This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/sesfpS4vflQUJ0zHNMlqdR_eVFI.roa File: sesfpS4vflQUJ0zHNMlqdR_eVFI.roa (raw, json) Hash identifier: EeKCakHwf9lALKZ5zNCtLbT5f2osgE69W3ufAPv/OQY= Subject key identifier: B1:EB:1F:A5:2E:2F:7E:54:14:27:4C:C7:34:C9:6A:75:1F:DE:54:52 Certificate issuer: /CN=c412bb3da65caab524851ef86ce9baa62074e1ed Certificate serial: 019B7D5C1B3880EEA30768911D344CC99E7A Authority key identifier: C4:12:BB:3D:A6:5C:AA:B5:24:85:1E:F8:6C:E9:BA:A6:20:74:E1:ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBK7PaZcqrUkhR74bOm6piB04e0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/sesfpS4vflQUJ0zHNMlqdR_eVFI.roa Signing time: Fri 02 Jan 2026 06:19:06 +0000 ROA not before: Fri 02 Jan 2026 06:19:06 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 3257 IP address blocks: 94.127.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.mft rsync://rpki.ripe.net/repository/DEFAULT/xBK7PaZcqrUkhR74bOm6piB04e0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 03 Jan 2026 06:21:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:1b:38:80:ee:a3:07:68:91:1d:34:4c:c9:9e:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c412bb3da65caab524851ef86ce9baa62074e1ed Validity Not Before: Jan 2 06:19:06 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b1eb1fa52e2f7e5414274cc734c96a751fde5452 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ad:a6:4c:b1:2a:f6:16:46:59:9c:07:1b:76: 4d:d0:6c:74:94:8a:75:31:1a:f5:32:3c:fd:c0:9d: 45:f0:3b:1c:b3:33:84:22:d3:7f:07:26:61:d8:a0: 0a:0c:07:71:b2:eb:10:4b:cc:f3:44:1f:a5:e5:f8: c5:cd:f3:96:a4:34:3c:b6:9f:a1:0d:49:f7:89:05: 82:e3:fd:ca:64:88:00:0c:99:fd:f9:43:12:f9:c8: cc:34:1a:f6:7f:fe:81:7a:60:db:53:96:78:16:74: 6a:20:99:36:2d:a2:f5:07:62:73:50:90:0e:23:d9: 66:8b:6c:f0:f5:57:c5:61:e8:03:8a:74:ec:83:3c: 72:41:a4:b5:44:d9:47:28:e5:ec:91:76:de:ce:8e: e3:dc:31:7e:05:df:3d:12:8d:38:c4:ce:f4:88:15: d2:ba:24:4b:81:55:c7:69:0a:92:49:8a:03:e7:a6: 86:03:d1:11:09:1b:b4:b5:ff:3b:3d:80:18:87:61: d1:a6:d6:31:e2:df:54:a9:59:ad:ea:f9:64:68:c0: 58:e0:5c:fa:2c:7f:2e:f3:ff:0b:3e:18:5b:50:42: fe:7e:0c:e1:13:18:98:b3:b0:bd:40:a0:bf:8e:61: e4:a0:25:0c:40:3f:16:11:fe:6d:54:70:b7:41:08: 88:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:EB:1F:A5:2E:2F:7E:54:14:27:4C:C7:34:C9:6A:75:1F:DE:54:52 X509v3 Authority Key Identifier: keyid:C4:12:BB:3D:A6:5C:AA:B5:24:85:1E:F8:6C:E9:BA:A6:20:74:E1:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBK7PaZcqrUkhR74bOm6piB04e0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/sesfpS4vflQUJ0zHNMlqdR_eVFI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c7871c-51d9-463d-acb8-9b932ecd2ecc/1/xBK7PaZcqrUkhR74bOm6piB04e0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.127.40.0/21 