This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/RrruJq82VAsagsOjJ_NSi5mNKUo.roa File: RrruJq82VAsagsOjJ_NSi5mNKUo.roa (raw, json) Hash identifier: t6X41lofSmz9HVW3wzJ5UBH/fbLKJOUaKmsaL52P/Jk= Subject key identifier: 46:BA:EE:26:AF:36:54:0B:1A:82:C3:A3:27:F3:52:8B:99:8D:29:4A Certificate issuer: /CN=90620638ca1d835650e08ddcf363f10789b53057 Certificate serial: 019B7A5B929F4680054E30A14D7AAE3190AB Authority key identifier: 90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/RrruJq82VAsagsOjJ_NSi5mNKUo.roa Signing time: Thu 01 Jan 2026 16:19:40 +0000 ROA not before: Thu 01 Jan 2026 16:19:40 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 7015 IP address blocks: 206.195.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 15:22:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5b:92:9f:46:80:05:4e:30:a1:4d:7a:ae:31:90:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90620638ca1d835650e08ddcf363f10789b53057 Validity Not Before: Jan 1 16:19:40 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=46baee26af36540b1a82c3a327f3528b998d294a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a9:87:e0:ef:12:9c:c6:cc:b0:99:1b:c4:97: 11:66:3a:58:55:6c:94:2a:4e:ae:30:a7:8b:17:eb: c9:81:d9:23:bd:25:45:2b:a3:77:50:26:cf:e6:c9: ea:e2:34:ed:68:1b:41:dc:fc:30:99:bd:17:36:4e: e0:ed:c0:5d:1a:b2:5f:9c:a6:11:f5:c2:32:8e:9b: 56:1b:27:6f:4d:58:e6:b2:63:62:da:2c:28:31:97: 00:bb:c1:bc:c5:7f:43:b6:c4:3c:86:f1:0a:d8:f0: ff:36:73:1e:14:f3:88:01:72:39:e0:47:ba:6f:1f: 7c:a0:4f:6e:11:e2:73:0e:61:43:26:49:30:02:cb: 50:03:14:b2:ed:5a:fb:98:f9:b8:73:57:cc:27:63: a3:d3:03:bf:d8:3c:6f:2e:1f:5f:e4:48:c4:e6:bb: 23:14:b1:bf:64:e0:d9:a3:0f:a3:4c:00:f8:f1:f6: a5:5c:34:d6:c6:20:b8:26:89:a0:af:ab:d4:ba:aa: 7a:ef:65:49:a7:b6:d7:c3:30:5c:b8:e4:ca:c0:79: 51:ad:c1:61:3a:2e:72:bd:25:b8:6b:9f:df:64:ba: 4e:33:22:79:84:6c:d3:b2:1a:c4:a1:1e:96:ee:ec: 27:d3:ed:96:e7:8d:3c:83:e4:93:cf:bf:07:9a:87: 75:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:BA:EE:26:AF:36:54:0B:1A:82:C3:A3:27:F3:52:8B:99:8D:29:4A X509v3 Authority Key Identifier: keyid:90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/RrruJq82VAsagsOjJ_NSi5mNKUo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 206.195.52.0/24 Signature Algorithm: sha256WithRSAEncryption 97:1f:2f:23:7b:4f:3e:7e:a7:6f:99:d4:0f:5a:05:bf:92:7e: 83:e3:2a:b6:b9:17:01:33:39:87:0b:67:e7:84:5d:39:5f:3b: