This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ruCnNaAuWiSvrOcSffsrrc-mU-Y.roa File: ruCnNaAuWiSvrOcSffsrrc-mU-Y.roa (raw, json) Hash identifier: F0kCXnimtG8KC6nSV0eR4+hm5V66V2fgM8EiOJj/7S0= Subject key identifier: AE:E0:A7:35:A0:2E:5A:24:AF:AC:E7:12:7D:FB:2B:AD:CF:A6:53:E6 Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Certificate serial: 019B791016A41B612BC31350EECAA7005176 Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ruCnNaAuWiSvrOcSffsrrc-mU-Y.roa Signing time: Thu 01 Jan 2026 10:17:36 +0000 ROA not before: Thu 01 Jan 2026 10:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35916 IP address blocks: 46.37.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 13:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:16:a4:1b:61:2b:c3:13:50:ee:ca:a7:00:51:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Validity Not Before: Jan 1 10:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=aee0a735a02e5a24aface7127dfb2badcfa653e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2d:fa:52:27:47:b9:31:a9:17:b6:21:6d:37: 8b:de:41:28:ad:5f:a8:1f:23:b7:ea:f9:1b:9f:a0: 9a:5f:7e:ea:3c:cf:a5:93:28:c2:b7:0e:67:21:e3: 11:7d:42:68:9e:96:1d:29:0c:61:16:07:31:98:dd: 1a:47:a1:d7:01:68:1f:79:10:27:f7:fa:85:7b:29: 90:5a:9a:0e:6a:98:f0:b2:db:d9:e6:4b:44:8c:8c: 45:da:34:fa:da:b8:06:7b:b7:9e:45:76:71:e8:c7: da:b8:21:71:a3:d6:63:d3:72:07:14:3d:bc:b2:3c: 10:20:6c:cd:db:c1:0d:9f:05:4d:8c:24:a5:a0:29: 30:3d:de:c3:d5:90:97:ed:12:e1:be:af:d6:be:d6: 23:c9:4a:06:5f:f9:07:e9:b9:a4:d8:52:ba:19:4f: 4b:85:52:a1:13:51:67:5b:ce:cb:e6:5c:2f:f9:cd: d4:98:6f:6d:58:87:86:17:b3:ae:fc:75:3b:84:d3: dd:fd:2d:c4:b5:3e:d2:ec:54:3c:8d:08:d3:d4:cd: 2f:1e:4b:6f:7e:9b:74:62:9d:da:cb:dc:f0:5e:5e: 9e:11:97:d3:20:38:59:98:53:f2:ee:3f:4c:06:27: 52:8a:0b:78:60:d8:47:d9:2d:0e:20:10:f1:f1:27: 79:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:E0:A7:35:A0:2E:5A:24:AF:AC:E7:12:7D:FB:2B:AD:CF:A6:53:E6 X509v3 Authority Key Identifier: keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/ruCnNaAuWiSvrOcSffsrrc-mU-Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.37.119.0/24 Signature Algorithm: sha256WithRSAEncryption 60:d9:23:bc:84:0a:88:86:35:83:ef:ed:6a:10:69:2a:35:5a: 76:1b:5a:a5:81:ac:80:4a:3f:96:d1:02:1e:00:07:9f:e8:a1: 1f:86:37:f5:11:8c:e8:99:ef:7e:49:51:fd:b4:9e:06:d8:5c: 27:f4:e5:93:f3:5c:b0:b2:02:23:8d:b0:3e:fa:2d:f0:19:75: 67:68:c3:7f:46:5d:54:04:9d:1f:1d:bb:41:39:05:4c:c4:e1: 31:11:43:82:1f:0a:6a:6f:d4:dc:f0:d5:ac:2a:0f:0b:30:c1: ea:69:ac:f9:ac:50:d3:6c:6f:11:40:77:34:77:1a:2b:71:af: 54:a0:a8:30:d0:40:66:85:85:90:18:86:18:93:a2:0a:be:b9: 2c:c5:af:8a:68:d0:00:97:4f:2c:13:c8:df:c1:53:7c:c4:fa: fb:84:31:d0:b6:cb:b6:ee:59:ab:99:a8:47:27:75:4e:77:8b: 5e:01:9f:e1:97:ce:72:7f:b5:52:6d:21:5a:e9:73:9c:19:5c: 47:3d:ea:6f:44:92:db:33:42:66:23:78:06:5b:38:53:1c:82: 60:c2:e5:82:e1:67:33:d9:27:b9:14:fd:98:f6:68:3b:45:47: 4f:47:dd:d0:c2:30:9c:1d:01:b6:b5:33:d8:68:c9:e0:b4:0d: 43:40:21:a6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EBakG2ErwxNQ7sqnAFF2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh ZTE5MjkwHhcNMjYwMTAxMTAxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhZWUwYTczNWEwMmU1YTI0YWZhY2U3MTI3ZGZiMmJhZGNmYTY1M2U2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxC36UidHuTGpF7YhbTeL3kEorV+o HyO36vkbn6CaX37qPM+lkyjCtw5nIeMRfUJonpYdKQxhFgcxmN0aR6HXAWgfeRAn 9/qFeymQWpoOapjwstvZ5ktEjIxF2jT62rgGe7eeRXZx6MfauCFxo9Zj03IHFD28 sjwQIGzN28ENnwVNjCSloCkwPd7D1ZCX7RLhvq/WvtYjyUoGX/kH6bmk2FK6GU9L hVKhE1FnW87L5lwv+c3UmG9tWIeGF7Ou/HU7hNPd/S3EtT7S7FQ8jQjT1M0vHktv fpt0Yp3ay9zwXl6eEZfTIDhZmFPy7j9MBidSigt4YNhH2S0OIBDx8Sd5HwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFK7gpzWgLlokr6znEn37K63PplPmMB8GA1UdIwQY MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt MjMxNTQ5NDA5NzIwLzEvcnVDbk5hQXVXaVN2ck9jU2Zmc3JyYy1tVS1ZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALiV3MA0G CSqGSIb3DQEBCwUAA4IBAQBg2SO8hAqIhjWD7+1qEGkqNVp2G1qlgayASj+W0QIe AAef6KEfhjf1EYzome9+SVH9tJ4G2Fwn9OWT81ywsgIjjbA++i3wGXVnaMN/Rl1U BJ0fHbtBOQVMxOExEUOCHwpqb9Tc8NWsKg8LMMHqaaz5rFDTbG8RQHc0dxorca9U oKgw0EBmhYWQGIYYk6IKvrksxa+KaNAAl08sE8jfwVN8xPr7hDHQtsu27lmrmahH J3VOd4teAZ/hl85yf7VSbSFa6XOcGVxHPepvRJLbM0JmI3gGWzhTHIJgwuWC4Wcz 2Se5FP2Y9mg7RUdPR93QwjCcHQG2tTPYaMngtA1DQCGm -----END CERTIFICATE-----Generated at Mon Jan 19 19:59:27 2026 by rpki-client