This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/1em1OFdaxvtHYkalC9tCVFTne_U.roa File: 1em1OFdaxvtHYkalC9tCVFTne_U.roa (raw, json) Hash identifier: rqgc5uaW4MBN6mN1vzKCU/z4AeDxYCoA2hOv6zx03AA= Subject key identifier: D5:E9:B5:38:57:5A:C6:FB:47:62:46:A5:0B:DB:42:54:54:E7:7B:F5 Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA7881891EA31A3235CD3BB0757E8C9 Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/1em1OFdaxvtHYkalC9tCVFTne_U.roa Signing time: Fri 02 Jan 2026 12:21:06 +0000 ROA not before: Fri 02 Jan 2026 12:21:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205060 IP address blocks: 46.61.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:88:18:91:ea:31:a3:23:5c:d3:bb:07:57:e8:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:21:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d5e9b538575ac6fb476246a50bdb425454e77bf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3e:ee:9a:52:67:81:d7:43:d7:34:63:69:b3: 47:24:7b:2d:f1:bc:cf:0a:f3:7b:a8:e9:96:78:2e: 41:bc:f6:9e:d8:0c:fd:ce:9f:3a:1f:0c:ba:69:86: d0:67:11:41:13:0f:74:22:4a:b0:84:2b:dd:cd:c9: 4b:f8:a2:80:32:d5:cd:df:a8:e3:ca:35:2e:c1:ac: 90:23:fe:5b:48:cd:96:56:55:a0:c9:ab:2f:2e:9f: 4a:33:6e:4f:f0:b1:b6:6e:7b:41:51:98:49:d1:fa: 30:c0:90:c6:e0:bd:a0:9e:b9:60:61:72:7d:91:f0: 21:6c:9e:94:03:aa:10:1e:ba:4a:2b:28:a4:49:ae: d5:d2:6f:65:3c:45:f8:00:96:5d:d1:5c:30:aa:f7: 1e:30:5d:51:85:41:ee:04:87:dc:ed:aa:58:29:a8: a6:81:b5:3c:b2:19:ce:75:a7:8f:91:d3:87:f3:18: 58:bb:4f:20:4f:52:7a:00:f7:87:e3:e2:b6:9f:7b: 4b:60:d7:83:f8:9a:d3:e5:ca:55:8b:4b:cc:d5:86: 1c:81:db:fb:13:2d:12:b3:8d:77:3e:7e:76:ba:75: 8c:17:a5:d9:f7:a9:51:5e:9b:0d:bc:8a:20:13:73: aa:93:d2:44:40:40:d3:a0:5f:a2:4b:a5:5e:83:13: 0a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E9:B5:38:57:5A:C6:FB:47:62:46:A5:0B:DB:42:54:54:E7:7B:F5 X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/1em1OFdaxvtHYkalC9tCVFTne_U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.61.209.0/24 Signature Algorithm: sha256WithRSAEncryption 02:ff:e9:4f:4f:78:f0:52:9b:c1:8d:cb:87:26:82:17:eb:0d: 8b:c6:f5:51:1a:c2:ce:45:8f:72:3d:cb:f0:f4:59:91:19:89: e3:62:30:ae:5f:f9:6d:2e:b2:bf:45:dc:2c:9d:f9:ef:94:11: 00:49:6d:9a:9c:c6:ee:68:bd:b2:dc:c4:5f:4e:88:df:30:42: 11:03:fe:3f:89:43:57:9b:c9:0b:93:b6:58:c3:ce:ea:63:f4: c9:32:40:e2:ff:19:4b:a9:6a:aa:2b:b4:94:6e:dd:b3:73:9d: be:1f:28:8e:36:e1:59:79:4b:64:54:1b:ae:6c:d4:7d:4a:ef: e1:d7:cd:8c:e2:16:5f:12:c4:9f:0f:fe:57:c1:2a:5d:76:18: 1a:a8:70:8b:63:23:d9:cb:95:4d:17:6d:78:c1:1c:3d:01:ec: 2e:e5:a6:a7:c3:1d:94:20:5d:ec:f1:1b:f7:1e:d8:52:c0:b4: e6:52:3b:73:49:a8:31:8c:e7:bf:72:7e:cf:22:b7:60:4f:dc: e4:5a:a8:b7:8f:19:c5:bd:78:af:7b:ef:2f:22:6f:60:ff:64: 8a:3e:33:9a:64:79:47:c2:90:a0:26:f9:23:35:f7:39:98:d4: 5b:de:b7:60:29:6a:fa:89:ae:a0:ff:a8:61:5e:72:3a:87:74: b6:54:ab:c8 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p4gYkeoxoyNc07sHV+jJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNWU5YjUzODU3NWFjNmZiNDc2MjQ2YTUwYmRiNDI1NDU0ZTc3YmY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArT7umlJngddD1zRjabNHJHst8bzP CvN7qOmWeC5BvPae2Az9zp86Hwy6aYbQZxFBEw90IkqwhCvdzclL+KKAMtXN36jj yjUuwayQI/5bSM2WVlWgyasvLp9KM25P8LG2bntBUZhJ0fowwJDG4L2gnrlgYXJ9 kfAhbJ6UA6oQHrpKKyikSa7V0m9lPEX4AJZd0VwwqvceMF1RhUHuBIfc7apYKaim gbU8shnOdaePkdOH8xhYu08gT1J6APeH4+K2n3tLYNeD+JrT5cpVi0vM1YYcgdv7 Ey0Ss413Pn52unWMF6XZ96lRXpsNvIogE3Oqk9JEQEDToF+iS6VegxMK9wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNXptThXWsb7R2JGpQvbQlRU53v1MB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvMWVtMU9GZGF4dnRIWWthbEM5dENWRlRuZV9VLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALj3RMA0G CSqGSIb3DQEBCwUAA4IBAQAC/+lPT3jwUpvBjcuHJoIX6w2LxvVRGsLORY9yPcvw 9FmRGYnjYjCuX/ltLrK/RdwsnfnvlBEASW2anMbuaL2y3MRfTojfMEIRA/4/iUNX m8kLk7ZYw87qY/TJMkDi/xlLqWqqK7SUbt2zc52+HyiONuFZeUtkVBuubNR9Su/h 182M4hZfEsSfD/5XwSpddhgaqHCLYyPZy5VNF214wRw9Aewu5aanwx2UIF3s8Rv3 HthSwLTmUjtzSagxjOe/cn7PIrdgT9zkWqi3jxnFvXive+8vIm9g/2SKPjOaZHlH wpCgJvkjNfc5mNRb3rdgKWr6ia6g/6hhXnI6h3S2VKvI -----END CERTIFICATE-----Generated at Mon Jan 26 10:13:36 2026 by rpki-client