This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/STxyqEZJdelIgYwPQkrFzkgfanw.roa File: STxyqEZJdelIgYwPQkrFzkgfanw.roa (raw, json) Hash identifier: s65hDXY2ql7cBoPqQwS0YK+flCpqESibXFG1uh5dHgQ= Subject key identifier: 49:3C:72:A8:46:49:75:E9:48:81:8C:0F:42:4A:C5:CE:48:1F:6A:7C Certificate issuer: /CN=aca77c708af0ba1f81549c9f87089559390167a5 Certificate serial: 019B7EA67FE5694B6F61EF699A3F5A6D4FAC Authority key identifier: AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/STxyqEZJdelIgYwPQkrFzkgfanw.roa Signing time: Fri 02 Jan 2026 12:19:59 +0000 ROA not before: Fri 02 Jan 2026 12:19:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 46.183.152.0/21 maxlen: 21 185.1.102.0/24 maxlen: 24 2001:7f8:bd::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 15:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:7f:e5:69:4b:6f:61:ef:69:9a:3f:5a:6d:4f:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aca77c708af0ba1f81549c9f87089559390167a5 Validity Not Before: Jan 2 12:19:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=493c72a8464975e948818c0f424ac5ce481f6a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1b:5f:b9:9b:a0:07:f6:bb:be:03:79:3f:61: 54:ce:94:b2:cc:5c:17:6d:2e:e5:d6:a4:d7:5b:fb: b1:88:d9:2b:21:de:4f:ef:ad:08:5f:ea:07:cc:70: 48:13:96:84:19:85:50:7f:2a:b6:ec:a0:0d:42:e9: 12:dd:4d:a6:0a:84:b7:c5:c1:3b:89:11:93:44:bd: 69:56:69:84:a1:56:66:7e:6b:14:cb:6b:99:54:f0: 9c:4b:05:e4:ba:9d:3d:d5:4b:77:54:ed:7e:7c:92: a3:09:7a:01:12:8f:ee:b1:46:be:b7:6c:6e:5c:42: 63:74:1b:48:dc:c1:cb:c3:dc:a2:bd:67:20:1f:58: 01:cf:92:93:48:a8:aa:4a:31:24:9d:79:4b:27:49: ef:50:1f:ae:ad:62:86:22:e0:aa:08:9c:f6:66:41: f7:aa:8e:4e:03:9e:8d:7a:9d:9e:9a:a9:e0:73:cc: b9:ce:dd:04:07:30:fc:4c:f3:bd:be:ff:e0:a9:b4: e4:74:93:fa:fc:ca:73:5c:3d:1b:2e:dd:ac:79:a5: 20:ca:ec:da:10:ff:90:00:da:f9:90:2b:58:92:d5: c7:88:27:82:8d:f2:20:93:1b:4a:a6:e3:d9:a1:2c: bd:80:81:60:8e:a6:7a:7b:d6:85:a5:c9:8f:c9:a7: e0:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:3C:72:A8:46:49:75:E9:48:81:8C:0F:42:4A:C5:CE:48:1F:6A:7C X509v3 Authority Key Identifier: keyid:AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/STxyqEZJdelIgYwPQkrFzkgfanw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.183.152.0/21 185.1.102.0/24 IPv6: 2001:7f8:bd::/48 Signature Algorithm: sha256WithRSAEncryption 02:5d:b8:35:7a:af:e1:f5:bc:6e:e1:3f:ac:6e:d7:49:77:4d: db:12:fb:72:ea:5a:81:43:7f:ed:84:6a:2b:9b:29:16:16:87: 