This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/CQ2Fo1iuspCmEI2hwKYfO4__cWY.roa File: CQ2Fo1iuspCmEI2hwKYfO4__cWY.roa (raw, json) Hash identifier: 6UG3E6BSMIFC2YC9VNs/S3EPWadhLSS97sUzfp/jObs= Subject key identifier: 09:0D:85:A3:58:AE:B2:90:A6:10:8D:A1:C0:A6:1F:3B:8F:FF:71:66 Certificate issuer: /CN=d737824e0ffa79f18b9fc49d6cb0dd81c9a6ca28 Certificate serial: 019B7D5BDAD1FAB955CA60357A162D7588EE Authority key identifier: D7:37:82:4E:0F:FA:79:F1:8B:9F:C4:9D:6C:B0:DD:81:C9:A6:CA:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/CQ2Fo1iuspCmEI2hwKYfO4__cWY.roa Signing time: Fri 02 Jan 2026 06:18:50 +0000 ROA not before: Fri 02 Jan 2026 06:18:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61150 IP address blocks: 46.18.111.0/24 maxlen: 24 2a0e:11c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Jan 2026 12:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:da:d1:fa:b9:55:ca:60:35:7a:16:2d:75:88:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d737824e0ffa79f18b9fc49d6cb0dd81c9a6ca28 Validity Not Before: Jan 2 06:18:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=090d85a358aeb290a6108da1c0a61f3b8fff7166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a2:42:33:d0:a8:87:01:c2:46:e6:97:29:ef: 46:9a:54:7f:74:7a:59:b1:a1:98:39:a5:09:6d:b6: 78:71:7a:c4:f2:a9:22:29:fa:ac:b3:7d:fb:fe:a8: 41:7e:c3:1b:93:91:a1:de:4d:e8:43:27:23:ff:0d: a7:4b:9d:ec:0d:3b:13:80:e1:9f:45:1c:02:30:2b: 76:51:7a:71:97:a5:04:7e:43:aa:37:f4:30:b4:9c: 04:4d:ba:62:a2:79:69:e1:9c:ba:fc:e7:17:1a:17: b1:68:dd:7e:01:eb:5b:0b:30:a1:26:d0:4d:44:78: 69:bc:11:30:62:55:4c:54:31:39:d1:c5:d6:02:a5: ab:76:a3:81:8b:e3:3f:7f:47:e5:65:d3:95:0e:21: b8:53:c3:dc:44:80:65:06:8a:63:eb:a4:8c:9c:43: 76:9f:d5:21:e5:db:e9:a2:b5:78:30:61:1a:c3:ea: 10:04:6d:dc:d9:27:cd:f0:da:9c:13:d0:bf:65:cf: f3:61:6e:22:8a:24:f6:42:0c:c2:ab:44:87:1a:5a: 8c:cb:4d:2c:df:78:b5:e5:60:db:97:ff:62:6e:86: 7c:81:d7:3f:e8:e3:3e:8d:ad:70:be:47:22:f2:95: 27:19:b9:60:69:69:b7:12:18:8f:3f:f0:71:14:50: f0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0D:85:A3:58:AE:B2:90:A6:10:8D:A1:C0:A6:1F:3B:8F:FF:71:66 X509v3 Authority Key Identifier: keyid:D7:37:82:4E:0F:FA:79:F1:8B:9F:C4:9D:6C:B0:DD:81:C9:A6:CA:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/CQ2Fo1iuspCmEI2hwKYfO4__cWY.