This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/T0JvapdkvQ360YtlSw-JjYNZrzE.roa File: T0JvapdkvQ360YtlSw-JjYNZrzE.roa (raw, json) Hash identifier: Zf12niZW6pjLSacnRdMoFjjttkCmqu4SR7scXOnsKLQ= Subject key identifier: 4F:42:6F:6A:97:64:BD:0D:FA:D1:8B:65:4B:0F:89:8D:83:59:AF:31 Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Certificate serial: 019B7DCA2C36B4E7BFBAAC9E6A5758B9D807 Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/T0JvapdkvQ360YtlSw-JjYNZrzE.roa Signing time: Fri 02 Jan 2026 08:19:20 +0000 ROA not before: Fri 02 Jan 2026 08:19:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35473 IP address blocks: 213.87.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:2c:36:b4:e7:bf:ba:ac:9e:6a:57:58:b9:d8:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Validity Not Before: Jan 2 08:19:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4f426f6a9764bd0dfad18b654b0f898d8359af31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:5f:4b:fd:d1:91:e6:31:13:df:8b:b9:f5:cc: 1e:40:01:17:d1:93:19:6f:fe:06:4f:2e:be:2c:b7: 6c:8a:2f:ea:1b:aa:e5:fc:de:f6:c5:eb:6a:73:3c: 66:2d:28:1c:75:3d:c9:52:01:78:f7:d4:8a:d2:2c: 27:b2:66:5b:d0:73:f9:34:2b:3a:27:58:56:c5:2d: c0:3d:5f:2a:bd:54:6c:65:fb:7b:57:84:f6:2d:72: ba:bb:ea:02:29:86:d1:bf:25:61:97:6e:e9:ae:e3: 82:84:6d:fe:76:ff:f9:47:a0:4e:64:e2:23:aa:dd: 40:7e:2a:ac:28:98:f1:8a:03:4c:d8:b2:04:b9:65: 94:5f:0c:d3:c8:a9:83:59:4d:00:e3:15:87:1e:31: c2:44:a6:71:09:6c:8d:33:86:c4:a1:96:11:cd:4f: a8:9d:e4:c9:61:7b:64:95:0e:5c:10:f0:8b:f9:9f: 80:ae:20:0e:63:d4:63:6c:eb:ee:9f:43:d7:34:c8: c3:67:1e:63:7a:2c:3b:55:cc:fd:de:d4:24:0f:44: 20:ed:21:12:e7:c1:40:d5:79:c6:4b:cc:20:09:b4: 8b:1e:93:f5:3b:4e:f0:fb:9f:5f:8d:55:23:8d:55: f1:17:ec:01:57:46:ae:0e:4d:92:6f:07:2f:1a:c9: ab:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:42:6F:6A:97:64:BD:0D:FA:D1:8B:65:4B:0F:89:8D:83:59:AF:31 X509v3 Authority Key Identifier: keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/T0JvapdkvQ360YtlSw-JjYNZrzE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.87.72.0/22 Signature Algorithm: sha256WithRSAEncryption 63:e8:0e:6d:3a:d8:84:47:04:a2:b6:4c:53:50:88:6d:99:e3: 58:31:8f:d3:ac:66:3b:1a:51:0e:ab:67:8c:0d:ba:72:1c:9d: 0e:ef:20:7b:e1:cd:79:d4:b5:97:2d:04:b4:ae:79:69:65:a3: 74:db:48:c4:16:02:df:53:87:b5:9c:ac:47:56:46:03:39:6c: 5c:ef:7f:9b:c8:c2:d4:a7:be:06:fb:72:a2:15:5c:49:35:72: c4:97:5b:2a:5b:8a:9b:87:e7:32:43:51:1a:2f:86:ea:dd:89: 3e:04:4a:bd:3b:cf:ed:1a:d7:39:cb:a9:f4:f1:82:23:8c:34: 9a:57:d8:61:4f:84:52:12:ee:62:10:12:44:eb:e6:a0:a9:6d: a9:24:57:ad:93:e5:2e:b8:64:ba:22:41:e8:57:aa:55:1f:e3: 69:94:f3:00:3f:26:63:82:1c:ab:ea:19:f0:e6:89:2c:78:ed: f5:59:44:4e:47:d9:35:d3:67:97:96:9f:e8:73:a9:bc:40:4f: 0d:9f:5e:a5:09:bf:7e:87:be:33:24:bb:f1:fa:87:3b:23:83: 78:b0:d5:37:04:7c:5e:bb:e4:a2:82:4e:6c:a9:92:4b:59:e0: b7:36:a9:72:e7:c2:23:3f:bb:af:f5:02:e0:d3:d1:10:da:6a: 5b:32:9c:b6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yiw2tOe/uqyealdYudgHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZmUxYzg1OTQwOWFjNWRlNzQxNGM0OGY4NjczOTkxM2Jl NmI3ZTUwHhcNMjYwMTAyMDgxOTIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZjQyNmY2YTk3NjRiZDBkZmFkMThiNjU0YjBmODk4ZDgzNTlhZjMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8l9L/dGR5jET34u59cweQAEX0ZMZ b/4GTy6+LLdsii/qG6rl/N72xetqczxmLSgcdT3JUgF499SK0iwnsmZb0HP5NCs6 J1hWxS3APV8qvVRsZft7V4T2LXK6u+oCKYbRvyVhl27pruOChG3+dv/5R6BOZOIj qt1AfiqsKJjxigNM2LIEuWWUXwzTyKmDWU0A4xWHHjHCRKZxCWyNM4bEoZYRzU+o neTJYXtklQ5cEPCL+Z+AriAOY9RjbOvun0PXNMjDZx5jeiw7Vcz93tQkD0Qg7SES 58FA1XnGS8wgCbSLHpP1O07w+59fjVUjjVXxF+wBV0auDk2SbwcvGsmrpQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE9Cb2qXZL0N+tGLZUsPiY2DWa8xMB8GA1UdIwQY MBaAFK7+HIWUCaxd50FMSPhnOZE75rflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEt NDI4NDU4Njc5Y2U0LzEvVDBKdmFwZGt2UTM2MFl0bFN3LUpqWU5acnpFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEtNDI4NDU4Njc5Y2U0 LzEvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1VdIMA0G CSqGSIb3DQEBCwUAA4IBAQBj6A5tOtiERwSitkxTUIhtmeNYMY/TrGY7GlEOq2eM DbpyHJ0O7yB74c151LWXLQS0rnlpZaN020jEFgLfU4e1nKxHVkYDOWxc73+byMLU p74G+3KiFVxJNXLEl1sqW4qbh+cyQ1EaL4bq3Yk+BEq9O8/tGtc5y6n08YIjjDSa V9hhT4RSEu5iEBJE6+agqW2pJFetk+UuuGS6IkHoV6pVH+NplPMAPyZjghyr6hnw 5okseO31WUROR9k102eXlp/oc6m8QE8Nn16lCb9+h74zJLvx+oc7I4N4sNU3BHxe u+Sigk5sqZJLWeC3Nqly58IjP7uv9QLg09EQ2mpbMpy2 -----END CERTIFICATE-----Generated at Tue Feb 10 03:10:55 2026 by rpki-client