This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/J0ltzwfPKcM9WDlNs19kdgjf3Zs.roa File: J0ltzwfPKcM9WDlNs19kdgjf3Zs.roa (raw, json) Hash identifier: FKxKvjF1JzeJzc8Sp0aqMCubfckNp685W71oTKnizHk= Subject key identifier: 27:49:6D:CF:07:CF:29:C3:3D:58:39:4D:B3:5F:64:76:08:DF:DD:9B Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Certificate serial: 019B791015DB9BA465A351B699FE8F08BA1C Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/J0ltzwfPKcM9WDlNs19kdgjf3Zs.roa Signing time: Thu 01 Jan 2026 10:17:35 +0000 ROA not before: Thu 01 Jan 2026 10:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 18229 IP address blocks: 46.37.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:15:db:9b:a4:65:a3:51:b6:99:fe:8f:08:ba:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Validity Not Before: Jan 1 10:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=27496dcf07cf29c33d58394db35f647608dfdd9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d3:6e:ab:0e:7c:76:32:38:34:3b:3d:9a:dc: 7f:0d:d5:2d:9e:7b:47:f2:24:9e:c0:bb:fb:04:dc: 3b:47:cc:91:d4:92:b8:16:c7:2a:50:8f:36:ca:5c: 34:c6:58:d9:de:93:9f:a8:84:04:6d:63:f0:7c:56: 7a:df:e4:17:e8:19:6f:ce:ee:8c:a5:5d:4f:4e:bb: 2b:ef:28:1c:8d:58:29:79:5a:fb:7d:49:ec:c4:34: b5:11:76:1c:49:37:18:bf:ff:21:fa:5a:7a:3d:2d: 46:0c:86:e1:a0:6e:94:ba:2d:b7:21:3d:73:7f:48: ef:4b:22:9d:8f:25:6f:3e:35:50:eb:34:8b:09:c8: 20:df:75:4f:4b:00:cc:44:dc:58:7f:e8:90:84:3c: ba:2b:68:2e:2b:67:54:b6:4f:12:5e:c1:ad:ef:26: 3e:cf:7c:e1:f9:cf:62:46:65:d5:fb:d0:07:6e:42: ae:12:f9:9e:a1:0c:92:c1:e6:33:5b:71:34:85:a0: bd:e1:4c:25:8c:fc:a6:97:aa:40:d3:41:2f:09:25: 08:43:c6:53:34:a7:31:9b:2c:c7:37:f0:4a:63:af: 76:67:f5:10:cd:90:49:44:f3:0d:da:90:23:ee:4f: 05:a5:76:23:a9:73:9c:ee:94:03:77:8e:a2:68:c4: 4b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:49:6D:CF:07:CF:29:C3:3D:58:39:4D:B3:5F:64:76:08:DF:DD:9B X509v3 Authority Key Identifier: keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/J0ltzwfPKcM9WDlNs19kdgjf3Zs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.37.97.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:79:62:74:8b:42:4b:fe:a7:89:80:ce:7b:e2:be:30:d9:f7: 50:2e:ad:fd:5b:33:64:c7:6a:88:ff:5f:4f:5b:74:66:d1:71: f1:10:1f:08:92:48:d3:e0:d5:49:6a:71:18:10:81:68:d0:b0: 61:07:80:af:d8:c4:48:8b:3d:cf:f6:49:9b:f8:a5:18:d6:cd: 34:0b:3b:2d:6d:a8:5c:74:77:42:dd:80:12:b0:16:53:a1:50: 53:6d:82:95:98:bc:46:2e:3c:1e:3c:b5:ac:be:2d:61:35:50: b9:f7:39:1a:21:1e:41:51:a1:62:36:28:d5:53:8d:e4:fa:c4: 6b:67:35:12:84:59:a6:69:e5:97:1b:bd:0a:29:b1:51:c6:ad: 15:51:51:d8:1e:e3:17:11:2d:cd:1a:6e:3d:92:95:76:78:0b: e3:fd:fb:b7:cb:12:24:f1:1a:47:30:d0:e1:76:12:d4:ad:dd: d6:cb:d2:c9:b1:14:81:72:55:d7:ac:90:bb:41:f9:3b:7e:09: 02:9b:8c:db:c7:f4:78:f5:87:2a:b0:a0:14:39:81:6f:21:1e: 44:40:30:be:31:aa:5f:f8:9c:21:c7:0f:f0:47:c6:29:92:1b: 9f:cc:61:d5:92:4a:a2:1f:ee:6f:31:3f:0f:9f:60:15:3c:fe: 1a:28:55:fb -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EBXbm6Rlo1G2mf6PCLocMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh ZTE5MjkwHhcNMjYwMTAxMTAxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyNzQ5NmRjZjA3Y2YyOWMzM2Q1ODM5NGRiMzVmNjQ3NjA4ZGZkZDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6tNuqw58djI4NDs9mtx/DdUtnntH 8iSewLv7BNw7R8yR1JK4FscqUI82ylw0xljZ3pOfqIQEbWPwfFZ63+QX6Blvzu6M pV1PTrsr7ygcjVgpeVr7fUnsxDS1EXYcSTcYv/8h+lp6PS1GDIbhoG6Uui23IT1z f0jvSyKdjyVvPjVQ6zSLCcgg33VPSwDMRNxYf+iQhDy6K2guK2dUtk8SXsGt7yY+ z3zh+c9iRmXV+9AHbkKuEvmeoQySweYzW3E0haC94UwljPyml6pA00EvCSUIQ8ZT NKcxmyzHN/BKY692Z/UQzZBJRPMN2pAj7k8FpXYjqXOc7pQDd46iaMRL6QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCdJbc8HzynDPVg5TbNfZHYI392bMB8GA1UdIwQY MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt MjMxNTQ5NDA5NzIwLzEvSjBsdHp3ZlBLY005V0RsTnMxOWtkZ2pmM1pzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiVhMA0G CSqGSIb3DQEBCwUAA4IBAQAdeWJ0i0JL/qeJgM574r4w2fdQLq39WzNkx2qI/19P W3Rm0XHxEB8IkkjT4NVJanEYEIFo0LBhB4Cv2MRIiz3P9kmb+KUY1s00Czstbahc dHdC3YASsBZToVBTbYKVmLxGLjwePLWsvi1hNVC59zkaIR5BUaFiNijVU43k+sRr ZzUShFmmaeWXG70KKbFRxq0VUVHYHuMXES3NGm49kpV2eAvj/fu3yxIk8RpHMNDh dhLUrd3Wy9LJsRSBclXXrJC7Qfk7fgkCm4zbx/R49YcqsKAUOYFvIR5EQDC+Mapf +Jwhxw/wR8YpkhufzGHVkkqiH+5vMT8Pn2AVPP4aKFX7 -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:56 2026 by rpki-client