This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Att5HKYI3aC7_aNTZVFUqgSxCe8.roa File: Att5HKYI3aC7_aNTZVFUqgSxCe8.roa (raw, json) Hash identifier: rUmjLWfVdd7KMWGUiNf2cjqT7vTRErvaoU9x2sNbGew= Subject key identifier: 02:DB:79:1C:A6:08:DD:A0:BB:FD:A3:53:65:51:54:AA:04:B1:09:EF Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Certificate serial: 019B79101825F5A62983372734CBDD05F737 Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Att5HKYI3aC7_aNTZVFUqgSxCe8.roa Signing time: Thu 01 Jan 2026 10:17:36 +0000 ROA not before: Thu 01 Jan 2026 10:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 46261 IP address blocks: 46.37.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:18:25:f5:a6:29:83:37:27:34:cb:dd:05:f7:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Validity Not Before: Jan 1 10:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=02db791ca608dda0bbfda353655154aa04b109ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8a:4b:1f:a8:3b:d0:73:61:a9:d2:1c:2a:20: e8:86:f8:7b:f1:1a:a2:49:31:a7:86:e7:1f:5b:9f: a2:e8:8d:47:bc:17:94:f8:cf:59:67:bd:5f:fd:78: 35:97:58:72:21:74:b5:a1:42:b5:1c:4f:74:d0:a5: c2:bb:54:8e:bc:b2:b2:aa:d0:dd:3e:f7:16:2a:cd: 3e:d2:1d:28:4d:4a:47:db:66:88:ce:a0:f1:c5:9e: be:a6:e3:b3:5b:2a:8b:81:b0:a1:14:d8:be:ee:27: c3:22:92:ad:f8:a1:7a:eb:21:4c:b9:a0:05:e4:c6: fe:70:33:b1:bf:bb:2d:9c:cc:a2:d6:57:62:a3:3a: 62:c4:db:51:87:ed:39:38:0c:4a:73:69:03:c6:1e: 3c:20:e6:a4:08:db:9d:ff:cc:63:8b:fe:2b:4f:08: 3a:b0:e1:67:a3:aa:80:5d:67:33:2e:90:06:1e:2b: ad:a6:df:b4:e3:36:dd:a2:55:2b:a6:59:02:70:e0: 5e:b9:11:67:2b:cf:22:04:80:5f:56:12:27:eb:e4: d1:54:26:1a:3f:08:39:45:51:b9:45:3f:0b:12:66: 57:ea:9f:da:97:0a:c9:06:ca:3f:fd:91:1b:3c:0d: de:e5:4f:cb:81:69:51:ee:80:16:96:9e:27:0a:33: fc:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:DB:79:1C:A6:08:DD:A0:BB:FD:A3:53:65:51:54:AA:04:B1:09:EF X509v3 Authority Key Identifier: keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/Att5HKYI3aC7_aNTZVFUqgSxCe8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.37.96.0/24 Signature Algorithm: sha256WithRSAEncryption a0:5a:a6:d0:c9:fa:09:53:00:24:4e:fd:96:c7:48:60:85:d9: 6f:c4:b0:24:6c:e1:36:9c:d8:5c:0d:66:33:94:49:04:fe:9f: eb:1c:a4:e4:ab:c7:e5:d5:e9:82:9b:3e:19:0c:0b:54:64:b9: 70:1f:ff:ff:e2:12:0c:7b:73:c9:4e:1b:f3:8c:a5:47:04:aa: 0c:31:01:5e:2f:77:8d:24:34:c6:95:ba:b9:06:af:8d:63:b3: e6:07:c8:40:3f:8d:76:60:7d:a3:d7:ce:40:ac:97:6b:4e:7d: e9:a5:19:96:e5:87:c2:b8:a9:73:be:cf:e2:71:8b:96:ef:e1: eb:fb:38:84:a5:da:f8:39:ab:e6:4a:81:c0:42:f2:15:78:0c: d9:4e:70:24:09:c5:49:b6:82:47:4f:18:25:45:21:1a:29:b1: 3a:58:7c:ed:63:a5:11:51:34:1e:a5:a8:52:8b:09:82:10:ca: e4:64:f5:93:e9:d5:fe:78:98:06:25:98:c8:4a:09:78:b0:cd: b7:fa:ff:12:84:27:b7:fb:fc:80:f4:8b:98:3b:91:53:b1:1c: 0a:ad:4b:bf:ab:dc:a1:0f:c9:37:cc:1d:d8:78:96:24:0b:4d: 0b:97:4d:f2:e0:e2:fc:9e:8f:e1:95:a3:07:10:83:4d:a6:a3: 08:42:5b:89 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EBgl9aYpgzcnNMvdBfc3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh ZTE5MjkwHhcNMjYwMTAxMTAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwMmRiNzkxY2E2MDhkZGEwYmJmZGEzNTM2NTUxNTRhYTA0YjEwOWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYpLH6g70HNhqdIcKiDohvh78Rqi STGnhucfW5+i6I1HvBeU+M9ZZ71f/Xg1l1hyIXS1oUK1HE900KXCu1SOvLKyqtDd PvcWKs0+0h0oTUpH22aIzqDxxZ6+puOzWyqLgbChFNi+7ifDIpKt+KF66yFMuaAF 5Mb+cDOxv7stnMyi1ldiozpixNtRh+05OAxKc2kDxh48IOakCNud/8xji/4rTwg6 sOFno6qAXWczLpAGHiutpt+04zbdolUrplkCcOBeuRFnK88iBIBfVhIn6+TRVCYa Pwg5RVG5RT8LEmZX6p/alwrJBso//ZEbPA3e5U/LgWlR7oAWlp4nCjP8TQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFALbeRymCN2gu/2jU2VRVKoEsQnvMB8GA1UdIwQY MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt MjMxNTQ5NDA5NzIwLzEvQXR0NUhLWUkzYUM3X2FOVFpWRlVxZ1N4Q2U4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiVgMA0G CSqGSIb3DQEBCwUAA4IBAQCgWqbQyfoJUwAkTv2Wx0hghdlvxLAkbOE2nNhcDWYz lEkE/p/rHKTkq8fl1emCmz4ZDAtUZLlwH///4hIMe3PJThvzjKVHBKoMMQFeL3eN JDTGlbq5Bq+NY7PmB8hAP412YH2j185ArJdrTn3ppRmW5YfCuKlzvs/icYuW7+Hr +ziEpdr4OavmSoHAQvIVeAzZTnAkCcVJtoJHTxglRSEaKbE6WHztY6URUTQepahS iwmCEMrkZPWT6dX+eJgGJZjISgl4sM23+v8ShCe3+/yA9IuYO5FTsRwKrUu/q9yh D8k3zB3YeJYkC00Ll03y4OL8no/hlaMHEINNpqMIQluJ -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:13 2026 by rpki-client