This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/RnxHD11Uhdt01kVBb1Rpc2SkWqI.roa File: RnxHD11Uhdt01kVBb1Rpc2SkWqI.roa (raw, json) Hash identifier: EZi5XsUOzo8BaayU9rrJ+Q6qQj+QhPGNjhAuWPOc7h8= Subject key identifier: 46:7C:47:0F:5D:54:85:DB:74:D6:45:41:6F:54:69:73:64:A4:5A:A2 Certificate issuer: /CN=4f4777d49134eab75a79c111832ad7ece7267145 Certificate serial: 019B7EA708A6C5CA3820E79B2DEEE4D85DE2 Authority key identifier: 4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/RnxHD11Uhdt01kVBb1Rpc2SkWqI.roa Signing time: Fri 02 Jan 2026 12:20:34 +0000 ROA not before: Fri 02 Jan 2026 12:20:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 215423 IP address blocks: 193.176.36.0/24 maxlen: 24 2a14:bc0::/29 maxlen: 29 2a14:bc0::/48 maxlen: 48 2a14:bc0:1::/48 maxlen: 48 2a14:bc0:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.crl rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.mft rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a7:08:a6:c5:ca:38:20:e7:9b:2d:ee:e4:d8:5d:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f4777d49134eab75a79c111832ad7ece7267145 Validity Not Before: Jan 2 12:20:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=467c470f5d5485db74d645416f54697364a45aa2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4a:de:65:d6:f4:51:c0:b2:f0:d8:54:a8:9e: 4b:54:b2:cc:ce:fb:80:2a:58:2a:35:2d:ee:bb:9c: d9:45:69:9f:38:3b:bd:e2:f3:2f:0d:00:7f:18:c3: c5:59:18:95:f9:1f:f4:28:20:61:37:c6:7d:04:0c: f6:32:c5:41:b2:e2:92:11:d2:f6:a5:b4:78:15:fb: 6c:5e:d5:a6:e8:e9:3c:02:08:31:d5:ea:da:cb:6d: b3:37:f6:b2:dd:2d:d5:0f:1d:88:69:c9:ff:0b:5d: f5:4d:0d:7d:47:30:9f:39:26:e7:d1:26:fe:5c:28: 67:4d:17:b6:25:68:ab:0d:a2:e0:df:b1:fd:0a:4b: 45:48:6c:dd:d6:25:54:ec:d3:4b:bd:b9:58:be:76: e2:63:1f:f6:ba:09:0c:74:a4:15:6a:24:26:45:5e: 13:72:03:2b:c7:21:03:67:51:0e:d8:b0:02:e3:99: bf:35:f9:83:08:86:7f:37:d4:71:81:44:6e:68:81: 25:cd:4f:72:2c:0e:00:e3:15:fd:cb:2f:fc:60:85: 3e:73:f3:3d:94:da:ce:0a:23:f2:50:0e:93:7b:e2: f5:87:14:99:6a:ce:3a:e7:4a:82:e8:4e:a0:9b:62: ef:43:ea:bd:1a:1f:93:b3:da:5e:41:ec:b6:b2:99: 16:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:7C:47:0F:5D:54:85:DB:74:D6:45:41:6F:54:69:73:64:A4:5A:A2 X509v3 Authority Key Identifier: keyid:4F:47:77:D4:91:34:EA:B7:5A:79:C1:11:83:2A:D7:EC:E7:26:71:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0d31JE06rdaecERgyrX7OcmcUU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/RnxHD11Uhdt01kVBb1Rpc2SkWqI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cd0a81-64b9-4cec-bad8-8ec1bf9fda2b/1/T0d31JE06rdaecERgyrX7OcmcUU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.176.36.0/24 