This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/RpRK_j5n7yjqTReYLx6JjLzhSB8.roa File: RpRK_j5n7yjqTReYLx6JjLzhSB8.roa (raw, json) Hash identifier: 7v0e6lCpAjSML4qRoW95hJfvj3fJQjpnRY2hXicjkYU= Subject key identifier: 46:94:4A:FE:3E:67:EF:28:EA:4D:17:98:2F:1E:89:8C:BC:E1:48:1F Certificate issuer: /CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf Certificate serial: 019A9FFC8C408D3230C2E7AD93A6DB6CE28E Authority key identifier: 54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/RpRK_j5n7yjqTReYLx6JjLzhSB8.roa Signing time: Thu 20 Nov 2025 06:38:39 +0000 ROA not before: Thu 20 Nov 2025 06:38:39 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 9304 IP address blocks: 185.101.168.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.mft rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Dec 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:9f:fc:8c:40:8d:32:30:c2:e7:ad:93:a6:db:6c:e2:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=541fdc7a2f11a5766d3ad7bdf625ce5e119a8fdf Validity Not Before: Nov 20 06:38:39 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=46944afe3e67ef28ea4d17982f1e898cbce1481f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ad:a8:5f:66:0a:eb:20:50:9d:9f:ca:ed:be: 2b:2a:fa:99:6a:ba:1b:33:c7:15:c2:db:e5:1a:31: 17:6c:34:4e:a8:d4:70:78:38:48:6d:64:5d:4d:a2: 55:42:e8:9c:61:d2:4a:aa:d0:2e:e8:b2:d1:66:89: 77:90:75:f5:bb:19:11:41:e8:08:f0:6a:5f:0d:27: cf:45:89:e3:59:bf:bf:7d:e9:c1:a1:80:e6:93:2e: 5d:11:4a:db:03:02:50:2b:41:49:af:6c:48:29:8e: bb:dc:9a:8b:d9:5a:9f:e8:4f:59:f4:e3:85:48:fe: e4:93:07:c3:c6:ce:c9:9f:01:04:30:e5:83:a4:f4: f9:35:6b:95:58:8f:5b:e0:7b:c6:50:94:8e:bb:53: 97:74:34:b1:ff:0e:e9:54:87:95:a6:86:9a:e9:cf: aa:38:31:d3:f4:53:8d:32:e8:c1:fb:9b:76:99:59: 6c:25:a2:58:16:d4:8c:04:be:4b:1d:65:0d:5f:b5: f3:3a:a7:05:67:8b:c3:10:62:49:41:91:71:5b:9f: 33:85:bb:a1:eb:eb:8a:06:45:42:e7:08:37:be:11: f6:54:63:2a:10:04:e2:f0:d9:4d:90:73:97:54:9c: 88:01:3e:a8:bf:b0:06:f2:2e:7d:c9:2e:26:9d:81: b5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:94:4A:FE:3E:67:EF:28:EA:4D:17:98:2F:1E:89:8C:BC:E1:48:1F X509v3 Authority Key Identifier: keyid:54:1F:DC:7A:2F:11:A5:76:6D:3A:D7:BD:F6:25:CE:5E:11:9A:8F:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VB_cei8RpXZtOte99iXOXhGaj98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/RpRK_j5n7yjqTReYLx6JjLzhSB8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/8fad67-bb6b-4773-b81e-c900a89f20f1/1/VB_cei8RpXZtOte99iXOXhGaj98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.101.168.0/23 