This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/1-cJPzLFnEqH5HBa7LXTLzTN8Sig.roa File: 1-cJPzLFnEqH5HBa7LXTLzTN8Sig.roa (raw, json) Hash identifier: y2pMWhMaLZyGP/h+eP0yeYXn0/ZQODr617glRelxkng= Subject key identifier: F9:C2:4F:CC:B1:67:12:A1:F9:1C:16:BB:2D:74:CB:CD:33:7C:4A:28 Certificate issuer: /CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Certificate serial: 019B79EC43DD6243CB190871BE33BCF18E2A Authority key identifier: CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/1-cJPzLFnEqH5HBa7LXTLzTN8Sig.roa Signing time: Thu 01 Jan 2026 14:18:05 +0000 ROA not before: Thu 01 Jan 2026 14:18:05 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56587 IP address blocks: 46.151.150.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.mft rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:43:dd:62:43:cb:19:08:71:be:33:bc:f1:8e:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf1df6667da38e57a25b1945fa40e593e5adfa00 Validity Not Before: Jan 1 14:18:05 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f9c24fccb16712a1f91c16bb2d74cbcd337c4a28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:78:a7:9f:61:42:29:10:d0:8c:ff:81:a5:f9: 91:b8:fc:06:58:ff:48:fa:6f:66:c7:1f:18:f0:26: 98:87:d3:6a:12:e0:67:50:8b:f7:b2:ff:a4:27:92: f0:97:2f:47:85:8f:2b:04:c7:59:be:d4:9c:fb:37: cf:7b:79:c6:40:4a:74:94:43:47:a1:08:63:d7:06: 3e:67:83:ae:38:f9:7a:70:de:92:6f:45:61:0b:eb: 9a:db:cb:92:79:ac:74:76:55:82:9c:07:39:c4:63: 45:26:d1:02:78:59:e2:2c:39:3e:96:c2:a3:07:b7: 44:90:4c:73:d4:06:2b:89:e7:83:58:9e:45:97:52: 28:54:0d:94:f0:cb:23:8b:08:ab:06:a8:18:e7:b0: 48:70:4e:46:5e:39:e5:63:06:91:7f:53:d8:69:c7: 3c:cc:91:7e:e7:56:bd:3f:bc:f6:42:71:51:e4:04: 94:49:0e:0a:40:4e:02:1b:d5:e6:99:46:9a:b2:31: d6:c1:50:85:71:74:cf:b7:17:90:a4:74:d5:37:77: 8e:a2:d7:8f:09:c0:eb:a7:d6:82:c2:23:a7:d2:96: cf:43:b4:16:84:06:43:e5:ee:1a:cc:57:fa:9b:1e: eb:3d:f0:59:30:c8:5a:e0:7f:2b:6f:b0:d5:0e:63: 70:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C2:4F:CC:B1:67:12:A1:F9:1C:16:BB:2D:74:CB:CD:33:7C:4A:28 X509v3 Authority Key Identifier: keyid:CF:1D:F6:66:7D:A3:8E:57:A2:5B:19:45:FA:40:E5:93:E5:AD:FA:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zx32Zn2jjleiWxlF-kDlk-Wt-gA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/1-cJPzLFnEqH5HBa7LXTLzTN8Sig.