This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/4bDkgENx5bPVfPJbt1ijigXmgrk.roa File: 4bDkgENx5bPVfPJbt1ijigXmgrk.roa (raw, json) Hash identifier: SO0YUT683qrSeySHKs6lQYWpsK+0MrLWBcrgELSwcJo= Subject key identifier: E1:B0:E4:80:43:71:E5:B3:D5:7C:F2:5B:B7:58:A3:8A:05:E6:82:B9 Certificate issuer: /CN=44c295ca6ee8cae7006b577af54e376623df7799 Certificate serial: 019B79ED53B3D724D17CA8622B06D20BF4B0 Authority key identifier: 44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/4bDkgENx5bPVfPJbt1ijigXmgrk.roa Signing time: Thu 01 Jan 2026 14:19:14 +0000 ROA not before: Thu 01 Jan 2026 14:19:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 205330 IP address blocks: 193.239.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.mft rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:ed:53:b3:d7:24:d1:7c:a8:62:2b:06:d2:0b:f4:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44c295ca6ee8cae7006b577af54e376623df7799 Validity Not Before: Jan 1 14:19:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1b0e4804371e5b3d57cf25bb758a38a05e682b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:14:33:d0:f0:4e:da:1e:ab:3f:64:f4:a9:04: 66:16:33:20:9d:1c:02:da:c8:df:26:31:84:69:fa: 98:5d:c8:57:df:60:40:14:69:fd:3f:33:51:a8:6d: 5a:3d:b0:47:21:b4:08:d3:05:0f:26:94:0b:73:8f: d6:17:fd:7d:c8:c5:36:11:47:fd:2a:e3:cc:e7:a3: 70:95:41:ac:42:15:60:e6:a1:aa:f0:99:df:ee:de: f5:6b:d7:ba:b1:29:ec:ab:5a:d8:e4:38:33:6b:5d: 6c:4c:bf:09:6f:85:cd:85:ed:26:dd:5d:23:6b:67: 44:5d:ba:ab:cb:3c:ae:04:0f:b3:e2:ac:88:91:4d: 50:4b:aa:90:d8:d6:54:c6:76:22:34:de:67:99:0c: f6:03:01:ac:5c:51:61:4d:fb:b1:86:13:fd:5d:36: ad:cf:d1:7a:8d:48:4a:1f:17:5d:37:05:aa:cb:c4: 9c:c5:23:ff:21:f9:f1:30:b2:75:13:c9:75:97:f8: d6:36:e8:5d:7e:c4:ad:db:10:ed:6a:f8:28:8b:09: d0:82:d7:c6:9b:f1:1b:4c:86:38:cc:cf:8a:f3:60: 30:53:52:4e:54:73:42:b5:5d:c0:77:61:5e:ef:25: 8c:46:32:c1:f8:77:5b:a8:ad:17:aa:f4:f0:cc:ff: 0f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B0:E4:80:43:71:E5:B3:D5:7C:F2:5B:B7:58:A3:8A:05:E6:82:B9 X509v3 Authority Key Identifier: keyid:44:C2:95:CA:6E:E8:CA:E7:00:6B:57:7A:F5:4E:37:66:23:DF:77:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMKVym7oyucAa1d69U43ZiPfd5k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/4bDkgENx5bPVfPJbt1ijigXmgrk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/17a88d-236d-4fad-9035-7599b441cd1c/1/RMKVym7oyucAa1d69U43ZiPfd5k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.239.203.0/24 Signature Algorithm: sha256WithRSAEncryption 