This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/pxR405YISr-FctI8NX7Q4bD6gEU.roa File: pxR405YISr-FctI8NX7Q4bD6gEU.roa (raw, json) Hash identifier: XtQdAGk7qomly3oH9IhnMKYdpq/Ak4fYbIVYvmRiWfg= Subject key identifier: A7:14:78:D3:96:08:4A:BF:85:72:D2:3C:35:7E:D0:E1:B0:FA:80:45 Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Certificate serial: 019B7910208A05F6ED7AE047CE842CB9161C Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/pxR405YISr-FctI8NX7Q4bD6gEU.roa Signing time: Thu 01 Jan 2026 10:17:38 +0000 ROA not before: Thu 01 Jan 2026 10:17:38 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 210538 IP address blocks: 46.37.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:20:8a:05:f6:ed:7a:e0:47:ce:84:2c:b9:16:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Validity Not Before: Jan 1 10:17:38 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a71478d396084abf8572d23c357ed0e1b0fa8045 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:b9:ce:bf:77:da:4a:c0:61:7a:92:8b:a7:a8: 94:38:fc:1a:6a:6a:40:ea:d7:8e:20:6b:b5:97:47: 03:61:45:c6:82:9d:64:f7:ed:35:ca:4e:51:09:f4: 64:69:6f:5a:6e:8b:1c:d1:b0:ea:54:c0:e7:ee:14: 6a:55:29:08:ef:c0:75:6c:ed:90:4b:fd:77:c4:da: b4:cd:5c:76:bf:d4:8f:3a:6b:ad:32:c5:b5:42:cc: 4f:8d:a6:c9:f1:95:b1:ad:16:32:b0:4a:29:1a:01: e7:9f:34:09:d4:d0:b6:98:ef:6f:87:a3:73:cb:b3: 0c:9d:66:cc:7e:7e:67:07:72:0d:07:d9:47:ae:c5: 13:aa:7f:c2:7b:aa:54:3f:be:ce:3c:11:e0:88:4a: 5f:bc:be:86:80:d9:be:a2:a2:cf:f5:bf:c3:4a:09: 39:ec:a9:bb:d8:98:87:b0:b9:02:dd:6b:bf:15:24: 66:6f:86:f9:36:d7:e7:e1:17:c1:ad:02:5f:a3:d3: e1:a7:83:35:be:5c:8e:66:4f:ec:d1:af:04:13:91: 8f:85:dd:2a:af:9a:16:a8:bb:10:aa:d9:52:86:95: cf:98:ef:46:c9:88:cd:bd:bf:f6:f9:6c:ec:9c:cb: 18:13:cd:87:36:98:da:38:ca:62:51:2f:78:1d:a6: 72:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:14:78:D3:96:08:4A:BF:85:72:D2:3C:35:7E:D0:E1:B0:FA:80:45 X509v3 Authority Key Identifier: keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/pxR405YISr-FctI8NX7Q4bD6gEU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.37.115.0/24 Signature Algorithm: sha256WithRSAEncryption a8:64:f9:30:fe:fd:f0:b1:57:3c:25:e4:b8:cd:24:a0:62:96: df:a8:e5:2f:97:04:ec:d3:2a:cc:58:a7:c7:a3:1a:18:1a:bd: 22:c7:e7:4b:c7:61:2c:ce:27:1e:c8:e2:58:39:fe:e2:88:42: 53:b1:0a:00:58:01:33:f3:13:d5:1c:0d:88:ee:2e:ce:7b:73: 00:94:63:b3:c7:3f:73:e7:b4:8d:61:be:99:03:30:7c:40:52: f3:7e:c6:a2:6b:23:d2:c3:39:bb:75:b3:56:e4:77:7a:2d:ea: c1:da:14:2b:51:20:f2:58:02:82:e0:b1:fa:92:52:c9:af:db: e2:f6:9d:43:de:88:39:fc:df:40:a8:d7:2a:06:bb:eb:a3:a7: 02:24:21:68:d7:25:5f:4e:43:b0:6f:85:5f:5b:80:b0:8d:58: c3:4e:9c:da:51:e6:48:ff:46:a5:5c:59:b0:e3:14:d5:f6:fb: 7f:d5:20:ee:4e:b3:6d:8f:6e:e5:80:2d:b7:be:5d:ee:7f:f7: 0b:a9:5e:2f:71:a2:b0:9c:57:ce:44:62:7c:c0:2a:bc:c8:07: 53:d5:1d:7c:c4:9d:c6:f6:ed:47:93:1d:44:d7:25:ef:41:cc: a8:ac:2e:b4:62:27:01:fb:5a:6a:44:24:5c:e9:2d:87:9b:37: 81:9e:f7:ca -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5ECCKBfbteuBHzoQsuRYcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh ZTE5MjkwHhcNMjYwMTAxMTAxNzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNzE0NzhkMzk2MDg0YWJmODU3MmQyM2MzNTdlZDBlMWIwZmE4MDQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27nOv3faSsBhepKLp6iUOPwaampA 6teOIGu1l0cDYUXGgp1k9+01yk5RCfRkaW9abosc0bDqVMDn7hRqVSkI78B1bO2Q S/13xNq0zVx2v9SPOmutMsW1QsxPjabJ8ZWxrRYysEopGgHnnzQJ1NC2mO9vh6Nz y7MMnWbMfn5nB3INB9lHrsUTqn/Ce6pUP77OPBHgiEpfvL6GgNm+oqLP9b/DSgk5 7Km72JiHsLkC3Wu/FSRmb4b5Ntfn4RfBrQJfo9Php4M1vlyOZk/s0a8EE5GPhd0q r5oWqLsQqtlShpXPmO9GyYjNvb/2+WzsnMsYE82HNpjaOMpiUS94HaZy9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKcUeNOWCEq/hXLSPDV+0OGw+oBFMB8GA1UdIwQY MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt MjMxNTQ5NDA5NzIwLzEvcHhSNDA1WUlTci1GY3RJOE5YN1E0YkQ2Z0VVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiVzMA0G CSqGSIb3DQEBCwUAA4IBAQCoZPkw/v3wsVc8JeS4zSSgYpbfqOUvlwTs0yrMWKfH oxoYGr0ix+dLx2EsziceyOJYOf7iiEJTsQoAWAEz8xPVHA2I7i7Oe3MAlGOzxz9z 57SNYb6ZAzB8QFLzfsaiayPSwzm7dbNW5Hd6LerB2hQrUSDyWAKC4LH6klLJr9vi 9p1D3og5/N9AqNcqBrvro6cCJCFo1yVfTkOwb4VfW4CwjVjDTpzaUeZI/0alXFmw 4xTV9vt/1SDuTrNtj27lgC23vl3uf/cLqV4vcaKwnFfORGJ8wCq8yAdT1R18xJ3G 9u1Hkx1E1yXvQcyorC60YicB+1pqRCRc6S2HmzeBnvfK -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:59 2026 by rpki-client