This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/WEKhOGg2l_fvJ6UkB2ieaLwqKIU.roa File: WEKhOGg2l_fvJ6UkB2ieaLwqKIU.roa (raw, json) Hash identifier: yw4nxSJREFGrZikTrUVlUy5RTgIv56y0p0rAhpqXE4c= Subject key identifier: 58:42:A1:38:68:36:97:F7:EF:27:A5:24:07:68:9E:68:BC:2A:28:85 Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Certificate serial: 019B791023A194F2DF76F7384C1A8F73F863 Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/WEKhOGg2l_fvJ6UkB2ieaLwqKIU.roa Signing time: Thu 01 Jan 2026 10:17:39 +0000 ROA not before: Thu 01 Jan 2026 10:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397630 IP address blocks: 46.37.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:23:a1:94:f2:df:76:f7:38:4c:1a:8f:73:f8:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Validity Not Before: Jan 1 10:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=5842a138683697f7ef27a52407689e68bc2a2885 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:77:88:13:fa:fd:9d:47:a3:37:da:63:17:1c: 69:fb:8e:af:3b:e8:20:6c:0e:76:a0:7a:2a:16:a8: a5:4d:55:09:44:57:72:cd:5a:94:85:7f:3d:0c:d2: 4d:fa:5b:9c:e4:9a:48:9c:de:ba:4a:b1:0b:bc:3b: 18:ca:16:3a:1d:5b:dd:e7:2d:d3:fb:c6:ec:63:a4: 69:42:93:07:6d:9f:3b:49:be:3f:60:24:4c:c7:20: 56:db:b7:66:b4:25:10:f4:fe:37:4b:7b:e5:69:e5: 89:a7:4f:35:f6:a8:12:9f:2b:64:89:53:af:3a:9a: ae:70:81:b4:38:71:f3:8e:e7:9b:64:fa:47:69:2e: c7:16:36:65:c0:e1:18:e2:59:84:9e:2b:d2:44:95: 3a:d5:07:c1:3b:7f:62:a7:9e:08:72:1a:69:d1:63: 78:5d:45:eb:04:1e:2b:51:5d:d5:19:3b:69:17:f4: 8e:5c:82:ea:68:cb:46:8e:7a:29:a6:2d:05:b8:77: 34:59:55:8d:2b:3e:12:42:62:03:37:e9:97:31:71: f9:f1:01:36:f6:e4:fa:9c:79:f7:94:4e:75:ed:5b: e2:44:18:7e:fd:1e:ca:54:b3:17:b2:85:4e:e0:d0: 7a:3b:f7:12:e2:ed:91:2a:80:65:87:65:d1:d9:2b: 7c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:42:A1:38:68:36:97:F7:EF:27:A5:24:07:68:9E:68:BC:2A:28:85 X509v3 Authority Key Identifier: keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/WEKhOGg2l_fvJ6UkB2ieaLwqKIU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.37.126.0/24 Signature Algorithm: sha256WithRSAEncryption 02:e1:d7:63:09:0f:50:15:04:22:09:83:50:69:69:32:22:25: f4:c1:28:e5:17:f3:f7:03:28:3e:85:ff:0d:3b:46:51:83:fb: 6a:82:9b:2f:50:08:bd:46:c4:de:65:eb:2d:b7:81:43:a5:3b: 41:27:86:9b:3a:fa:08:be:38:0a:8a:db:00:68:2e:56:14:5d: 7f:ba:e2:76:00:54:de:ab:72:cd:e4:0b:30:00:0f:6c:7e:44: c3:0d:44:50:73:b2:bf:3d:36:94:49:1c:a7:33:4f:88:7e:0a: 43:2d:e5:8f:14:8a:d8:de:4d:3b:5e:d7:9a:eb:40:b1:79:4d: c6:16:53:fd:94:31:8f:f4:e5:ef:2f:5e:81:65:23:b4:be:96: a9:ff:63:92:7e:71:5a:5c:a5:3f:20:ca:dc:56:ec:71:d2:bc: b0:c3:fb:6a:77:1d:f9:ba:19:4f:f3:6c:63:90:ad:a7:bf:7c: df:6c:52:57:2c:6e:a6:e0:5c:e4:49:78:f5:0e:72:9c:01:0c: cc:d7:00:07:a2:da:2a:34:52:ae:5c:93:8d:50:49:0e:6f:1a: d9:ec:6f:4a:13:9a:1d:42:9f:ff:00:7c:5b:47:f5:6e:1e:75: 7e:59:70:f9:0f:ef:0a:c7:4e:ef:50:41:db:4e:cc:be:d0:d1: 98:56:f0:01 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ECOhlPLfdvc4TBqPc/hjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh ZTE5MjkwHhcNMjYwMTAxMTAxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1ODQyYTEzODY4MzY5N2Y3ZWYyN2E1MjQwNzY4OWU2OGJjMmEyODg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA73eIE/r9nUejN9pjFxxp+46vO+gg bA52oHoqFqilTVUJRFdyzVqUhX89DNJN+luc5JpInN66SrELvDsYyhY6HVvd5y3T +8bsY6RpQpMHbZ87Sb4/YCRMxyBW27dmtCUQ9P43S3vlaeWJp0819qgSnytkiVOv OpqucIG0OHHzjuebZPpHaS7HFjZlwOEY4lmEnivSRJU61QfBO39ip54Ichpp0WN4 XUXrBB4rUV3VGTtpF/SOXILqaMtGjnoppi0FuHc0WVWNKz4SQmIDN+mXMXH58QE2 9uT6nHn3lE517VviRBh+/R7KVLMXsoVO4NB6O/cS4u2RKoBlh2XR2St8XwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFhCoThoNpf37yelJAdonmi8KiiFMB8GA1UdIwQY MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt MjMxNTQ5NDA5NzIwLzEvV0VLaE9HZzJsX2Z2SjZVa0IyaWVhTHdxS0lVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiV+MA0G CSqGSIb3DQEBCwUAA4IBAQAC4ddjCQ9QFQQiCYNQaWkyIiX0wSjlF/P3Ayg+hf8N O0ZRg/tqgpsvUAi9RsTeZestt4FDpTtBJ4abOvoIvjgKitsAaC5WFF1/uuJ2AFTe q3LN5AswAA9sfkTDDURQc7K/PTaUSRynM0+IfgpDLeWPFIrY3k07Xtea60CxeU3G FlP9lDGP9OXvL16BZSO0vpap/2OSfnFaXKU/IMrcVuxx0ryww/tqdx35uhlP82xj kK2nv3zfbFJXLG6m4FzkSXj1DnKcAQzM1wAHotoqNFKuXJONUEkObxrZ7G9KE5od Qp//AHxbR/VuHnV+WXD5D+8Kx07vUEHbTsy+0NGYVvAB -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:46 2026 by rpki-client