Signature Algorithm: sha256WithRSAEncryption 82:c5:3f:05:3d:3c:ef:71:fa:50:c0:e6:43:38:bb:d3:1e:42: b7:78:d0:c3:8e:16:30:13:0e:2f:35:53:88:47:f5:a7:e0:46: 71:0c:d5:37:74:06:31:e8:fd:3e:f8:ee:cf:18:f9:58:68:4c: f6:db:f3:50:10:16:c4:84:81:c5:55:72:5c:e1:c0:6d:25:18: 0d:6c:8b:9e:7a:52:ce:17:76:fa:a1:ea:b9:ae:ed:e4:0a:93: 2f:fc:46:cd:4d:33:bb:ae:2e:99:fb:cc:89:e6:a3:64:58:a9: 8e:d4:f0:f6:09:c1:16:b5:f0:66:aa:d8:05:f3:1f:75:92:ba: 64:df:3b:00:e2:73:c0:1d:ea:e0:3c:43:03:2d:50:79:88:21: 42:33:24:3b:2e:99:e8:cc:86:4a:b2:6a:60:81:ff:e1:2e:ad: 78:af:9e:6b:92:a5:b9:54:0f:76:c4:a7:be:e8:d4:ad:b3:27: 98:8b:a3:e3:96:7b:09:66:2d:b9:81:29:6b:d5:ee:8a:44:16: fe:18:32:4d:3b:4b:83:c6:e7:69:79:48:77:a9:68:63:77:a6: 13:41:fd:86:0a:a7:ab:8c:be:a8:92:0e:ae:01:62:49:5d:04: a0:8c:a3:9d:68:9e:f7:34:95:92:50:dc:70:15:1d:33:38:c5: 6a:67:7b:8e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZqf/IxAjTIwwuetk6bbbOKOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU0MWZkYzdhMmYxMWE1NzY2ZDNhZDdiZGY2MjVjZTVlMTE5 YThmZGYwHhcNMjUxMTIwMDYzODM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0Njk0NGFmZTNlNjdlZjI4ZWE0ZDE3OTgyZjFlODk4Y2JjZTE0ODFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0q2oX2YK6yBQnZ/K7b4rKvqZarob M8cVwtvlGjEXbDROqNRweDhIbWRdTaJVQuicYdJKqtAu6LLRZol3kHX1uxkRQegI 8GpfDSfPRYnjWb+/fenBoYDmky5dEUrbAwJQK0FJr2xIKY673JqL2Vqf6E9Z9OOF SP7kkwfDxs7JnwEEMOWDpPT5NWuVWI9b4HvGUJSOu1OXdDSx/w7pVIeVpoaa6c+q ODHT9FONMujB+5t2mVlsJaJYFtSMBL5LHWUNX7XzOqcFZ4vDEGJJQZFxW58zhbuh 6+uKBkVC5wg3vhH2VGMqEATi8NlNkHOXVJyIAT6ov7AG8i59yS4mnYG1fwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEaUSv4+Z+8o6k0XmC8eiYy84UgfMB8GA1UdIwQY MBaAFFQf3HovEaV2bTrXvfYlzl4Rmo/fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVkJfY2VpOFJwWFp0T3RlOTlpWE9YaEdhajk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC84ZmFkNjctYmI2Yi00NzczLWI4MWUt YzkwMGE4OWYyMGYxLzEvUnBSS19qNW43eWpxVFJlWUx4NkpqTHpoU0I4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC84ZmFkNjctYmI2Yi00NzczLWI4MWUtYzkwMGE4OWYyMGYx LzEvVkJfY2VpOFJwWFp0T3RlOTlpWE9YaEdhajk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuWWoMA0G CSqGSIb3DQEBCwUAA4IBAQCCxT8FPTzvcfpQwOZDOLvTHkK3eNDDjhYwEw4vNVOI R/Wn4EZxDNU3dAYx6P0++O7PGPlYaEz22/NQEBbEhIHFVXJc4cBtJRgNbIueelLO F3b6oeq5ru3kCpMv/EbNTTO7ri6Z+8yJ5qNkWKmO1PD2CcEWtfBmqtgF8x91krpk 3zsA4nPAHergPEMDLVB5iCFCMyQ7LpnozIZKsmpggf/hLq14r55rkqW5VA92xKe+ 6NStsyeYi6PjlnsJZi25gSlr1e6KRBb+GDJNO0uDxudpeUh3qWhjd6YTQf2GCqer jL6okg6uAWJJXQSgjKOdaJ73NJWSUNxwFR0zOMVqZ3uO -----END CERTIFICATE-----Generated at Thu Dec 4 04:21:39 2025 by rpki-client