38:14:48:c0:5a:37:18:92:43:83:14:3b:28:f2:50:8e:ea:1f: c8:96:02:31:10:76:1e:da:fd:48:4c:83:c7:9c:ed:f8:c0:8f: 37:b3:95:c8:e9:01:ae:05:5c:a1:66:a9:a0:71:48:3b:fb:0c: 23:81:2b:99:1f:f6:24:4f:e9:b8:9c:71:77:98:fc:19:66:36: 00:e9:75:6f:fb:e4:70:1f:5f:04:b5:75:bc:b8:cd:d4:6c:26: 22:07:40:22:6a:73:54:76:8b:cf:2f:3b:99:f3:64:8d:a6:6c: 8e:29:3d:f0:f5:58:4d:46:1a:85:03:a4:79:22:37:3d:61:64: d0:a9:65:db:01:f0:3b:91:a1:26:6e:8d:c6:44:ed:41:12:de: 35:4a:b4:14:85:10:cd:d5:ae:70:75:aa:13:51:04:09:1e:75: a8:c4:24:a1:db:d5:16:c4:20:c6:56:5f:8f:98:1d:c2:f1:ce: dc:f0:16:4a:b3:82:35:62:5e:bd:a1:e8:33:0e:c5:62:18:3c: 7a:22:c1:dc:4e:78:88:d7:d8:8f:4e:89:1d:0c:6b:05:7e:25: a9:30:b6:7e:ef:ad:75:52:19:86:07:9e:86:73:ff:3a:cb:5f: 9f:4e:77:44:ee:b8:75:3d:a4:25:e8:db:f0:1b:2b:a1:66:49: 27:e1:d4:03 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt57VOz1yTRfKhiKwbSC/SwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0YzI5NWNhNmVlOGNhZTcwMDZiNTc3YWY1NGUzNzY2MjNk Zjc3OTkwHhcNMjYwMTAxMTQxOTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWIwZTQ4MDQzNzFlNWIzZDU3Y2YyNWJiNzU4YTM4YTA1ZTY4MmI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6RQz0PBO2h6rP2T0qQRmFjMgnRwC 2sjfJjGEafqYXchX32BAFGn9PzNRqG1aPbBHIbQI0wUPJpQLc4/WF/19yMU2EUf9 KuPM56NwlUGsQhVg5qGq8Jnf7t71a9e6sSnsq1rY5Dgza11sTL8Jb4XNhe0m3V0j a2dEXbqryzyuBA+z4qyIkU1QS6qQ2NZUxnYiNN5nmQz2AwGsXFFhTfuxhhP9XTat z9F6jUhKHxddNwWqy8ScxSP/IfnxMLJ1E8l1l/jWNuhdfsSt2xDtavgoiwnQgtfG m/EbTIY4zM+K82AwU1JOVHNCtV3Ad2Fe7yWMRjLB+HdbqK0XqvTwzP8P4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOGw5IBDceWz1XzyW7dYo4oF5oK5MB8GA1UdIwQY MBaAFETClcpu6MrnAGtXevVON2Yj33eZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk1LVnltN295dWNBYTFkNjlVNDNaaVBmZDVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC8xN2E4OGQtMjM2ZC00ZmFkLTkwMzUt NzU5OWI0NDFjZDFjLzEvNGJEa2dFTng1YlBWZlBKYnQxaWppZ1htZ3JrLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC8xN2E4OGQtMjM2ZC00ZmFkLTkwMzUtNzU5OWI0NDFjZDFj LzEvUk1LVnltN295dWNBYTFkNjlVNDNaaVBmZDVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwe/LMA0G CSqGSIb3DQEBCwUAA4IBAQA4FEjAWjcYkkODFDso8lCO6h/IlgIxEHYe2v1ITIPH nO34wI83s5XI6QGuBVyhZqmgcUg7+wwjgSuZH/YkT+m4nHF3mPwZZjYA6XVv++Rw H18EtXW8uM3UbCYiB0AianNUdovPLzuZ82SNpmyOKT3w9VhNRhqFA6R5Ijc9YWTQ qWXbAfA7kaEmbo3GRO1BEt41SrQUhRDN1a5wdaoTUQQJHnWoxCSh29UWxCDGVl+P mB3C8c7c8BZKs4I1Yl69oegzDsViGDx6IsHcTniI19iPTokdDGsFfiWpMLZ+7611 UhmGB56Gc/86y1+fTndE7rh1PaQl6NvwGyuhZkkn4dQD -----END CERTIFICATE-----Generated at Tue Feb 10 02:46:22 2026 by rpki-client