This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/96h6MiWp1wcqYfMCzF-xeLLhEXw.roa File: 96h6MiWp1wcqYfMCzF-xeLLhEXw.roa (raw, json) Hash identifier: GlwHj/dVbXF+2ZIP/5axQACN1GmbbfciiA08DFujCCQ= Subject key identifier: F7:A8:7A:32:25:A9:D7:07:2A:61:F3:02:CC:5F:B1:78:B2:E1:11:7C Certificate issuer: /CN=719e59b5017bfe634411949eff2d70ba0a07c540 Certificate serial: 019B7D5AE7EA95782F03DEAD147D30CDD645 Authority key identifier: 71:9E:59:B5:01:7B:FE:63:44:11:94:9E:FF:2D:70:BA:0A:07:C5:40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/96h6MiWp1wcqYfMCzF-xeLLhEXw.roa Signing time: Fri 02 Jan 2026 06:17:48 +0000 ROA not before: Fri 02 Jan 2026 06:17:48 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12993 IP address blocks: 46.28.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.mft rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Jan 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5a:e7:ea:95:78:2f:03:de:ad:14:7d:30:cd:d6:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=719e59b5017bfe634411949eff2d70ba0a07c540 Validity Not Before: Jan 2 06:17:48 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f7a87a3225a9d7072a61f302cc5fb178b2e1117c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f8:36:f0:1b:73:92:f6:e0:38:20:b9:a3:c7: 0b:5c:2a:46:16:d1:80:73:46:a9:2b:eb:bc:fb:65: c1:d7:f8:28:6d:81:e4:78:87:ea:f4:32:f0:1b:0e: 78:98:4c:cb:21:5f:69:83:f2:00:0a:27:ba:59:b5: 98:41:b3:98:37:75:48:e3:a4:49:ca:95:27:ce:d1: e9:a9:54:0e:d6:93:5f:e6:b4:65:a0:f8:d2:cd:18: 0a:8c:b4:cf:cd:37:3f:1b:c0:15:70:19:68:9e:03: a6:16:fb:7b:72:bc:0b:ca:62:eb:a0:5d:90:72:46: c7:fa:39:53:ff:e9:f8:5a:6d:7a:43:21:f8:73:76: 90:95:c9:c1:51:09:f7:52:66:8d:f3:80:5b:cd:44: c5:a2:0a:28:ec:8a:2e:31:36:84:62:40:16:d0:4b: 42:27:86:e1:27:f3:56:fc:a5:c8:01:7c:f4:c4:c3: 67:d8:a7:05:be:ef:9a:8d:f4:64:ec:9d:54:07:cc: 7c:40:4c:e8:0b:ac:fe:76:af:24:8e:66:9a:22:d0: df:d4:dc:70:8b:fb:1e:db:c9:14:45:34:bd:f0:81: a3:a3:58:13:89:42:18:34:01:f5:d6:79:20:0c:08: 4f:fa:66:b8:88:79:61:4a:2e:9f:a5:c3:45:14:7f: 5c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:A8:7A:32:25:A9:D7:07:2A:61:F3:02:CC:5F:B1:78:B2:E1:11:7C X509v3 Authority Key Identifier: keyid:71:9E:59:B5:01:7B:FE:63:44:11:94:9E:FF:2D:70:BA:0A:07:C5:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/96h6MiWp1wcqYfMCzF-xeLLhEXw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/1f9e6c-e6b8-4ad4-9941-f46f9d674f6c/1/cZ5ZtQF7_mNEEZSe_y1wugoHxUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 46.28.56.