This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/0P-3rcHOACQuATcCi6YZ2CE4KUs.roa File: 0P-3rcHOACQuATcCi6YZ2CE4KUs.roa (raw, json) Hash identifier: QhfIbf/0f7+LXQU09PxZuXp7pk5C+r/mb2fH3ZziPpo= Subject key identifier: D0:FF:B7:AD:C1:CE:00:24:2E:01:37:02:8B:A6:19:D8:21:38:29:4B Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Certificate serial: 019BC12A807DAA0F59E9CE357A9115113F7D Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/0P-3rcHOACQuATcCi6YZ2CE4KUs.roa Signing time: Thu 15 Jan 2026 10:19:06 +0000 ROA not before: Thu 15 Jan 2026 10:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8220 IP address blocks: 46.37.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c1:2a:80:7d:aa:0f:59:e9:ce:35:7a:91:15:11:3f:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Validity Not Before: Jan 15 10:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d0ffb7adc1ce00242e0137028ba619d82138294b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c8:ef:4b:45:13:fd:ab:e6:9c:78:d7:6a:f8: 19:d5:8b:0b:f8:90:9d:a7:da:f9:fb:4d:09:d9:6b: 9f:88:47:66:08:86:56:3f:56:f7:c1:cd:0d:b0:cd: 15:db:ab:6c:5e:6d:c1:52:55:46:da:86:79:d5:c0: b0:f7:9a:e2:48:7c:37:38:57:04:a6:df:8f:31:a6: 37:07:ff:62:8c:55:18:e6:d0:9d:b8:9d:4b:e4:6f: 6d:82:51:96:1d:61:7b:e3:ff:96:82:03:65:7b:b9: 6a:da:1b:dc:87:b9:74:49:fc:05:b3:fe:e8:90:d3: 2d:ed:76:d8:37:b0:8a:ac:98:dd:d9:c5:7c:62:3e: ed:20:29:a6:5b:7b:36:47:0b:d4:30:79:f6:86:1e: 83:45:29:d5:32:32:7a:fb:66:d0:c0:e7:dc:3b:b2: c2:9a:eb:58:e4:0c:0f:62:51:1b:b3:7f:c7:62:f3: 4b:d5:df:6c:6b:3c:12:38:3e:ae:aa:09:09:91:1e: 6c:c1:cc:85:8a:3b:bf:5c:94:41:c6:c3:1a:a0:34: 1d:db:27:0c:8f:29:bb:dd:83:ab:f5:f9:30:da:89: 6b:e3:9f:db:ef:41:df:1b:ab:7d:2c:8c:e4:0d:18: f8:de:48:a8:5d:49:7b:8d:e0:c8:1e:53:b2:8b:c6: f8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:FF:B7:AD:C1:CE:00:24:2E:01:37:02:8B:A6:19:D8:21:38:29:4B X509v3 Authority Key Identifier: keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/0P-3rcHOACQuATcCi6YZ2CE4KUs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.37.111.0/24 Signature Algorithm: sha256WithRSAEncryption 35:34:90:d1:b3:51:91:73:f2:1d:4f:f9:e5:43:ba:60:5e:aa: 20:ce:c0:90:0a:ee:d9:29:f6:b0:19:49:fa:87:d2:37:6b:00: b0:55:bb:14:18:8b:62:c7:8e:3c:0a:2c:e1:bf:71:85:96:5c: 16:f1:0e:6b:13:29:f9:7b:36:f4:0f:e5:c3:42:6d:01:79:33: b2:be:20:e1:ae:2d:79:c1:bf:7a:39:d5:7d:94:30:06:c3:33: fb:75:12:bf:ab:4f:8a:d9:c8:3f:ec:51:f8:0e:6b:33:b5:98: 96:26:6c:fe:64:41:36:73:bc:7c:f1:e4:02:03:b9:56:64:a1: 52:42:24:21:df:cd:2c:de:80:c8:74:d8:30:a6:fc:d3:8d:cb: 8e:cf:a3:7c:0a:39:71:17:32:b4:e6:90:bd:08:d1:0c:11:82: 39:35:cc:a3:ea:2a:9c:32:02:a1:ed:08:85:b4:e8:8a:a6:22: 81:e7:c2:06:d1:40:93:ec:6f:40:8d:17:b4:36:1a:29:76:8a: c5:46:10:ab:c1:4f:e0:69:6d:45:a1:0e:66:40:b4:5d:29:08: 6f:7d:bd:04:37:e9:fd:33:03:81:4d:4a:f0:01:f0:03:32:9f: 58:cf:c5:2e:e3:5e:10:66:e5:0d:c5:e8:b2:fb:82:d6:7c:38: a0:8c:fe:89 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZvBKoB9qg9Z6c41epEVET99MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh ZTE5MjkwHhcNMjYwMTE1MTAxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMGZmYjdhZGMxY2UwMDI0MmUwMTM3MDI4YmE2MTlkODIxMzgyOTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsjvS0UT/avmnHjXavgZ1YsL+JCd p9r5+00J2WufiEdmCIZWP1b3wc0NsM0V26tsXm3BUlVG2oZ51cCw95riSHw3OFcE pt+PMaY3B/9ijFUY5tCduJ1L5G9tglGWHWF74/+WggNle7lq2hvch7l0SfwFs/7o kNMt7XbYN7CKrJjd2cV8Yj7tICmmW3s2RwvUMHn2hh6DRSnVMjJ6+2bQwOfcO7LC mutY5AwPYlEbs3/HYvNL1d9sazwSOD6uqgkJkR5swcyFiju/XJRBxsMaoDQd2ycM jym73YOr9fkw2olr45/b70HfG6t9LIzkDRj43kioXUl7jeDIHlOyi8b4CQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFND/t63BzgAkLgE3AoumGdghOClLMB8GA1UdIwQY MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt MjMxNTQ5NDA5NzIwLzEvMFAtM3JjSE9BQ1F1QVRjQ2k2WVoyQ0U0S1VzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiVvMA0G CSqGSIb3DQEBCwUAA4IBAQA1NJDRs1GRc/IdT/nlQ7pgXqogzsCQCu7ZKfawGUn6 h9I3awCwVbsUGItix448Cizhv3GFllwW8Q5rEyn5ezb0D+XDQm0BeTOyviDhri15 wb96OdV9lDAGwzP7dRK/q0+K2cg/7FH4DmsztZiWJmz+ZEE2c7x88eQCA7lWZKFS QiQh380s3oDIdNgwpvzTjcuOz6N8CjlxFzK05pC9CNEMEYI5Ncyj6iqcMgKh7QiF tOiKpiKB58IG0UCT7G9AjRe0NhopdorFRhCrwU/gaW1FoQ5mQLRdKQhvfb0EN+n9 MwOBTUrwAfADMp9Yz8Uu414QZuUNxeiy+4LWfDigjP6J -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:24 2026 by rpki-client