25:b9:82:6b:64:09:eb:9d:b1:33:98:68:2c:27:2d:63:77:69: 1c:a1:95:8d:3e:c9:05:01:b1:ac:5c:06:3c:ad:b7:a1:fe:b7: 5f:06:6f:3e:62:b0:26:ee:ef:e3:78:f6:8e:b7:93:75:96:69: 35:19:d5:93:ec:ba:66:45:8f:f3:e7:9c:d9:36:bc:13:7f:d4: b4:1f:29:4c:a4:32:33:7f:94:56:d2:06:61:a0:5a:62:dc:af: 9b:f9:97:59:88:83:09:e4:c3:d1:6a:02:f1:74:b5:fe:1a:c0: b0:da:86:7f:85:07:e2:56:be:65:b2:33:39:e8:39:d6:14:38: 1d:d9:89:ae:23:85:54:6b:3d:5c:07:0a:02:f2:96:c0:48:7b: 9d:93:35:0b:4f:cb:5c:0d:4a:c5:3e:56:c5:59:f5:ac:25:fb: 27:41:f0:88:02:e1:e4:cf:75:dc:79:8f:44:20:c2:7e:50:da: 04:7b:0e:8b:b9:97:8f:90:96:8e:b4:ef:ed:d3:72:08:ec:25: d8:12:70:65:9e:b1:4b:08:4e:45:4b:03:f3:4e:64:f7:58:68: 7a:2d:b4:b8 -----BEGIN CERTIFICATE----- MIIFFDCCA/ygAwIBAgISAZt+pn/laUtvYe9pmj9abU+sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjYTc3YzcwOGFmMGJhMWY4MTU0OWM5Zjg3MDg5NTU5Mzkw MTY3YTUwHhcNMjYwMTAyMTIxOTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0OTNjNzJhODQ2NDk3NWU5NDg4MThjMGY0MjRhYzVjZTQ4MWY2YTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRtfuZugB/a7vgN5P2FUzpSyzFwX bS7l1qTXW/uxiNkrId5P760IX+oHzHBIE5aEGYVQfyq27KANQukS3U2mCoS3xcE7 iRGTRL1pVmmEoVZmfmsUy2uZVPCcSwXkup091Ut3VO1+fJKjCXoBEo/usUa+t2xu XEJjdBtI3MHLw9yivWcgH1gBz5KTSKiqSjEknXlLJ0nvUB+urWKGIuCqCJz2ZkH3 qo5OA56Nep2emqngc8y5zt0EBzD8TPO9vv/gqbTkdJP6/MpzXD0bLt2seaUgyuza EP+QANr5kCtYktXHiCeCjfIgkxtKpuPZoSy9gIFgjqZ6e9aFpcmPyafgUwIDAQAB o4ICIDCCAhwwHQYDVR0OBBYEFEk8cqhGSXXpSIGMD0JKxc5IH2p8MB8GA1UdIwQY MBaAFKynfHCK8LofgVScn4cIlVk5AWelMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcktkOGNJcnd1aC1CVkp5Zmh3aVZXVGtCWjZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84ZmU3ZDgtMDE3Yi00MWFhLWE5MWYt MjhiMTllM2ZkNGE2LzEvU1R4eXFFWkpkZWxJZ1l3UFFrckZ6a2dmYW53LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS84ZmU3ZDgtMDE3Yi00MWFhLWE5MWYtMjhiMTllM2ZkNGE2 LzEvcktkOGNJcnd1aC1CVkp5Zmh3aVZXVGtCWjZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQDLreYAwQA uQFmMA8EAgACMAkDBwAgAQf4AL0wDQYJKoZIhvcNAQELBQADggEBAAJduDV6r+H1 vG7hP6xu10l3TdsS+3LqWoFDf+2EaiubKRYWhyW5gmtkCeudsTOYaCwnLWN3aRyh lY0+yQUBsaxcBjytt6H+t18Gbz5isCbu7+N49o63k3WWaTUZ1ZPsumZFj/PnnNk2 vBN/1LQfKUykMjN/lFbSBmGgWmLcr5v5l1mIgwnkw9FqAvF0tf4awLDahn+FB+JW vmWyMznoOdYUOB3Zia4jhVRrPVwHCgLylsBIe52TNQtPy1wNSsU+VsVZ9awl+ydB 8IgC4eTPddx5j0Qgwn5Q2gR7Dou5l4+Qlo607+3TcgjsJdgScGWesUsITkVLA/NO ZPdYaHottLg= -----END CERTIFICATE-----Generated at Wed Jan 7 23:48:09 2026 by rpki-client