This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/P41_d-OKREkue8A7QbG6bWS93yg.roa File: P41_d-OKREkue8A7QbG6bWS93yg.roa (raw, json) Hash identifier: 4T63cKmKfkswxOAQk6ynb6AaDZKx66mFM+yXG2XkVCE= Subject key identifier: 3F:8D:7F:77:E3:8A:44:49:2E:7B:C0:3B:41:B1:BA:6D:64:BD:DF:28 Certificate issuer: /CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02 Certificate serial: 019B7D5B942DB849E715D3EE96ECF79FA9EE Authority key identifier: 4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/P41_d-OKREkue8A7QbG6bWS93yg.roa Signing time: Fri 02 Jan 2026 06:18:32 +0000 ROA not before: Fri 02 Jan 2026 06:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12400 IP address blocks: 195.225.46.0/24 maxlen: 24 195.225.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.mft rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 06:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5b:94:2d:b8:49:e7:15:d3:ee:96:ec:f7:9f:a9:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4b01b0851b7f89ea4bb132a7f5395b9d2aca1c02 Validity Not Before: Jan 2 06:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3f8d7f77e38a44492e7bc03b41b1ba6d64bddf28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3d:60:c4:3c:38:e2:29:5d:8c:c8:63:ec:0c: 27:51:cd:87:4c:1f:7f:e2:27:6c:fa:35:99:c2:9b: 45:a8:6c:d7:5e:0e:48:f7:bd:41:a2:92:d6:89:e3: c0:4d:ea:2d:2a:ff:b6:61:66:6b:d7:5f:bb:25:8d: 0f:24:19:34:98:12:d8:e9:5e:59:b5:58:b7:de:e6: 21:18:5d:94:41:88:98:07:89:bd:5e:a8:3e:56:bb: c2:58:11:64:8c:b2:11:93:6e:d4:e7:b9:d6:b8:41: 6a:d3:ad:10:17:39:ff:99:de:f0:c6:da:b3:ae:4e: a0:d3:dd:73:e2:44:15:e9:3c:e8:ae:33:3d:cf:25: 7f:15:c1:22:4e:46:6a:bf:f7:4a:11:e5:b4:b0:9a: 70:23:6c:9e:7b:1f:01:ce:74:ac:ca:9e:cd:27:32: d7:ca:80:f7:f3:9f:6f:eb:da:4d:93:6d:c6:90:50: b5:35:9c:7a:ff:bc:cc:4f:50:dd:ff:71:ef:f3:1a: 04:b3:79:35:0c:c9:e2:37:72:c5:67:ee:46:ae:6c: 40:bc:0e:68:85:59:9a:ce:c8:3a:a4:19:3e:ef:65: 00:d5:1e:e9:5a:cc:1a:dc:0a:db:e3:ac:29:07:37: 87:63:94:78:71:a6:a9:83:95:22:a0:20:ef:41:72: 38:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:8D:7F:77:E3:8A:44:49:2E:7B:C0:3B:41:B1:BA:6D:64:BD:DF:28 X509v3 Authority Key Identifier: keyid:4B:01:B0:85:1B:7F:89:EA:4B:B1:32:A7:F5:39:5B:9D:2A:CA:1C:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SwGwhRt_iepLsTKn9TlbnSrKHAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/P41_d-OKREkue8A7QbG6bWS93yg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cb9d7f-afdf-4487-9e08-bd5043c0d1fb/1/SwGwhRt_iepLsTKn9TlbnSrKHAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.225.46.0/23 