This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/csk4BDz5s79i6tCuRhaWetkbfYE.roa File: csk4BDz5s79i6tCuRhaWetkbfYE.roa (raw, json) Hash identifier: y6UPDjUC5Ue0t7W29lJsgRf1Q1DAQIYmF8ZHDpBKink= Subject key identifier: 72:C9:38:04:3C:F9:B3:BF:62:EA:D0:AE:46:16:96:7A:D9:1B:7D:81 Certificate issuer: /CN=ae1ef3d626a754e43d07c700d0513c114b660ef5 Certificate serial: 019B7EA4DF03597EB780A14C04D8EB5DDFC6 Authority key identifier: AE:1E:F3:D6:26:A7:54:E4:3D:07:C7:00:D0:51:3C:11:4B:66:0E:F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/csk4BDz5s79i6tCuRhaWetkbfYE.roa Signing time: Fri 02 Jan 2026 12:18:12 +0000 ROA not before: Fri 02 Jan 2026 12:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56647 IP address blocks: 2.56.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a4:df:03:59:7e:b7:80:a1:4c:04:d8:eb:5d:df:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae1ef3d626a754e43d07c700d0513c114b660ef5 Validity Not Before: Jan 2 12:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=72c938043cf9b3bf62ead0ae4616967ad91b7d81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:43:2d:b8:08:24:ae:30:2f:76:fb:04:4b:ff: 62:9b:b6:06:d0:14:b8:56:1f:ac:91:6d:83:cc:46: 59:77:46:03:37:86:7d:e5:3c:f5:ec:7b:2f:6e:10: a4:c8:00:a9:a6:bd:fd:e2:25:71:d1:a0:f9:da:9e: b3:8a:3a:82:3e:34:ff:48:19:fc:f4:de:68:78:87: 64:77:84:59:40:0c:c5:df:ad:c9:85:22:15:48:24: e8:2f:79:00:b9:5a:69:b4:e1:10:75:33:32:7c:10: 1d:dd:35:e3:2b:ec:34:e9:8b:c8:39:5f:ac:11:9f: 5e:ba:bb:0d:2e:4a:7e:d7:b7:28:04:6a:26:e4:83: a7:29:67:a3:6f:a3:9d:81:92:2d:74:1a:0b:de:e5: c9:c8:18:0e:08:45:66:ce:fa:0b:30:18:79:df:f6: 22:e0:ae:50:4b:e8:d8:38:f1:d3:88:b4:30:b6:7b: 76:f6:1e:56:0d:6d:64:0e:ff:ee:8f:d5:57:fa:c3: 4b:05:71:3f:b8:fe:a9:f6:64:ae:d8:28:fe:86:55: 2b:1e:85:0f:b5:91:f3:29:c8:5f:bc:83:17:86:92: 71:02:a3:31:15:d3:7c:a0:7f:b5:e9:0b:63:d1:0a: c0:71:9b:b1:da:b6:1a:89:7e:5f:8c:e3:03:f2:d8: d8:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C9:38:04:3C:F9:B3:BF:62:EA:D0:AE:46:16:96:7A:D9:1B:7D:81 X509v3 Authority Key Identifier: keyid:AE:1E:F3:D6:26:A7:54:E4:3D:07:C7:00:D0:51:3C:11:4B:66:0E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/csk4BDz5s79i6tCuRhaWetkbfYE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 2.56.147.0/24 Signature Algorithm: sha256WithRSAEncryption b8:d7:00:7c:d6:5a:90:25:d1:47:a2:8d:8f:33:cc:db:8b:7a: e6:0b:1a:b4:a6:c5:53:ca:3b:44:82:d5:48:4f:b6:01:a2:36: