This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/RkfnHlMWqqRDNSvEFIh8QF7tDk8.roa File: RkfnHlMWqqRDNSvEFIh8QF7tDk8.roa (raw, json) Hash identifier: 5I4ecrM+BBV9W4fv2vxRj7zzVRUVYjuauc+VEsMfzeU= Subject key identifier: 46:47:E7:1E:53:16:AA:A4:43:35:2B:C4:14:88:7C:40:5E:ED:0E:4F Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B791053ABAE50F62E673F088CEB801255 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/RkfnHlMWqqRDNSvEFIh8QF7tDk8.roa Signing time: Thu 01 Jan 2026 10:17:51 +0000 ROA not before: Thu 01 Jan 2026 10:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 62425 IP address blocks: 31.210.43.0/24 maxlen: 24 78.135.103.0/24 maxlen: 24 188.132.215.0/24 maxlen: 24 188.132.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 01:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:53:ab:ae:50:f6:2e:67:3f:08:8c:eb:80:12:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4647e71e5316aaa443352bc414887c405eed0e4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:dc:66:5e:1c:c8:da:73:d1:4e:1b:64:a0:5c: 33:8f:e2:10:50:f0:e6:ed:1e:02:ba:4a:e3:3f:e9: 34:3b:7c:e4:6b:25:b1:a5:34:30:5e:02:6b:8d:7b: 17:6d:99:15:2b:e5:33:a9:12:41:da:b9:98:a7:e5: 83:2c:e0:97:8a:cf:3c:6c:33:60:a5:17:ac:38:2a: 3a:35:41:c1:58:ce:ec:b3:5d:47:ad:8f:33:69:a2: 70:e8:dc:29:f6:e8:81:ed:2a:85:d5:96:4d:59:3e: 72:06:a7:d3:f0:c2:1b:35:8c:39:97:ea:3f:52:26: 23:ea:99:0c:36:bf:48:d4:fc:6b:8d:fe:35:85:aa: 88:d2:da:f1:d8:d0:41:03:7d:34:60:c2:f4:4c:21: f1:49:57:d2:07:53:b5:41:d7:2d:93:a4:a0:c4:cb: b4:20:78:0b:1f:ee:64:42:67:79:bc:1d:cd:7b:5a: b3:b1:3f:42:6a:ad:f1:8c:e2:94:a0:c6:d2:84:c5: 4d:df:a5:b9:e8:ec:7c:c6:b5:7f:8e:7b:fd:b6:58: d4:4a:ed:fe:51:41:5d:81:e3:6c:c3:74:1b:27:27: ce:e8:f9:d4:04:59:cc:4c:23:b0:42:21:b2:ab:9d: b1:55:ad:11:70:5c:9f:b5:80:6a:58:8c:60:45:74: 8b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:47:E7:1E:53:16:AA:A4:43:35:2B:C4:14:88:7C:40:5E:ED:0E:4F X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/RkfnHlMWqqRDNSvEFIh8QF7tDk8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.210.43.0/24 78.135.103.0/24 188.132.215.0/24 188.132.237.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:59:17:7f:94:cf:21:54:a2:49:f3:63:b3:37:d3:ee:50:ab: 23:7d:30:76:e8:ed:45:1a:61:df:86:53:b7:36:d0:19:76:4d: f4:f7:af:be:c3:7c:ce:87:4b:d8:0c:58:e3:86:14:25:01:7d: 15:ce:e7:78:a6:dc:f8:61:94:c0:2e:eb:59:2c:b2:6d:79:20: 37:d6:01:59:7c:44:12:94:e2:d0:32:a9:47:27:42:fe:06:21: 80:43:34:e7:a8:f7:52:ce:ea:34:dc:97:52:5b:44:3a:a4:29: f9:99:e9:5a:9b:85:4e:89:c4:b7:fc:5e:07:ef:b9:87:92:81: 47:ad:9c:c4:b2:d3:3a:59:88:e4:29:70:d9:30:42:b5:c5:73: 81:47:a8:12:f0:04:52:27:5a:b9:e6:09:c5:33:58:92:6f:2f: 98:d2:1b:18:0b:47:3d:a9:88:a1:c7:e3:42:ae:e6:d7:dd:76: b0:81:f2:bb:0d:3d:2a:3d:39:5f:78:c1:a8:38:82:af:7a:8d: 5e:f6:91:48:12:00:16:e0:ae:3e:50:61:04:c6:a3:a5:51:8a: f3:74:09:5f:ed:4c:e3:8a:a4:a9:08:c5:e9:dd:fa:a9:fc:fa: f9:d0:9f:42:cd:fb:22:40:ce:44:70:9c:5f:53:da:17:c2:c4: d2:3b:f0:f5 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt5EFOrrlD2Lmc/CIzrgBJVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjQ3ZTcxZTUzMTZhYWE0NDMzNTJiYzQxNDg4N2M0MDVlZWQwZTRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9xmXhzI2nPRThtkoFwzj+IQUPDm 7R4CukrjP+k0O3zkayWxpTQwXgJrjXsXbZkVK+UzqRJB2rmYp+WDLOCXis88bDNg pResOCo6NUHBWM7ss11HrY8zaaJw6Nwp9uiB7SqF1ZZNWT5yBqfT8MIbNYw5l+o/ UiYj6pkMNr9I1Pxrjf41haqI0trx2NBBA300YML0TCHxSVfSB1O1Qdctk6SgxMu0 IHgLH+5kQmd5vB3Ne1qzsT9Caq3xjOKUoMbShMVN36W56Ox8xrV/jnv9tljUSu3+ UUFdgeNsw3QbJyfO6PnUBFnMTCOwQiGyq52xVa0RcFyftYBqWIxgRXSLpQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFEZH5x5TFqqkQzUrxBSIfEBe7Q5PMB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvUmtmbkhsTVdxcVJETlN2RUZJaDhRRjd0RGs4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAH9IrAwQA TodnAwQAvITXAwQAvITtMA0GCSqGSIb3DQEBCwUAA4IBAQANWRd/lM8hVKJJ82Oz N9PuUKsjfTB26O1FGmHfhlO3NtAZdk3096++w3zOh0vYDFjjhhQlAX0Vzud4ptz4 YZTALutZLLJteSA31gFZfEQSlOLQMqlHJ0L+BiGAQzTnqPdSzuo03JdSW0Q6pCn5 melam4VOicS3/F4H77mHkoFHrZzEstM6WYjkKXDZMEK1xXOBR6gS8ARSJ1q55gnF M1iSby+Y0hsYC0c9qYihx+NCrubX3XawgfK7DT0qPTlfeMGoOIKveo1e9pFIEgAW 4K4+UGEExqOlUYrzdAlf7UzjiqSpCMXp3fqp/Pr50J9CzfsiQM5EcJxfU9oXwsTS O/D1 -----END CERTIFICATE-----Generated at Wed Jan 21 10:50:52 2026 by rpki-client