This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/9i5swc1J4tp7c1o23nouETORP2E.roa File: 9i5swc1J4tp7c1o23nouETORP2E.roa (raw, json) Hash identifier: 7qCRSDMfyDVi133KELa0mQ4/QYn5UTkZYhIQJwFytHg= Subject key identifier: F6:2E:6C:C1:CD:49:E2:DA:7B:73:5A:36:DE:7A:2E:11:33:91:3F:61 Certificate issuer: /CN=106c0f395410f286c8576576d7d2f78304b5e83a Certificate serial: 019B7F137B30D1032418B212FFD61EE8333C Authority key identifier: 10:6C:0F:39:54:10:F2:86:C8:57:65:76:D7:D2:F7:83:04:B5:E8:3A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/9i5swc1J4tp7c1o23nouETORP2E.roa Signing time: Fri 02 Jan 2026 14:19:01 +0000 ROA not before: Fri 02 Jan 2026 14:19:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50802 IP address blocks: 46.151.104.0/21 maxlen: 24 195.135.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.crl rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.mft rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Jan 2026 11:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:13:7b:30:d1:03:24:18:b2:12:ff:d6:1e:e8:33:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=106c0f395410f286c8576576d7d2f78304b5e83a Validity Not Before: Jan 2 14:19:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f62e6cc1cd49e2da7b735a36de7a2e1133913f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:36:98:ef:0f:e2:aa:fc:99:3e:bc:ed:a1:1e: 62:10:92:7a:00:b5:df:ba:79:ad:49:e4:37:0a:f5: 25:09:37:3c:d6:51:0b:a4:45:a5:fa:e9:e7:78:f9: 96:17:7f:b5:1b:a9:c1:d3:ee:3f:af:d9:69:32:ef: b7:28:07:d6:ec:ba:94:0c:77:6c:c3:e4:78:d3:da: d5:b7:f4:f1:64:ce:69:2a:7f:c8:21:09:ba:86:4b: 57:b2:15:2f:18:f6:e4:b6:32:70:ea:a5:a7:9d:46: db:f4:7f:5d:72:68:d3:ec:b2:81:51:37:7c:14:19: 0e:2d:6a:a4:58:75:57:52:31:2b:d0:83:2d:4b:c6: d5:ab:6c:66:b7:7a:8b:39:6e:88:b7:64:d7:ff:19: fa:2f:4a:b3:c0:02:ba:d9:b2:85:5b:c1:3e:52:36: ab:fe:c9:35:23:52:0b:a1:c2:b7:45:b9:07:8a:f5: 32:34:61:26:0b:fc:7f:bd:7d:f0:0f:a8:c9:5d:e1: 8b:43:3d:80:99:7e:4f:fb:2a:42:d6:ad:70:c3:4d: 8f:dd:7b:36:1b:89:09:ed:c5:c8:7c:6b:63:61:60: c2:86:0c:89:55:71:b7:c1:d0:1f:ad:1f:d8:23:64: 9c:31:ab:8b:bd:94:3d:6d:52:ac:5a:b0:50:f2:7e: e4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:2E:6C:C1:CD:49:E2:DA:7B:73:5A:36:DE:7A:2E:11:33:91:3F:61 X509v3 Authority Key Identifier: keyid:10:6C:0F:39:54:10:F2:86:C8:57:65:76:D7:D2:F7:83:04:B5:E8:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EGwPOVQQ8obIV2V219L3gwS16Do.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/9i5swc1J4tp7c1o23nouETORP2E.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/393d36-77bf-4ae2-9324-340f433584d2/1/EGwPOVQQ8obIV2V219L3gwS16Do.