This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/pA1ysw7euEwsawBt3WsvgzNCTVc.roa File: pA1ysw7euEwsawBt3WsvgzNCTVc.roa (raw, json) Hash identifier: IHFmvwJcfsynVr/cn/JAzWiobBCXWx/OYDSpOIF4AC0= Subject key identifier: A4:0D:72:B3:0E:DE:B8:4C:2C:6B:00:6D:DD:6B:2F:83:33:42:4D:57 Certificate issuer: /CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8 Certificate serial: 019B7D5D2584604A13C070E4239FD876A491 Authority key identifier: 11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/pA1ysw7euEwsawBt3WsvgzNCTVc.roa Signing time: Fri 02 Jan 2026 06:20:14 +0000 ROA not before: Fri 02 Jan 2026 06:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212496 IP address blocks: 141.98.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.mft rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:25:84:60:4a:13:c0:70:e4:23:9f:d8:76:a4:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11a010f87a049b6e21abed9b40983b04f3f1c7e8 Validity Not Before: Jan 2 06:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=a40d72b30edeb84c2c6b006ddd6b2f8333424d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1b:e9:be:8b:96:51:c0:b4:0b:8f:e6:ee:bd: 59:fa:e6:32:c0:eb:b8:f2:f7:28:3c:04:1d:6e:88: e5:92:af:2a:4e:a8:66:37:b2:5d:b4:87:f3:02:f5: a8:54:0a:0b:18:ee:0d:64:0f:7c:b2:ef:bb:e3:4d: aa:24:7b:85:5c:51:22:1c:e2:c8:f4:c8:3a:6b:aa: ab:5b:5b:1b:ab:2e:de:ce:c9:78:dc:04:98:eb:e4: fa:33:56:f3:d1:e4:44:42:90:16:c0:69:c7:0c:a1: e6:89:6e:21:53:da:5a:cc:49:e2:f1:c7:06:32:23: e8:a3:7e:37:dd:cc:bd:8f:ed:f7:16:25:07:39:8d: 07:dd:42:13:40:8f:5f:77:f3:8e:8c:ed:07:cc:03: 3c:df:97:3c:73:e2:d8:a8:65:61:c8:24:87:64:18: 1b:0f:a3:23:ca:ae:72:b0:4a:79:e6:f5:44:01:9f: ee:80:dc:5b:5a:c2:20:47:93:df:63:cb:3e:3a:6c: fe:6f:1c:5b:d9:76:64:36:36:2b:63:53:29:8b:a9: f1:08:5d:39:a3:a6:57:d4:9c:2b:bb:bd:2c:55:83: af:aa:9c:21:3f:db:7b:14:f8:1a:4f:b4:19:ce:1e: 9d:37:5f:99:1f:cf:c4:e7:57:1f:a6:f9:90:21:b1: 9c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:0D:72:B3:0E:DE:B8:4C:2C:6B:00:6D:DD:6B:2F:83:33:42:4D:57 X509v3 Authority Key Identifier: keyid:11:A0:10:F8:7A:04:9B:6E:21:AB:ED:9B:40:98:3B:04:F3:F1:C7:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EaAQ-HoEm24hq-2bQJg7BPPxx-g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/pA1ysw7euEwsawBt3WsvgzNCTVc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f25d7c-6677-4fdb-898e-ee7465754ff6/1/EaAQ-HoEm24hq-2bQJg7BPPxx-g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.98.171.0/24 