This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/8NYcGLI50NHf_-GqbpzZZr4ltLA.roa File: 8NYcGLI50NHf_-GqbpzZZr4ltLA.roa (raw, json) Hash identifier: fEaVNw2Wyd4+MGZ7FzjbEUafcEBr+2hDrYVvqLoZo5Q= Subject key identifier: F0:D6:1C:18:B2:39:D0:D1:DF:FF:E1:AA:6E:9C:D9:66:BE:25:B4:B0 Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Certificate serial: 019B77C6C5741A2BF74C459A567E0AA7C857 Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/8NYcGLI50NHf_-GqbpzZZr4ltLA.roa Signing time: Thu 01 Jan 2026 04:17:53 +0000 ROA not before: Thu 01 Jan 2026 04:17:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47959 IP address blocks: 46.23.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.mft rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 06:01:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:c5:74:1a:2b:f7:4c:45:9a:56:7e:0a:a7:c8:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f Validity Not Before: Jan 1 04:17:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f0d61c18b239d0d1dfffe1aa6e9cd966be25b4b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:9b:db:8e:87:29:68:66:8a:ec:34:d0:81:87: c3:7a:27:4f:d4:1d:87:f8:39:d8:3b:fb:f3:3a:3a: 06:c3:90:36:19:3a:de:55:58:9f:c5:ff:d1:82:85: 47:3d:b6:9e:35:f0:7a:8c:12:5d:76:71:cc:0e:ae: 0f:9c:1e:30:84:26:09:bd:5b:59:60:a6:34:c8:fa: ff:a0:6b:9e:8d:3e:6e:8a:c8:59:f2:6e:28:3b:3a: 20:e4:fb:a1:dc:d5:50:6a:2f:1d:d5:39:07:a9:50: ec:b8:12:c8:ca:7b:12:0d:5a:e3:c4:45:26:29:04: c0:d0:29:76:9e:1c:5d:b1:d6:b9:bf:25:06:c5:59: b8:42:db:e8:5a:69:74:34:56:57:30:30:ed:39:6b: 45:6b:8f:33:1c:53:e2:96:d1:7f:d6:26:62:d9:1b: 76:54:2f:bf:fa:57:ca:f6:4d:1f:34:6a:64:37:04: e9:07:be:a2:5b:88:90:c6:82:fd:38:fb:59:bd:4a: 5b:3c:1a:60:0f:b9:8e:0a:0a:cf:8c:36:8d:db:86: 0d:0e:5e:3e:0c:63:55:33:98:ab:db:0c:45:98:01: 2c:d1:ec:dd:fe:5f:fb:9e:af:38:51:aa:f8:e0:89: 03:f0:9b:6e:aa:7f:4f:08:31:9e:33:48:84:91:96: e1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:D6:1C:18:B2:39:D0:D1:DF:FF:E1:AA:6E:9C:D9:66:BE:25:B4:B0 X509v3 Authority Key Identifier: keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/8NYcGLI50NHf_-GqbpzZZr4ltLA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.23.110.0/24 Signature Algorithm: sha256WithRSAEncryption a3:f9:5e:6b:b1:a1:40:61:1e:16:bc:06:fd:91:88:cd:7f:11: 67:19:d9:26:77:88:b9:46:0e:18:38:29:e6:15:c7:bf:41:f8: 8c:8c:20:b3:dd:d2:a5:f5:d7:86:1b:9f:0d:aa:c9:e0:79:a7: 8b:29:92:7d:a4:46:7b:c8:0b:65:50:e4:b6:4b:aa:d4:55:6a: 4a:d5:f8:0c:f4:8f:cd:cb:d3:be:75:f9:46:4d:4e:e0:a4:3f: 2f:26:28:83:13:85:28:06:b4:67:be:3c:d6:8e:ec:fb:1d:d3: 28:1d:95:23:58:41:9b:b1:6b:09:75:84:2b:1e:0e:9d:9d:a0: 27:7d:14:b0:d6:3f:75:5e:6c:13:ab:34:af:40:ea:ee:b1:08: d3:56:6c:12:13:c0:0a:4b:3d:8b:5f:98:c9:2a:7a:eb:73:99: 87:7f:76:88:ea:a2:1b:98:78:88:68:97:b0:e5:c7:79:50:be: ba:4c:bb:f4:23:57:cd:21:0f:c6:47:88:64:1a:41:74:74:09: 07:16:72:6f:24:99:74:3b:78:89:b9:12:d0:03:a1:e6:d2:8e: c9:a5:ae:ed:18:7f:4d:ae:bc:39:d5:34:d9:af:ae:fe:60:62: 98:a2:54:9e:37:78:3f:95:02:c5:56:e8:d3:11:39:cd:d2:24: 6f:98:c9:88 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xsV0Giv3TEWaVn4Kp8hXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1 MWM3N2YwHhcNMjYwMTAxMDQxNzUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmMGQ2MWMxOGIyMzlkMGQxZGZmZmUxYWE2ZTljZDk2NmJlMjViNGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5vbjocpaGaK7DTQgYfDeidP1B2H +DnYO/vzOjoGw5A2GTreVVifxf/RgoVHPbaeNfB6jBJddnHMDq4PnB4whCYJvVtZ YKY0yPr/oGuejT5uishZ8m4oOzog5Puh3NVQai8d1TkHqVDsuBLIynsSDVrjxEUm KQTA0Cl2nhxdsda5vyUGxVm4QtvoWml0NFZXMDDtOWtFa48zHFPiltF/1iZi2Rt2 VC+/+lfK9k0fNGpkNwTpB76iW4iQxoL9OPtZvUpbPBpgD7mOCgrPjDaN24YNDl4+ DGNVM5ir2wxFmAEs0ezd/l/7nq84Uar44IkD8Jtuqn9PCDGeM0iEkZbhUwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPDWHBiyOdDR3//hqm6c2Wa+JbSwMB8GA1UdIwQY MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt MmNmODA2YjJkMGYyLzEvOE5ZY0dMSTUwTkhmXy1HcWJwelpacjRsdExBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALhduMA0G CSqGSIb3DQEBCwUAA4IBAQCj+V5rsaFAYR4WvAb9kYjNfxFnGdkmd4i5Rg4YOCnm Fce/QfiMjCCz3dKl9deGG58NqsngeaeLKZJ9pEZ7yAtlUOS2S6rUVWpK1fgM9I/N y9O+dflGTU7gpD8vJiiDE4UoBrRnvjzWjuz7HdMoHZUjWEGbsWsJdYQrHg6dnaAn fRSw1j91XmwTqzSvQOrusQjTVmwSE8AKSz2LX5jJKnrrc5mHf3aI6qIbmHiIaJew 5cd5UL66TLv0I1fNIQ/GR4hkGkF0dAkHFnJvJJl0O3iJuRLQA6Hm0o7Jpa7tGH9N rrw51TTZr67+YGKYolSeN3g/lQLFVujTETnN0iRvmMmI -----END CERTIFICATE-----Generated at Wed Jan 21 12:19:11 2026 by rpki-client