7:2a:34:de:1f:5b:c2:ad:80:c2:6b:9b:8f:30:68:08: 15:2e:bf:57:12:23:a1:ab:12:0a:8e:77:c1:4e:98:dd:54:9a: 68:6a:cf:9a:b7:79:39:c3:ae:76:c1:4a:72:d0:43:27:7e:11: e5:43:95:c6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ovDDkKfY19IMpvPSaiMQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxYWFmY2FkYjZjNTI5ODRlMzU1ODllYjc3NThmMDUwYWFj ZWZjNzYwHhcNMjYwMTAxMDgxODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNDk4ODE4NTY0ODU0ZTk2NDZlMmU1YTQ2M2E2ZDkxY2JiNDRjYmMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyo68WZVvumaQhieirkNnO5cKKfB8 PXElr2f7+AjQVq+Du0BGdHcvg1n8XyB7XIhCPWX3GUBhswbYfkxpNnbGSeF5e82n l9ThdFvOhGlrAB43ngstv+hMCz9HpPuE5R4O7aMOMwQK9obdyG4Q+Uhvbe1zYD+F p8J34dpVy6KFq7yMG7kwsOkqgZCH5GG2Pb0oVeFZxih7Wyo3oBRrUkYCqHb8oovn XlS9P8DJCEr2YqaEG+bcGQNiRZ2uT/IdARUHIE5ZSoWzLkBkn8BUNgO09cpxef85 lNtWsjhGslttnpybYdAqsOEw6izpZ4+hEGfl/ZlsiqZMWO4IopN4H/vsKwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPSYgYVkhU6WRuLlpGOm2Ry7RMvBMB8GA1UdIwQY MBaAFJGq/K22xSmE41WJ63dY8FCqzvx2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2FyOHJiYkZLWVRqVllucmQxandVS3JPX0hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9hMTJiMGEtZDQ4ZC00ZDNiLWJjNDct MDU1N2JkNzIxN2YxLzEvOUppQmhXU0ZUcFpHNHVXa1k2YlpITHRFeThFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9hMTJiMGEtZDQ4ZC00ZDNiLWJjNDctMDU1N2JkNzIxN2Yx LzEva2FyOHJiYkZLWVRqVllucmQxandVS3JPX0hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALuJ4MA0G CSqGSIb3DQEBCwUAA4IBAQBjlXPglx7hYx4Ww2WfzI7IGivWEanptN5aDRqBny09 eUpSHAaIEoPP77cZXEJV+/ruxpNFfPLTKIi1sQ0yG6jBcgBjrYDOl9p1/Jo6szXL skrpkBcDtcqkAS6jkW1XxKh3DBo210cg+NoZlIUIRAKLzuixJSdcQ7hIggS2UQVX K8m0/KMvvL9TgAWeWR6QC/hM2hWaUgVPy438zAiH8X7P7/8wprNHgSoStQ0bDzHW z1KGjlTniTnDoWgwohkbZkkrxr+ngehGU/cqNN4fW8KtgMJrm48waAgVLr9XEiOh qxIKjnfBTpjdVJpoas+at3k5w652wUpy0EMnfhHlQ5XG -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:34 2026 by rpki-client