This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/51oAIofJkFXpGxq0u0pMpGIor0Y.roa File: 51oAIofJkFXpGxq0u0pMpGIor0Y.roa (raw, json) Hash identifier: luFon6hTssLT0GVFCEnyosU6nzOcK0/WHgWU8mcIjfk= Subject key identifier: E7:5A:00:22:87:C9:90:55:E9:1B:1A:B4:BB:4A:4C:A4:62:28:AF:46 Certificate issuer: /CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Certificate serial: 019B7910A481F7AF3CFD7455B451EFDACCDE Authority key identifier: 9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/51oAIofJkFXpGxq0u0pMpGIor0Y.roa Signing time: Thu 01 Jan 2026 10:18:12 +0000 ROA not before: Thu 01 Jan 2026 10:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50576 IP address blocks: 46.231.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:a4:81:f7:af:3c:fd:74:55:b4:51:ef:da:cc:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Validity Not Before: Jan 1 10:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e75a002287c99055e91b1ab4bb4a4ca46228af46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:64:19:ac:85:d8:4c:dc:67:4d:6f:85:44:97: 8d:26:4d:8f:7f:f7:3f:33:7b:45:f9:29:8e:76:fc: da:54:b3:0a:24:cd:e4:35:88:a4:2c:d9:0a:af:0a: 39:a1:23:14:95:b7:ce:7e:1c:73:6f:82:d6:4c:29: 5c:26:36:ef:1a:43:de:53:3e:a8:e2:02:b6:be:0b: 31:34:ef:67:36:d9:3d:4f:7c:33:e7:a1:4a:ad:38: 50:f8:bd:0f:18:83:56:cd:93:74:a5:1f:42:0c:dd: 17:b0:dc:35:1b:a8:62:b3:43:63:3b:9d:c1:ee:dd: 06:e6:72:b7:c7:df:d3:c5:86:6c:58:67:4f:12:f2: e6:e5:ed:3c:c4:3d:d6:c8:8a:b3:23:18:3e:98:f8: 9c:70:a6:29:ce:6d:35:01:56:37:d6:8c:ff:87:5f: 1a:ca:06:0c:74:34:b0:5e:2b:ab:7e:4a:17:28:63: be:cf:6b:04:42:2f:97:a2:09:d4:13:80:e3:2b:fd: 7c:17:ec:56:81:50:b9:93:ba:87:ec:9f:a2:b7:0d: 98:8a:2c:ef:f4:df:2d:46:48:fa:c6:f2:ac:f0:ac: 3c:4f:74:4f:4b:99:18:95:6e:02:5a:91:32:8c:ff: 0d:38:64:41:8f:c8:f0:ce:60:82:19:e4:8a:a0:49: 5f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:5A:00:22:87:C9:90:55:E9:1B:1A:B4:BB:4A:4C:A4:62:28:AF:46 X509v3 Authority Key Identifier: keyid:9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/51oAIofJkFXpGxq0u0pMpGIor0Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.231.228.0/24 Signature Algorithm: sha256WithRSAEncryption 58:d6:0e:df:fb:5e:d3:90:de:a3:70:37:5f:72:11:fd:db:95: 88:e0:10:83:85:7d:03:7b:29:89:7c:6b:53:b0:62:4b:fc:d3: f3:3b:79:39:3b:f9:b3:11:72:1e:58:45:2c:94:4c:4e:55:27: 60:f5:31:39:d6:53:dd:0c:7b:bc:5e:ae:1b:c4:2b:32:ba:e4: d6:5c:05:6e:41:1f:32:6e:d9:c5:c6:cc:1b:2c:2e:77:d8:b4: f9:a2:d1:16:e2:ed:39:bd:19:1a:46:7f:c5:3c:53:f8:88:26: 15:55:82:b2:ff:52:ea:ef:1c:46:31:3f:be:1d:ff:a9:b1:12: b2:91:d2:d6:13:48:c3:db:15:85:24:05:ed:c3:39:74:f3:bc: 3f:4a:7b:bd:38:e0:ec:c0:61:43:46:f2:02:42:ef:99:e2:2d: 38:8f:ae:8f:60:f0:44:a7:3a:a9:36:c8:3d:ec:3d:28:08:b9: b9:83:ba:2b:0a:76:cb:ca:01:e1:fb:21:2c:56:1f:18:5d:57: 60:8d:59:94:6c:ee:34:ed:b2:64:ce:87:3b:5f:46:f8:71:d8: a3:1c:39:e2:3d:9f:93:d9:9e:63:db:e9:be:cb:84:ce:4e:f8: ed:c8:ab:c0:58:59:f6:e8:32:81:32:6c:82:43:c0:8e:8c:5c: c2:fa:42:ad -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EKSB9688/XRVtFHv2szeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkOTg5YjM5OThlMTlmYzAwZjg2NzBjZjZjOWQ3NDAxNzE1 Y2YzNGYwHhcNMjYwMTAxMTAxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlNzVhMDAyMjg3Yzk5MDU1ZTkxYjFhYjRiYjRhNGNhNDYyMjhhZjQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymQZrIXYTNxnTW+FRJeNJk2Pf/c/ M3tF+SmOdvzaVLMKJM3kNYikLNkKrwo5oSMUlbfOfhxzb4LWTClcJjbvGkPeUz6o 4gK2vgsxNO9nNtk9T3wz56FKrThQ+L0PGINWzZN0pR9CDN0XsNw1G6his0NjO53B 7t0G5nK3x9/TxYZsWGdPEvLm5e08xD3WyIqzIxg+mPiccKYpzm01AVY31oz/h18a ygYMdDSwXiurfkoXKGO+z2sEQi+XognUE4DjK/18F+xWgVC5k7qH7J+itw2Yiizv 9N8tRkj6xvKs8Kw8T3RPS5kYlW4CWpEyjP8NOGRBj8jwzmCCGeSKoElf/QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOdaACKHyZBV6RsatLtKTKRiKK9GMB8GA1UdIwQY MBaAFJ2YmzmY4Z/AD4Zwz2yddAFxXPNPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2It YzdjY2Q3OTQzMTA2LzEvNTFvQUlvZkprRlhwR3hxMHUwcE1wR0lvcjBZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2ItYzdjY2Q3OTQzMTA2 LzEvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALufkMA0G CSqGSIb3DQEBCwUAA4IBAQBY1g7f+17TkN6jcDdfchH925WI4BCDhX0DeymJfGtT sGJL/NPzO3k5O/mzEXIeWEUslExOVSdg9TE51lPdDHu8Xq4bxCsyuuTWXAVuQR8y btnFxswbLC532LT5otEW4u05vRkaRn/FPFP4iCYVVYKy/1Lq7xxGMT++Hf+psRKy kdLWE0jD2xWFJAXtwzl087w/Snu9OODswGFDRvICQu+Z4i04j66PYPBEpzqpNsg9 7D0oCLm5g7orCnbLygHh+yEsVh8YXVdgjVmUbO407bJkzoc7X0b4cdijHDniPZ+T 2Z5j2+m+y4TOTvjtyKvAWFn26DKBMmyCQ8COjFzC+kKt -----END CERTIFICATE-----Generated at Tue Feb 10 02:34:48 2026 by rpki-client