This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/ckfmY3WSPr_4BWpV0qlaPUwbu8I.roa File: ckfmY3WSPr_4BWpV0qlaPUwbu8I.roa (raw, json) Hash identifier: rA5xc/5hb1tqN7XSQMe8RP1nVeaWX6f+VPTMMamNxv0= Subject key identifier: 72:47:E6:63:75:92:3E:BF:F8:05:6A:55:D2:A9:5A:3D:4C:1B:BB:C2 Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2 Certificate serial: 019B7B363048F3533B71ECC54EC4A93D8C5C Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/ckfmY3WSPr_4BWpV0qlaPUwbu8I.roa Signing time: Thu 01 Jan 2026 20:18:27 +0000 ROA not before: Thu 01 Jan 2026 20:18:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 64267 IP address blocks: 171.22.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 00:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:30:48:f3:53:3b:71:ec:c5:4e:c4:a9:3d:8c:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94166b704843d3d9754095c83a91b493828200a2 Validity Not Before: Jan 1 20:18:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7247e66375923ebff8056a55d2a95a3d4c1bbbc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0f:2a:41:bf:e4:89:f7:79:27:89:be:a9:5f: 36:59:6a:19:3f:f1:08:58:a6:0f:67:c7:38:4f:11: db:10:84:8d:6f:02:04:1b:42:e3:e8:b5:75:15:96: ee:9b:98:95:b2:9b:79:01:8b:54:d1:c2:0e:c5:e7: 2c:8f:34:f8:eb:d2:41:92:a4:fc:96:98:73:f3:e1: 25:19:1a:09:51:dc:80:bb:95:20:0c:45:90:1f:8f: 36:44:fc:0d:24:b0:f6:03:b2:ea:84:91:96:a9:2b: 3b:e0:73:b9:6d:d9:83:95:07:8a:aa:97:82:b8:5b: 00:49:70:19:7f:03:15:cd:87:da:7d:94:61:58:d4: 0a:a2:d8:5a:e8:40:62:67:3e:c8:cf:ed:e9:14:5d: 13:75:eb:1e:81:68:5c:5d:71:fb:a3:80:4d:d7:01: 54:e0:73:74:8f:2e:87:b6:0e:8e:2b:94:c4:ed:57: ce:97:84:cb:50:e8:6f:3f:61:a8:51:0b:09:e3:bb: d6:30:47:c4:63:9f:1c:26:42:84:b3:91:f6:50:cf: 1a:ab:6b:65:96:6f:50:03:47:6b:bd:2c:24:2e:0a: c4:77:3e:a9:bb:b7:82:b2:d9:19:7a:d5:6a:04:db: 39:bb:40:8e:b5:51:3b:70:65:26:74:78:4c:64:1c: 6e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:47:E6:63:75:92:3E:BF:F8:05:6A:55:D2:A9:5A:3D:4C:1B:BB:C2 X509v3 Authority Key Identifier: keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/ckfmY3WSPr_4BWpV0qlaPUwbu8I.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 171.22.147.0/24 Signature Algorithm: sha256WithRSAEncryption 73:cf:d1:c2:d2:14:72:a7:8e:90:a3:6d:ef:c2:4c:f5:0e:53: 71:57:67:63:3d:ba:04:47:01:d4:51:c5:c5:ed:74:ec:2b:45: 11:6a:31:d7:7e:2b:48:6c:9d:e9:2f:d0:5f:d5:ed:3c:80:58: e5:91:05:9a:fa:d9:8d:f4:8a:b9:9c:4b:db:2e:42:34:97:66: 77:60:32:ef:0e:47:14:3e:f2:90:c4:d8:e5:30:3a:a4:14:7b: 5e:c8:6e:02:61:e7:4c:28:e5:4e:99:16:0f:1a:15:b4:38:eb: ab:e4:4f:52:9a:41:ea:b6:3d:38:e8:41:4c:6d:32:37:d1:1b: 37:fc:9a:18:67:c3:0a:c2:00:5c:0c:f7:a1:58:07:1c:4d:7d: 6c:59:71:b6:77:5c:c2:3e:10:72:6c:6a:ae:fb:2c:fa:bc:16: aa:bd:ed:4b:e1:cb:1f:47:46:f9:f9:bd:ec:cb:9d:48:c3:37: d4:24:42:5b:8c:8b:e7:e9:c2:a5:86:b3:84:d9:e1:bb:31:73: f7:85:91:98:d2:13:0e:7b:c4:ba:e4:45:c6:78:cf:1d:e0:5b: 66:2f:55:c9:73:ad:09:04:a7:2b:dd:3d:33:3a:3e:d2:16:da: ea:f6:05:97:90:49:00:ea:28:fc:49:0f:1a:2a:ad:ef:b1:6b: 2d:24:a8:44 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NjBI81M7cezFTsSpPYxcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0MTY2YjcwNDg0M2QzZDk3NTQwOTVjODNhOTFiNDkzODI4 MjAwYTIwHhcNMjYwMTAxMjAxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MjQ3ZTY2Mzc1OTIzZWJmZjgwNTZhNTVkMmE5NWEzZDRjMWJiYmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2A8qQb/kifd5J4m+qV82WWoZP/EI WKYPZ8c4TxHbEISNbwIEG0Lj6LV1FZbum5iVspt5AYtU0cIOxecsjzT469JBkqT8 lphz8+ElGRoJUdyAu5UgDEWQH482RPwNJLD2A7LqhJGWqSs74HO5bdmDlQeKqpeC uFsASXAZfwMVzYfafZRhWNQKotha6EBiZz7Iz+3pFF0TdesegWhcXXH7o4BN1wFU 4HN0jy6Htg6OK5TE7VfOl4TLUOhvP2GoUQsJ47vWMEfEY58cJkKEs5H2UM8aq2tl lm9QA0drvSwkLgrEdz6pu7eCstkZetVqBNs5u0COtVE7cGUmdHhMZBxuvQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHJH5mN1kj6/+AVqVdKpWj1MG7vCMB8GA1UdIwQY MBaAFJQWa3BIQ9PZdUCVyDqRtJOCggCiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYt NGJlMThlZjEyOGI0LzEvY2tmbVkzV1NQcl80QldwVjBxbGFQVXdidThJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi80M2ZmOGYtY2Q1NC00Y2YxLThhYWYtNGJlMThlZjEyOGI0 LzEvbEJacmNFaEQwOWwxUUpYSU9wRzBrNEtDQUtJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqxaTMA0G CSqGSIb3DQEBCwUAA4IBAQBzz9HC0hRyp46Qo23vwkz1DlNxV2djPboERwHUUcXF 7XTsK0URajHXfitIbJ3pL9Bf1e08gFjlkQWa+tmN9Iq5nEvbLkI0l2Z3YDLvDkcU PvKQxNjlMDqkFHteyG4CYedMKOVOmRYPGhW0OOur5E9SmkHqtj046EFMbTI30Rs3 /JoYZ8MKwgBcDPehWAccTX1sWXG2d1zCPhBybGqu+yz6vBaqve1L4csfR0b5+b3s y51IwzfUJEJbjIvn6cKlhrOE2eG7MXP3hZGY0hMOe8S65EXGeM8d4FtmL1XJc60J BKcr3T0zOj7SFtrq9gWXkEkA6ij8SQ8aKq3vsWstJKhE -----END CERTIFICATE-----Generated at Mon Jan 19 10:37:10 2026 by rpki-client