This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/1-LNpy_9Mxi9-cSdEi-yilq2_8kc.roa File: 1-LNpy_9Mxi9-cSdEi-yilq2_8kc.roa (raw, json) Hash identifier: lfO/LT2x9VGedw1VsT/xMSQrjFJ4WPeZ0phXQ/kch1M= Subject key identifier: F8:B3:69:CB:FF:4C:C6:2F:7E:71:27:44:8B:EC:A2:96:AD:BF:F2:47 Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Certificate serial: 019B79101CA1F5B06F76202C26E62C3201B3 Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/1-LNpy_9Mxi9-cSdEi-yilq2_8kc.roa Signing time: Thu 01 Jan 2026 10:17:37 +0000 ROA not before: Thu 01 Jan 2026 10:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142111 IP address blocks: 46.37.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:1c:a1:f5:b0:6f:76:20:2c:26:e6:2c:32:01:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Validity Not Before: Jan 1 10:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f8b369cbff4cc62f7e7127448beca296adbff247 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:27:e3:ff:17:55:29:b5:4b:d1:d8:e8:a9:03: 67:fa:84:e6:b9:26:a5:eb:5a:40:61:e5:b2:10:d5: af:01:89:c8:1a:6f:8e:33:71:04:ff:cc:84:e0:cd: 86:c1:c9:a7:c1:f4:c0:b0:36:bd:89:2c:ae:e4:5e: c8:2c:e9:86:2c:b0:71:92:d0:7b:6b:4d:3a:ad:38: 64:57:1d:b1:dc:cd:19:15:b0:d0:3f:e2:7a:11:2d: 72:46:fe:b6:b6:92:81:e5:49:48:34:c0:77:ec:55: 8e:87:22:59:02:b8:76:d8:02:f5:20:47:c3:49:b3: 4f:0b:f7:23:0a:80:ee:2e:c8:3a:94:36:12:9b:ed: e5:44:d0:3b:0e:43:b5:23:fc:3e:09:e5:37:77:c5: 9a:38:d5:4e:6b:de:b6:aa:c8:05:c1:c6:eb:39:fd: a7:8a:f2:d8:e4:0f:1f:a4:1e:dc:3a:09:db:4f:e3: 8e:3a:b8:98:e2:41:80:47:fb:56:25:e6:e4:b5:5b: da:ae:79:44:d9:d4:dc:c2:f4:31:b8:93:ee:94:09: e0:a3:62:14:89:75:46:e4:42:07:dc:08:a6:14:f8: 38:bd:60:c6:87:e8:3b:48:10:35:47:5c:5a:e5:d5: 2c:05:c8:b1:a5:13:f2:56:5a:38:ef:0d:bf:7b:34: f7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:B3:69:CB:FF:4C:C6:2F:7E:71:27:44:8B:EC:A2:96:AD:BF:F2:47 X509v3 Authority Key Identifier: keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/1-LNpy_9Mxi9-cSdEi-yilq2_8kc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.37.112.0/24 Signature Algorithm: sha256WithRSAEncryption 19:2b:40:24:41:b9:82:cb:2a:d6:f8:c0:84:d1:e0:6e:f8:7e: 6e:cf:6b:f4:93:81:f8:8d:6e:eb:92:5b:5a:75:95:f3:6f:89: a9:39:9a:30:52:49:67:d3:5f:e5:5f:e6:97:6a:88:a2:b8:5c: e2:ad:ff:35:45:23:c0:6b:02:3f:bd:2f:30:5e:cf:bb:b5:d9: 18:6a:74:28:7b:12:c8:1d:96:95:be:03:5d:0c:99:ca:7a:e5: d3:ca:52:5d:ce:f4:f7:67:65:8e:87:ef:73:06:f8:47:22:61: ee:31:c7:30:62:f7:f5:26:a3:b8:1c:fb:a6:b9:e4:7c:74:dc: a9:20:87:d0:93:d8:5c:6e:51:e9:3d:10:ef:7d:92:0a:dc:0a: 41:b1:c9:e8:33:77:96:4d:22:96:c7:74:c6:2b:03:65:39:8a: ca:3a:18:9b:8f:0b:da:e8:1f:cb:e0:d4:f4:0a:d7:11:8d:a3: 4d:76:58:1f:32:6b:8c:27:e1:32:ed:91:fe:58:ae:3f:f0:0e: 88:31:8c:16:5f:8a:c9:65:c3:f2:a4:53:87:33:4e:65:d0:93: 06:d4:dd:1a:18:f3:fc:3e:d9:37:0f:55:79:31:03:00:ce:d7: b0:85:f4:4a:72:c0:68:8f:54:97:85:87:5f:db:a9:a1:41:d5: 6f:47:dc:fd -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt5EByh9bBvdiAsJuYsMgGzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh ZTE5MjkwHhcNMjYwMTAxMTAxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOGIzNjljYmZmNGNjNjJmN2U3MTI3NDQ4YmVjYTI5NmFkYmZmMjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCfj/xdVKbVL0djoqQNn+oTmuSal 61pAYeWyENWvAYnIGm+OM3EE/8yE4M2GwcmnwfTAsDa9iSyu5F7ILOmGLLBxktB7 a006rThkVx2x3M0ZFbDQP+J6ES1yRv62tpKB5UlINMB37FWOhyJZArh22AL1IEfD SbNPC/cjCoDuLsg6lDYSm+3lRNA7DkO1I/w+CeU3d8WaONVOa962qsgFwcbrOf2n ivLY5A8fpB7cOgnbT+OOOriY4kGAR/tWJebktVvarnlE2dTcwvQxuJPulAngo2IU iXVG5EIH3AimFPg4vWDGh+g7SBA1R1xa5dUsBcixpRPyVlo47w2/ezT3ywIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPizacv/TMYvfnEnRIvsopatv/JHMB8GA1UdIwQY MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt MjMxNTQ5NDA5NzIwLzEvMS1MTnB5XzlNeGk5LWNTZEVpLXlpbHEyXzhrYy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZTcvY2RmZjE2LTQ1OGEtNDdjMy04ZGZhLTIzMTU0OTQwOTcy MC8xLzA4OEloSkdLVUNPZTl3VVk3cF9BVHhxdUdTay5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC4lcDAN BgkqhkiG9w0BAQsFAAOCAQEAGStAJEG5gssq1vjAhNHgbvh+bs9r9JOB+I1u65Jb WnWV82+JqTmaMFJJZ9Nf5V/ml2qIorhc4q3/NUUjwGsCP70vMF7Pu7XZGGp0KHsS yB2Wlb4DXQyZynrl08pSXc7092dljofvcwb4RyJh7jHHMGL39SajuBz7prnkfHTc qSCH0JPYXG5R6T0Q732SCtwKQbHJ6DN3lk0ilsd0xisDZTmKyjoYm48L2ugfy+DU 9ArXEY2jTXZYHzJrjCfhMu2R/liuP/AOiDGMFl+KyWXD8qRThzNOZdCTBtTdGhjz /D7ZNw9VeTEDAM7XsIX0SnLAaI9Ul4WHX9upoUHVb0fc/Q== -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:29 2026 by rpki-client