This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/aM81JrdxO-yRrVlKdRuDInz7Xik.roa File: aM81JrdxO-yRrVlKdRuDInz7Xik.roa (raw, json) Hash identifier: m45p2Y1vKc3tda0x+KiQ3qLXf93450FPSTY5dkd5d+0= Subject key identifier: 68:CF:35:26:B7:71:3B:EC:91:AD:59:4A:75:1B:83:22:7C:FB:5E:29 Certificate issuer: /CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1 Certificate serial: 019B79EC2D09E291DD3C31B2492F1532E904 Authority key identifier: 07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/aM81JrdxO-yRrVlKdRuDInz7Xik.roa Signing time: Thu 01 Jan 2026 14:17:59 +0000 ROA not before: Thu 01 Jan 2026 14:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204106 IP address blocks: 46.20.202.0/23 maxlen: 23 46.20.202.0/24 maxlen: 24 46.20.203.0/24 maxlen: 24 77.247.198.0/24 maxlen: 24 2a13:1b00::/29 maxlen: 29 2a13:1b00:1::/48 maxlen: 48 2a13:1b00:1000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.mft rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 03:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ec:2d:09:e2:91:dd:3c:31:b2:49:2f:15:32:e9:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07266adfb18b189f3dc4d3be6dc596254be5c9b1 Validity Not Before: Jan 1 14:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68cf3526b7713bec91ad594a751b83227cfb5e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:ce:1b:eb:ba:5e:ec:40:06:54:b1:0d:87:5c: af:27:fe:88:e9:fe:6e:41:b9:7a:88:da:a8:e8:65: cc:72:a9:1a:b5:1e:81:80:fc:2e:e1:58:53:03:f6: 24:b0:64:33:ad:84:6d:41:0b:ca:a5:ad:ab:13:a5: 53:c6:3e:c8:d1:27:0a:a8:85:71:66:33:24:30:c4: 1a:4b:e0:4d:0a:ce:40:78:0e:95:a0:ea:ce:8b:f9: 0e:d9:14:2a:45:fa:0e:c5:8b:6e:db:e4:b0:e8:0f: 2d:e0:c8:c1:18:40:9a:a4:fa:27:05:a4:46:23:61: 5b:93:55:fe:51:6a:41:3a:29:51:8c:6a:66:08:d2: da:e3:e7:90:0c:7a:0c:27:72:93:26:39:af:0f:9e: f9:d2:ba:24:93:69:e1:3b:d0:26:88:4b:9a:3c:f0: 0f:7a:01:ae:fc:0d:51:04:81:e0:b7:30:e9:14:ec: 94:bd:8b:b7:a8:ad:aa:28:06:7b:67:30:a8:d1:c2: ee:15:63:cf:38:20:91:50:53:ea:80:0b:cd:2d:d4: 2f:99:9c:21:10:ed:89:b0:8a:78:b9:95:c1:d3:8d: 93:e4:9e:a6:b2:8d:bf:fa:84:70:56:e2:4a:9d:de: 25:4a:98:4d:d3:1c:ce:17:9f:9f:b1:c1:c1:30:d5: 9c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:CF:35:26:B7:71:3B:EC:91:AD:59:4A:75:1B:83:22:7C:FB:5E:29 X509v3 Authority Key Identifier: keyid:07:26:6A:DF:B1:8B:18:9F:3D:C4:D3:BE:6D:C5:96:25:4B:E5:C9:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByZq37GLGJ89xNO-bcWWJUvlybE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/aM81JrdxO-yRrVlKdRuDInz7Xik.