This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/47d7f7-b019-42e9-bb08-d69c0134f5a8/1/cLRoM7XLCk4C31zvG0Wgt7yjUMo.roa File: cLRoM7XLCk4C31zvG0Wgt7yjUMo.roa (raw, json) Hash identifier: u4HrWzSOjheYxRy02gM2rX531WbutVdizyrj+q6Vb4A= Subject key identifier: 70:B4:68:33:B5:CB:0A:4E:02:DF:5C:EF:1B:45:A0:B7:BC:A3:50:CA Certificate issuer: /CN=3cec061c5ed56dca07753fe4b5b8c090d97ad0e1 Certificate serial: 019B7EA4EF0FE9B387CBA2F960C4829E5197 Authority key identifier: 3C:EC:06:1C:5E:D5:6D:CA:07:75:3F:E4:B5:B8:C0:90:D9:7A:D0:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/POwGHF7VbcoHdT_ktbjAkNl60OE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/47d7f7-b019-42e9-bb08-d69c0134f5a8/1/cLRoM7XLCk4C31zvG0Wgt7yjUMo.roa Signing time: Fri 02 Jan 2026 12:18:16 +0000 ROA not before: Fri 02 Jan 2026 12:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 52103 IP address blocks: 46.174.64.0/22 maxlen: 22 46.174.68.0/24 maxlen: 24 46.174.69.0/24 maxlen: 24 46.174.70.0/24 maxlen: 24 46.174.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/47d7f7-b019-42e9-bb08-d69c0134f5a8/1/POwGHF7VbcoHdT_ktbjAkNl60OE.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/47d7f7-b019-42e9-bb08-d69c0134f5a8/1/POwGHF7VbcoHdT_ktbjAkNl60OE.mft rsync://rpki.ripe.net/repository/DEFAULT/POwGHF7VbcoHdT_ktbjAkNl60OE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:ef:0f:e9:b3:87:cb:a2:f9:60:c4:82:9e:51:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3cec061c5ed56dca07753fe4b5b8c090d97ad0e1 Validity Not Before: Jan 2 12:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=70b46833b5cb0a4e02df5cef1b45a0b7bca350ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b2:e6:80:d0:53:7a:e3:f4:d1:e3:77:b1:72: 77:b0:c1:e0:26:7e:c9:18:12:ef:6c:bd:c3:59:e8: 94:33:a1:3a:ca:49:75:02:97:d6:ba:20:e0:bf:e2: 3c:07:60:03:62:9d:3c:01:75:fd:da:bd:e3:3d:7f: 0b:f7:cd:5d:c2:45:21:69:f4:12:fc:ab:95:95:e9: b2:ae:7e:6f:fa:b4:bf:91:77:00:01:f6:2f:e4:16: 61:b6:09:80:02:a5:bc:c6:24:41:c0:cc:c4:04:d9: 07:65:c1:16:85:92:36:7f:d0:93:bd:1a:7e:36:0d: d3:66:e8:bc:70:bb:35:82:f5:e3:84:cb:01:91:2b: 6a:7e:11:48:a0:b3:14:bb:15:0d:e3:55:3e:99:12: 8a:25:18:6c:b5:a1:b2:b6:96:d9:c5:b9:50:83:e7: f4:b9:ca:bb:68:4b:a4:90:86:04:37:81:1b:57:79: 9a:e5:97:69:e8:c0:8b:1f:fc:14:e5:51:43:50:bd: 72:64:3c:a3:a9:3a:27:d4:ea:36:49:89:3d:fa:8c: 91:9e:6c:07:69:ac:f4:3e:2d:77:f7:ad:8b:6e:d6: cc:94:ba:bd:e6:93:38:47:61:a3:9f:8c:68:98:b4: cc:4e:ee:97:65:0a:6b:75:24:fb:d5:21:3d:bf:76: d9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B4:68:33:B5:CB:0A:4E:02:DF:5C:EF:1B:45:A0:B7:BC:A3:50:CA X509v3 Authority Key Identifier: