This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/rEJ3nr5rpLR9k-3rueCVtCAovZM.roa File: rEJ3nr5rpLR9k-3rueCVtCAovZM.roa (raw, json) Hash identifier: MPpvJzK37AFcgAzt3XzDw1Rx/WuVzYs9n0C6B0TdB+4= Subject key identifier: AC:42:77:9E:BE:6B:A4:B4:7D:93:ED:EB:B9:E0:95:B4:20:28:BD:93 Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Certificate serial: 019B7910177B9A3660C3729ACA087FAB7A06 Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/rEJ3nr5rpLR9k-3rueCVtCAovZM.roa Signing time: Thu 01 Jan 2026 10:17:36 +0000 ROA not before: Thu 01 Jan 2026 10:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 43260 IP address blocks: 46.37.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 09:01:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:17:7b:9a:36:60:c3:72:9a:ca:08:7f:ab:7a:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Validity Not Before: Jan 1 10:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ac42779ebe6ba4b47d93edebb9e095b42028bd93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f7:00:fa:ff:c8:38:20:54:8a:b6:71:b1:01: 58:7b:00:15:66:bf:34:c5:2d:d6:92:c1:25:c3:21: b9:e7:75:f2:53:8d:ad:93:69:d0:cc:f0:50:a0:f8: 58:90:2b:92:a3:c2:74:7c:ae:cb:8d:1d:b0:93:00: ca:1e:3d:b9:52:f5:5e:ef:59:b1:4a:3c:72:78:d3: 28:89:b2:bd:db:1f:a9:84:06:d3:22:21:c9:e6:10: e2:80:df:4b:bb:86:76:52:cb:0a:f3:22:a1:f1:d6: e2:49:0d:03:ec:be:4a:d5:5c:7f:09:d5:3e:90:4b: d7:8f:74:71:37:92:71:39:dc:68:8b:d8:38:e4:b7: ab:c6:88:9f:98:fb:3a:c3:ea:34:4b:30:b7:04:1b: f7:01:fe:4a:c5:5e:0d:04:8c:cd:d7:0b:37:4d:f9: b8:dd:3b:d5:d1:81:1b:2c:aa:ef:68:8e:88:b0:e1: fd:00:2a:c4:d7:68:d5:1b:d1:b6:b8:39:78:39:52: 3c:12:5d:92:bb:72:a3:8f:7f:39:6a:91:2e:46:df: 29:5c:7d:2a:47:83:39:49:ac:97:44:d2:ad:bd:a7: 81:92:25:ec:9e:39:f5:d5:ed:47:ad:1e:35:4a:f3: 8a:94:12:e1:36:f6:30:dc:eb:0f:2f:cc:72:07:90: 33:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:42:77:9E:BE:6B:A4:B4:7D:93:ED:EB:B9:E0:95:B4:20:28:BD:93 X509v3 Authority Key Identifier: keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/rEJ3nr5rpLR9k-3rueCVtCAovZM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.37.115.0/24 Signature Algorithm: sha256WithRSAEncryption 31:28:53:24:52:fb:89:d3:67:d0:0d:a0:6a:16:c2:65:f6:84: 8d:8e:fb:93:98:75:74:a9:43:25:06:c3:a4:d9:96:1f:a5:cf: 20:5a:c2:5e:eb:d6:3b:61:20:81:a8:7a:54:d8:77:87:35:e9: ee:c8:87:25:c2:b0:aa:d1:8c:fd:a7:e3:a6:cc:b8:46:c8:c2: f3:2d:6d:54:fd:3e:62:1d:e1:38:23:36:f6:60:0d:ec:a9:97: 40:ef:06:5d:03:28:97:e7:59:43:15:6e:a9:de:2c:0e:e8:e4: 22:a9:a7:85:14:3e:e9:41:b5:cc:54:ce:2f:51:bf:e2:23:73: e9:07:d0:fb:48:a9:5b:df:bc:40:30:ea:b5:34:30:c7:84:eb: 36:9d:06:20:c6:1f:3f:c0:e9:76:7a:f0:86:54:76:3b:5e:1e: b9:9e:e8:4a:36:7b:74:a4:cc:83:5b:91:39:14:5f:e4:62:c9: 9c:ae:a0:a8:b6:72:a5:43:48:9f:64:be:bb:19:c0:eb:ce:d0: 46:57:33:b5:b1:30:73:f4:db:59:5b:db:0a:c5:54:06:00:2f: 74:ab:48:30:43:7f:89:a5:c0:70:44:3d:31:4d:eb:45:fb:85: cd:dc:3e:b6:78:80:aa:fd:5f:6d:1a:36:34:7f:6d:f8:7b:1a: a9:ef:93:2e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EBd7mjZgw3Kaygh/q3oGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh ZTE5MjkwHhcNMjYwMTAxMTAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhYzQyNzc5ZWJlNmJhNGI0N2Q5M2VkZWJiOWUwOTViNDIwMjhiZDkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vcA+v/IOCBUirZxsQFYewAVZr80 xS3WksElwyG553XyU42tk2nQzPBQoPhYkCuSo8J0fK7LjR2wkwDKHj25UvVe71mx SjxyeNMoibK92x+phAbTIiHJ5hDigN9Lu4Z2UssK8yKh8dbiSQ0D7L5K1Vx/CdU+ kEvXj3RxN5JxOdxoi9g45LerxoifmPs6w+o0SzC3BBv3Af5KxV4NBIzN1ws3Tfm4 3TvV0YEbLKrvaI6IsOH9ACrE12jVG9G2uDl4OVI8El2Su3Kjj385apEuRt8pXH0q R4M5SayXRNKtvaeBkiXsnjn11e1HrR41SvOKlBLhNvYw3OsPL8xyB5AzuwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKxCd56+a6S0fZPt67nglbQgKL2TMB8GA1UdIwQY MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt MjMxNTQ5NDA5NzIwLzEvckVKM25yNXJwTFI5ay0zcnVlQ1Z0Q0FvdlpNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiVzMA0G CSqGSIb3DQEBCwUAA4IBAQAxKFMkUvuJ02fQDaBqFsJl9oSNjvuTmHV0qUMlBsOk 2ZYfpc8gWsJe69Y7YSCBqHpU2HeHNenuyIclwrCq0Yz9p+OmzLhGyMLzLW1U/T5i HeE4Izb2YA3sqZdA7wZdAyiX51lDFW6p3iwO6OQiqaeFFD7pQbXMVM4vUb/iI3Pp B9D7SKlb37xAMOq1NDDHhOs2nQYgxh8/wOl2evCGVHY7Xh65nuhKNnt0pMyDW5E5 FF/kYsmcrqCotnKlQ0ifZL67GcDrztBGVzO1sTBz9NtZW9sKxVQGAC90q0gwQ3+J pcBwRD0xTetF+4XN3D62eICq/V9tGjY0f234exqp75Mu -----END CERTIFICATE-----Generated at Mon Jan 19 16:53:30 2026 by rpki-client