This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/aP4amYfwd0WWcLFoeJUFZN_2z3Y.roa File: aP4amYfwd0WWcLFoeJUFZN_2z3Y.roa (raw, json) Hash identifier: e9UPQfCD8OlJQt/b04/9JspsMQrcRWcXfzIfJiPwXaI= Subject key identifier: 68:FE:1A:99:87:F0:77:45:96:70:B1:68:78:95:05:64:DF:F6:CF:76 Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2 Certificate serial: 019B791051F6BF053A9380B6592882B2411B Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/aP4amYfwd0WWcLFoeJUFZN_2z3Y.roa Signing time: Thu 01 Jan 2026 10:17:51 +0000 ROA not before: Thu 01 Jan 2026 10:17:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51540 IP address blocks: 31.210.39.0/24 maxlen: 24 31.210.44.0/24 maxlen: 24 78.135.84.0/24 maxlen: 24 78.135.98.0/24 maxlen: 24 78.135.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Jan 2026 09:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:51:f6:bf:05:3a:93:80:b6:59:28:82:b2:41:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2 Validity Not Before: Jan 1 10:17:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=68fe1a9987f077459670b16878950564dff6cf76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:76:84:56:fb:ab:66:a5:e1:bb:54:d2:9b:61: e7:f1:e0:ba:8e:c0:31:36:cb:3f:09:59:44:2c:04: 6a:86:95:8a:d0:bc:6d:5e:06:be:4b:ac:aa:5a:d8: f9:4c:a3:e9:bb:c0:b5:60:db:a2:15:45:d6:63:ab: 17:05:de:4e:0e:d8:f1:73:eb:12:07:dd:1d:52:7b: 69:35:2d:f8:ed:f0:2c:c8:f7:eb:c3:f8:fb:e4:b9: b7:64:db:c8:8e:56:e0:23:87:c8:10:2e:da:f8:ac: 77:d8:4b:a8:7b:1d:cc:d4:87:f0:09:f3:6d:12:ac: 2c:f6:1a:e4:8d:95:7b:d3:97:3e:4b:f5:fb:f8:f1: c9:19:28:c3:b7:98:c7:7e:7d:49:c6:53:eb:03:81: 1a:91:5a:32:43:f1:af:58:dc:0b:c3:f9:e7:97:62: 9f:63:74:e2:9c:e6:85:55:18:8f:7c:b3:2c:b4:51: 41:6a:c1:2a:4c:1f:7b:c1:43:77:fb:bc:ff:a3:a8: 91:ea:c8:32:e7:ee:0b:20:a6:d1:40:04:f4:8d:ad: 7c:ca:9d:0f:84:74:ae:88:24:15:2a:3a:b8:0a:a6: 8f:b4:c6:80:65:4f:78:59:eb:e8:56:60:5d:b7:86: 20:2f:80:43:36:0f:1f:78:90:67:fc:f4:ec:2f:f9: f6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:FE:1A:99:87:F0:77:45:96:70:B1:68:78:95:05:64:DF:F6:CF:76 X509v3 Authority Key Identifier: keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/aP4amYfwd0WWcLFoeJUFZN_2z3Y.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.210.39.0/24 31.210.44.0/24 78.135.84.0/24 78.135.98.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:ac:73:a8:bd:91:d9:ea:20:da:d8:8d:b7:ae:01:49:29:4f: 49:52:e1:17:33:5f:5a:31:24:6d:34:3e:60:e3:44:9f:65:df: 24:aa:4c:16:b9:03:6d:50:9b:84:64:b6:05:64:24:01:6e:4a: 23:3d:ad:85:44:7d:48:04:3a:77:7f:b0:fe:53:55:6b:36:06: fc:ed:43:f8:ed:6f:fd:a6:49:f9:5b:97:45:b2:1a:9f:20:e6: cf:99:2c:5e:31:bf:02:16:34:ab:03:ff:fb:c7:2d:8f:2f:f5: 99:07:61:dc:8d:48:9e:4b:b1:f2:63:d6:7d:86:5d:28:86:9f: 4c:3c:50:bc:26:1c:4f:ba:b0:95:32:72:df:0b:3e:4b:09:cb: 57:ee:bb:b0:65:f3:d0:27:5b:93:e0:e4:ca:04:93:5a:98:58: af:60:6d:fd:d9:6a:24:63:40:da:fb:7c:11:46:31:05:02:cc: 3f:f6:be:fb:8b:c8:29:c2:93:93:24:c2:24:1b:76:51:21:6a: 7c:61:f2:f7:c5:f7:8f:c5:dd:ae:79:f3:11:dc:47:64:19:ec: 00:1e:cc:15:04:84:51:d9:17:9c:f7:c2:a5:26:48:fe:17:17: a9:a4:9a:a7:7d:4f:1e:48:07:0f:c1:6f:c3:67:df:6f:b7:32: ed:a5:df:5b -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt5EFH2vwU6k4C2WSiCskEbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx OTJjYTIwHhcNMjYwMTAxMTAxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2OGZlMWE5OTg3ZjA3NzQ1OTY3MGIxNjg3ODk1MDU2NGRmZjZjZjc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XaEVvurZqXhu1TSm2Hn8eC6jsAx Nss/CVlELARqhpWK0LxtXga+S6yqWtj5TKPpu8C1YNuiFUXWY6sXBd5ODtjxc+sS B90dUntpNS347fAsyPfrw/j75Lm3ZNvIjlbgI4fIEC7a+Kx32Euoex3M1IfwCfNt Eqws9hrkjZV705c+S/X7+PHJGSjDt5jHfn1JxlPrA4EakVoyQ/GvWNwLw/nnl2Kf Y3TinOaFVRiPfLMstFFBasEqTB97wUN3+7z/o6iR6sgy5+4LIKbRQAT0ja18yp0P hHSuiCQVKjq4CqaPtMaAZU94WevoVmBdt4YgL4BDNg8feJBn/PTsL/n2kQIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFGj+GpmH8HdFlnCxaHiVBWTf9s92MB8GA1UdIwQY MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt NGUxOThmMGE2MDEzLzEvYVA0YW1ZZndkMFdXY0xGb2VKVUZaTl8yejNZLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAH9InAwQA H9IsAwQATodUAwQBTodiMA0GCSqGSIb3DQEBCwUAA4IBAQAcrHOovZHZ6iDa2I23 rgFJKU9JUuEXM19aMSRtND5g40SfZd8kqkwWuQNtUJuEZLYFZCQBbkojPa2FRH1I BDp3f7D+U1VrNgb87UP47W/9pkn5W5dFshqfIObPmSxeMb8CFjSrA//7xy2PL/WZ B2HcjUieS7HyY9Z9hl0ohp9MPFC8JhxPurCVMnLfCz5LCctX7ruwZfPQJ1uT4OTK BJNamFivYG392WokY0Da+3wRRjEFAsw/9r77i8gpwpOTJMIkG3ZRIWp8YfL3xfeP xd2uefMR3EdkGewAHswVBIRR2Rec98KlJkj+FxeppJqnfU8eSAcPwW/DZ99vtzLt pd9b -----END CERTIFICATE-----Generated at Wed Jan 21 13:32:41 2026 by rpki-client