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:83:1c:a7:9d:40:64:6e:06:9a:98:5c:6a:76:eb:77:41:08: 21:96:ad:f2:28:cd:cc:a6:17:b7:d6:f5:5a:09:78:d9:f0:31: 31:7e:52:43:92:6b:c5:35:b2:5d:2b:00:d7:6d:78:7d:4f:46: 47:4c:c6:75:71:50:22:81:8e:a6:e1:62:6d:b3:f7:c8:99:d5: ef:37:1b:ce:f0:3e:b2:25:94:9b:e9:5b:7f:2f:c8:d7:e7:3c: fa:49:41:3e:cb:0d:39:fc:b3:6b:63:4c:52:20:03:60:66:08: ed:dc:e8:82:5e:c2:a1:82:31:64:ae:ce:69:e2:93:58:4d:54: aa:0b:94:f3:98:19:05:51:04:ac:a8:24:23:38:47:06:68:2a: 1d:7c:da:84:e8:23:3d:9c:a5:55:62:45:a6:30:66:37:d7:6f: 37:ee:aa:f5:d1:3a:93:87:93:9d:8e:05:e8:e0:d2:c8:0c:d4: 83:6f:b2:db:19:38:2f:d6:b3:57:43:c1:54:b1:58:cf:86:a3: d5:9f:b8:63:c8:80:75:47:8e:ce:e1:af:62:5a:e2:13:cd:da: 0f:c7:bf:43:17:5f:83:ac:73:9d:3c:01:a5:00:9c:a5:36:5d: d1:67:ae:8c:3a:ae:e8:f9:5d:0e:95:44:93:4e:6a:43:46:c4: 5d:27:7b:70 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9WufqlXgvA96tFH0wzdZFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxOWU1OWI1MDE3YmZlNjM0NDExOTQ5ZWZmMmQ3MGJhMGEw N2M1NDAwHhcNMjYwMTAyMDYxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmN2E4N2EzMjI1YTlkNzA3MmE2MWYzMDJjYzVmYjE3OGIyZTExMTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfg28BtzkvbgOCC5o8cLXCpGFtGA c0apK+u8+2XB1/gobYHkeIfq9DLwGw54mEzLIV9pg/IACie6WbWYQbOYN3VI46RJ ypUnztHpqVQO1pNf5rRloPjSzRgKjLTPzTc/G8AVcBlongOmFvt7crwLymLroF2Q ckbH+jlT/+n4Wm16QyH4c3aQlcnBUQn3UmaN84BbzUTFogoo7IouMTaEYkAW0EtC J4bhJ/NW/KXIAXz0xMNn2KcFvu+ajfRk7J1UB8x8QEzoC6z+dq8kjmaaItDf1Nxw i/se28kURTS98IGjo1gTiUIYNAH11nkgDAhP+ma4iHlhSi6fpcNFFH9chQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFPeoejIlqdcHKmHzAsxfsXiy4RF8MB8GA1UdIwQY MBaAFHGeWbUBe/5jRBGUnv8tcLoKB8VAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1o1WnRRRjdfbU5FRVpTZV95MXd1Z29IeFVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8xZjllNmMtZTZiOC00YWQ0LTk5NDEt ZjQ2ZjlkNjc0ZjZjLzEvOTZoNk1pV3Axd2NxWWZNQ3pGLXhlTExoRVh3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8xZjllNmMtZTZiOC00YWQ0LTk5NDEtZjQ2ZjlkNjc0ZjZj LzEvY1o1WnRRRjdfbU5FRVpTZV95MXd1Z29IeFVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALhw4MA0G CSqGSIb3DQEBCwUAA4IBAQCOgxynnUBkbgaamFxqdut3QQghlq3yKM3Mphe31vVa CXjZ8DExflJDkmvFNbJdKwDXbXh9T0ZHTMZ1cVAigY6m4WJts/fImdXvNxvO8D6y JZSb6Vt/L8jX5zz6SUE+yw05/LNrY0xSIANgZgjt3OiCXsKhgjFkrs5p4pNYTVSq C5TzmBkFUQSsqCQjOEcGaCodfNqE6CM9nKVVYkWmMGY312837qr10TqTh5OdjgXo 4NLIDNSDb7LbGTgv1rNXQ8FUsVjPhqPVn7hjyIB1R47O4a9iWuITzdoPx79DF1+D rHOdPAGlAJylNl3RZ66MOq7o+V0OlUSTTmpDRsRdJ3tw -----END CERTIFICATE-----Generated at Mon Jan 12 03:10:50 2026 by rpki-client