This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tITN0c5dqT4u59NCrY8WUR_VS48.roa File: tITN0c5dqT4u59NCrY8WUR_VS48.roa (raw, json) Hash identifier: 6p1Z4OPBSoJbTlTPIK2Q87SJ2eJFb8qJtHJsaQOe6hE= Subject key identifier: B4:84:CD:D1:CE:5D:A9:3E:2E:E7:D3:42:AD:8F:16:51:1F:D5:4B:8F Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Certificate serial: 019B7D5D583A7EECC68C90CB44CE78E97F7A Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tITN0c5dqT4u59NCrY8WUR_VS48.roa Signing time: Fri 02 Jan 2026 06:20:27 +0000 ROA not before: Fri 02 Jan 2026 06:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212966 IP address blocks: 139.28.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5d:58:3a:7e:ec:c6:8c:90:cb:44:ce:78:e9:7f:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b Validity Not Before: Jan 2 06:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b484cdd1ce5da93e2ee7d342ad8f16511fd54b8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:32:e8:de:ac:09:a7:72:cc:06:c7:e7:d4:25: 13:59:f0:ff:a5:45:3e:cd:23:bd:c2:31:5d:d0:bb: 2d:8b:22:5c:fa:17:60:4e:97:df:9c:28:d8:4e:49: d9:c2:7f:86:ee:26:46:ef:78:d8:2e:de:4b:84:a5: af:86:c2:39:43:b1:43:0f:27:8c:e3:cc:42:4d:ee: 52:45:40:03:ee:5f:71:96:15:46:0d:dd:9a:19:68: ac:6f:9e:48:96:e5:6c:f4:e9:5f:20:83:ab:74:0a: 5c:da:b8:ab:cf:ca:45:db:91:81:fd:13:82:af:7d: 75:eb:2c:26:7a:ec:fc:6d:ac:43:00:d6:34:30:94: a0:2f:ce:2a:e2:cf:7f:19:9f:4a:a1:3c:34:1e:bf: ad:5b:1f:5d:a8:41:e1:0b:fe:51:48:36:fc:b6:5f: f2:60:78:ea:95:e1:fa:86:a3:35:ad:e3:00:79:12: 08:fa:bf:5f:7c:0d:ff:de:ea:09:6a:3f:85:74:6c: 04:4f:68:2d:a9:42:d0:ad:0d:a9:37:4e:56:85:1e: a8:12:f1:03:f0:3b:1f:5d:0d:ff:49:8f:d6:44:65: 26:33:aa:a2:c3:59:bb:e9:4b:b3:80:2f:51:35:43: f0:43:a2:5a:d2:87:3a:47:dc:26:7d:ad:53:a8:0c: 99:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:84:CD:D1:CE:5D:A9:3E:2E:E7:D3:42:AD:8F:16:51:1F:D5:4B:8F X509v3 Authority Key Identifier: keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/tITN0c5dqT4u59NCrY8WUR_VS48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 139.28.98.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:d1:6a:80:1b:e3:58:aa:eb:09:00:6d:f6:1c:98:cf:b9:0e: fb:0d:4e:2f:fe:8c:81:b3:c6:d6:25:ee:f0:f7:a8:58:41:4d: 16:4a:27:b6:ca:b3:b4:19:e5:22:74:9f:8e:f7:7c:bd:cf:32: 2f:48:b3:00:e6:32:99:b3:88:93:f8:e6:9a:35:be:31:70:e7: 04:fe:4e:2d:b8:d1:ca:f6:d8:a4:17:79:7f:6b:16:d9:09:26: 3b:be:37:22:9c:3c:d5:43:d5:9b:f3:a9:06:2c:a8:ab:d0:a0: 29:5d:e9:67:cc:b2:84:d3:22:39:f6:b6:71:2c:17:2b:2a:ed: a5:06:e9:f4:db:d1:df:1e:74:8c:3f:5c:0a:a4:53:4b:92:0e: ee:bc:a8:60:a6:e8:a4:de:ff:e6:2b:e3:65:a2:09:0b:d4:27: f4:4a:0f:cf:9a:3b:dc:a5:62:53:34:38:9b:05:78:09:fb:61: 01:66:73:ad:69:87:ba:a8:13:ef:65:5e:f9:27:d0:19:52:4a: 86:34:50:b6:9e:44:05:be:33:55:66:b0:7f:2c:f9:0a:ae:5b: bc:81:b6:19:0d:72:9a:be:85:5e:61:16:24:67:70:eb:7c:7a: 62:f6:d9:a9:29:a8:e2:a2:5a:83:8e:7c:5a:43:0c:10:7e:93: 81:30:35:66 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XVg6fuzGjJDLRM546X96MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw ZmFkOWIwHhcNMjYwMTAyMDYyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiNDg0Y2RkMWNlNWRhOTNlMmVlN2QzNDJhZDhmMTY1MTFmZDU0YjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDLo3qwJp3LMBsfn1CUTWfD/pUU+ zSO9wjFd0LstiyJc+hdgTpffnCjYTknZwn+G7iZG73jYLt5LhKWvhsI5Q7FDDyeM 48xCTe5SRUAD7l9xlhVGDd2aGWisb55IluVs9OlfIIOrdApc2rirz8pF25GB/ROC r3116ywmeuz8baxDANY0MJSgL84q4s9/GZ9KoTw0Hr+tWx9dqEHhC/5RSDb8tl/y YHjqleH6hqM1reMAeRII+r9ffA3/3uoJaj+FdGwET2gtqULQrQ2pN05WhR6oEvED 8DsfXQ3/SY/WRGUmM6qiw1m76UuzgC9RNUPwQ6Ja0oc6R9wmfa1TqAyZ2wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLSEzdHOXak+LufTQq2PFlEf1UuPMB8GA1UdIwQY MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt ZGM1ZWM3NDhmNmE1LzEvdElUTjBjNWRxVDR1NTlOQ3JZOFdVUl9WUzQ4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1 LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAixxiMA0G CSqGSIb3DQEBCwUAA4IBAQBM0WqAG+NYqusJAG32HJjPuQ77DU4v/oyBs8bWJe7w 96hYQU0WSie2yrO0GeUidJ+O93y9zzIvSLMA5jKZs4iT+OaaNb4xcOcE/k4tuNHK 9tikF3l/axbZCSY7vjcinDzVQ9Wb86kGLKir0KApXelnzLKE0yI59rZxLBcrKu2l Bun029HfHnSMP1wKpFNLkg7uvKhgpuik3v/mK+NlogkL1Cf0Sg/PmjvcpWJTNDib BXgJ+2EBZnOtaYe6qBPvZV75J9AZUkqGNFC2nkQFvjNVZrB/LPkKrlu8gbYZDXKa voVeYRYkZ3DrfHpi9tmpKajiolqDjnxaQwwQfpOBMDVm -----END CERTIFICATE-----Generated at Fri Jan 9 13:13:44 2026 by rpki-client