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.151.104.0/21 195.135.240.0/22 Signature Algorithm: sha256WithRSAEncryption 47:23:db:78:3e:bd:f3:90:74:a4:a6:ea:4c:45:b4:67:84:ec: 07:02:01:b5:90:e2:fa:a5:24:59:6e:6a:f7:fc:51:b5:73:31: 66:52:fc:ae:82:1b:0f:f2:de:68:61:9a:79:f6:71:3e:17:30: e5:27:2d:cd:57:09:a5:35:f2:bb:8d:de:07:95:66:7c:aa:73: 3f:70:dc:87:d3:c6:94:d5:77:07:74:f2:13:8a:a1:2e:b3:db: fc:48:35:5b:9d:04:ae:f9:4c:69:9f:7c:78:bb:3f:8c:af:b4: b2:4e:ca:67:fc:18:68:13:45:e0:c6:ca:74:5b:38:0b:cf:a1: b6:cb:4d:0f:7b:c7:49:6d:0a:43:a6:71:3a:91:95:ae:01:5c: e9:e3:0e:07:e4:51:db:5e:c7:10:c0:71:71:51:75:2a:83:a6: ca:71:c8:07:21:3c:c0:15:6f:0d:4b:66:c0:e2:be:1b:c3:c7: 6e:9d:e9:d2:51:27:4e:53:70:af:ac:1a:19:c0:aa:6c:1b:9a: db:5a:b1:ab:33:f6:12:74:7a:49:6b:6c:38:0d:6a:65:9f:4c: 11:bb:a3:7c:77:c7:01:56:99:9f:bf:e9:7b:70:b8:8d:57:55: db:c8:28:be:c1:76:21:0a:07:bb:6b:eb:df:d6:cc:78:4a:a9: 23:1e:34:1d -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/E3sw0QMkGLIS/9Ye6DM8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEwNmMwZjM5NTQxMGYyODZjODU3NjU3NmQ3ZDJmNzgzMDRi NWU4M2EwHhcNMjYwMTAyMTQxOTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNjJlNmNjMWNkNDllMmRhN2I3MzVhMzZkZTdhMmUxMTMzOTEzZjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zaY7w/iqvyZPrztoR5iEJJ6ALXf unmtSeQ3CvUlCTc81lELpEWl+unnePmWF3+1G6nB0+4/r9lpMu+3KAfW7LqUDHds w+R409rVt/TxZM5pKn/IIQm6hktXshUvGPbktjJw6qWnnUbb9H9dcmjT7LKBUTd8 FBkOLWqkWHVXUjEr0IMtS8bVq2xmt3qLOW6It2TX/xn6L0qzwAK62bKFW8E+Ujar /sk1I1ILocK3RbkHivUyNGEmC/x/vX3wD6jJXeGLQz2AmX5P+ypC1q1ww02P3Xs2 G4kJ7cXIfGtjYWDChgyJVXG3wdAfrR/YI2ScMauLvZQ9bVKsWrBQ8n7kTQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPYubMHNSeLae3NaNt56LhEzkT9hMB8GA1UdIwQY MBaAFBBsDzlUEPKGyFdldtfS94MEteg6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRUd3UE9WUVE4b2JJVjJWMjE5TDNnd1MxNkRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zOTNkMzYtNzdiZi00YWUyLTkzMjQt MzQwZjQzMzU4NGQyLzEvOWk1c3djMUo0dHA3YzFvMjNub3VFVE9SUDJFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8zOTNkMzYtNzdiZi00YWUyLTkzMjQtMzQwZjQzMzU4NGQy LzEvRUd3UE9WUVE4b2JJVjJWMjE5TDNnd1MxNkRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDLpdoAwQC w4fwMA0GCSqGSIb3DQEBCwUAA4IBAQBHI9t4Pr3zkHSkpupMRbRnhOwHAgG1kOL6 pSRZbmr3/FG1czFmUvyughsP8t5oYZp59nE+FzDlJy3NVwmlNfK7jd4HlWZ8qnM/ cNyH08aU1XcHdPITiqEus9v8SDVbnQSu+Uxpn3x4uz+Mr7SyTspn/BhoE0Xgxsp0 WzgLz6G2y00Pe8dJbQpDpnE6kZWuAVzp4w4H5FHbXscQwHFxUXUqg6bKccgHITzA FW8NS2bA4r4bw8dunenSUSdOU3CvrBoZwKpsG5rbWrGrM/YSdHpJa2w4DWpln0wR u6N8d8cBVpmfv+l7cLiNV1XbyCi+wXYhCge7a+vf1sx4SqkjHjQd -----END CERTIFICATE-----Generated at Wed Jan 7 14:41:23 2026 by rpki-client