This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/E32d64hbw6AsJZtWf4GpyNFVTSQ.roa File: E32d64hbw6AsJZtWf4GpyNFVTSQ.roa (raw, json) Hash identifier: OjO54KQL2g7MMGR4mysj0+j5+wTYUNDx6LROTzawCkk= Subject key identifier: 13:7D:9D:EB:88:5B:C3:A0:2C:25:9B:56:7F:81:A9:C8:D1:55:4D:24 Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Certificate serial: 019B79101AB0E45A4EB97ACF171D046B1EA2 Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/E32d64hbw6AsJZtWf4GpyNFVTSQ.roa Signing time: Thu 01 Jan 2026 10:17:37 +0000 ROA not before: Thu 01 Jan 2026 10:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64267 IP address blocks: 46.37.126.0/24 maxlen: 24 185.92.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:1a:b0:e4:5a:4e:b9:7a:cf:17:1d:04:6b:1e:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Validity Not Before: Jan 1 10:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=137d9deb885bc3a02c259b567f81a9c8d1554d24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:67:0a:3e:8e:07:d3:c9:93:db:0a:b7:50:50: 2a:9d:9a:47:d9:45:3e:0b:eb:b6:ac:39:b0:4c:24: 6a:7f:9c:15:e5:12:4f:48:09:f5:3b:5b:01:70:90: 97:e0:b7:42:c2:db:90:e3:4b:b6:05:61:cf:6d:de: dc:e0:d9:2e:57:60:06:cc:d0:50:a1:a1:5d:88:23: d7:a0:65:fc:80:4b:08:e9:2d:7d:50:56:53:cc:69: 4a:54:8a:9a:32:37:53:bd:d8:24:9e:60:84:0f:6e: 69:b4:f1:0a:b3:ad:60:96:68:37:e2:55:9e:a7:d3: 7f:05:52:7c:82:30:d9:1d:c0:80:69:53:7d:79:aa: 66:22:0b:6f:37:96:29:c8:47:81:37:ed:71:6e:1e: 8f:62:86:5e:23:13:24:a5:4f:ae:d6:ac:0e:83:76: c0:50:f7:8f:a5:39:ec:fb:a8:44:f4:de:bf:18:a4: 0c:79:0b:51:56:57:5c:80:96:d8:92:70:4a:3d:d7: 96:8e:0e:38:b5:be:2e:e2:69:67:16:7d:79:4c:b7: 84:cc:9d:9f:ce:b5:93:f4:1a:a6:0b:d2:d1:db:b8: 37:82:fc:1b:53:b6:5b:b9:78:9b:f3:6e:bc:15:91: ea:97:a1:ad:2b:49:80:43:55:77:76:6e:d2:ba:90: df:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:7D:9D:EB:88:5B:C3:A0:2C:25:9B:56:7F:81:A9:C8:D1:55:4D:24 X509v3 Authority Key Identifier: keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/E32d64hbw6AsJZtWf4GpyNFVTSQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.37.126.0/24 185.92.46.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:7f:25:25:6f:a1:b3:45:cb:b4:13:f4:ea:ce:5a:7d:6e:d5: d2:0f:0f:7d:e8:1f:a8:1c:90:4b:92:03:7d:fc:37:0c:b5:14: 65:2d:36:9b:28:9c:e6:ea:13:11:78:b7:a2:e0:51:36:59:38: 59:5d:25:14:31:84:76:e4:dd:1c:5f:48:d7:63:2d:49:d2:28: 37:6f:7d:93:54:43:2e:f4:3d:b9:7b:af:16:fd:75:14:80:02: b5:83:9b:4a:a5:a5:66:82:53:0a:0c:96:45:9a:66:52:aa:fd: 64:98:ca:20:5b:e4:c7:15:35:7f:25:f2:32:8c:3f:a5:8d:07: c7:f2:95:cc:e8:2c:64:d6:5e:52:cc:d1:4b:05:78:8d:b1:e6: 66:96:86:32:07:9a:69:7c:74:b6:a1:cd:b5:40:b4:3c:e0:59: ba:a0:14:c5:e8:1b:36:50:d8:53:2d:38:2e:17:23:51:9b:1a: 59:f1:e3:a9:94:1f:68:e5:a8:4c:88:23:e9:fb:37:7f:50:87: 61:eb:10:b2:e6:b8:b6:05:59:d3:dc:78:ae:15:98:dc:11:d3: fd:cc:e2:d9:e2:cd:1e:f2:d2:06:78:5c:51:2f:47:a2:a5:c4: 2f:e6:ce:a7:fb:8e:cc:81:68:f3:38:f3:eb:2d:5a:d7:04:8d: 86:9e:4d:1d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EBqw5FpOuXrPFx0Eax6iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh ZTE5MjkwHhcNMjYwMTAxMTAxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxMzdkOWRlYjg4NWJjM2EwMmMyNTliNTY3ZjgxYTljOGQxNTU0ZDI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GcKPo4H08mT2wq3UFAqnZpH2UU+ C+u2rDmwTCRqf5wV5RJPSAn1O1sBcJCX4LdCwtuQ40u2BWHPbd7c4NkuV2AGzNBQ oaFdiCPXoGX8gEsI6S19UFZTzGlKVIqaMjdTvdgknmCED25ptPEKs61glmg34lWe p9N/BVJ8gjDZHcCAaVN9eapmIgtvN5YpyEeBN+1xbh6PYoZeIxMkpU+u1qwOg3bA UPePpTns+6hE9N6/GKQMeQtRVldcgJbYknBKPdeWjg44tb4u4mlnFn15TLeEzJ2f zrWT9BqmC9LR27g3gvwbU7ZbuXib8268FZHql6GtK0mAQ1V3dm7SupDf+wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFBN9neuIW8OgLCWbVn+BqcjRVU0kMB8GA1UdIwQY MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt MjMxNTQ5NDA5NzIwLzEvRTMyZDY0aGJ3NkFzSlp0V2Y0R3B5TkZWVFNRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALiV+AwQA uVwuMA0GCSqGSIb3DQEBCwUAA4IBAQA7fyUlb6GzRcu0E/Tqzlp9btXSDw996B+o HJBLkgN9/DcMtRRlLTabKJzm6hMReLei4FE2WThZXSUUMYR25N0cX0jXYy1J0ig3 b32TVEMu9D25e68W/XUUgAK1g5tKpaVmglMKDJZFmmZSqv1kmMogW+THFTV/JfIy jD+ljQfH8pXM6Cxk1l5SzNFLBXiNseZmloYyB5ppfHS2oc21QLQ84Fm6oBTF6Bs2 UNhTLTguFyNRmxpZ8eOplB9o5ahMiCPp+zd/UIdh6xCy5ri2BVnT3HiuFZjcEdP9 zOLZ4s0e8tIGeFxRL0eipcQv5s6n+47MgWjzOPPrLVrXBI2Gnk0d -----END CERTIFICATE-----Generated at Mon Jan 19 10:37:09 2026 by rpki-client