This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/4kNIwYTUrVA18oIc_9jtqMOd7CI.roa File: 4kNIwYTUrVA18oIc_9jtqMOd7CI.roa (raw, json) Hash identifier: L+g00yM7LCta/KmSbttT3iWTPXIIbIasMm1ZRHqbtYg= Subject key identifier: E2:43:48:C1:84:D4:AD:50:35:F2:82:1C:FF:D8:ED:A8:C3:9D:EC:22 Certificate issuer: /CN=6693f2b04eb85b6a2a6e21c03cfbb77287a45aff Certificate serial: 019B797E777EB72693354A9F520FF0E1118B Authority key identifier: 66:93:F2:B0:4E:B8:5B:6A:2A:6E:21:C0:3C:FB:B7:72:87:A4:5A:FF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/4kNIwYTUrVA18oIc_9jtqMOd7CI.roa Signing time: Thu 01 Jan 2026 12:18:09 +0000 ROA not before: Thu 01 Jan 2026 12:18:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 44227 IP address blocks: 156.67.15.0/24 maxlen: 24 2001:67c:978::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.crl rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.mft rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:7e:77:7e:b7:26:93:35:4a:9f:52:0f:f0:e1:11:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6693f2b04eb85b6a2a6e21c03cfbb77287a45aff Validity Not Before: Jan 1 12:18:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e24348c184d4ad5035f2821cffd8eda8c39dec22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:36:04:70:d5:73:5d:80:2c:39:90:dd:07:73: 67:69:14:27:61:1d:4a:f8:60:b2:e1:18:cc:56:18: b4:5b:d9:ef:ca:fe:f3:69:87:32:cb:cd:dc:3c:da: aa:4f:45:4e:4d:40:34:4f:4c:85:c8:5a:a5:35:4f: 9a:7c:11:8f:4c:c7:02:cb:5e:21:76:f1:0a:53:9d: 6e:fc:15:f2:ba:78:4c:b4:84:17:1d:73:2c:1c:a6: 43:6e:40:4a:94:1c:46:49:60:f9:ce:8a:9d:95:a8: 86:5c:4c:04:f6:dc:b6:83:35:a2:d2:e8:ee:2b:fb: 64:38:bb:06:af:03:27:37:45:7c:bd:0f:26:82:75: 4a:3e:d2:c3:d5:69:6a:04:4a:03:b6:12:4a:3a:66: 24:d0:a1:14:3b:15:3e:b4:e9:03:9c:41:1e:a3:5f: 36:74:84:89:98:9a:e7:81:1e:58:4f:06:74:a2:db: b9:b0:cd:ae:33:eb:a2:d1:be:dc:3e:51:44:4e:bc: 42:ef:c1:f0:fb:ab:38:37:ed:95:49:af:9d:64:4b: 1b:b7:cb:6a:3b:e8:8e:bf:29:aa:55:1e:e0:16:31: 4e:21:30:b6:5f:c9:dc:c8:51:fc:23:bb:d4:5c:51: 6e:19:f0:a4:f8:93:e3:c0:6e:c4:71:2e:f3:fa:f3: b0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:43:48:C1:84:D4:AD:50:35:F2:82:1C:FF:D8:ED:A8:C3:9D:EC:22 X509v3 Authority Key Identifier: keyid:66:93:F2:B0:4E:B8:5B:6A:2A:6E:21:C0:3C:FB:B7:72:87:A4:5A:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZpPysE64W2oqbiHAPPu3coekWv8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/4kNIwYTUrVA18oIc_9jtqMOd7CI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/307be8-5e11-4110-a1d3-3a9c0fbc8a0a/1/ZpPysE64W2oqbiHAPPu3coekWv8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 