This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/p_i5f8sUouD8T2guoP56z8DfSZQ.roa File: p_i5f8sUouD8T2guoP56z8DfSZQ.roa (raw, json) Hash identifier: xamhxEmVDEB79em0Q1NxLo3vFtG79lojzbnDtwExQao= Subject key identifier: A7:F8:B9:7F:CB:14:A2:E0:FC:4F:68:2E:A0:FE:7A:CF:C0:DF:49:94 Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Certificate serial: 019B791020260A83B48F490FD151BC1B8733 Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/p_i5f8sUouD8T2guoP56z8DfSZQ.roa Signing time: Thu 01 Jan 2026 10:17:38 +0000 ROA not before: Thu 01 Jan 2026 10:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207633 IP address blocks: 46.37.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:20:26:0a:83:b4:8f:49:0f:d1:51:bc:1b:87:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Validity Not Before: Jan 1 10:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a7f8b97fcb14a2e0fc4f682ea0fe7acfc0df4994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:cd:8e:d5:58:9d:b1:fe:42:05:84:22:82:80: d4:84:c8:6b:95:fe:56:2e:cd:6f:70:09:a1:db:9d: ec:67:4f:51:f2:67:9f:a2:0c:76:ba:b9:db:ea:cc: 72:e7:d1:3b:2d:d6:b9:7e:f8:fb:55:1d:bd:c0:78: 97:2e:f3:0e:eb:8b:08:be:78:8b:7b:74:8c:8a:49: fa:2d:3a:4d:d3:d6:d3:a9:72:fc:f1:66:39:84:f3: 99:0d:c2:0c:2a:55:21:ab:b5:98:07:17:f5:ca:94: f1:40:18:50:2d:8d:f0:e3:76:58:c5:f3:0a:59:6a: de:1b:05:8a:62:af:d6:47:e1:39:54:52:a1:c0:8d: 8c:8a:ae:17:a2:f8:93:2a:66:85:5a:fb:7e:ba:eb: ce:17:34:21:d8:41:24:93:fd:5b:70:d1:f3:0b:07: 9e:98:86:c8:53:8e:c4:db:eb:13:28:a1:dd:c5:57: 09:fa:b2:1c:41:b1:f3:d0:24:ea:22:17:11:b2:b2: f8:29:14:ff:3b:fd:1c:17:3d:5f:b2:bb:85:f6:f1: 4e:55:25:ef:28:28:1e:63:82:85:27:e1:8f:ba:c1: 53:77:58:2f:5b:b8:38:34:6b:ca:29:89:ae:c1:46: c7:1f:5a:ae:16:04:0d:5d:27:80:7d:46:76:81:45: bb:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:F8:B9:7F:CB:14:A2:E0:FC:4F:68:2E:A0:FE:7A:CF:C0:DF:49:94 X509v3 Authority Key Identifier: keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/p_i5f8sUouD8T2guoP56z8DfSZQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.37.107.0/24 Signature Algorithm: sha256WithRSAEncryption 27:40:b2:a1:df:ec:fb:53:33:18:73:69:01:5d:12:56:fc:10: 37:2e:b5:07:45:38:0a:8a:2d:33:b1:3e:7f:dd:a9:2f:dc:b0: b3:12:76:30:53:ee:17:81:54:4a:b3:20:f0:fa:78:ac:dc:fd: 54:b9:c6:a3:22:58:c1:0e:ef:ca:23:09:b8:69:50:53:f0:04: 93:6e:e1:5d:fd:23:ad:7c:81:c1:60:17:64:10:e4:d6:a4:be: 9b:ab:e2:d6:ea:f5:4f:60:07:6e:9f:ae:5a:95:72:fa:22:eb: e6:14:f0:90:55:22:6e:f8:a3:2b:2d:04:65:b8:b7:4a:ce:e3: 28:ed:56:35:ff:d3:6c:de:a2:d6:74:11:10:32:55:59:3d:b9: c2:09:df:e7:0c:20:4d:c2:61:7c:ca:51:38:75:25:de:69:54: 39:6c:26:ff:66:1b:21:06:ca:b3:80:49:7e:15:d5:66:f4:48: 33:05:7b:82:64:71:63:6f:16:1c:1c:da:15:41:d6:05:e6:ce: 68:d6:f7:72:41:a9:85:fa:14:56:55:56:52:9f:db:51:7e:68: 42:c0:6c:94:47:1a:1f:a9:0b:8f:6c:e5:37:0c:af:a5:73:c7: f6:02:26:67:35:c5:ea:95:16:a7:c0:93:dd:77:11:0b:12:46: 8f:d7:c5:bf -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ECAmCoO0j0kP0VG8G4czMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh ZTE5MjkwHhcNMjYwMTAxMTAxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhN2Y4Yjk3ZmNiMTRhMmUwZmM0ZjY4MmVhMGZlN2FjZmMwZGY0OTk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9s2O1Vidsf5CBYQigoDUhMhrlf5W Ls1vcAmh253sZ09R8mefogx2urnb6sxy59E7Lda5fvj7VR29wHiXLvMO64sIvniL e3SMikn6LTpN09bTqXL88WY5hPOZDcIMKlUhq7WYBxf1ypTxQBhQLY3w43ZYxfMK WWreGwWKYq/WR+E5VFKhwI2Miq4XoviTKmaFWvt+uuvOFzQh2EEkk/1bcNHzCwee mIbIU47E2+sTKKHdxVcJ+rIcQbHz0CTqIhcRsrL4KRT/O/0cFz1fsruF9vFOVSXv KCgeY4KFJ+GPusFTd1gvW7g4NGvKKYmuwUbHH1quFgQNXSeAfUZ2gUW7zwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKf4uX/LFKLg/E9oLqD+es/A30mUMB8GA1UdIwQY MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt MjMxNTQ5NDA5NzIwLzEvcF9pNWY4c1VvdUQ4VDJndW9QNTZ6OERmU1pRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiVrMA0G CSqGSIb3DQEBCwUAA4IBAQAnQLKh3+z7UzMYc2kBXRJW/BA3LrUHRTgKii0zsT5/ 3akv3LCzEnYwU+4XgVRKsyDw+nis3P1UucajIljBDu/KIwm4aVBT8ASTbuFd/SOt fIHBYBdkEOTWpL6bq+LW6vVPYAdun65alXL6IuvmFPCQVSJu+KMrLQRluLdKzuMo 7VY1/9Ns3qLWdBEQMlVZPbnCCd/nDCBNwmF8ylE4dSXeaVQ5bCb/ZhshBsqzgEl+ FdVm9EgzBXuCZHFjbxYcHNoVQdYF5s5o1vdyQamF+hRWVVZSn9tRfmhCwGyURxof qQuPbOU3DK+lc8f2AiZnNcXqlRanwJPddxELEkaP18W/ -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:23 2026 by rpki-client