This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/_akRKEhQL6yz3Pkcsia9XUq2eZE.roa File: _akRKEhQL6yz3Pkcsia9XUq2eZE.roa (raw, json) Hash identifier: ZDnDKZ4hLhX5a5yFARI+o8fdfjkQp7Mc9JtfFegPLuc= Subject key identifier: FD:A9:11:28:48:50:2F:AC:B3:DC:F9:1C:B2:26:BD:5D:4A:B6:79:91 Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Certificate serial: 019B7EA78B1322057652A15C6A08EAAA30AF Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/_akRKEhQL6yz3Pkcsia9XUq2eZE.roa Signing time: Fri 02 Jan 2026 12:21:07 +0000 ROA not before: Fri 02 Jan 2026 12:21:07 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212732 IP address blocks: 46.61.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 00:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:8b:13:22:05:76:52:a1:5c:6a:08:ea:aa:30:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09 Validity Not Before: Jan 2 12:21:07 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=fda9112848502facb3dcf91cb226bd5d4ab67991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c7:c4:44:ca:56:93:69:7d:c0:64:dd:c0:db: 64:04:38:35:87:89:57:6a:b2:f0:54:36:16:b9:20: 00:39:4b:fc:d4:f0:45:93:6b:fb:00:58:bb:e1:49: 62:8d:51:f0:7a:82:24:62:2a:4e:3f:6f:cf:95:d3: a5:b8:07:40:df:28:93:4c:ba:90:c7:fb:04:29:5d: 69:98:3c:d0:87:4d:9d:4b:5c:7b:13:3d:ea:ce:bc: c5:29:b4:7e:92:3d:05:55:f3:8d:f9:3c:ea:d6:0e: 20:de:04:e8:41:1b:7c:d9:43:10:55:23:a1:42:d6: 44:34:9f:9a:11:f4:9b:ca:22:c1:11:71:36:eb:1f: 7e:0d:a0:b4:f9:d3:ab:e7:b2:3f:68:2a:59:72:b7: 95:8f:fc:3f:09:3c:c7:f4:8e:be:1c:b6:9a:ab:77: 02:2e:97:d3:d0:c8:8f:30:4a:c6:95:fc:41:78:c9: 01:fb:3b:84:37:5d:ba:82:cd:26:18:f1:07:39:18: ec:20:76:4e:22:16:80:39:33:3d:89:88:57:2b:22: f9:01:bd:74:03:91:42:b8:1b:98:0f:76:0b:0b:e9: fb:15:59:de:a1:9c:85:b2:eb:ea:65:05:e9:05:c2: 4d:79:bb:9a:5c:69:4a:f5:a6:57:77:4a:27:c4:23: 1a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:A9:11:28:48:50:2F:AC:B3:DC:F9:1C:B2:26:BD:5D:4A:B6:79:91 X509v3 Authority Key Identifier: keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/_akRKEhQL6yz3Pkcsia9XUq2eZE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.61.181.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:4a:74:41:e5:43:9a:a4:9e:7a:93:30:31:bb:fd:44:d7:f2: d4:c4:fa:be:36:48:22:9c:e0:47:bf:8d:5a:4b:d6:53:a1:4a: 96:79:e0:47:24:84:15:25:45:6c:a6:60:a7:5b:8a:ce:80:d9: 29:49:23:13:a8:53:94:e6:6a:b9:c4:bb:01:00:7a:01:e0:79: d4:5e:9c:29:09:2c:c3:47:69:f4:a5:27:e0:48:04:cd:51:bb: d2:3b:77:ed:5c:ee:6f:a2:e6:3b:1c:7a:9b:e5:2e:84:05:36: 08:dd:13:61:b7:16:f1:ee:1e:cd:19:57:ce:09:e4:fb:56:95: 3c:61:02:95:b4:af:c9:8a:d0:c5:da:c0:72:3e:3f:93:b2:61: 43:f4:db:6e:c4:5c:fc:54:42:e8:52:d8:5c:81:6e:03:0b:7f: ef:da:87:a8:d6:ca:35:4c:7a:60:e9:95:aa:c5:56:a4:9c:58: 1c:3d:75:d6:8c:0f:74:27:e8:78:98:a6:3e:45:ad:81:36:a0: 26:c5:bb:58:f3:f4:4e:74:bf:0b:1f:88:ba:6c:85:e0:9f:1e: d2:f0:ec:a0:15:1c:b8:ee:b0:09:9a:97:40:b1:29:f5:13:d5: 7a:ee:87:40:90:a7:34:ef:57:9d:88:ab:04:68:9a:c9:47:2a: 2a:51:b9:dc -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+p4sTIgV2UqFcagjqqjCvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZTUzMWI5YWMyOTkwZDY5YThhNWMzMDIzZTcyZTZkODQx ZTZjMDkwHhcNMjYwMTAyMTIyMTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmZGE5MTEyODQ4NTAyZmFjYjNkY2Y5MWNiMjI2YmQ1ZDRhYjY3OTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sfERMpWk2l9wGTdwNtkBDg1h4lX arLwVDYWuSAAOUv81PBFk2v7AFi74UlijVHweoIkYipOP2/PldOluAdA3yiTTLqQ x/sEKV1pmDzQh02dS1x7Ez3qzrzFKbR+kj0FVfON+Tzq1g4g3gToQRt82UMQVSOh QtZENJ+aEfSbyiLBEXE26x9+DaC0+dOr57I/aCpZcreVj/w/CTzH9I6+HLaaq3cC LpfT0MiPMErGlfxBeMkB+zuEN126gs0mGPEHORjsIHZOIhaAOTM9iYhXKyL5Ab10 A5FCuBuYD3YLC+n7FVneoZyFsuvqZQXpBcJNebuaXGlK9aZXd0onxCMa2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFP2pEShIUC+ss9z5HLImvV1KtnmRMB8GA1UdIwQY MBaAFF7lMbmsKZDWmopcMCPnLm2EHmwJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQt NWE4NmMyNzU3YzFlLzEvX2FrUktFaFFMNnl6M1BrY3NpYTlYVXEyZVpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC85YTFkNDQtODYwOS00ZTVlLWJhOTQtNWE4NmMyNzU3YzFl LzEvWHVVeHVhd3BrTmFhaWx3d0ktY3ViWVFlYkFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALj21MA0G CSqGSIb3DQEBCwUAA4IBAQCNSnRB5UOapJ56kzAxu/1E1/LUxPq+NkginOBHv41a S9ZToUqWeeBHJIQVJUVspmCnW4rOgNkpSSMTqFOU5mq5xLsBAHoB4HnUXpwpCSzD R2n0pSfgSATNUbvSO3ftXO5vouY7HHqb5S6EBTYI3RNhtxbx7h7NGVfOCeT7VpU8 YQKVtK/JitDF2sByPj+TsmFD9NtuxFz8VELoUthcgW4DC3/v2oeo1so1THpg6ZWq xVaknFgcPXXWjA90J+h4mKY+Ra2BNqAmxbtY8/ROdL8LH4i6bIXgnx7S8OygFRy4 7rAJmpdAsSn1E9V67odAkKc071ediKsEaJrJRyoqUbnc -----END CERTIFICATE-----Generated at Mon Jan 26 10:13:38 2026 by rpki-client