This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/fDBBivGd09DklPLRXv-2xMOMQEU.roa File: fDBBivGd09DklPLRXv-2xMOMQEU.roa (raw, json) Hash identifier: UvvC0PLHqkR9m8HGTqV3Lx3SdupKGUhgBV//jb/1IQA= Subject key identifier: 7C:30:41:8A:F1:9D:D3:D0:E4:94:F2:D1:5E:FF:B6:C4:C3:8C:40:45 Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Certificate serial: 019B791019944406837E4A571BF81A0083FF Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/fDBBivGd09DklPLRXv-2xMOMQEU.roa Signing time: Thu 01 Jan 2026 10:17:36 +0000 ROA not before: Thu 01 Jan 2026 10:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 59432 IP address blocks: 46.37.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:19:94:44:06:83:7e:4a:57:1b:f8:1a:00:83:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Validity Not Before: Jan 1 10:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7c30418af19dd3d0e494f2d15effb6c4c38c4045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:79:9a:08:0c:19:16:93:5d:2e:26:f1:65:16: 6c:29:58:8f:d9:bb:03:b9:c0:29:0f:31:7c:ec:98: d9:f2:d8:69:eb:a9:0d:d5:be:14:c0:8e:d6:d0:66: 75:cf:56:7b:dd:ab:fd:e9:4a:ad:26:ee:0d:bf:89: 23:d6:0b:30:a2:31:dc:44:49:4a:d2:72:bf:d5:e6: 7f:7a:ec:b1:a7:a6:30:26:85:bc:e7:37:f1:15:f6: 90:50:c2:6c:0f:cf:b7:93:57:47:ca:b4:ef:71:4c: eb:4b:3f:56:cf:8f:2d:4a:4a:2d:6b:59:52:cf:bf: 15:8a:6e:e8:87:50:f5:3e:71:6b:ab:bf:d6:e4:62: e6:27:e4:7b:a7:c5:6b:22:08:40:ca:e8:4f:4c:99: a6:ef:4c:aa:9f:ac:45:67:86:ac:6a:bc:0c:65:9a: 42:1c:58:95:ae:86:a0:4d:e2:ec:63:4b:bb:70:e1: 69:2c:89:39:b0:29:34:fd:f6:96:85:1a:86:16:22: 86:86:f9:7a:ce:36:1a:0b:f1:79:ec:a9:fe:23:ba: 6c:b6:93:52:7a:0b:c5:49:76:6a:93:75:07:5b:c8: d7:41:9e:be:59:49:6b:d6:96:f4:fe:95:b0:31:78: b9:19:d7:1a:6b:88:38:f0:5f:bb:ff:95:d2:d5:f4: 4f:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:30:41:8A:F1:9D:D3:D0:E4:94:F2:D1:5E:FF:B6:C4:C3:8C:40:45 X509v3 Authority Key Identifier: keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/fDBBivGd09DklPLRXv-2xMOMQEU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.37.125.0/24 Signature Algorithm: sha256WithRSAEncryption 31:a5:d0:a9:f8:5a:85:9b:20:3f:a2:6e:ab:9c:a9:b7:14:a8: c9:98:06:0e:53:eb:5d:e9:58:7a:48:eb:24:92:ab:e5:81:ad: db:85:da:31:54:d4:37:54:f7:5a:0b:f8:46:7b:25:24:e9:ab: b0:dd:82:3b:2d:2c:cf:6c:94:08:fa:af:e7:2d:43:a8:a4:cc: 02:c3:90:09:df:29:a7:c7:3a:92:89:91:82:19:99:ac:e5:8d: fe:7d:eb:54:60:4d:9a:e9:ea:e9:17:8b:93:a1:36:d1:e5:0a: 2e:dd:92:8d:60:40:eb:6a:c5:24:58:5c:1c:bd:8b:f4:1a:1f: aa:81:2d:15:a8:7b:b9:2d:8d:b8:78:fe:91:71:95:67:7b:70: 75:62:cc:48:f0:7e:63:df:a5:61:b7:53:81:05:a9:a4:3f:8a: cb:f1:95:8d:1d:d6:51:4c:a1:6b:0c:ca:71:a4:40:a5:1c:53: f3:5c:79:3c:51:04:c1:60:e6:a0:c6:46:5e:49:13:1f:13:40: 7c:04:1c:d8:fd:d8:e9:0f:16:08:06:4f:c6:41:2d:69:c9:d9: ab:28:75:9f:7b:72:9d:10:bd:63:ce:b3:96:53:d0:e5:c4:f4: 1e:89:b2:b7:d9:67:85:e2:d1:6f:35:59:0d:4e:80:c2:1a:8a: f0:03:f4:96 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EBmURAaDfkpXG/gaAIP/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh ZTE5MjkwHhcNMjYwMTAxMTAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3YzMwNDE4YWYxOWRkM2QwZTQ5NGYyZDE1ZWZmYjZjNGMzOGM0MDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HmaCAwZFpNdLibxZRZsKViP2bsD ucApDzF87JjZ8thp66kN1b4UwI7W0GZ1z1Z73av96UqtJu4Nv4kj1gswojHcRElK 0nK/1eZ/euyxp6YwJoW85zfxFfaQUMJsD8+3k1dHyrTvcUzrSz9Wz48tSkota1lS z78Vim7oh1D1PnFrq7/W5GLmJ+R7p8VrIghAyuhPTJmm70yqn6xFZ4asarwMZZpC HFiVroagTeLsY0u7cOFpLIk5sCk0/faWhRqGFiKGhvl6zjYaC/F57Kn+I7pstpNS egvFSXZqk3UHW8jXQZ6+WUlr1pb0/pWwMXi5Gdcaa4g48F+7/5XS1fRP0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHwwQYrxndPQ5JTy0V7/tsTDjEBFMB8GA1UdIwQY MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt MjMxNTQ5NDA5NzIwLzEvZkRCQml2R2QwOURrbFBMUlh2LTJ4TU9NUUVVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiV9MA0G CSqGSIb3DQEBCwUAA4IBAQAxpdCp+FqFmyA/om6rnKm3FKjJmAYOU+td6Vh6SOsk kqvlga3bhdoxVNQ3VPdaC/hGeyUk6auw3YI7LSzPbJQI+q/nLUOopMwCw5AJ3ymn xzqSiZGCGZms5Y3+fetUYE2a6erpF4uToTbR5Qou3ZKNYEDrasUkWFwcvYv0Gh+q gS0VqHu5LY24eP6RcZVne3B1YsxI8H5j36Vht1OBBamkP4rL8ZWNHdZRTKFrDMpx pEClHFPzXHk8UQTBYOagxkZeSRMfE0B8BBzY/djpDxYIBk/GQS1pydmrKHWfe3Kd EL1jzrOWU9DlxPQeibK32WeF4tFvNVkNToDCGorwA/SW -----END CERTIFICATE-----Generated at Mon Jan 19 19:56:28 2026 by rpki-client