This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/F_4HRfGZ4DSq8Yan6ITw9ijxBSw.roa File: F_4HRfGZ4DSq8Yan6ITw9ijxBSw.roa (raw, json) Hash identifier: N5WEBXopx2PPKlcC41tM4IKPvt/ddBOWJi67v3cU+5Q= Subject key identifier: 17:FE:07:45:F1:99:E0:34:AA:F1:86:A7:E8:84:F0:F6:28:F1:05:2C Certificate issuer: /CN=5690efa23c778ef7470f3ac0a905619bc7c277e4 Certificate serial: 019B7B36EBA97135AAF253ABDEC241DFDBDF Authority key identifier: 56:90:EF:A2:3C:77:8E:F7:47:0F:3A:C0:A9:05:61:9B:C7:C2:77:E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VpDvojx3jvdHDzrAqQVhm8fCd-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/F_4HRfGZ4DSq8Yan6ITw9ijxBSw.roa Signing time: Thu 01 Jan 2026 20:19:15 +0000 ROA not before: Thu 01 Jan 2026 20:19:15 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 137 IP address blocks: 141.250.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/VpDvojx3jvdHDzrAqQVhm8fCd-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/VpDvojx3jvdHDzrAqQVhm8fCd-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/VpDvojx3jvdHDzrAqQVhm8fCd-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:36:eb:a9:71:35:aa:f2:53:ab:de:c2:41:df:db:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5690efa23c778ef7470f3ac0a905619bc7c277e4 Validity Not Before: Jan 1 20:19:15 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=17fe0745f199e034aaf186a7e884f0f628f1052c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:3a:4a:60:e6:58:ca:87:f4:a6:5f:d8:8d:c9: bc:d1:79:04:8b:6e:28:59:8b:66:1b:17:3c:fe:28: fd:a2:eb:0e:9a:2a:01:de:7b:c8:0a:d6:b7:0f:fc: b1:12:00:a9:69:17:8d:ff:b3:f5:6e:ef:e3:97:8c: 45:43:e4:02:84:a9:c3:f7:73:df:52:c3:b7:2a:57: 32:99:b1:b9:36:8f:b8:b2:68:55:e0:f4:83:fe:28: c4:6e:78:c1:d9:3a:5d:e3:d7:1c:55:10:60:f1:62: 2e:a3:26:9d:60:a2:67:8c:71:91:24:81:69:4b:e1: b0:8f:e1:ac:91:60:ae:95:21:43:1f:6d:87:71:fe: ff:61:88:d3:89:cf:76:7b:f2:75:47:9f:0f:5a:37: 61:9c:fd:70:4f:eb:15:6f:02:97:ab:6a:a6:8f:19: f7:fb:e4:a1:a6:b4:41:d7:74:37:16:c9:60:da:d4: d8:49:24:b2:1d:44:52:5e:85:a1:1b:4c:84:7d:ae: 83:23:cc:a8:06:4f:e5:c1:f7:a4:c2:a3:90:8e:af: e7:cb:50:05:0a:bc:91:47:5f:12:9d:25:59:3a:a2: 79:7c:f3:83:9a:2e:bc:3f:be:11:a0:ea:87:58:54: 52:35:cf:0f:cc:df:59:41:91:8f:80:3d:f3:dc:c7: 15:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:FE:07:45:F1:99:E0:34:AA:F1:86:A7:E8:84:F0:F6:28:F1:05:2C X509v3 Authority Key Identifier: keyid:56:90:EF:A2:3C:77:8E:F7:47:0F:3A:C0:A9:05:61:9B:C7:C2:77:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VpDvojx3jvdHDzrAqQVhm8fCd-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/F_4HRfGZ4DSq8Yan6ITw9ijxBSw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6b547f-cebd-48b5-bdcb-83ae2f214121/1/VpDvojx3jvdHDzrAqQVhm8fCd-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 