This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/TdpVXYRbcj1oVpJti36rmAOO4Dc.roa File: TdpVXYRbcj1oVpJti36rmAOO4Dc.roa (raw, json) Hash identifier: Z6iQYWPSYMo1m0hPExoVNNkTd4vIXcfz8UJUjPoGkdU= Subject key identifier: 4D:DA:55:5D:84:5B:72:3D:68:56:92:6D:8B:7E:AB:98:03:8E:E0:37 Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B7910680F83F22F4C844293FED099DA96 Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/TdpVXYRbcj1oVpJti36rmAOO4Dc.roa Signing time: Thu 01 Jan 2026 10:17:56 +0000 ROA not before: Thu 01 Jan 2026 10:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 211384 IP address blocks: 31.210.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:68:0f:83:f2:2f:4c:84:42:93:fe:d0:99:da:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4dda555d845b723d6856926d8b7eab98038ee037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7b:c5:69:2a:62:33:0b:24:a5:24:2e:b1:a8: 9c:64:91:8d:49:af:eb:af:e9:5d:ea:a9:c3:7b:7f: 92:b5:46:86:2c:d5:20:6f:43:14:fd:3a:9d:e5:4e: 5f:9a:ad:b9:93:54:b9:bf:2b:5b:5b:7e:f9:45:3a: 13:04:ee:d2:53:e3:59:d6:4d:1d:6d:ee:30:5e:6b: 13:76:4c:33:ae:69:e7:4b:fa:a6:81:5e:96:c6:ef: 68:b2:1c:82:a7:09:0b:52:97:b1:76:c6:4e:e1:00: e1:41:4c:44:6e:d0:cb:96:14:95:72:1c:06:69:74: 0b:bf:78:68:68:63:67:57:3f:15:1a:89:02:96:9b: 8e:a5:8f:ce:43:65:5e:55:ad:5f:62:19:f4:b4:d8: a6:45:0e:15:15:90:40:c8:9e:2f:a6:7e:38:41:5a: a0:d2:f9:95:b5:c8:74:69:f1:5d:7a:d5:a4:71:c6: 09:0e:08:a1:4c:e6:e8:5c:55:2f:8c:83:1d:80:e8: 17:c1:26:c8:fa:08:73:84:df:9e:65:72:c6:4a:aa: 16:42:b3:fc:51:16:ec:6d:2a:59:36:88:c2:ae:7b: ed:15:b8:1c:d6:ae:26:00:0b:bc:a2:25:c9:2e:4b: 87:b9:c9:f8:5f:7d:08:ef:af:c9:f1:b7:a1:72:ef: 0e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:DA:55:5D:84:5B:72:3D:68:56:92:6D:8B:7E:AB:98:03:8E:E0:37 X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/TdpVXYRbcj1oVpJti36rmAOO4Dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.210.49.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:61:7f:a5:ca:f5:87:23:fb:2e:97:5e:5a:e6:d8:b8:da:d5: ba:58:13:58:55:85:d7:79:a5:54:82:f0:d7:cb:3b:4e:b5:43: c1:96:2c:b4:3f:1c:de:07:28:94:2c:b5:fd:20:71:d7:fd:4c: 1a:98:2e:46:67:31:4e:34:dd:cc:86:9b:77:e5:86:78:2c:71: 45:59:1c:71:40:be:4f:b5:da:9e:a0:44:4f:e7:d3:97:3a:4e: 77:8b:2a:2b:aa:93:64:c3:e2:eb:bc:05:69:56:eb:ef:7c:a5: 13:9c:0d:54:b1:b2:15:a0:16:79:db:36:83:42:fc:92:d6:6d: d2:d4:0b:90:ff:04:b2:00:f5:a7:11:a3:e8:4c:9b:9b:b0:29: bb:5f:8f:f0:85:a2:00:61:48:60:eb:a7:34:bd:de:9b:30:82: 1b:39:1f:35:18:82:1a:fb:b7:93:cb:ca:87:e3:ad:a0:47:fb: 0f:3b:4a:35:a9:8e:d9:bb:d3:87:ee:d8:76:5d:69:00:d0:f9: 2b:c6:e2:a8:d3:8f:54:92:21:08:7b:61:8b:a4:5c:78:7e:57: 30:fb:a0:05:39:e6:99:e1:d5:a0:79:07:95:f6:54:cc:bc:9f: 6a:fb:88:0f:98:19:e3:fc:a4:c5:e9:29:d9:06:41:c5:92:60: 9e:e7:94:9b -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EGgPg/IvTIRCk/7QmdqWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0ZGRhNTU1ZDg0NWI3MjNkNjg1NjkyNmQ4YjdlYWI5ODAzOGVlMDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHvFaSpiMwskpSQusaicZJGNSa/r r+ld6qnDe3+StUaGLNUgb0MU/Tqd5U5fmq25k1S5vytbW375RToTBO7SU+NZ1k0d be4wXmsTdkwzrmnnS/qmgV6Wxu9oshyCpwkLUpexdsZO4QDhQUxEbtDLlhSVchwG aXQLv3hoaGNnVz8VGokClpuOpY/OQ2VeVa1fYhn0tNimRQ4VFZBAyJ4vpn44QVqg 0vmVtch0afFdetWkccYJDgihTOboXFUvjIMdgOgXwSbI+ghzhN+eZXLGSqoWQrP8 URbsbSpZNojCrnvtFbgc1q4mAAu8oiXJLkuHucn4X30I76/J8behcu8OyQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFE3aVV2EW3I9aFaSbYt+q5gDjuA3MB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvVGRwVlhZUmJjajFvVnBKdGkzNnJtQU9PNERjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAH9IxMA0G CSqGSIb3DQEBCwUAA4IBAQBPYX+lyvWHI/sul15a5ti42tW6WBNYVYXXeaVUgvDX yztOtUPBliy0PxzeByiULLX9IHHX/UwamC5GZzFONN3Mhpt35YZ4LHFFWRxxQL5P tdqeoERP59OXOk53iyorqpNkw+LrvAVpVuvvfKUTnA1UsbIVoBZ52zaDQvyS1m3S 1AuQ/wSyAPWnEaPoTJubsCm7X4/whaIAYUhg66c0vd6bMIIbOR81GIIa+7eTy8qH 462gR/sPO0o1qY7Zu9OH7th2XWkA0PkrxuKo049UkiEIe2GLpFx4flcw+6AFOeaZ 4dWgeQeV9lTMvJ9q+4gPmBnj/KTF6SnZBkHFkmCe55Sb -----END CERTIFICATE-----Generated at Wed Jan 21 13:31:51 2026 by rpki-client