Signature Algorithm: sha256WithRSAEncryption 65:d8:58:4e:3d:8d:b7:b9:bb:c2:cd:02:34:74:72:9e:5d:a2: 7a:b6:d6:83:e2:89:71:39:d7:8c:e2:ff:a1:5d:00:86:5a:c4: e6:4e:84:53:1c:dd:33:47:cd:39:98:09:cb:9a:a2:3a:94:c6: 29:ae:31:0e:f7:05:bc:23:67:7b:8d:20:74:e8:c7:b7:a7:43: 55:4a:5a:e9:6d:c3:97:ba:e9:1f:99:85:16:35:db:6d:4c:41: fa:99:f8:db:dc:b9:f8:45:c1:e8:7f:2d:d2:6b:8a:e7:83:f0: 9e:23:69:04:ef:6c:13:2f:46:23:e8:ae:4d:2d:f7:83:37:1c: f6:a0:de:35:63:58:c5:0a:65:7f:41:dc:74:cd:fc:a5:03:bf: 4a:ad:3e:94:29:4b:76:84:81:62:9f:df:67:54:96:39:9c:12: 62:a8:1e:25:66:ce:f6:74:7e:0b:4f:4b:57:9b:ff:d7:4b:f2: f5:69:53:12:d3:2e:68:bc:52:9e:5b:02:79:77:98:22:35:49: 1e:99:4f:b6:0d:8a:60:03:a1:c1:4b:c9:87:0d:a1:38:1f:32: 12:b8:76:56:7c:5e:98:e5:38:77:1d:09:5f:0d:e5:b5:54:90: 31:a4:eb:c5:91:5c:98:f0:81:06:ea:ea:02:f8:37:7e:66:2b: 98:23:ed:f1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XSWEYEoTwHDkI5/YdqSRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExYTAxMGY4N2EwNDliNmUyMWFiZWQ5YjQwOTgzYjA0ZjNm MWM3ZTgwHhcNMjYwMTAyMDYyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhhNDBkNzJiMzBlZGViODRjMmM2YjAwNmRkZDZiMmY4MzMzNDI0ZDU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRvpvouWUcC0C4/m7r1Z+uYywOu4 8vcoPAQdbojlkq8qTqhmN7JdtIfzAvWoVAoLGO4NZA98su+7402qJHuFXFEiHOLI 9Mg6a6qrW1sbqy7ezsl43ASY6+T6M1bz0eREQpAWwGnHDKHmiW4hU9pazEni8ccG MiPoo3433cy9j+33FiUHOY0H3UITQI9fd/OOjO0HzAM835c8c+LYqGVhyCSHZBgb D6Mjyq5ysEp55vVEAZ/ugNxbWsIgR5PfY8s+Omz+bxxb2XZkNjYrY1Mpi6nxCF05 o6ZX1Jwru70sVYOvqpwhP9t7FPgaT7QZzh6dN1+ZH8/E51cfpvmQIbGc4QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFKQNcrMO3rhMLGsAbd1rL4MzQk1XMB8GA1UdIwQY MBaAFBGgEPh6BJtuIavtm0CYOwTz8cfoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUt ZWU3NDY1NzU0ZmY2LzEvcEExeXN3N2V1RXdzYXdCdDNXc3Znek5DVFZjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mMjVkN2MtNjY3Ny00ZmRiLTg5OGUtZWU3NDY1NzU0ZmY2 LzEvRWFBUS1Ib0VtMjRocS0yYlFKZzdCUFB4eC1nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjWKrMA0G CSqGSIb3DQEBCwUAA4IBAQBl2FhOPY23ubvCzQI0dHKeXaJ6ttaD4olxOdeM4v+h XQCGWsTmToRTHN0zR805mAnLmqI6lMYprjEO9wW8I2d7jSB06Me3p0NVSlrpbcOX uukfmYUWNdttTEH6mfjb3Ln4RcHofy3Sa4rng/CeI2kE72wTL0Yj6K5NLfeDNxz2 oN41Y1jFCmV/Qdx0zfylA79KrT6UKUt2hIFin99nVJY5nBJiqB4lZs72dH4LT0tX m//XS/L1aVMS0y5ovFKeWwJ5d5giNUkemU+2DYpgA6HBS8mHDaE4HzISuHZWfF6Y 5Th3HQlfDeW1VJAxpOvFkVyY8IEG6uoC+Dd+ZiuYI+3x -----END CERTIFICATE-----Generated at Wed Jan 21 12:44:27 2026 by rpki-client