This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/zPgdBYPAz3QBjg71o8G3YIE805Y.roa File: zPgdBYPAz3QBjg71o8G3YIE805Y.roa (raw, json) Hash identifier: JgrCSwBTN9wdbX0XnRrlPGBIGb9WM1Yt8KIhYiVQTmE= Subject key identifier: CC:F8:1D:05:83:C0:CF:74:01:8E:0E:F5:A3:C1:B7:60:81:3C:D3:96 Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Certificate serial: 019B791014AA184CEB2ADD73891C7E3CA83B Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/zPgdBYPAz3QBjg71o8G3YIE805Y.roa Signing time: Thu 01 Jan 2026 10:17:35 +0000 ROA not before: Thu 01 Jan 2026 10:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9009 IP address blocks: 46.37.99.0/24 maxlen: 24 46.37.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Jan 2026 01:01:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:14:aa:18:4c:eb:2a:dd:73:89:1c:7e:3c:a8:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Validity Not Before: Jan 1 10:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=ccf81d0583c0cf74018e0ef5a3c1b760813cd396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:19:72:22:c6:30:b9:da:a9:30:85:cf:7c:69: 54:3d:82:78:91:80:b5:d1:47:ad:c2:15:e2:b5:69: c8:4a:54:ce:7e:a8:28:79:60:c8:31:9e:d7:ce:4a: 74:61:c9:f3:bb:45:d4:77:d3:0e:f2:27:ad:cc:f6: 3a:37:34:4e:62:4b:a4:2b:7c:a7:15:db:c0:cb:60: 37:91:3e:bd:82:71:3f:a7:5c:93:c0:2a:9e:70:03: 81:18:18:0e:32:27:8d:78:2b:71:e3:93:fe:77:a6: fb:78:0b:d1:8d:2d:74:97:3e:56:de:47:85:1f:f8: b3:cf:35:e0:56:af:c6:56:ad:e6:fd:3e:53:a2:79: c3:cb:10:07:48:4a:2d:bf:62:00:6e:dc:1b:f4:97: 1a:32:89:40:33:88:d6:24:8e:2b:86:7a:a7:f5:f2: 59:7d:ff:56:50:a6:b9:a0:18:b2:76:00:23:21:47: 16:ea:ac:62:f1:ac:53:e3:97:16:c0:a7:35:2b:fa: d2:c8:a4:e5:7a:b6:23:38:b0:65:81:2b:bf:d2:dd: dd:34:22:a9:35:dc:95:25:8f:21:56:a6:3e:ff:14: 42:65:e9:fe:6e:52:79:db:6b:45:8b:e5:a1:21:9b: ec:87:ce:c1:92:04:49:01:90:bd:09:19:11:2d:dc: 06:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F8:1D:05:83:C0:CF:74:01:8E:0E:F5:A3:C1:B7:60:81:3C:D3:96 X509v3 Authority Key Identifier: keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/zPgdBYPAz3QBjg71o8G3YIE805Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.37.99.0/24 46.37.116.0/24 Signature Algorithm: sha256WithRSAEncryption 03:25:60:35:80:4e:52:06:28:5b:1b:f7:e6:59:09:84:17:17: 22:cf:9e:a8:a7:17:fd:85:8b:6a:ea:54:aa:99:90:e9:7b:af: 3d:ea:4d:75:04:a5:cb:75:75:c7:08:1a:dc:9e:92:86:7f:cd: e4:7c:10:54:4a:5b:3e:8a:96:d8:4c:02:36:4f:4a:a2:21:32: ca:68:e8:de:94:a4:72:af:88:62:96:36:9b:25:c9:83:e1:c7: 96:63:86:0b:75:bd:5f:27:c3:9c:d3:63:43:60:62:2e:bd:04: b3:20:c7:9a:59:9a:4e:53:5f:2d:d1:af:85:99:a7:fc:30:c2: 81:c9:66:ec:af:1f:4d:d5:ec:58:52:e8:02:1c:ee:73:8c:c2: 3c:07:50:51:4b:0c:e0:c9:9b:74:2a:fd:b8:85:ea:4e:90:93: 79:a1:61:d3:e7:e5:d9:9c:2b:c4:1b:8b:6e:05:6e:23:05:62: 40:ed:b5:c2:df:8d:a9:d1:4b:8a:3c:ad:d3:18:1b:b6:6b:df: 35:fd:b4:76:3d:24:ce:1c:10:0a:14:ad:3f:a4:38:bb:40:14: d3:d0:67:64:6b:cd:d9:5f:0d:39:09:c8:3e:01:a2:ba:fe:40: 1b:a4:c4:fb:6e:6b:24:31:fd:58:59:48:81:32:49:60:aa:65: 89:45:52:a3 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt5EBSqGEzrKt1ziRx+PKg7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh ZTE5MjkwHhcNMjYwMTAxMTAxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjY2Y4MWQwNTgzYzBjZjc0MDE4ZTBlZjVhM2MxYjc2MDgxM2NkMzk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRlyIsYwudqpMIXPfGlUPYJ4kYC1 0UetwhXitWnISlTOfqgoeWDIMZ7Xzkp0Ycnzu0XUd9MO8ietzPY6NzROYkukK3yn FdvAy2A3kT69gnE/p1yTwCqecAOBGBgOMieNeCtx45P+d6b7eAvRjS10lz5W3keF H/izzzXgVq/GVq3m/T5TonnDyxAHSEotv2IAbtwb9JcaMolAM4jWJI4rhnqn9fJZ ff9WUKa5oBiydgAjIUcW6qxi8axT45cWwKc1K/rSyKTlerYjOLBlgSu/0t3dNCKp NdyVJY8hVqY+/xRCZen+blJ522tFi+WhIZvsh87BkgRJAZC9CRkRLdwGqQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFMz4HQWDwM90AY4O9aPBt2CBPNOWMB8GA1UdIwQY MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt MjMxNTQ5NDA5NzIwLzEvelBnZEJZUEF6M1FCamc3MW84RzNZSUU4MDVZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQALiVjAwQA LiV0MA0GCSqGSIb3DQEBCwUAA4IBAQADJWA1gE5SBihbG/fmWQmEFxciz56opxf9 hYtq6lSqmZDpe6896k11BKXLdXXHCBrcnpKGf83kfBBUSls+ipbYTAI2T0qiITLK aOjelKRyr4hiljabJcmD4ceWY4YLdb1fJ8Oc02NDYGIuvQSzIMeaWZpOU18t0a+F maf8MMKByWbsrx9N1exYUugCHO5zjMI8B1BRSwzgyZt0Kv24hepOkJN5oWHT5+XZ nCvEG4tuBW4jBWJA7bXC342p0UuKPK3TGBu2a981/bR2PSTOHBAKFK0/pDi7QBTT 0Gdka83ZXw05Ccg+AaK6/kAbpMT7bmskMf1YWUiBMklgqmWJRVKj -----END CERTIFICATE-----Generated at Sun Jan 18 08:54:46 2026 by rpki-client