keyid:3C:EC:06:1C:5E:D5:6D:CA:07:75:3F:E4:B5:B8:C0:90:D9:7A:D0:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/POwGHF7VbcoHdT_ktbjAkNl60OE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/47d7f7-b019-42e9-bb08-d69c0134f5a8/1/cLRoM7XLCk4C31zvG0Wgt7yjUMo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/47d7f7-b019-42e9-bb08-d69c0134f5a8/1/POwGHF7VbcoHdT_ktbjAkNl60OE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.174.64.0/21 Signature Algorithm: sha256WithRSAEncryption 14:6f:d6:77:51:0e:18:f3:cf:42:c1:3c:de:25:b2:38:f6:22: c8:c5:a9:ed:3a:54:b2:64:78:65:ca:78:25:00:ac:42:3b:35: b6:f0:75:01:ab:d3:4f:42:90:eb:d8:86:21:d4:65:a8:31:66: 8a:26:4d:14:ba:4e:07:09:ae:58:7a:27:54:2f:45:f7:4f:b5: 97:2e:48:20:1c:a6:e2:fb:b7:3c:f4:b6:bd:a3:e1:b0:bb:35: 3a:7c:c3:df:85:7c:20:68:60:50:ae:c5:a7:ec:f5:59:95:ec: b0:0b:fa:64:7f:ce:6d:bb:36:94:4a:81:08:d8:2b:f5:5e:09: 10:7f:04:66:b4:11:90:4a:64:71:7b:e8:d5:51:05:d8:22:97: 9a:c6:36:95:65:ca:32:1b:b0:60:eb:42:91:e6:81:b2:35:71: 3d:56:43:f6:b4:d8:63:a7:60:76:7a:3f:91:d1:49:db:c0:64: 25:9e:83:ac:60:92:73:fd:d2:1a:e9:9f:8e:20:1a:4b:24:0c: 52:cb:4d:f8:a0:11:bd:10:a3:24:61:b8:23:fa:cd:6c:d8:b1: d0:fa:d4:eb:43:d7:83:56:25:d9:8a:9a:82:7a:b2:0a:f6:20: 49:f5:34:fe:02:97:53:a9:f9:6b:9b:cb:e9:65:bd:05:a5:c5: b5:be:e3:3e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pO8P6bOHy6L5YMSCnlGXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNjZWMwNjFjNWVkNTZkY2EwNzc1M2ZlNGI1YjhjMDkwZDk3 YWQwZTEwHhcNMjYwMTAyMTIxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MGI0NjgzM2I1Y2IwYTRlMDJkZjVjZWYxYjQ1YTBiN2JjYTM1MGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbLmgNBTeuP00eN3sXJ3sMHgJn7J GBLvbL3DWeiUM6E6ykl1ApfWuiDgv+I8B2ADYp08AXX92r3jPX8L981dwkUhafQS /KuVlemyrn5v+rS/kXcAAfYv5BZhtgmAAqW8xiRBwMzEBNkHZcEWhZI2f9CTvRp+ Ng3TZui8cLs1gvXjhMsBkStqfhFIoLMUuxUN41U+mRKKJRhstaGytpbZxblQg+f0 ucq7aEukkIYEN4EbV3ma5Zdp6MCLH/wU5VFDUL1yZDyjqTon1Oo2SYk9+oyRnmwH aaz0Pi13962LbtbMlLq95pM4R2Gjn4xomLTMTu6XZQprdST71SE9v3bZ9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHC0aDO1ywpOAt9c7xtFoLe8o1DKMB8GA1UdIwQY MBaAFDzsBhxe1W3KB3U/5LW4wJDZetDhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUE93R0hGN1ZiY29IZFRfa3RiakFrTmw2ME9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC80N2Q3ZjctYjAxOS00MmU5LWJiMDgt ZDY5YzAxMzRmNWE4LzEvY0xSb003WExDazRDMzF6dkcwV2d0N3lqVU1vLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC80N2Q3ZjctYjAxOS00MmU5LWJiMDgtZDY5YzAxMzRmNWE4 LzEvUE93R0hGN1ZiY29IZFRfa3RiakFrTmw2ME9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLq5AMA0G CSqGSIb3DQEBCwUAA4IBAQAUb9Z3UQ4Y889CwTzeJbI49iLIxantOlSyZHhlyngl AKxCOzW28HUBq9NPQpDr2IYh1GWoMWaKJk0Uuk4HCa5YeidUL0X3T7WXLkggHKbi +7c89La9o+GwuzU6fMPfhXwgaGBQrsWn7PVZleywC/pkf85tuzaUSoEI2Cv1XgkQ fwRmtBGQSmRxe+jVUQXYIpeaxjaVZcoyG7Bg60KR5oGyNXE9VkP2tNhjp2B2ej+R 0UnbwGQlnoOsYJJz/dIa6Z+OIBpLJAxSy034oBG9EKMkYbgj+s1s2LHQ+tTrQ9eD ViXZipqCerIK9iBJ9TT+ApdTqflrm8vpZb0FpcW1vuM+ -----END CERTIFICATE-----Generated at Tue Feb 10 01:13:14 2026 by rpki-client