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f57ca3-4ff1-4064-9df7-3da05388e9ae/1/ByZq37GLGJ89xNO-bcWWJUvlybE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.20.202.0/23 77.247.198.0/24 IPv6: 2a13:1b00::/29 Signature Algorithm: sha256WithRSAEncryption 86:3f:10:fe:ab:47:d5:97:13:67:4c:1f:47:c1:3b:d7:a6:bc: 86:83:dc:a4:3e:b2:9d:fd:d2:a7:8c:b9:ea:30:94:78:91:ef: e4:73:8a:1d:7e:30:6c:ef:e1:57:01:72:fb:d7:66:5f:52:ed: 14:4c:a5:51:18:c4:26:f3:5b:31:da:0e:f8:3b:3b:ec:74:71: 39:e1:e9:5c:98:9c:15:6c:40:c5:a7:d3:c8:a7:46:16:b5:4f: 8a:61:4b:bd:43:48:9f:5a:35:3a:62:14:35:27:35:36:30:f2: e0:0a:9e:7a:f8:57:66:ab:35:b3:4e:41:0e:7c:5d:5e:00:82: 4d:61:91:7e:06:a4:00:97:36:c6:86:90:36:f9:19:88:75:d4: b9:7a:69:b9:3b:92:7b:37:eb:41:5b:56:98:d2:54:d2:f0:33: 3d:d2:db:6d:c3:9d:0d:60:68:d9:bb:e2:1c:3b:a4:8f:bd:87: cf:2e:ff:d3:de:0d:02:86:62:eb:1d:62:a3:ce:be:66:6e:ad: 33:32:2a:c6:0c:1d:5a:d8:87:e8:6f:ca:1d:eb:cb:b4:c1:66: 07:4b:04:2e:8e:a4:bd:3e:0a:24:d7:b3:07:b2:74:15:78:da: 12:8b:dd:8f:bb:36:92:21:6e:f2:14:e5:89:91:64:bd:23:10: db:54:c5:37 -----BEGIN CERTIFICATE----- MIIFEjCCA/qgAwIBAgISAZt57C0J4pHdPDGySS8VMukEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3MjY2YWRmYjE4YjE4OWYzZGM0ZDNiZTZkYzU5NjI1NGJl NWM5YjEwHhcNMjYwMTAxMTQxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGNmMzUyNmI3NzEzYmVjOTFhZDU5NGE3NTFiODMyMjdjZmI1ZTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+s4b67pe7EAGVLENh1yvJ/6I6f5u Qbl6iNqo6GXMcqkatR6BgPwu4VhTA/YksGQzrYRtQQvKpa2rE6VTxj7I0ScKqIVx ZjMkMMQaS+BNCs5AeA6VoOrOi/kO2RQqRfoOxYtu2+Sw6A8t4MjBGECapPonBaRG I2Fbk1X+UWpBOilRjGpmCNLa4+eQDHoMJ3KTJjmvD5750rokk2nhO9AmiEuaPPAP egGu/A1RBIHgtzDpFOyUvYu3qK2qKAZ7ZzCo0cLuFWPPOCCRUFPqgAvNLdQvmZwh EO2JsIp4uZXB042T5J6mso2/+oRwVuJKnd4lSphN0xzOF5+fscHBMNWcfQIDAQAB o4ICHjCCAhowHQYDVR0OBBYEFGjPNSa3cTvska1ZSnUbgyJ8+14pMB8GA1UdIwQY MBaAFAcmat+xixifPcTTvm3FliVL5cmxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnlacTM3R0xHSjg5eE5PLWJjV1dKVXZseWJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9mNTdjYTMtNGZmMS00MDY0LTlkZjct M2RhMDUzODhlOWFlLzEvYU04MUpyZHhPLXlSclZsS2RSdURJbno3WGlrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9mNTdjYTMtNGZmMS00MDY0LTlkZjctM2RhMDUzODhlOWFl LzEvQnlacTM3R0xHSjg5eE5PLWJjV1dKVXZseWJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBLhTKAwQA TffGMA0EAgACMAcDBQMqExsAMA0GCSqGSIb3DQEBCwUAA4IBAQCGPxD+q0fVlxNn TB9HwTvXpryGg9ykPrKd/dKnjLnqMJR4ke/kc4odfjBs7+FXAXL712ZfUu0UTKVR GMQm81sx2g74OzvsdHE54elcmJwVbEDFp9PIp0YWtU+KYUu9Q0ifWjU6YhQ1JzU2 MPLgCp56+FdmqzWzTkEOfF1eAIJNYZF+BqQAlzbGhpA2+RmIddS5emm5O5J7N+tB W1aY0lTS8DM90tttw50NYGjZu+IcO6SPvYfPLv/T3g0ChmLrHWKjzr5mbq0zMirG DB1a2Ifob8od68u0wWYHSwQujqS9Pgok17MHsnQVeNoSi92PuzaSIW7yFOWJkWS9 IxDbVMU3 -----END CERTIFICATE-----Generated at Fri Jan 2 11:34:14 2026 by rpki-client