This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/47kmCeRrOSuTiRf9KbP-bQ4xcvg.roa File: 47kmCeRrOSuTiRf9KbP-bQ4xcvg.roa (raw, json) Hash identifier: YdTnLBDJBwud/CI+A9P6w/44aDWKDqoD0m7YpWZRsc8= Subject key identifier: E3:B9:26:09:E4:6B:39:2B:93:89:17:FD:29:B3:FE:6D:0E:31:72:F8 Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Certificate serial: 019C099ADFEF045EEB120BED1CADEF994818 Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/47kmCeRrOSuTiRf9KbP-bQ4xcvg.roa Signing time: Thu 29 Jan 2026 11:54:30 +0000 ROA not before: Thu 29 Jan 2026 11:54:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 8881 IP address blocks: 109.121.42.0/24 maxlen: 24 188.255.231.0/24 maxlen: 24 188.255.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 09:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:09:9a:df:ef:04:5e:eb:12:0b:ed:1c:ad:ef:99:48:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915 Validity Not Before: Jan 29 11:54:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3b92609e46b392b938917fd29b3fe6d0e3172f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:4a:91:66:1a:64:fb:a9:e5:d4:61:29:cb:ef: a1:04:14:13:c2:9b:0c:d9:6f:64:81:a5:90:1b:80: 9b:3a:bc:1c:7c:f5:9d:82:5c:1e:3e:94:6a:9b:a6: e0:e8:fa:35:77:cc:89:2c:e5:13:91:c9:27:c8:10: 8c:92:0d:1f:80:8b:15:0d:b7:5d:12:76:2c:f4:ac: b5:17:37:eb:cb:7a:c7:2d:c3:63:7b:11:85:93:a9: ff:47:d7:84:b4:94:7d:44:8e:05:d5:8c:5e:21:f1: 0c:77:1e:02:e3:56:d9:47:a9:4c:e7:7b:e1:8f:2d: a2:ef:47:e9:92:54:17:9a:b5:28:c4:f2:03:ee:a6: 9e:2f:ee:9d:ec:20:06:a9:4f:0e:9f:8c:6a:cb:8f: e2:cd:41:b3:dc:cc:a4:1b:78:5b:bc:48:08:c5:1b: dd:90:93:c8:a3:36:db:92:18:60:bc:84:b2:df:96: ce:88:f1:ea:1e:2b:1b:ff:f5:3e:45:38:4c:20:ce: 69:96:1c:fe:11:24:34:5f:d0:46:b9:da:15:f2:5d: 3a:f8:89:e3:de:f6:c6:47:d7:f7:50:5f:d2:5f:ae: ec:cc:16:05:98:df:3c:13:6b:19:5c:77:f2:ad:a4: f1:dd:a5:b3:0b:03:92:96:79:4f:d6:47:88:b1:d0: 59:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B9:26:09:E4:6B:39:2B:93:89:17:FD:29:B3:FE:6D:0E:31:72:F8 X509v3 Authority Key Identifier: keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/47kmCeRrOSuTiRf9KbP-bQ4xcvg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 109.121.42.0/24 188.255.231.0/24 188.255.253.0/24 Signature Algorithm: sha256WithRSAEncryption 84:ef:c9:88:d1:69:9c:ad:22:2a:52:f8:c6:ac:7f:6f:d0:75: 0a:5d:7f:60:e8:36:c2:3f:fe:17:27:45:ba:94:dd:72:7e:59: d2:4c:96:f2:c5:cc:a9:9c:d5:cc:ff:d7:0b:b4:90:cb:8b:e3: b9:17:2d:99:b3:93:e6:5f:cf:e8:ca:d2:57:71:a9:e7:49:df: 06:e4:80:59:a9:3c:15:16:2d:8b:73:de:5a:33:10:a1:d9:98: f2:5f:50:54:db:2e:ef:3d:89:83:34:40:a5:cf:30:66:bc:f8: b0:e5:0c:c6:3e:0c:72:e2:10:2a:25:10:7e:98:dd:69:9a:77: 7e:e1:38:3a:7d:04:f4:3a:fd:0a:cc:c6:51:60:9c:77:c2:c6: 19:35:11:fc:e6:71:8b:ce:7a:fd:2e:91:4e:d9:11:38:a7:77: 76:1d:03:fd:bf:c0:75:77:e5:70:e7:d3:4b:84:bf:4c:4c:9e: 66:ce:b0:f8:81:7a:1a:f5:5a:fb:d8:80:43:c0:b4:60:73:01: 42:8b:5f:4c:11:7b:4d:1c:6f:ea:33:43:8e:26:4b:92:a3:0b: 6b:70:7c:9a:84:81:1d:69:45:0b:20:52:f9:c6:45:ba:ac:e2: 0c:32:66:e9:22:89:ee:97:25:06:5f:86:87:51:81:89:e2:6e: 69:65:38:a2 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZwJmt/vBF7rEgvtHK3vmUgYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj N2U5MTUwHhcNMjYwMTI5MTE1NDMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2I5MjYwOWU0NmIzOTJiOTM4OTE3ZmQyOWIzZmU2ZDBlMzE3MmY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kqRZhpk+6nl1GEpy++hBBQTwpsM 2W9kgaWQG4CbOrwcfPWdglwePpRqm6bg6Po1d8yJLOUTkcknyBCMkg0fgIsVDbdd EnYs9Ky1Fzfry3rHLcNjexGFk6n/R9eEtJR9RI4F1YxeIfEMdx4C41bZR6lM53vh jy2i70fpklQXmrUoxPID7qaeL+6d7CAGqU8On4xqy4/izUGz3MykG3hbvEgIxRvd kJPIozbbkhhgvISy35bOiPHqHisb//U+RThMIM5plhz+ESQ0X9BGudoV8l06+Inj 3vbGR9f3UF/SX67szBYFmN88E2sZXHfyraTx3aWzCwOSlnlP1keIsdBZhwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFOO5Jgnkazkrk4kX/Smz/m0OMXL4MB8GA1UdIwQY MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt ZmFlNWRiZWQzYjFiLzEvNDdrbUNlUnJPU3VUaVJmOUtiUC1iUTR4Y3ZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAbXkqAwQA vP/nAwQAvP/9MA0GCSqGSIb3DQEBCwUAA4IBAQCE78mI0WmcrSIqUvjGrH9v0HUK XX9g6DbCP/4XJ0W6lN1yflnSTJbyxcypnNXM/9cLtJDLi+O5Fy2Zs5PmX8/oytJX cannSd8G5IBZqTwVFi2Lc95aMxCh2ZjyX1BU2y7vPYmDNEClzzBmvPiw5QzGPgxy 4hAqJRB+mN1pmnd+4Tg6fQT0Ov0KzMZRYJx3wsYZNRH85nGLznr9LpFO2RE4p3d2 HQP9v8B1d+Vw59NLhL9MTJ5mzrD4gXoa9Vr72IBDwLRgcwFCi19MEXtNHG/qM0OO JkuSowtrcHyahIEdaUULIFL5xkW6rOIMMmbpIonulyUGX4aHUYGJ4m5pZTii -----END CERTIFICATE-----Generated at Thu Feb 5 18:10:50 2026 by rpki-client