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/e5789a-160d-4896-a25a-8df36337e6bc/1/zx32Zn2jjleiWxlF-kDlk-Wt-gA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.151.150.0/23 Signature Algorithm: sha256WithRSAEncryption 06:c4:b8:48:f3:1a:9e:51:33:55:8c:b8:f2:2e:e5:ee:54:1c: d9:99:50:89:af:ce:47:0f:08:7c:95:34:d4:45:4b:fd:a9:c0: d6:2c:3e:11:6c:d2:60:74:2f:5f:b0:3f:ac:42:dc:ba:5e:26: 22:fb:a8:3c:d2:b7:6f:30:69:ee:27:bc:29:d2:99:87:f2:94: c2:fb:ff:27:b6:79:a2:ad:73:86:9b:1d:70:3d:91:5a:19:90: 0b:24:49:84:c1:f1:33:e4:0d:c5:a2:10:e0:3e:63:b5:a3:ef: 60:cb:cd:df:9a:b6:79:33:09:d2:a2:c6:21:5c:ea:9c:b0:38: 20:d3:92:5e:bc:ac:f2:40:6b:84:62:34:82:fa:78:8e:78:13: 9b:cb:45:c6:48:a4:29:9c:66:9b:45:15:33:66:af:78:3c:2e: c6:be:74:ac:be:76:5a:df:5e:aa:41:e7:3b:7a:25:8b:ec:53: c3:e4:7f:de:6c:36:45:c8:72:df:af:09:a7:8d:da:33:60:ed: bc:1e:48:80:3a:10:46:2f:5e:63:e4:3a:a2:5e:55:a7:d3:ba: d2:76:c5:6a:7f:8c:4a:da:f5:0a:b8:1e:19:c2:7d:ef:4d:ce: 93:57:94:4c:63:7e:92:3e:fd:ec:b2:8f:7a:48:be:cc:7c:b7: e0:3b:09:12 -----BEGIN CERTIFICATE----- MIIE/jCCA+agAwIBAgISAZt57EPdYkPLGQhxvjO88Y4qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMWRmNjY2N2RhMzhlNTdhMjViMTk0NWZhNDBlNTkzZTVh ZGZhMDAwHhcNMjYwMTAxMTQxODA1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmOWMyNGZjY2IxNjcxMmExZjkxYzE2YmIyZDc0Y2JjZDMzN2M0YTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Xinn2FCKRDQjP+BpfmRuPwGWP9I +m9mxx8Y8CaYh9NqEuBnUIv3sv+kJ5Lwly9HhY8rBMdZvtSc+zfPe3nGQEp0lENH oQhj1wY+Z4OuOPl6cN6Sb0VhC+ua28uSeax0dlWCnAc5xGNFJtECeFniLDk+lsKj B7dEkExz1AYrieeDWJ5Fl1IoVA2U8MsjiwirBqgY57BIcE5GXjnlYwaRf1PYacc8 zJF+51a9P7z2QnFR5ASUSQ4KQE4CG9XmmUaasjHWwVCFcXTPtxeQpHTVN3eOoteP CcDrp9aCwiOn0pbPQ7QWhAZD5e4azFf6mx7rPfBZMMha4H8rb7DVDmNwxwIDAQAB o4ICCjCCAgYwHQYDVR0OBBYEFPnCT8yxZxKh+RwWuy10y80zfEooMB8GA1UdIwQY MBaAFM8d9mZ9o45XolsZRfpA5ZPlrfoAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvengzMlpuMmpqbGVpV3hsRi1rRGxrLVd0LWdBLmNlcjCB jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9lNTc4OWEtMTYwZC00ODk2LWEyNWEt OGRmMzYzMzdlNmJjLzEvMS1jSlB6TEZuRXFINUhCYTdMWFRMelROOFNpZy5yb2Ew gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0 b3J5L0RFRkFVTFQvZmYvZTU3ODlhLTE2MGQtNDg5Ni1hMjVhLThkZjM2MzM3ZTZi Yy8xL3p4MzJabjJqamxlaVd4bEYta0Rsay1XdC1nQS5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAS6XljAN BgkqhkiG9w0BAQsFAAOCAQEABsS4SPManlEzVYy48i7l7lQc2ZlQia/ORw8IfJU0 1EVL/anA1iw+EWzSYHQvX7A/rELcul4mIvuoPNK3bzBp7ie8KdKZh/KUwvv/J7Z5 oq1zhpsdcD2RWhmQCyRJhMHxM+QNxaIQ4D5jtaPvYMvN35q2eTMJ0qLGIVzqnLA4 INOSXrys8kBrhGI0gvp4jngTm8tFxkikKZxmm0UVM2aveDwuxr50rL52Wt9eqkHn O3oli+xTw+R/3mw2Rchy368Jp43aM2DtvB5IgDoQRi9eY+Q6ol5Vp9O60nbFan+M Str1CrgeGcJ9703Ok1eUTGN+kj797LKPeki+zHy34DsJEg== -----END CERTIFICATE-----Generated at Mon Jan 26 08:03:27 2026 by rpki-client