ce:ea:ac:1c:59:aa:31:1b:e5:fd:9e:4e:94:36:ce:61:65:23: 87:90:6b:01:2a:b8:df:64:64:f8:53:f3:06:4a:bc:76:af:20: 53:d1:37:e1:d2:05:27:02:e6:7f:bc:0a:73:05:74:c9:57:8a: 68:55:70:6b:ba:e9:83:16:9d:e9:25:74:fb:22:3e:d0:5e:16: a0:95:19:83:e3:47:04:6a:7f:ed:56:ae:b2:d6:62:17:2d:36: 44:2f:00:a6:2f:54:a3:96:32:f7:86:27:e1:e3:e2:0e:2f:0d: 87:55:b6:6a:39:84:88:fd:83:de:25:32:e5:ee:65:b7:18:0d: 3a:0f:01:05:7b:f5:c2:29:30:fb:04:6c:ac:ac:50:bb:0c:35: 29:ef:e2:ab:4f:7e:39:26:2a:5e:64:a8:24:f5:8c:59:2e:4e: e4:52:86:4d:ef:49:1c:c4:7d:f6:f2:bc:1a:14:c4:6d:65:80: 54:56:af:85:ab:2d:ee:b5:d8:88:0a:3b:f7:eb:a5:63:2d:da: 21:9b:0b:b5:4b:c7:7b:17:8d:3a:d3:3e:e8:1e:d6:fc:ba:6a: 76:d1:43:0e -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pN8DWX63gKFMBNjrXd/GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlMWVmM2Q2MjZhNzU0ZTQzZDA3YzcwMGQwNTEzYzExNGI2 NjBlZjUwHhcNMjYwMTAyMTIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3MmM5MzgwNDNjZjliM2JmNjJlYWQwYWU0NjE2OTY3YWQ5MWI3ZDgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEMtuAgkrjAvdvsES/9im7YG0BS4 Vh+skW2DzEZZd0YDN4Z95Tz17HsvbhCkyACppr394iVx0aD52p6zijqCPjT/SBn8 9N5oeIdkd4RZQAzF363JhSIVSCToL3kAuVpptOEQdTMyfBAd3TXjK+w06YvIOV+s EZ9eursNLkp+17coBGom5IOnKWejb6OdgZItdBoL3uXJyBgOCEVmzvoLMBh53/Yi 4K5QS+jYOPHTiLQwtnt29h5WDW1kDv/uj9VX+sNLBXE/uP6p9mSu2Cj+hlUrHoUP tZHzKchfvIMXhpJxAqMxFdN8oH+16Qtj0QrAcZux2rYaiX5fjOMD8tjYIQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFHLJOAQ8+bO/YurQrkYWlnrZG32BMB8GA1UdIwQY MBaAFK4e89Ymp1TkPQfHANBRPBFLZg71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmg3ejFpYW5WT1E5QjhjQTBGRThFVXRtRHZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hZmU5YjgtZTg4MS00NDYyLWExZWUt OGU4MWQxMzUwNzM2LzEvY3NrNEJEejVzNzlpNnRDdVJoYVdldGtiZllFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9hZmU5YjgtZTg4MS00NDYyLWExZWUtOGU4MWQxMzUwNzM2 LzEvcmg3ejFpYW5WT1E5QjhjQTBGRThFVXRtRHZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjiTMA0G CSqGSIb3DQEBCwUAA4IBAQC41wB81lqQJdFHoo2PM8zbi3rmCxq0psVTyjtEgtVI T7YBojbO6qwcWaoxG+X9nk6UNs5hZSOHkGsBKrjfZGT4U/MGSrx2ryBT0Tfh0gUn AuZ/vApzBXTJV4poVXBruumDFp3pJXT7Ij7QXhaglRmD40cEan/tVq6y1mIXLTZE LwCmL1SjljL3hifh4+IOLw2HVbZqOYSI/YPeJTLl7mW3GA06DwEFe/XCKTD7BGys rFC7DDUp7+KrT345JipeZKgk9YxZLk7kUoZN70kcxH328rwaFMRtZYBUVq+Fqy3u tdiICjv366VjLdohmwu1S8d7F4060z7oHtb8ump20UMO -----END CERTIFICATE-----Generated at Mon Feb 9 22:37:01 2026 by rpki-client