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.18.111.0/24 IPv6: 2a0e:11c0::/32 Signature Algorithm: sha256WithRSAEncryption 84:b9:b2:6a:e3:eb:f5:28:0a:15:ae:5a:f0:58:2f:53:2b:2e: 6a:e1:56:17:3c:fa:81:97:b6:6d:4d:a3:42:e9:4a:5e:d0:95: 70:21:1e:7d:19:a6:50:37:1b:f5:2b:0f:e9:af:db:34:a5:f1: f7:11:65:7e:a2:d8:c9:4e:4f:8e:95:64:e6:42:20:09:9f:fb: b7:48:83:06:49:d4:cc:72:ea:9b:d1:52:6c:db:62:3a:50:ff: 0a:84:13:6d:3a:59:f7:75:8c:c1:f9:b6:0a:6c:1e:36:a7:fd: ab:5e:69:eb:a3:1b:8c:24:5d:7b:a6:f1:89:e9:f9:b7:a4:36: 29:cb:3c:04:c1:6b:58:93:a7:3e:63:ec:e9:b6:26:79:61:55: d6:ce:c7:8e:57:5d:dc:69:13:c5:e3:35:2f:3b:de:a4:6c:07: 6b:11:44:c8:a2:c7:f5:b4:4c:98:16:9e:b9:0f:db:d8:4b:f6: ad:45:9b:89:76:9d:a2:0b:b4:76:f0:fe:0a:10:b5:8e:02:6b: 69:90:3a:02:c2:86:1f:41:7f:58:8a:53:c8:6b:39:b5:a7:58: 36:d3:69:1e:41:25:18:15:c8:8e:87:3f:85:54:c3:43:aa:f8: 5f:02:74:33:a0:52:b7:f6:ce:2c:75:8b:4a:b9:76:bf:51:0f: 63:9d:ad:42 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt9W9rR+rlVymA1ehYtdYjuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3Mzc4MjRlMGZmYTc5ZjE4YjlmYzQ5ZDZjYjBkZDgxYzlh NmNhMjgwHhcNMjYwMTAyMDYxODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwOTBkODVhMzU4YWViMjkwYTYxMDhkYTFjMGE2MWYzYjhmZmY3MTY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwaJCM9CohwHCRuaXKe9GmlR/dHpZ saGYOaUJbbZ4cXrE8qkiKfqss337/qhBfsMbk5Gh3k3oQycj/w2nS53sDTsTgOGf RRwCMCt2UXpxl6UEfkOqN/QwtJwETbpionlp4Zy6/OcXGhexaN1+AetbCzChJtBN RHhpvBEwYlVMVDE50cXWAqWrdqOBi+M/f0flZdOVDiG4U8PcRIBlBopj66SMnEN2 n9Uh5dvporV4MGEaw+oQBG3c2SfN8NqcE9C/Zc/zYW4iiiT2QgzCq0SHGlqMy00s 33i15WDbl/9iboZ8gdc/6OM+ja1wvkci8pUnGblgaWm3EhiPP/BxFFDwMwIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFAkNhaNYrrKQphCNocCmHzuP/3FmMB8GA1UdIwQY MBaAFNc3gk4P+nnxi5/EnWyw3YHJpsooMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXplQ1RnXzZlZkdMbjhTZGJMRGRnY21teWlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80NDZkNDAtNTc4Mi00ZGUwLWEyYzUt YjY4ZjVkOGY2NTFhLzEvQ1EyRm8xaXVzcENtRUkyaHdLWWZPNF9fY1dZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC80NDZkNDAtNTc4Mi00ZGUwLWEyYzUtYjY4ZjVkOGY2NTFh LzEvMXplQ1RnXzZlZkdMbjhTZGJMRGRnY21teWlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALhJvMA0E AgACMAcDBQAqDhHAMA0GCSqGSIb3DQEBCwUAA4IBAQCEubJq4+v1KAoVrlrwWC9T Ky5q4VYXPPqBl7ZtTaNC6Upe0JVwIR59GaZQNxv1Kw/pr9s0pfH3EWV+otjJTk+O lWTmQiAJn/u3SIMGSdTMcuqb0VJs22I6UP8KhBNtOln3dYzB+bYKbB42p/2rXmnr oxuMJF17pvGJ6fm3pDYpyzwEwWtYk6c+Y+zptiZ5YVXWzseOV13caRPF4zUvO96k bAdrEUTIosf1tEyYFp65D9vYS/atRZuJdp2iC7R28P4KELWOAmtpkDoCwoYfQX9Y ilPIazm1p1g202keQSUYFciOhz+FVMNDqvhfAnQzoFK39s4sdYtKuXa/UQ9jna1C -----END CERTIFICATE-----Generated at Sat Jan 10 20:49:53 2026 by rpki-client