This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/4rApJRlRNhbsTXM3GNtTv_-FUaE.roa File: 4rApJRlRNhbsTXM3GNtTv_-FUaE.roa (raw, json) Hash identifier: MLIFEUQfYL+dU3SVCCpJ59J8zRwtwP9iXKmocqpNGdw= Subject key identifier: E2:B0:29:25:19:51:36:16:EC:4D:73:37:18:DB:53:BF:FF:85:51:A1 Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Certificate serial: 019B7F1599FA7832AAECA219FA03E1A71672 Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/4rApJRlRNhbsTXM3GNtTv_-FUaE.roa Signing time: Fri 02 Jan 2026 14:21:20 +0000 ROA not before: Fri 02 Jan 2026 14:21:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61317 IP address blocks: 62.56.208.0/21 maxlen: 24 213.170.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 05:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:15:99:fa:78:32:aa:ec:a2:19:fa:03:e1:a7:16:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6 Validity Not Before: Jan 2 14:21:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2b0292519513616ec4d733718db53bfff8551a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d9:71:c9:be:6e:49:47:c7:3a:2c:16:58:09: 7e:7d:f4:6a:4c:84:2e:97:ef:a5:8e:75:6d:3d:74: 15:0b:ac:c4:cf:84:ed:92:6f:cb:ff:c3:8d:26:2b: 3a:f5:8f:db:e0:f5:c0:a4:0e:34:ba:fa:c0:d3:a4: d4:12:37:b7:e9:0e:eb:71:82:85:8c:f9:a2:1c:bf: 9d:9b:79:99:8a:10:65:1a:61:5d:46:fa:41:65:05: 68:73:ef:3b:07:68:ee:63:2c:19:0b:54:c3:71:b9: 3d:0e:4b:69:a5:65:72:9f:17:9d:a3:af:ed:e8:c0: aa:22:2e:68:f8:4e:27:09:7e:1a:01:08:11:40:15: 08:7b:7b:2e:c7:9e:7c:3d:f0:8e:a1:cb:15:04:76: 4c:56:1e:f5:f4:11:14:0a:d5:de:8e:16:82:af:d4: 4a:bf:94:d1:42:58:5b:a8:b7:aa:d1:28:d1:a1:f1: bf:dc:d5:3f:45:02:28:48:3f:3e:1d:21:38:2e:25: a9:19:8b:df:d2:4b:6a:d5:55:8a:e7:17:0c:80:c8: 9c:15:07:83:e2:fb:b0:01:99:e9:dc:c0:1f:5d:62: 65:39:6e:fe:0e:11:8f:de:40:e4:a2:f7:fd:9f:1d: d6:5a:9e:2f:d2:73:c1:86:f1:69:4e:e8:5f:7b:73: 78:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:B0:29:25:19:51:36:16:EC:4D:73:37:18:DB:53:BF:FF:85:51:A1 X509v3 Authority Key Identifier: keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/4rApJRlRNhbsTXM3GNtTv_-FUaE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.56.208.0/21 213.170.145.0/24 Signature Algorithm: sha256WithRSAEncryption 09:c5:94:48:b9:0a:05:f8:8d:a9:c4:e3:18:62:19:d5:f5:4a: 9f:6f:ca:a9:49:18:1b:c8:0a:b5:3b:a9:73:ac:1e:bb:63:48: 5b:92:e6:2c:d8:da:3e:b7:3d:98:9f:db:cb:eb:01:70:a7:1d: e7:8b:73:3c:d3:99:55:fe:94:02:58:f4:62:16:42:e4:69:69: 08:5f:c9:75:4f:aa:54:ff:6a:7b:2e:59:67:dc:dd:08:4a:24: d7:ca:30:83:de:3a:9c:d7:5b:7c:99:66:3f:a5:d8:c7:79:ef: b4:c5:91:3a:82:f2:c5:22:51:c9:a0:49:ba:30:2c:08:ec:3a: 82:35:37:d3:d5:e1:2e:e0:77:d4:e2:46:47:b7:72:74:87:9e: e0:e6:b7:50:c5:1e:4c:88:b6:da:74:7f:85:3e:51:d1:09:f1: 30:a0:71:99:82:6d:1d:94:c5:8b:f7:c1:e7:b4:25:da:0d:0e: 1e:c1:9f:e0:a4:6c:c0:78:a2:39:3c:76:53:a9:9a:78:2b:3e: 79:8f:0b:9a:ab:a1:e7:37:ac:c7:c1:80:81:aa:37:ec:d1:23: 86:eb:5e:a1:dd:b6:1a:c5:21:66:41:7c:91:3f:66:7f:af:7a: e4:51:bc:65:cd:20:d7:62:6a:03:da:56:01:36:d0:3c:10:f5: 51:26:d4:d0 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/FZn6eDKq7KIZ+gPhpxZyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA1NTE2MDViNjc1ZWNlNGUwZmNlNzE3NWFlMzFhOTNmYTgy NzJiYTYwHhcNMjYwMTAyMTQyMTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmIwMjkyNTE5NTEzNjE2ZWM0ZDczMzcxOGRiNTNiZmZmODU1MWExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNlxyb5uSUfHOiwWWAl+ffRqTIQu l++ljnVtPXQVC6zEz4Ttkm/L/8ONJis69Y/b4PXApA40uvrA06TUEje36Q7rcYKF jPmiHL+dm3mZihBlGmFdRvpBZQVoc+87B2juYywZC1TDcbk9DktppWVynxedo6/t 6MCqIi5o+E4nCX4aAQgRQBUIe3sux558PfCOocsVBHZMVh719BEUCtXejhaCr9RK v5TRQlhbqLeq0SjRofG/3NU/RQIoSD8+HSE4LiWpGYvf0ktq1VWK5xcMgMicFQeD 4vuwAZnp3MAfXWJlOW7+DhGP3kDkovf9nx3WWp4v0nPBhvFpTuhfe3N40wIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFOKwKSUZUTYW7E1zNxjbU7//hVGhMB8GA1UdIwQY MBaAFAVRYFtnXs5OD85xda4xqT+oJyumMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEt MDc3OWY0OGVjZWEwLzEvNHJBcEpSbFJOaGJzVFhNM0dOdFR2Xy1GVWFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8yOGVhNDUtN2QzMC00NmRmLThmMmEtMDc3OWY0OGVjZWEw LzEvQlZGZ1cyZGV6azRQem5GMXJqR3BQNmduSzZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDPjjQAwQA 1aqRMA0GCSqGSIb3DQEBCwUAA4IBAQAJxZRIuQoF+I2pxOMYYhnV9Uqfb8qpSRgb yAq1O6lzrB67Y0hbkuYs2No+tz2Yn9vL6wFwpx3ni3M805lV/pQCWPRiFkLkaWkI X8l1T6pU/2p7Llln3N0ISiTXyjCD3jqc11t8mWY/pdjHee+0xZE6gvLFIlHJoEm6 MCwI7DqCNTfT1eEu4HfU4kZHt3J0h57g5rdQxR5MiLbadH+FPlHRCfEwoHGZgm0d lMWL98HntCXaDQ4ewZ/gpGzAeKI5PHZTqZp4Kz55jwuaq6HnN6zHwYCBqjfs0SOG 616h3bYaxSFmQXyRP2Z/r3rkUbxlzSDXYmoD2lYBNtA8EPVRJtTQ -----END CERTIFICATE-----Generated at Thu Jan 8 12:59:39 2026 by rpki-client