This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/102rhK3hZolwzCt7IJfuq8GdQf0.roa File: 102rhK3hZolwzCt7IJfuq8GdQf0.roa (raw, json) Hash identifier: YO/FD+MWLi1I9ePrVvUS7xZGRfMEMrX2LxQRpa4cPxs= Subject key identifier: D7:4D:AB:84:AD:E1:66:89:70:CC:2B:7B:20:97:EE:AB:C1:9D:41:FD Certificate issuer: /CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228 Certificate serial: 019B7CEDC7BBEFC66A44F865432F53B02C68 Authority key identifier: E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/102rhK3hZolwzCt7IJfuq8GdQf0.roa Signing time: Fri 02 Jan 2026 04:18:36 +0000 ROA not before: Fri 02 Jan 2026 04:18:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 51678 IP address blocks: 5.2.24.0/21 maxlen: 24 46.17.136.0/21 maxlen: 24 134.255.184.0/21 maxlen: 24 2a01:b300::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:c7:bb:ef:c6:6a:44:f8:65:43:2f:53:b0:2c:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228 Validity Not Before: Jan 2 04:18:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d74dab84ade1668970cc2b7b2097eeabc19d41fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b5:73:73:67:b7:1a:96:14:08:a2:87:f9:39: 5d:8f:25:93:25:dd:8e:7b:bf:f9:65:1d:e6:58:b7: 5c:1d:20:73:e4:5a:54:8d:06:a5:97:14:07:65:97: c4:d9:5a:92:10:ca:1c:b7:97:0b:f6:f5:41:4f:f6: d0:04:7c:9a:3d:34:a4:5f:49:cd:4f:ac:2f:41:8e: b6:0c:13:03:4f:98:c0:d1:75:53:97:79:23:a4:8a: c9:f6:44:30:a3:3d:68:2e:ce:b9:e5:5d:f0:cb:97: 80:d6:b1:9e:0e:58:fe:2d:23:5d:75:3d:b7:79:06: 21:3b:f5:29:6d:e4:67:2e:c5:05:9a:a4:99:69:3a: 43:cd:6c:74:a7:bb:ef:4f:59:f3:cd:07:5a:2c:ad: ed:40:bd:21:a6:18:a9:41:93:7f:ea:1f:c1:ec:52: f6:89:06:6c:ee:51:c0:b1:98:84:2d:31:a3:c8:a8: dc:be:92:1a:ae:7c:4b:86:e4:d0:8f:c1:75:25:e2: 6b:74:6b:29:a7:51:9c:80:d4:6b:e5:f2:58:a9:59: 61:22:c9:52:03:6b:3a:41:c5:11:53:54:f4:0c:37: ad:76:1e:bd:84:a7:79:ce:aa:89:da:ac:23:47:d0: c6:8f:0d:6f:95:95:e2:d4:30:a6:68:7b:52:13:da: da:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:4D:AB:84:AD:E1:66:89:70:CC:2B:7B:20:97:EE:AB:C1:9D:41:FD X509v3 Authority Key Identifier: keyid:E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/102rhK3hZolwzCt7IJfuq8GdQf0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.2.24.0/21 46.17.136.0/21 134.255.184.0/21 IPv6: 2a01:b300::/29 Signature Algorithm: sha256WithRSAEncryption 7a:b4:92:1d:b8:40:aa:08:7f:99:1f:74:1a:b4:80:de:69:28: 83:ac:e4:eb:73:3f:70:80:79:1e:a1:72:6f:ee:bd:a2:e7:1b: d8:8a:2b:23:91:30:3a:5b:78:a0:69:10:3a:a2:3c:1e:40:6e: dc:39:ce:6e:71:71:4d:aa:d1:b0:bd:89:e1:de:43:04:af:49: 8e:74:63:ee:26:26:c8:b9:70:d6:db:bd:90:6b:f2:f3:ae:b3: 0d:98:07:46:2b:63:84:ef:8d:d0:e4:c4:4d:31:83:af:e6:6c: 29:5b:cb:26:02:86:86:8b:14:68:33:26:c4:df:57:a7:8f:ef: 68:31:ed:72:76:55:bb:09:ce:1c:5c:b3:04:8f:a3:33:58:86: 9f:35:78:b7:bb:79:51:8f:fc:c4:f5:50:54:26:83:25:25:23: 9a:a1:5b:a8:54:08:c8:b0:63:39:b5:88:b2:be:70:c2:a7:8e: 93:5c:ce:b9:8e:3d:94:68:f3:df:e1:7b:6a:22:d9:ce:36:da: f9:08:1a:ba:37:b7:30:7a:8d:43:b7:81:d8:cf:06:ed:21:2d: ba:e2:c3:67:cc:dc:3f:36:00:52:aa:d3:fd:bc:df:aa:44:7b: ca:2a:ee:b7:8b:64:71:a5:03:90:f4:82:d9:b8:eb:c9:38:63: 6d:5a:2d:ee -----BEGIN CERTIFICATE----- MIIFGDCCBACgAwIBAgISAZt87ce778ZqRPhlQy9TsCxoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxM2UzNzE2MTM5NDY1ZTZhOGNmOWY2YmQ4YjViOGY3NjMz YWYyMjgwHhcNMjYwMTAyMDQxODM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkNzRkYWI4NGFkZTE2Njg5NzBjYzJiN2IyMDk3ZWVhYmMxOWQ0MWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrVzc2e3GpYUCKKH+TldjyWTJd2O e7/5ZR3mWLdcHSBz5FpUjQallxQHZZfE2VqSEMoct5cL9vVBT/bQBHyaPTSkX0nN T6wvQY62DBMDT5jA0XVTl3kjpIrJ9kQwoz1oLs655V3wy5eA1rGeDlj+LSNddT23 eQYhO/UpbeRnLsUFmqSZaTpDzWx0p7vvT1nzzQdaLK3tQL0hphipQZN/6h/B7FL2 iQZs7lHAsZiELTGjyKjcvpIarnxLhuTQj8F1JeJrdGspp1GcgNRr5fJYqVlhIslS A2s6QcURU1T0DDetdh69hKd5zqqJ2qwjR9DGjw1vlZXi1DCmaHtSE9ravQIDAQAB o4ICJDCCAiAwHQYDVR0OBBYEFNdNq4St4WaJcMwreyCX7qvBnUH9MB8GA1UdIwQY MBaAFOE+NxYTlGXmqM+fa9i1uPdjOvIoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFQ0M0ZoT1VaZWFvejU5cjJMVzQ5Mk02OGlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mM2Q0NDYtYWMwNi00OTAyLWE2NDct ZWYxNTcwYzcyNTk5LzEvMTAycmhLM2hab2x3ekN0N0lKZnVxOEdkUWYwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mM2Q0NDYtYWMwNi00OTAyLWE2NDctZWYxNTcwYzcyNTk5 LzEvNFQ0M0ZoT1VaZWFvejU5cjJMVzQ5Mk02OGlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDBQIYAwQD LhGIAwQDhv+4MA0EAgACMAcDBQMqAbMAMA0GCSqGSIb3DQEBCwUAA4IBAQB6tJId uECqCH+ZH3QatIDeaSiDrOTrcz9wgHkeoXJv7r2i5xvYiisjkTA6W3igaRA6ojwe QG7cOc5ucXFNqtGwvYnh3kMEr0mOdGPuJibIuXDW272Qa/LzrrMNmAdGK2OE743Q 5MRNMYOv5mwpW8smAoaGixRoMybE31enj+9oMe1ydlW7Cc4cXLMEj6MzWIafNXi3 u3lRj/zE9VBUJoMlJSOaoVuoVAjIsGM5tYiyvnDCp46TXM65jj2UaPPf4XtqItnO Ntr5CBq6N7cweo1Dt4HYzwbtIS264sNnzNw/NgBSqtP9vN+qRHvKKu63i2RxpQOQ 9ILZuOvJOGNtWi3u -----END CERTIFICATE-----Generated at Tue Feb 10 04:16:00 2026 by rpki-client