This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/49qDEMT95KkYi3Py1v-kUhYCuKQ.roa File: 49qDEMT95KkYi3Py1v-kUhYCuKQ.roa (raw, json) Hash identifier: UZ2WW9Ii94D2uUWKYSruiKM5NflNFSuwb646DQFKoY0= Subject key identifier: E3:DA:83:10:C4:FD:E4:A9:18:8B:73:F2:D6:FF:A4:52:16:02:B8:A4 Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Certificate serial: 019BC12A8024456CC5A6329E2094CA0482CE Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/49qDEMT95KkYi3Py1v-kUhYCuKQ.roa Signing time: Thu 15 Jan 2026 10:19:06 +0000 ROA not before: Thu 15 Jan 2026 10:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 834 IP address blocks: 46.37.98.0/24 maxlen: 24 46.37.113.0/24 maxlen: 24 91.205.228.0/24 maxlen: 24 185.92.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:c1:2a:80:24:45:6c:c5:a6:32:9e:20:94:ca:04:82:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Validity Not Before: Jan 15 10:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3da8310c4fde4a9188b73f2d6ffa4521602b8a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:81:2b:67:e0:23:d9:33:ba:36:fc:b9:2b:0f: 2e:85:d1:21:8f:18:38:e3:de:e3:af:a6:ff:65:dd: 8b:9b:44:f4:83:a4:aa:9f:47:f2:32:34:10:56:7b: b2:31:9e:1a:37:67:07:20:56:04:9b:92:9c:aa:cf: 53:64:ed:42:19:c3:87:8e:37:41:3d:f2:c9:7d:9f: 51:2b:c6:11:d1:5d:29:2c:f5:3f:60:bf:25:fe:d0: be:cc:06:c0:66:00:80:2f:f0:d3:9e:01:37:bd:2d: 5d:56:0b:10:b8:35:72:e0:ea:ad:fb:92:63:3c:10: f2:5e:0d:ab:a3:bd:ce:96:6b:ef:4d:bb:03:a6:0f: e6:85:5d:34:e9:65:8a:be:a3:be:dc:8d:72:3a:08: 87:c4:04:71:b2:e6:44:02:28:84:91:03:36:13:f8: 24:cf:50:b9:f6:93:34:c0:3d:6d:c9:7e:00:6a:2e: 55:05:7f:7b:39:c6:f6:68:9a:6d:0d:ae:1e:23:17: 45:2a:d2:ee:05:ff:d0:01:f7:e5:5a:81:09:94:5f: f2:fe:aa:3d:e5:ed:26:d5:9b:93:95:70:e4:9a:5c: 3e:c3:99:16:98:48:fc:bc:ca:42:17:df:8b:2e:ec: ed:1e:e2:e6:be:b1:8e:be:ca:63:53:ac:7c:83:58: e8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:DA:83:10:C4:FD:E4:A9:18:8B:73:F2:D6:FF:A4:52:16:02:B8:A4 X509v3 Authority Key Identifier: keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/49qDEMT95KkYi3Py1v-kUhYCuKQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.37.98.0/24 46.37.113.0/24 91.205.228.0/24 185.92.45.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:b0:41:8c:af:60:8a:0b:29:0a:f3:d4:02:fa:35:77:7b:d8: 62:d5:df:6a:18:22:be:79:48:4d:47:e2:19:68:ac:df:67:81: 5b:ed:30:27:55:a7:22:bd:21:ce:82:cd:c4:f4:84:04:f2:35: c6:4f:52:bd:e6:62:6d:34:62:77:55:b2:b5:78:61:4b:84:bc: b4:d4:43:87:3e:26:15:0e:97:31:c7:08:2d:06:1a:4c:ad:85: 33:75:09:2b:57:17:90:97:30:7d:84:02:fe:0f:f7:f1:27:0c: 99:a2:03:9f:87:3e:b7:b3:24:df:e5:61:79:27:8b:9e:54:42: c3:e7:ca:99:40:88:71:ce:63:3a:f5:6e:cd:d0:eb:57:dd:b3: 4a:d6:7e:0a:07:cb:5b:64:03:3f:bc:d0:10:b9:2d:4e:b4:16: f6:0a:18:12:0f:9a:c8:c5:f9:22:ae:b2:8c:43:ed:72:da:43: 46:fc:85:bd:58:b7:5f:25:8b:69:7f:4c:12:db:f9:70:6f:19: a1:84:d7:1f:ab:04:2b:ce:94:78:c5:33:6a:72:a6:e3:8c:3b: 79:42:ca:14:64:ca:01:ce:78:b1:9e:36:13:d3:10:dd:25:69: 84:32:95:89:6c:bb:84:8e:8e:80:b7:e7:ec:1c:df:4d:a6:6d: 42:0b:7e:ef -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZvBKoAkRWzFpjKeIJTKBILOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh ZTE5MjkwHhcNMjYwMTE1MTAxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2RhODMxMGM0ZmRlNGE5MTg4YjczZjJkNmZmYTQ1MjE2MDJiOGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroErZ+Aj2TO6Nvy5Kw8uhdEhjxg4 497jr6b/Zd2Lm0T0g6Sqn0fyMjQQVnuyMZ4aN2cHIFYEm5Kcqs9TZO1CGcOHjjdB PfLJfZ9RK8YR0V0pLPU/YL8l/tC+zAbAZgCAL/DTngE3vS1dVgsQuDVy4Oqt+5Jj PBDyXg2ro73OlmvvTbsDpg/mhV006WWKvqO+3I1yOgiHxARxsuZEAiiEkQM2E/gk z1C59pM0wD1tyX4Aai5VBX97Ocb2aJptDa4eIxdFKtLuBf/QAfflWoEJlF/y/qo9 5e0m1ZuTlXDkmlw+w5kWmEj8vMpCF9+LLuztHuLmvrGOvspjU6x8g1joyQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFOPagxDE/eSpGItz8tb/pFIWArikMB8GA1UdIwQY MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt MjMxNTQ5NDA5NzIwLzEvNDlxREVNVDk1S2tZaTNQeTF2LWtVaFlDdUtRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALiViAwQA LiVxAwQAW83kAwQAuVwtMA0GCSqGSIb3DQEBCwUAA4IBAQBcsEGMr2CKCykK89QC +jV3e9hi1d9qGCK+eUhNR+IZaKzfZ4Fb7TAnVacivSHOgs3E9IQE8jXGT1K95mJt NGJ3VbK1eGFLhLy01EOHPiYVDpcxxwgtBhpMrYUzdQkrVxeQlzB9hAL+D/fxJwyZ ogOfhz63syTf5WF5J4ueVELD58qZQIhxzmM69W7N0OtX3bNK1n4KB8tbZAM/vNAQ uS1OtBb2ChgSD5rIxfkirrKMQ+1y2kNG/IW9WLdfJYtpf0wS2/lwbxmhhNcfqwQr zpR4xTNqcqbjjDt5QsoUZMoBznixnjYT0xDdJWmEMpWJbLuEjo6At+fsHN9Npm1C C37v -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:34 2026 by rpki-client