141.250.0.0/16 Signature Algorithm: sha256WithRSAEncryption 76:98:57:09:53:7f:19:5b:39:27:9d:f8:b9:c6:9a:80:dc:d5: b1:d4:1e:4c:e5:1d:c4:c4:1d:c4:7e:f2:cb:49:20:ec:6a:ce: 09:b8:16:89:0c:13:bd:f1:74:79:be:f1:45:c1:08:93:da:21: a7:c8:65:16:4c:74:45:51:7d:1d:bf:4d:50:ad:db:35:51:ff: 94:b5:d4:b0:53:a2:4a:4b:91:1d:bb:37:05:dd:59:96:a7:50: 66:33:b1:15:25:6c:a9:8b:df:5d:bd:3a:d7:7c:8f:76:7c:8e: 54:0d:a8:c9:e0:a5:e1:49:d0:63:a6:77:af:a4:30:6e:e1:9c: d8:b4:c0:62:e4:ac:c2:ba:0f:20:f8:67:14:26:b7:d0:65:04: 74:3e:25:74:a4:4f:5f:17:3d:6c:bb:6e:5c:1b:f2:83:f5:0e: 51:e3:f9:55:d0:cd:d2:59:90:56:fd:a0:4e:e3:94:21:32:bf: ea:db:cf:bd:69:eb:6a:83:12:63:19:3e:88:9c:98:1f:19:cd: b2:fb:17:a2:23:ad:57:f7:fc:89:96:69:38:5b:0f:e3:3f:f9: 28:27:0a:de:59:a2:a8:ef:ce:53:40:2a:8e:a3:aa:44:cf:0a: 6a:23:a9:ee:84:ce:b9:29:f9:c4:00:09:dc:4f:34:8c:7f:7b: 85:56:62:1c -----BEGIN CERTIFICATE----- MIIE/DCCA+SgAwIBAgISAZt7NuupcTWq8lOr3sJB39vfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2OTBlZmEyM2M3NzhlZjc0NzBmM2FjMGE5MDU2MTliYzdj Mjc3ZTQwHhcNMjYwMTAxMjAxOTE1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygxN2ZlMDc0NWYxOTllMDM0YWFmMTg2YTdlODg0ZjBmNjI4ZjEwNTJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zpKYOZYyof0pl/Yjcm80XkEi24o WYtmGxc8/ij9ousOmioB3nvICta3D/yxEgCpaReN/7P1bu/jl4xFQ+QChKnD93Pf UsO3KlcymbG5No+4smhV4PSD/ijEbnjB2Tpd49ccVRBg8WIuoyadYKJnjHGRJIFp S+Gwj+GskWCulSFDH22Hcf7/YYjTic92e/J1R58PWjdhnP1wT+sVbwKXq2qmjxn3 ++ShprRB13Q3Fslg2tTYSSSyHURSXoWhG0yEfa6DI8yoBk/lwfekwqOQjq/ny1AF CryRR18SnSVZOqJ5fPODmi68P74RoOqHWFRSNc8PzN9ZQZGPgD3z3McViQIDAQAB o4ICCDCCAgQwHQYDVR0OBBYEFBf+B0XxmeA0qvGGp+iE8PYo8QUsMB8GA1UdIwQY MBaAFFaQ76I8d473Rw86wKkFYZvHwnfkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnBEdm9qeDNqdmRIRHpyQXFRVmhtOGZDZC1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy82YjU0N2YtY2ViZC00OGI1LWJkY2It ODNhZTJmMjE0MTIxLzEvRl80SFJmR1o0RFNxOFlhbjZJVHc5aWp4QlN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy82YjU0N2YtY2ViZC00OGI1LWJkY2ItODNhZTJmMjE0MTIx LzEvVnBEdm9qeDNqdmRIRHpyQXFRVmhtOGZDZC1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjfowDQYJ KoZIhvcNAQELBQADggEBAHaYVwlTfxlbOSed+LnGmoDc1bHUHkzlHcTEHcR+8stJ IOxqzgm4FokME73xdHm+8UXBCJPaIafIZRZMdEVRfR2/TVCt2zVR/5S11LBTokpL kR27NwXdWZanUGYzsRUlbKmL3129Otd8j3Z8jlQNqMngpeFJ0GOmd6+kMG7hnNi0 wGLkrMK6DyD4ZxQmt9BlBHQ+JXSkT18XPWy7blwb8oP1DlHj+VXQzdJZkFb9oE7j lCEyv+rbz71p62qDEmMZPoicmB8ZzbL7F6IjrVf3/ImWaThbD+M/+SgnCt5Zoqjv zlNAKo6jqkTPCmojqe6Ezrkp+cQACdxPNIx/e4VWYhw= -----END CERTIFICATE-----Generated at Mon Feb 9 22:16:02 2026 by rpki-client