Signature Algorithm: sha256WithRSAEncryption 4e:ea:cc:10:f5:d9:6f:56:b9:46:81:fb:5d:d3:ed:71:24:7f: e5:e1:d0:35:ea:6c:65:ad:1f:44:79:48:70:a5:6c:1e:ee:7e: 48:67:be:d2:f0:29:9d:6d:65:9c:25:36:8e:8d:07:46:70:ca: 49:34:70:f6:80:a2:56:35:1b:21:cf:ef:21:14:34:13:27:16: 2b:57:2d:7b:cd:85:c9:23:84:cd:9a:7b:66:ed:6c:53:2a:08: 5c:80:71:cd:28:70:2c:76:3a:dc:1f:1d:24:b8:50:10:cf:be: 78:12:61:f4:6c:2f:3f:fb:e6:29:2b:50:6f:f7:29:08:f4:de: 1e:0b:28:a1:2e:9e:ca:21:a9:1b:f8:b0:6c:ff:e8:92:fb:f0: f6:67:b2:dd:09:ba:37:d5:86:92:aa:8e:aa:1b:fe:6b:33:a7: f9:59:5a:4a:88:a4:fb:50:e8:05:14:80:c5:6a:92:22:02:70: 86:cf:81:a3:f9:9b:ad:8c:dd:da:48:a1:13:f4:2d:64:b6:6b: 8f:fd:b8:7e:87:2b:17:e4:32:8c:33:55:14:c1:d4:0d:0c:3c: 67:01:b8:a3:08:50:a3:0a:a1:24:ed:6d:a0:3d:37:06:44:ae: 9d:d4:fa:c9:4e:fa:b9:53:f2:f6:3a:51:a1:39:1d:2d:a7:c9: 83:e5:ed:b0 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9W5QtuEnnFdPuluz3n6nuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRiMDFiMDg1MWI3Zjg5ZWE0YmIxMzJhN2Y1Mzk1YjlkMmFj YTFjMDIwHhcNMjYwMTAyMDYxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzZjhkN2Y3N2UzOGE0NDQ5MmU3YmMwM2I0MWIxYmE2ZDY0YmRkZjI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApz1gxDw44ildjMhj7AwnUc2HTB9/ 4ids+jWZwptFqGzXXg5I971BopLWiePATeotKv+2YWZr11+7JY0PJBk0mBLY6V5Z tVi33uYhGF2UQYiYB4m9Xqg+VrvCWBFkjLIRk27U57nWuEFq060QFzn/md7wxtqz rk6g091z4kQV6TzorjM9zyV/FcEiTkZqv/dKEeW0sJpwI2yeex8BznSsyp7NJzLX yoD3859v69pNk23GkFC1NZx6/7zMT1Dd/3Hv8xoEs3k1DMniN3LFZ+5GrmxAvA5o hVmazsg6pBk+72UA1R7pWswa3Arb46wpBzeHY5R4caapg5UioCDvQXI4cQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFD+Nf3fjikRJLnvAO0Gxum1kvd8oMB8GA1UdIwQY MBaAFEsBsIUbf4nqS7Eyp/U5W50qyhwCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU3dHd2hSdF9pZXBMc1RLbjlUbGJuU3JLSEFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jYjlkN2YtYWZkZi00NDg3LTllMDgt YmQ1MDQzYzBkMWZiLzEvUDQxX2QtT0tSRWt1ZThBN1FiRzZiV1M5M3lnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9jYjlkN2YtYWZkZi00NDg3LTllMDgtYmQ1MDQzYzBkMWZi LzEvU3dHd2hSdF9pZXBMc1RLbjlUbGJuU3JLSEFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw+EuMA0G CSqGSIb3DQEBCwUAA4IBAQBO6swQ9dlvVrlGgftd0+1xJH/l4dA16mxlrR9EeUhw pWwe7n5IZ77S8CmdbWWcJTaOjQdGcMpJNHD2gKJWNRshz+8hFDQTJxYrVy17zYXJ I4TNmntm7WxTKghcgHHNKHAsdjrcHx0kuFAQz754EmH0bC8/++YpK1Bv9ykI9N4e CyihLp7KIakb+LBs/+iS+/D2Z7LdCbo31YaSqo6qG/5rM6f5WVpKiKT7UOgFFIDF apIiAnCGz4Gj+ZutjN3aSKET9C1ktmuP/bh+hysX5DKMM1UUwdQNDDxnAbijCFCj CqEk7W2gPTcGRK6d1PrJTvq5U/L2OlGhOR0tp8mD5e2w -----END CERTIFICATE-----Generated at Mon Jan 26 15:16:13 2026 by rpki-client