This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/9iqwdaCRzSRIxnzSgyEccwLudSU.roa File: 9iqwdaCRzSRIxnzSgyEccwLudSU.roa (raw, json) Hash identifier: vtDO+B+GX5SlLOFMYIE8Ci1O1zFTg8MXYIybeCYQQE4= Subject key identifier: F6:2A:B0:75:A0:91:CD:24:48:C6:7C:D2:83:21:1C:73:02:EE:75:25 Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Certificate serial: 019B79102479349F5EC69678B09BF84B0553 Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/9iqwdaCRzSRIxnzSgyEccwLudSU.roa Signing time: Thu 01 Jan 2026 10:17:39 +0000 ROA not before: Thu 01 Jan 2026 10:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 400039 IP address blocks: 46.37.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:24:79:34:9f:5e:c6:96:78:b0:9b:f8:4b:05:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Validity Not Before: Jan 1 10:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f62ab075a091cd2448c67cd283211c7302ee7525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ba:43:ca:96:0a:d0:10:67:53:5b:1b:54:e2: 09:6c:15:10:58:94:f4:38:62:33:0c:5c:9f:67:52: 82:89:e3:8a:5e:aa:4c:20:86:1c:fb:9b:c0:52:07: 11:98:ec:70:d5:be:f6:05:e3:0f:cd:68:a1:89:20: 14:89:ee:d2:24:53:94:04:e9:50:ea:ee:b5:1d:ef: e3:7d:47:f0:50:8a:c7:e3:2e:47:88:99:03:34:78: 10:d0:d5:7f:89:40:da:3b:9a:78:16:9e:cd:48:c0: 2c:b3:bc:25:30:94:20:6a:46:b6:0a:77:a8:e0:40: ae:a6:46:fb:8e:89:19:9e:49:33:7a:64:5b:fd:54: d9:ce:29:1f:98:d8:6b:aa:7f:13:b2:ce:77:59:92: 2e:7e:51:1a:5f:eb:8d:0a:ed:fc:26:06:4d:39:3a: a8:c8:d5:26:a9:aa:09:f5:bb:15:19:df:e6:7c:9a: d3:ee:5c:72:32:b8:6c:f9:45:a5:1a:eb:4f:7b:be: c2:6c:23:fc:2b:b6:d9:ec:0e:50:e9:74:79:65:a3: 07:0b:8b:1c:ec:e0:08:62:fb:a8:83:a4:c5:a0:b8: d2:9b:90:6b:6b:30:6c:5e:da:9e:eb:1d:4a:7e:d3: 20:95:4f:95:07:b1:24:2b:25:8d:8b:bd:eb:26:68: 36:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:2A:B0:75:A0:91:CD:24:48:C6:7C:D2:83:21:1C:73:02:EE:75:25 X509v3 Authority Key Identifier: keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/9iqwdaCRzSRIxnzSgyEccwLudSU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.37.106.0/24 Signature Algorithm: sha256WithRSAEncryption 41:e5:30:64:21:a3:37:5b:06:b7:75:fe:3c:2b:40:ae:50:f0: b1:da:f4:8f:ed:17:b4:72:07:62:1e:9f:c9:e7:e5:70:8e:b6: c6:e2:86:34:1c:0f:15:a7:d7:66:27:69:3d:f0:2c:4a:6d:02: 5a:e1:a7:2a:55:c1:6b:49:59:38:4b:b0:5d:47:f8:92:1a:ee: 5e:4c:6a:67:c5:ad:32:e8:a3:c7:4f:bc:26:55:99:e9:20:f4: 34:ff:d4:d9:52:e4:32:e5:8a:83:38:96:a2:d5:28:ce:ff:d6: 8a:7d:cf:36:9c:52:20:14:4e:10:a8:86:be:f0:c4:01:2f:cb: fd:3f:a9:7a:4f:82:e8:8b:6c:76:c7:67:b0:48:65:86:3a:a7: e1:88:67:0d:e4:0d:97:fe:ee:28:23:5f:a7:5a:0e:6f:ac:93: 8a:ee:63:f3:22:4a:7e:bb:86:cc:2b:a4:62:5e:20:59:06:b5: c0:1d:73:60:4f:ce:1a:4a:20:d7:10:f8:a0:2c:bf:89:64:4b: 09:a3:3a:8f:c0:8e:0d:38:de:1e:21:3a:61:98:44:7f:4f:bb: 88:00:57:84:75:34:b8:3a:cd:46:c7:a3:a4:fb:93:9c:67:f4: 84:1c:5e:fb:17:da:df:da:3e:83:6f:8e:0a:de:94:07:b2:36: 1e:14:1d:dc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ECR5NJ9expZ4sJv4SwVTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh ZTE5MjkwHhcNMjYwMTAxMTAxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjJhYjA3NWEwOTFjZDI0NDhjNjdjZDI4MzIxMWM3MzAyZWU3NTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrpDypYK0BBnU1sbVOIJbBUQWJT0 OGIzDFyfZ1KCieOKXqpMIIYc+5vAUgcRmOxw1b72BeMPzWihiSAUie7SJFOUBOlQ 6u61He/jfUfwUIrH4y5HiJkDNHgQ0NV/iUDaO5p4Fp7NSMAss7wlMJQgaka2Cneo 4ECupkb7jokZnkkzemRb/VTZzikfmNhrqn8Tss53WZIuflEaX+uNCu38JgZNOTqo yNUmqaoJ9bsVGd/mfJrT7lxyMrhs+UWlGutPe77CbCP8K7bZ7A5Q6XR5ZaMHC4sc 7OAIYvuog6TFoLjSm5BrazBsXtqe6x1KftMglU+VB7EkKyWNi73rJmg2vQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPYqsHWgkc0kSMZ80oMhHHMC7nUlMB8GA1UdIwQY MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt MjMxNTQ5NDA5NzIwLzEvOWlxd2RhQ1J6U1JJeG56U2d5RWNjd0x1ZFNVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiVqMA0G CSqGSIb3DQEBCwUAA4IBAQBB5TBkIaM3Wwa3df48K0CuUPCx2vSP7Re0cgdiHp/J 5+VwjrbG4oY0HA8Vp9dmJ2k98CxKbQJa4acqVcFrSVk4S7BdR/iSGu5eTGpnxa0y 6KPHT7wmVZnpIPQ0/9TZUuQy5YqDOJai1SjO/9aKfc82nFIgFE4QqIa+8MQBL8v9 P6l6T4Loi2x2x2ewSGWGOqfhiGcN5A2X/u4oI1+nWg5vrJOK7mPzIkp+u4bMK6Ri XiBZBrXAHXNgT84aSiDXEPigLL+JZEsJozqPwI4NON4eITphmER/T7uIAFeEdTS4 Os1Gx6Ok+5OcZ/SEHF77F9rf2j6Db44K3pQHsjYeFB3c -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:01 2026 by rpki-client