This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/3iXoIa0Tnc6nSmaQlZwJpvHoBP4.roa File: 3iXoIa0Tnc6nSmaQlZwJpvHoBP4.roa (raw, json) Hash identifier: 92O5pIZ5W4yGOk4rHe6wXslYmPaUdiXeWtRLQm4goss= Subject key identifier: DE:25:E8:21:AD:13:9D:CE:A7:4A:66:90:95:9C:09:A6:F1:E8:04:FE Certificate issuer: /CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Certificate serial: 019B7910A4F5EEAF15CCB9F5458DC1CD25BC Authority key identifier: 9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/3iXoIa0Tnc6nSmaQlZwJpvHoBP4.roa Signing time: Thu 01 Jan 2026 10:18:12 +0000 ROA not before: Thu 01 Jan 2026 10:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200737 IP address blocks: 46.231.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 15:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:a4:f5:ee:af:15:cc:b9:f5:45:8d:c1:cd:25:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Validity Not Before: Jan 1 10:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=de25e821ad139dcea74a6690959c09a6f1e804fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:56:59:51:19:53:91:d1:0e:b6:e9:80:0b:e3: 66:87:c6:b7:ae:65:1d:47:96:37:49:b7:1d:3d:47: 84:b1:20:f6:3e:2a:8a:93:dc:f6:72:c3:6f:08:49: a7:a7:3c:42:8c:af:a6:a5:f0:a9:dd:dd:66:b5:6c: 46:76:bb:88:d8:44:2c:12:f6:32:fb:04:85:4f:83: 93:51:ab:8a:6d:32:92:f2:e8:90:61:aa:2f:31:a3: 9d:7d:c3:f6:6f:a2:83:ee:da:c4:31:2c:7e:be:f2: cd:37:87:a5:dd:4f:fa:26:2b:7c:6f:94:42:75:24: b5:7b:70:1a:ea:2d:c2:c2:02:4a:5a:cc:32:45:ac: 0b:96:58:1a:70:3d:41:eb:c6:1a:ab:32:93:12:1c: 10:46:e7:f2:a3:66:a8:26:c3:f6:8a:96:f9:d8:06: 07:62:1a:37:f0:f2:d1:ca:1c:95:40:b2:1a:89:51: b4:e8:27:36:80:e3:aa:0f:16:8e:74:39:3f:ae:9b: a6:d0:be:fe:5f:cb:0f:e7:2b:6a:3a:97:ec:8b:95: 69:2f:89:e6:b6:af:e0:d6:49:a6:6a:53:37:36:db: 90:b1:1a:fb:b4:4e:b3:64:c2:1d:96:bf:4c:c8:be: 58:46:53:c5:74:cc:00:ef:73:88:8d:d8:93:6d:53: 8b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:25:E8:21:AD:13:9D:CE:A7:4A:66:90:95:9C:09:A6:F1:E8:04:FE X509v3 Authority Key Identifier: keyid:9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/3iXoIa0Tnc6nSmaQlZwJpvHoBP4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.231.230.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:e1:e0:e0:88:83:11:0c:9c:23:ed:44:90:f6:10:d5:8a:d3: 17:16:98:6b:c9:a7:aa:81:e9:bf:8f:4e:09:fc:2e:94:b6:30: d1:8b:52:2d:10:9c:85:86:5e:67:5a:4a:f4:96:3e:30:5c:5c: 72:4e:d9:20:83:11:be:fa:fc:a1:e9:fa:f3:f1:5d:2b:6c:a5: a9:1a:ec:e0:f1:39:39:42:a4:68:f1:4a:7f:16:22:a5:6c:5e: 44:4e:1a:56:92:d5:8c:08:b1:2b:a6:3a:35:bf:fc:c8:c6:06: 60:45:d4:6e:16:4c:01:56:5a:a4:4b:4d:84:c6:af:22:f3:26: ff:07:a4:8b:f3:95:57:dd:09:92:16:57:d2:91:4f:60:cb:6e: 21:df:a6:6b:63:78:9f:41:ff:8d:92:80:a7:79:30:da:fe:ec: c0:63:96:24:72:5d:cc:dd:3e:97:ab:49:21:63:24:d0:d3:0e: c9:bb:1a:9d:d4:33:8d:08:ed:a6:a9:1e:24:fe:bd:80:30:ff: ff:4d:3c:8b:0d:4d:f3:78:8a:7a:45:cc:0e:02:66:c2:41:70: 93:57:47:c0:9d:84:90:7b:06:8b:a5:86:63:43:30:3c:90:6c: da:a3:d1:cb:5f:34:23:a3:7b:47:0e:d2:58:33:80:77:29:fe: 72:c3:36:bd -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EKT17q8VzLn1RY3BzSW8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkOTg5YjM5OThlMTlmYzAwZjg2NzBjZjZjOWQ3NDAxNzE1 Y2YzNGYwHhcNMjYwMTAxMTAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkZTI1ZTgyMWFkMTM5ZGNlYTc0YTY2OTA5NTljMDlhNmYxZTgwNGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1ZZURlTkdEOtumAC+Nmh8a3rmUd R5Y3SbcdPUeEsSD2PiqKk9z2csNvCEmnpzxCjK+mpfCp3d1mtWxGdruI2EQsEvYy +wSFT4OTUauKbTKS8uiQYaovMaOdfcP2b6KD7trEMSx+vvLNN4el3U/6Jit8b5RC dSS1e3Aa6i3CwgJKWswyRawLllgacD1B68YaqzKTEhwQRufyo2aoJsP2ipb52AYH Yho38PLRyhyVQLIaiVG06Cc2gOOqDxaOdDk/rpum0L7+X8sP5ytqOpfsi5VpL4nm tq/g1kmmalM3NtuQsRr7tE6zZMIdlr9MyL5YRlPFdMwA73OIjdiTbVOLFwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFN4l6CGtE53Op0pmkJWcCabx6AT+MB8GA1UdIwQY MBaAFJ2YmzmY4Z/AD4Zwz2yddAFxXPNPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2It YzdjY2Q3OTQzMTA2LzEvM2lYb0lhMFRuYzZuU21hUWxad0pwdkhvQlA0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2ItYzdjY2Q3OTQzMTA2 LzEvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALufmMA0G CSqGSIb3DQEBCwUAA4IBAQCM4eDgiIMRDJwj7USQ9hDVitMXFphryaeqgem/j04J /C6UtjDRi1ItEJyFhl5nWkr0lj4wXFxyTtkggxG++vyh6frz8V0rbKWpGuzg8Tk5 QqRo8Up/FiKlbF5EThpWktWMCLErpjo1v/zIxgZgRdRuFkwBVlqkS02Exq8i8yb/ B6SL85VX3QmSFlfSkU9gy24h36ZrY3ifQf+NkoCneTDa/uzAY5Ykcl3M3T6Xq0kh YyTQ0w7Juxqd1DONCO2mqR4k/r2AMP//TTyLDU3zeIp6RcwOAmbCQXCTV0fAnYSQ ewaLpYZjQzA8kGzao9HLXzQjo3tHDtJYM4B3Kf5ywza9 -----END CERTIFICATE-----Generated at Tue Feb 3 00:08:02 2026 by rpki-client