This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/R46DRTPv8iZIYEiwOKWyx6duD0U.roa File: R46DRTPv8iZIYEiwOKWyx6duD0U.roa (raw, json) Hash identifier: 1AhT49aVAgbdfWqou+7as68mSeLbCUzDmWkPGSl9lV4= Subject key identifier: 47:8E:83:45:33:EF:F2:26:48:60:48:B0:38:A5:B2:C7:A7:6E:0F:45 Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Certificate serial: 019B7B361209D14AF4F3E4005160C550585F Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/R46DRTPv8iZIYEiwOKWyx6duD0U.roa Signing time: Thu 01 Jan 2026 20:18:19 +0000 ROA not before: Thu 01 Jan 2026 20:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 213766 IP address blocks: 124.155.248.0/24 maxlen: 24 124.155.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:12:09:d1:4a:f4:f3:e4:00:51:60:c5:50:58:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc Validity Not Before: Jan 1 20:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=478e834533eff226486048b038a5b2c7a76e0f45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:69:95:46:e7:65:1c:17:78:6d:ac:cf:a5:ae: 3f:1b:c3:80:39:87:32:45:5d:db:14:b1:7a:0a:ba: 21:21:67:1c:d2:0a:62:a8:ec:b0:39:64:99:b5:a9: c3:87:83:b4:5b:15:85:be:92:a5:02:20:95:2a:71: 37:25:ec:da:a8:5c:95:f3:dd:3e:e7:f5:ff:77:5c: 15:b4:7c:c3:ea:a0:fb:13:79:2c:e3:6d:ce:3f:1e: f2:3f:2d:0b:23:4b:cc:b9:93:e6:46:06:d5:f8:cb: d8:36:ae:09:67:49:d4:72:6f:b9:40:c4:2f:c8:e2: 72:62:55:69:c4:84:f8:3f:b1:f9:fa:9a:44:11:af: d2:11:98:b5:05:c3:39:ed:2d:d4:c6:54:19:03:74: 0a:e9:28:c4:df:62:b7:7d:b9:79:49:1e:30:88:a8: 75:7c:57:36:c6:f9:7a:d9:8f:d4:45:bf:fd:b9:4d: 2e:0b:12:0a:cb:3e:47:8f:1c:7e:27:89:cb:be:ef: 8c:12:31:53:0c:09:5f:b0:dd:0e:42:bd:e0:21:af: 90:60:e1:53:13:c6:92:91:eb:4d:83:7b:fb:d6:38: dd:13:29:ba:c8:ff:af:71:8f:2d:17:97:0f:d0:2a: 22:42:87:1d:ab:77:73:d7:a2:94:73:9c:8b:9e:de: ae:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:8E:83:45:33:EF:F2:26:48:60:48:B0:38:A5:B2:C7:A7:6E:0F:45 X509v3 Authority Key Identifier: keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/R46DRTPv8iZIYEiwOKWyx6duD0U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 124.155.248.0/24 124.155.251.0/24 Signature Algorithm: sha256WithRSAEncryption a4:99:89:2a:56:4f:09:19:ce:5b:f3:8f:f3:02:0f:87:7c:7f: 4e:cd:cc:e5:3a:eb:a5:c9:a6:9f:6b:d5:0f:09:f2:a0:b7:4d: 53:bc:49:c2:d8:06:60:25:84:50:19:8d:d1:a3:08:21:08:45: 91:b4:63:c1:93:fe:e8:f6:0a:59:4c:9d:78:7a:9f:5c:5d:a7: 45:a3:b9:90:b7:e7:64:c6:1a:51:57:94:3a:af:7b:ba:16:0e: 16:f1:6d:93:2c:d1:e1:ff:1d:75:0d:dd:16:30:61:52:18:10: 49:6d:27:ed:56:95:5f:c9:ae:4a:5b:7d:d5:7e:cc:0e:71:84: e8:4f:c5:a9:a9:66:28:ab:0c:c6:ca:2b:db:33:a1:3b:24:e0: 9e:a5:80:4a:22:92:d6:10:57:be:3f:55:fc:e5:dd:8f:ba:0a: 6f:49:70:e2:12:0f:75:3e:36:9f:12:1a:80:c8:49:05:8a:03: ae:2c:7a:81:0b:4c:f8:d2:bf:8b:9c:ce:76:6b:39:3b:fb:c0: 3d:3b:8a:52:91:94:a6:9b:ef:c4:49:40:e7:78:56:35:79:12: 3d:d7:26:99:13:b2:3b:e2:da:c8:f3:26:2d:82:5a:10:a3:81: e3:9d:27:b2:73:b9:36:63:e4:3b:60:45:29:3b:7f:61:63:d3: 59:1b:b5:25 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NhIJ0Ur08+QAUWDFUFhfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2 YzhkY2MwHhcNMjYwMTAxMjAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NzhlODM0NTMzZWZmMjI2NDg2MDQ4YjAzOGE1YjJjN2E3NmUwZjQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmmVRudlHBd4bazPpa4/G8OAOYcy RV3bFLF6CrohIWcc0gpiqOywOWSZtanDh4O0WxWFvpKlAiCVKnE3JezaqFyV890+ 5/X/d1wVtHzD6qD7E3ks423OPx7yPy0LI0vMuZPmRgbV+MvYNq4JZ0nUcm+5QMQv yOJyYlVpxIT4P7H5+ppEEa/SEZi1BcM57S3UxlQZA3QK6SjE32K3fbl5SR4wiKh1 fFc2xvl62Y/URb/9uU0uCxIKyz5Hjxx+J4nLvu+MEjFTDAlfsN0OQr3gIa+QYOFT E8aSketNg3v71jjdEym6yP+vcY8tF5cP0CoiQocdq3dz16KUc5yLnt6uRQIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFEeOg0Uz7/ImSGBIsDilssenbg9FMB8GA1UdIwQY MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt OTE4YWM2NDYyNjc5LzEvUjQ2RFJUUHY4aVpJWUVpd09LV3l4NmR1RDBVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5 LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAfJv4AwQA fJv7MA0GCSqGSIb3DQEBCwUAA4IBAQCkmYkqVk8JGc5b84/zAg+HfH9OzczlOuul yaafa9UPCfKgt01TvEnC2AZgJYRQGY3RowghCEWRtGPBk/7o9gpZTJ14ep9cXadF o7mQt+dkxhpRV5Q6r3u6Fg4W8W2TLNHh/x11Dd0WMGFSGBBJbSftVpVfya5KW33V fswOcYToT8WpqWYoqwzGyivbM6E7JOCepYBKIpLWEFe+P1X85d2PugpvSXDiEg91 PjafEhqAyEkFigOuLHqBC0z40r+LnM52azk7+8A9O4pSkZSmm+/ESUDneFY1eRI9 1yaZE7I74trI8yYtgloQo4HjnSeyc7k2Y+Q7YEUpO39hY9NZG7Ul -----END CERTIFICATE-----Generated at Wed Jan 21 09:23:04 2026 by rpki-client