Signature Algorithm: sha256WithRSAEncryption c4:c6:e8:73:81:31:1e:74:51:56:6a:30:84:dd:cf:f4:51:97: be:41:cb:22:4c:07:1a:9b:8f:4d:0e:dc:31:b8:5a:77:a1:43: 6f:d4:bc:47:87:69:24:58:b6:91:e9:62:a4:48:07:5f:e3:9b: 9a:a5:f2:b4:14:6a:de:23:19:c0:65:3c:26:71:f5:fb:44:55: 2e:f1:c9:08:89:98:26:b9:95:c9:50:29:b6:3e:5c:94:05:1b: 0d:7f:ec:ca:7e:4b:98:2f:bd:80:b8:f8:20:9b:d9:2e:f6:52: db:7d:fd:81:ac:f4:c7:3a:ce:65:72:d5:2b:97:18:2b:80:e6: e9:4b:ff:d8:3e:12:3f:c8:e1:75:49:24:f0:fa:55:18:c9:c0: 72:09:f7:9a:ab:7f:dc:40:3b:9d:b6:5e:48:6c:54:89:58:8f: 01:31:99:04:c2:c9:85:90:9a:4d:ea:42:44:d3:3d:b3:b9:12: 94:4e:31:c0:16:af:c0:2a:ab:db:0e:1e:e7:aa:93:ff:77:20: 32:60:cb:7e:97:3d:80:4f:10:4d:62:54:71:3f:1d:8c:cb:b8: 89:d5:d9:b8:52:da:a4:53:3e:eb:fa:1e:03:d0:d1:ed:da:e5: 2c:b4:e0:56:0e:dd:c8:b8:00:59:0b:55:ef:4a:59:f8:92:c9: ff:90:be:d6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XBs4gO6jB2iRHTRMyZ56MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0MTJiYjNkYTY1Y2FhYjUyNDg1MWVmODZjZTliYWE2MjA3 NGUxZWQwHhcNMjYwMTAyMDYxOTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMWViMWZhNTJlMmY3ZTU0MTQyNzRjYzczNGM5NmE3NTFmZGU1NDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAla2mTLEq9hZGWZwHG3ZN0Gx0lIp1 MRr1Mjz9wJ1F8DscszOEItN/ByZh2KAKDAdxsusQS8zzRB+l5fjFzfOWpDQ8tp+h DUn3iQWC4/3KZIgADJn9+UMS+cjMNBr2f/6BemDbU5Z4FnRqIJk2LaL1B2JzUJAO I9lmi2zw9VfFYegDinTsgzxyQaS1RNlHKOXskXbezo7j3DF+Bd89Eo04xM70iBXS uiRLgVXHaQqSSYoD56aGA9ERCRu0tf87PYAYh2HRptYx4t9UqVmt6vlkaMBY4Fz6 LH8u8/8LPhhbUEL+fgzhExiYs7C9QKC/jmHkoCUMQD8WEf5tVHC3QQiIewIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLHrH6UuL35UFCdMxzTJanUf3lRSMB8GA1UdIwQY MBaAFMQSuz2mXKq1JIUe+GzpuqYgdOHtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEJLN1BhWmNxclVraFI3NGJPbTZwaUIwNGUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jNzg3MWMtNTFkOS00NjNkLWFjYjgt OWI5MzJlY2QyZWNjLzEvc2VzZnBTNHZmbFFVSjB6SE5NbHFkUl9lVkZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9jNzg3MWMtNTFkOS00NjNkLWFjYjgtOWI5MzJlY2QyZWNj LzEveEJLN1BhWmNxclVraFI3NGJPbTZwaUIwNGUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXn8oMA0G CSqGSIb3DQEBCwUAA4IBAQDExuhzgTEedFFWajCE3c/0UZe+QcsiTAcam49NDtwx uFp3oUNv1LxHh2kkWLaR6WKkSAdf45uapfK0FGreIxnAZTwmcfX7RFUu8ckIiZgm uZXJUCm2PlyUBRsNf+zKfkuYL72AuPggm9ku9lLbff2BrPTHOs5lctUrlxgrgObp S//YPhI/yOF1SSTw+lUYycByCfeaq3/cQDudtl5IbFSJWI8BMZkEwsmFkJpN6kJE 0z2zuRKUTjHAFq/AKqvbDh7nqpP/dyAyYMt+lz2ATxBNYlRxPx2My7iJ1dm4Utqk Uz7r+h4D0NHt2uUstOBWDt3IuABZC1XvSln4ksn/kL7W -----END CERTIFICATE-----Generated at Fri Jan 2 16:24:19 2026 by rpki-client