This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/pKdyppPaHYtR-oyAX_dINAizQCw.roa File: pKdyppPaHYtR-oyAX_dINAizQCw.roa (raw, json) Hash identifier: 0aaYkpeViKdlLjKyoydpc47P1Ji22FZ3Tvk3MaL7ELU= Subject key identifier: A4:A7:72:A6:93:DA:1D:8B:51:FA:8C:80:5F:F7:48:34:08:B3:40:2C Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Certificate serial: 019B7DCA30FF2240C1CC8254181E9D29A4A3 Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/pKdyppPaHYtR-oyAX_dINAizQCw.roa Signing time: Fri 02 Jan 2026 08:19:21 +0000 ROA not before: Fri 02 Jan 2026 08:19:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 48124 IP address blocks: 85.140.112.0/22 maxlen: 22 85.140.112.0/23 maxlen: 23 85.140.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:ca:30:ff:22:40:c1:cc:82:54:18:1e:9d:29:a4:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5 Validity Not Before: Jan 2 08:19:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a4a772a693da1d8b51fa8c805ff7483408b3402c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:97:03:1a:60:df:fc:ca:23:66:b8:dd:13:4e: ef:0a:06:82:52:88:ca:3b:25:84:93:19:91:31:16: e5:24:0e:b0:e2:ed:98:04:e0:65:3e:e4:1f:00:78: c9:20:64:cf:53:e3:27:ab:31:d4:f0:59:38:b5:6d: 49:05:c3:89:c3:b9:91:9c:16:00:04:74:8d:e4:1f: 3f:42:3e:ea:f3:52:fd:9a:47:5d:bc:5f:c5:01:2e: 20:d8:ce:36:6f:76:c7:2c:53:cb:31:5e:5a:a6:e9: aa:b8:bc:b6:f3:12:2d:46:66:3a:64:a4:78:02:1f: 54:ab:51:8d:f1:e0:00:0d:1f:2e:22:7c:11:db:9f: 3d:05:f7:df:fa:5d:45:69:99:2d:04:58:e2:90:83: cd:fa:f3:c6:19:f2:04:b7:81:81:b9:a4:09:b2:0c: c6:d7:ef:94:55:6d:15:e3:79:a2:81:1b:9c:5a:b6: ef:83:09:49:eb:1d:05:26:56:2b:1e:6a:3b:5b:80: dd:55:57:4d:83:a0:47:d4:c3:d8:b7:df:99:62:f8: 60:3f:02:48:02:04:0c:54:77:84:4e:b0:f9:96:e4: 8b:99:fe:f9:31:87:d5:05:90:bb:87:d5:e3:77:c3: 7e:92:b4:c8:65:fa:d1:69:e9:8b:b0:66:e9:c2:0d: c6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A7:72:A6:93:DA:1D:8B:51:FA:8C:80:5F:F7:48:34:08:B3:40:2C X509v3 Authority Key Identifier: keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/pKdyppPaHYtR-oyAX_dINAizQCw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.140.112.0/22 Signature Algorithm: sha256WithRSAEncryption 60:08:1d:e5:2e:49:dd:0a:d6:0a:98:d4:cb:fa:7c:43:72:17: a7:fd:38:88:0f:05:b4:37:39:19:91:dc:92:47:bc:07:94:db: 33:2d:28:92:ae:32:d9:bc:dc:af:fa:83:79:9a:bf:cd:e4:e4: ac:92:95:17:52:63:34:99:57:28:b2:c5:c9:b4:4d:f3:c4:f2: 18:26:15:3f:7a:0a:bd:a7:30:62:cd:43:02:cf:83:9c:ae:92: 16:10:0a:07:49:2c:af:8c:66:4b:da:91:2e:fa:48:3a:75:1d: fd:b3:57:b3:11:78:7f:31:2c:74:48:f4:10:fe:6a:fa:e7:f6: 8d:64:45:3c:ae:96:d9:9c:de:35:39:ca:81:0d:80:11:13:de: a3:2b:e4:d6:91:59:dc:4f:22:b6:0e:df:cf:3e:c6:82:ad:d9: 2d:cd:02:b3:c4:44:bb:ea:10:2f:53:ba:fe:50:98:5b:a5:25: 54:2c:f1:8f:d6:1b:21:94:c2:7b:67:31:25:cc:db:bf:e6:82: e3:85:b6:0c:d1:b6:4a:c1:d8:bb:77:3e:de:ac:a3:8b:10:1a: 6f:76:14:32:f5:af:db:fd:b2:4b:94:52:ad:58:5d:0e:2c:f7: 7d:be:d6:f8:de:eb:0a:11:89:2e:6a:7c:e3:7a:ef:47:a2:17: 90:51:16:b7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9yjD/IkDBzIJUGB6dKaSjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZmUxYzg1OTQwOWFjNWRlNzQxNGM0OGY4NjczOTkxM2Jl NmI3ZTUwHhcNMjYwMTAyMDgxOTIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNGE3NzJhNjkzZGExZDhiNTFmYThjODA1ZmY3NDgzNDA4YjM0MDJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJcDGmDf/MojZrjdE07vCgaCUojK OyWEkxmRMRblJA6w4u2YBOBlPuQfAHjJIGTPU+MnqzHU8Fk4tW1JBcOJw7mRnBYA BHSN5B8/Qj7q81L9mkddvF/FAS4g2M42b3bHLFPLMV5apumquLy28xItRmY6ZKR4 Ah9Uq1GN8eAADR8uInwR2589Bfff+l1FaZktBFjikIPN+vPGGfIEt4GBuaQJsgzG 1++UVW0V43migRucWrbvgwlJ6x0FJlYrHmo7W4DdVVdNg6BH1MPYt9+ZYvhgPwJI AgQMVHeETrD5luSLmf75MYfVBZC7h9Xjd8N+krTIZfrRaemLsGbpwg3GcQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKSncqaT2h2LUfqMgF/3SDQIs0AsMB8GA1UdIwQY MBaAFK7+HIWUCaxd50FMSPhnOZE75rflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEt NDI4NDU4Njc5Y2U0LzEvcEtkeXBwUGFIWXRSLW95QVhfZElOQWl6UUN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEtNDI4NDU4Njc5Y2U0 LzEvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCVYxwMA0G CSqGSIb3DQEBCwUAA4IBAQBgCB3lLkndCtYKmNTL+nxDchen/TiIDwW0NzkZkdyS R7wHlNszLSiSrjLZvNyv+oN5mr/N5OSskpUXUmM0mVcossXJtE3zxPIYJhU/egq9 pzBizUMCz4OcrpIWEAoHSSyvjGZL2pEu+kg6dR39s1ezEXh/MSx0SPQQ/mr65/aN ZEU8rpbZnN41OcqBDYARE96jK+TWkVncTyK2Dt/PPsaCrdktzQKzxES76hAvU7r+ UJhbpSVULPGP1hshlMJ7ZzElzNu/5oLjhbYM0bZKwdi7dz7erKOLEBpvdhQy9a/b /bJLlFKtWF0OLPd9vtb43usKEYkuanzjeu9HoheQURa3 -----END CERTIFICATE-----Generated at Tue Feb 10 01:44:15 2026 by rpki-client