156.67.15.0/24 IPv6: 2001:67c:978::/48 Signature Algorithm: sha256WithRSAEncryption 85:d2:8c:7b:2c:ff:1a:78:ca:63:b2:b8:35:33:66:e8:9d:ed: 18:03:56:64:e3:19:42:75:48:62:37:62:b5:a8:ef:a1:25:dd: b0:82:93:18:cb:e6:49:45:79:6e:a2:69:7c:50:20:f5:cb:0d: 50:e3:5f:46:c3:33:39:25:43:a7:06:4c:50:22:64:81:eb:9d: 18:c8:5e:2e:27:3b:1e:2b:ac:ea:89:c2:4a:e8:36:11:c9:84: 55:fa:bd:02:3e:b2:88:dd:6d:bb:45:aa:b8:63:e0:08:ba:b7: 6d:90:bb:23:69:52:16:0b:e3:b6:0f:1a:8e:8b:20:c5:d2:ef: 05:b8:d9:b5:b8:54:fc:cd:69:21:81:5d:9b:29:e4:f6:eb:2c: 13:f6:35:42:72:d6:ce:34:62:c3:b4:79:d4:6d:3f:ea:ba:f3: a9:ba:85:f9:81:e0:e2:dd:e8:49:2e:1f:3d:0a:e5:2f:67:9f: d5:cb:08:ae:08:8c:6a:ae:f3:d7:e0:d4:6c:0e:ed:98:10:20: ac:f1:3d:77:99:e3:fb:e5:a2:88:fd:9e:90:3b:de:e0:e3:00: 83:c2:e4:8c:d0:db:4b:49:69:75:b0:f7:16:b2:58:19:59:68: 7b:2c:e8:3c:07:36:d9:e7:bc:da:f1:61:9e:0c:e5:e8:7b:0f: bd:69:da:32 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5fnd+tyaTNUqfUg/w4RGLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2OTNmMmIwNGViODViNmEyYTZlMjFjMDNjZmJiNzcyODdh NDVhZmYwHhcNMjYwMTAxMTIxODA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjQzNDhjMTg0ZDRhZDUwMzVmMjgyMWNmZmQ4ZWRhOGMzOWRlYzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DYEcNVzXYAsOZDdB3NnaRQnYR1K +GCy4RjMVhi0W9nvyv7zaYcyy83cPNqqT0VOTUA0T0yFyFqlNU+afBGPTMcCy14h dvEKU51u/BXyunhMtIQXHXMsHKZDbkBKlBxGSWD5zoqdlaiGXEwE9ty2gzWi0uju K/tkOLsGrwMnN0V8vQ8mgnVKPtLD1WlqBEoDthJKOmYk0KEUOxU+tOkDnEEeo182 dISJmJrngR5YTwZ0otu5sM2uM+ui0b7cPlFETrxC78Hw+6s4N+2VSa+dZEsbt8tq O+iOvymqVR7gFjFOITC2X8ncyFH8I7vUXFFuGfCk+JPjwG7EcS7z+vOw2wIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFOJDSMGE1K1QNfKCHP/Y7ajDnewiMB8GA1UdIwQY MBaAFGaT8rBOuFtqKm4hwDz7t3KHpFr/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnBQeXNFNjRXMm9xYmlIQVBQdTNjb2VrV3Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8zMDdiZTgtNWUxMS00MTEwLWExZDMt M2E5YzBmYmM4YTBhLzEvNGtOSXdZVFVyVkExOG9JY185anRxTU9kN0NJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8zMDdiZTgtNWUxMS00MTEwLWExZDMtM2E5YzBmYmM4YTBh LzEvWnBQeXNFNjRXMm9xYmlIQVBQdTNjb2VrV3Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAnEMPMA8E AgACMAkDBwAgAQZ8CXgwDQYJKoZIhvcNAQELBQADggEBAIXSjHss/xp4ymOyuDUz Zuid7RgDVmTjGUJ1SGI3YrWo76El3bCCkxjL5klFeW6iaXxQIPXLDVDjX0bDMzkl Q6cGTFAiZIHrnRjIXi4nOx4rrOqJwkroNhHJhFX6vQI+sojdbbtFqrhj4Ai6t22Q uyNpUhYL47YPGo6LIMXS7wW42bW4VPzNaSGBXZsp5PbrLBP2NUJy1s40YsO0edRt P+q686m6hfmB4OLd6EkuHz0K5S9nn9XLCK4IjGqu89fg1GwO7ZgQIKzxPXeZ4/vl ooj9npA73uDjAIPC5IzQ20tJaXWw9xayWBlZaHss6DwHNtnnvNrxYZ4M5eh7D71p 2jI= -----END CERTIFICATE-----Generated at Mon Feb 9 19:54:49 2026 by rpki-client