IPv6: 2a14:bc0::/29 Signature Algorithm: sha256WithRSAEncryption 9b:f3:0e:53:d1:c6:89:5c:fd:fb:8d:82:77:f7:84:30:72:7b: 41:f1:47:c9:2c:f6:0a:be:cd:ff:93:69:ed:e9:ee:88:bf:21: 68:fd:7d:af:5c:70:7b:23:a7:a8:61:d7:31:d0:4c:3c:fc:57: 9a:e5:6e:9d:9d:a4:4c:dc:ab:35:52:d8:f2:d6:72:2c:71:1b: 5d:02:82:e7:75:a6:8c:87:e8:2e:5b:a0:37:ee:70:67:8d:50: 28:e5:1b:cf:d7:0a:a0:29:d2:af:81:39:42:d1:92:dd:2c:89: f8:2c:87:8e:18:62:0f:7b:42:a4:16:ca:4f:22:b0:01:cd:5b: c9:94:3b:10:d2:e7:15:ba:0a:b0:5f:04:e3:c1:71:40:de:28: 72:22:62:c1:dc:50:5d:38:84:72:68:f5:fc:2d:95:40:09:41: 1a:17:a5:dd:cf:39:41:76:0c:c2:18:1f:a3:fa:fe:2d:3d:68: e3:8e:0e:e0:54:f5:eb:8b:71:a8:54:d8:26:77:a6:c1:5c:0c: 1f:3c:08:08:28:a3:c9:65:a0:40:7b:95:38:1f:75:cf:2e:9f: c5:af:2c:5a:74:90:da:d5:16:32:5b:a1:83:64:b8:3c:4d:f4: a8:e5:b4:7e:13:a6:fe:e8:c8:36:2a:67:c5:a8:d2:26:3f:45: d1:ea:87:fd -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt+pwimxco4IOebLe7k2F3iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmNDc3N2Q0OTEzNGVhYjc1YTc5YzExMTgzMmFkN2VjZTcy NjcxNDUwHhcNMjYwMTAyMTIyMDM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjdjNDcwZjVkNTQ4NWRiNzRkNjQ1NDE2ZjU0Njk3MzY0YTQ1YWEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UreZdb0UcCy8NhUqJ5LVLLMzvuA KlgqNS3uu5zZRWmfODu94vMvDQB/GMPFWRiV+R/0KCBhN8Z9BAz2MsVBsuKSEdL2 pbR4FftsXtWm6Ok8Aggx1eray22zN/ay3S3VDx2Iacn/C131TQ19RzCfOSbn0Sb+ XChnTRe2JWirDaLg37H9CktFSGzd1iVU7NNLvblYvnbiYx/2ugkMdKQVaiQmRV4T cgMrxyEDZ1EO2LAC45m/NfmDCIZ/N9RxgURuaIElzU9yLA4A4xX9yy/8YIU+c/M9 lNrOCiPyUA6Te+L1hxSZas4650qC6E6gm2LvQ+q9Gh+Ts9peQey2spkWhQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFEZ8Rw9dVIXbdNZFQW9UaXNkpFqiMB8GA1UdIwQY MBaAFE9Hd9SRNOq3WnnBEYMq1+znJnFFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDBkMzFKRTA2cmRhZWNFUmd5clg3T2NtY1VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jZDBhODEtNjRiOS00Y2VjLWJhZDgt OGVjMWJmOWZkYTJiLzEvUm54SEQxMVVoZHQwMWtWQmIxUnBjMlNrV3FJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC9jZDBhODEtNjRiOS00Y2VjLWJhZDgtOGVjMWJmOWZkYTJi LzEvVDBkMzFKRTA2cmRhZWNFUmd5clg3T2NtY1VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwbAkMA0E AgACMAcDBQMqFAvAMA0GCSqGSIb3DQEBCwUAA4IBAQCb8w5T0caJXP37jYJ394Qw cntB8UfJLPYKvs3/k2nt6e6IvyFo/X2vXHB7I6eoYdcx0Ew8/Fea5W6dnaRM3Ks1 Utjy1nIscRtdAoLndaaMh+guW6A37nBnjVAo5RvP1wqgKdKvgTlC0ZLdLIn4LIeO GGIPe0KkFspPIrABzVvJlDsQ0ucVugqwXwTjwXFA3ihyImLB3FBdOIRyaPX8LZVA CUEaF6XdzzlBdgzCGB+j+v4tPWjjjg7gVPXri3GoVNgmd6bBXAwfPAgIKKPJZaBA e5U4H3XPLp/FryxadJDa1RYyW6GDZLg8TfSo5bR+E6b+6Mg2KmfFqNImP0XR6of9 -----END CERTIFICATE-----Generated at Tue Feb 10 04:15:03 2026 by rpki-client