This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/hX2Lx3ZRXJhz5te91S_u82NAyqI.roa File: hX2Lx3ZRXJhz5te91S_u82NAyqI.roa (raw, json) Hash identifier: Z9Aqux701iyj0hKmcrZefV63BZnWhUv9h+YQa7uyK+o= Subject key identifier: 85:7D:8B:C7:76:51:5C:98:73:E6:D7:BD:D5:2F:EE:F3:63:40:CA:A2 Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Certificate serial: 019B79101B9E7B91F617686AFF97D236D7C8 Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/hX2Lx3ZRXJhz5te91S_u82NAyqI.roa Signing time: Thu 01 Jan 2026 10:17:37 +0000 ROA not before: Thu 01 Jan 2026 10:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 134465 IP address blocks: 46.37.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:1b:9e:7b:91:f6:17:68:6a:ff:97:d2:36:d7:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Validity Not Before: Jan 1 10:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=857d8bc776515c9873e6d7bdd52feef36340caa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f9:d0:58:58:ac:7b:1e:d8:9e:74:41:28:c5: b8:ee:24:8a:9e:12:5a:c9:d1:ae:8f:d8:61:92:63: a1:08:e5:89:f5:f0:fb:31:46:27:e0:79:ee:7d:22: bc:3f:4f:22:59:c5:cf:8d:78:97:23:f1:3a:5b:05: 40:cd:f9:be:6b:cc:48:3c:76:4f:e5:7e:cb:95:ba: 36:57:58:5a:16:87:88:f1:cb:15:ff:a3:62:d3:f5: 2f:6b:41:5c:21:5e:40:7c:cf:2f:2b:53:52:3d:54: b1:a0:72:c8:39:4c:fb:11:7e:d9:19:40:db:f4:c5: dd:0a:68:4d:34:e3:d1:48:de:96:ec:2f:74:44:6d: ce:96:1e:41:ef:fa:81:0c:d5:bb:c1:a8:f0:b2:2b: 9c:33:77:c0:ae:a9:df:42:b6:34:5d:09:ad:5e:18: 6b:bd:34:49:5d:79:c3:79:4a:ed:34:56:3a:7c:06: 48:6e:b5:06:13:d0:44:30:49:56:45:c1:68:49:94: 6a:cd:73:50:c3:b9:b7:6b:10:99:62:ae:45:91:d5: 22:ed:ef:66:e0:68:88:b5:a5:7f:6c:6a:d9:6d:f5: 7b:e2:2f:b3:ee:73:cf:e4:05:0e:b5:54:ea:bb:11: f1:d1:93:2c:c5:e9:6d:fa:86:7b:31:7c:ac:5b:5b: ee:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:7D:8B:C7:76:51:5C:98:73:E6:D7:BD:D5:2F:EE:F3:63:40:CA:A2 X509v3 Authority Key Identifier: keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/hX2Lx3ZRXJhz5te91S_u82NAyqI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.37.122.0/24 Signature Algorithm: sha256WithRSAEncryption 95:b7:2e:a6:0c:00:bf:19:2e:e2:dc:b2:f8:61:17:c3:00:ce: 83:fa:fd:94:78:63:12:e3:0d:d3:0c:d8:ad:37:87:fe:82:1e: 97:d0:15:aa:ca:9e:10:0d:35:95:c3:a7:60:44:9c:0b:7e:86: c7:ac:f6:96:23:db:9f:cd:28:0e:18:f3:3c:8c:7e:8f:60:67: 50:ed:3d:f3:50:ce:04:fb:c1:be:4e:c7:d6:3b:27:d4:44:53: 73:17:eb:ae:1f:eb:18:64:14:dc:0a:7d:c1:c4:1b:66:35:2d: a1:61:e2:97:9c:98:9b:70:9f:a7:4b:7f:b4:01:ed:23:8f:4e: 5e:5e:92:dd:df:80:1c:ec:f3:25:85:bd:86:ec:c8:78:f1:fc: 02:33:ce:d0:63:e3:67:a9:94:2d:a3:7f:86:f7:59:27:c8:20: 48:85:c1:52:9a:38:bc:9b:bc:6d:64:71:75:d0:5f:5f:39:44: b2:11:c7:66:1d:cd:8f:55:ad:5a:01:ab:78:d8:b4:dd:68:d7: 10:a4:ac:2f:a4:92:3c:cb:2d:77:e5:15:ae:eb:7d:63:5a:54: 01:29:6b:fa:0e:89:9b:f5:fd:c7:bb:42:7c:65:c2:91:15:c9: db:10:ab:d3:23:71:6d:95:77:13:27:d9:4e:ed:07:e7:58:8e: 09:69:3e:48 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EBuee5H2F2hq/5fSNtfIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh ZTE5MjkwHhcNMjYwMTAxMTAxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NTdkOGJjNzc2NTE1Yzk4NzNlNmQ3YmRkNTJmZWVmMzYzNDBjYWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/nQWFisex7YnnRBKMW47iSKnhJa ydGuj9hhkmOhCOWJ9fD7MUYn4HnufSK8P08iWcXPjXiXI/E6WwVAzfm+a8xIPHZP 5X7Llbo2V1haFoeI8csV/6Ni0/Uva0FcIV5AfM8vK1NSPVSxoHLIOUz7EX7ZGUDb 9MXdCmhNNOPRSN6W7C90RG3Olh5B7/qBDNW7wajwsiucM3fArqnfQrY0XQmtXhhr vTRJXXnDeUrtNFY6fAZIbrUGE9BEMElWRcFoSZRqzXNQw7m3axCZYq5FkdUi7e9m 4GiItaV/bGrZbfV74i+z7nPP5AUOtVTquxHx0ZMsxelt+oZ7MXysW1vu0wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFIV9i8d2UVyYc+bXvdUv7vNjQMqiMB8GA1UdIwQY MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt MjMxNTQ5NDA5NzIwLzEvaFgyTHgzWlJYSmh6NXRlOTFTX3U4Mk5BeXFJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiV6MA0G CSqGSIb3DQEBCwUAA4IBAQCVty6mDAC/GS7i3LL4YRfDAM6D+v2UeGMS4w3TDNit N4f+gh6X0BWqyp4QDTWVw6dgRJwLfobHrPaWI9ufzSgOGPM8jH6PYGdQ7T3zUM4E +8G+TsfWOyfURFNzF+uuH+sYZBTcCn3BxBtmNS2hYeKXnJibcJ+nS3+0Ae0jj05e XpLd34Ac7PMlhb2G7Mh48fwCM87QY+NnqZQto3+G91knyCBIhcFSmji8m7xtZHF1 0F9fOUSyEcdmHc2PVa1aAat42LTdaNcQpKwvpJI8yy135RWu631jWlQBKWv6Domb 9f3Hu0J8ZcKRFcnbEKvTI3FtlXcTJ9lO7QfnWI4JaT5I -----END CERTIFICATE-----Generated at Mon Jan 19 20:00:49 2026 by rpki-client