b0:80:61:12:eb:b0:92:32:08:92:88:13:d5:de:71:c1:0c:a6: 9b:0c:8c:dd:c4:c7:2d:32:cc:cd:5f:cf:03:b4:9a:1e:28:15: 22:f1:b0:54:52:10:45:3b:70:75:6c:f6:2a:5c:70:1b:54:c1: ff:0c:e8:21:38:ae:76:56:9d:1c:d2:fc:9a:7d:da:80:e3:94: 56:71:d4:c9:6c:fd:0e:57:7a:5a:a9:08:58:5f:45:75:5a:10: 69:a7:b5:da:14:7e:eb:47:2b:f4:97:56:15:33:c7:e1:ec:cb: ea:c1:12:25:f6:40:35:dc:f5:6a:83:f5:08:1f:0b:0a:69:2d: 07:39:ca:45:68:2c:03:c5:f4:8c:ec:2a:94:22:9e:41:de:90: 00:59:58:12:60:7c:70:44:79:64:ae:07:9b:c9:34:15:ac:16: 58:c8:5f:85:68:ed:69:e4:b4:17:30:a3:9a:6b:a8:b6:e9:c9: 0f:53:db:cd:22:d7:d9:b3:82:e0:18:2f:1c:50:3f:69:ec:38: f5:43:07:7d:ea:52:04:4f:96:1a:24:c6:ca:51:51:9a:68:f1: 80:f3:84:f4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt6W5KfRoAFTjChTXquMZCrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkwNjIwNjM4Y2ExZDgzNTY1MGUwOGRkY2YzNjNmMTA3ODli NTMwNTcwHhcNMjYwMTAxMTYxOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NmJhZWUyNmFmMzY1NDBiMWE4MmMzYTMyN2YzNTI4Yjk5OGQyOTRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKmH4O8SnMbMsJkbxJcRZjpYVWyU Kk6uMKeLF+vJgdkjvSVFK6N3UCbP5snq4jTtaBtB3Pwwmb0XNk7g7cBdGrJfnKYR 9cIyjptWGydvTVjmsmNi2iwoMZcAu8G8xX9DtsQ8hvEK2PD/NnMeFPOIAXI54Ee6 bx98oE9uEeJzDmFDJkkwAstQAxSy7Vr7mPm4c1fMJ2Oj0wO/2DxvLh9f5EjE5rsj FLG/ZODZow+jTAD48falXDTWxiC4Jomgr6vUuqp672VJp7bXwzBcuOTKwHlRrcFh Oi5yvSW4a5/fZLpOMyJ5hGzTshrEoR6W7uwn0+2W5408g+STz78Hmod1TQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEa67iavNlQLGoLDoyfzUouZjSlKMB8GA1UdIwQY MBaAFJBiBjjKHYNWUOCN3PNj8QeJtTBXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva0dJR09Nb2RnMVpRNEkzYzgyUHhCNG0xTUZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS80MWFmMmQtZjNkZS00NWQ1LTk0MWMt YzQzYWM0MjllNTNmLzEvUnJydUpxODJWQXNhZ3NPakpfTlNpNW1OS1VvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS80MWFmMmQtZjNkZS00NWQ1LTk0MWMtYzQzYWM0MjllNTNm LzEva0dJR09Nb2RnMVpRNEkzYzgyUHhCNG0xTUZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzsM0MA0G CSqGSIb3DQEBCwUAA4IBAQCXHy8je08+fqdvmdQPWgW/kn6D4yq2uRcBMzmHC2fn hF05XzuwgGES67CSMgiSiBPV3nHBDKabDIzdxMctMszNX88DtJoeKBUi8bBUUhBF O3B1bPYqXHAbVMH/DOghOK52Vp0c0vyafdqA45RWcdTJbP0OV3paqQhYX0V1WhBp p7XaFH7rRyv0l1YVM8fh7MvqwRIl9kA13PVqg/UIHwsKaS0HOcpFaCwDxfSM7CqU Ip5B3pAAWVgSYHxwRHlkrgebyTQVrBZYyF+FaO1p5LQXMKOaa6i26ckPU9vNItfZ s4LgGC8cUD9p7Dj1Qwd96lIET5YaJMbKUVGaaPGA84T0 -----END CERTIFICATE-----Generated at Thu Jan 22 00:57:45 2026 by rpki-client