This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/RSn4Rta_bXNv3CwXzujbccH1OFg.roa File: RSn4Rta_bXNv3CwXzujbccH1OFg.roa (raw, json) Hash identifier: u91EszWBmEzPPN3l4JlIjEAr3qn1UwMpor2kyeXCrvI= Subject key identifier: 45:29:F8:46:D6:BF:6D:73:6F:DC:2C:17:CE:E8:DB:71:C1:F5:38:58 Certificate issuer: /CN=5f7f70250082c3e056f3fe528bd77b06e20e407c Certificate serial: 019B77C6B7BC3F73E71578B19C170E526CF5 Authority key identifier: 5F:7F:70:25:00:82:C3:E0:56:F3:FE:52:8B:D7:7B:06:E2:0E:40:7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/RSn4Rta_bXNv3CwXzujbccH1OFg.roa Signing time: Thu 01 Jan 2026 04:17:50 +0000 ROA not before: Thu 01 Jan 2026 04:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 0 IP address blocks: 185.136.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.mft rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 16:01:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:b7:bc:3f:73:e7:15:78:b1:9c:17:0e:52:6c:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f7f70250082c3e056f3fe528bd77b06e20e407c Validity Not Before: Jan 1 04:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4529f846d6bf6d736fdc2c17cee8db71c1f53858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6c:ed:82:25:0f:db:7d:42:07:d7:d9:cf:c6: 27:27:e4:c0:e3:25:bd:6c:cd:5f:a7:9d:c1:6d:68: c9:1b:ca:eb:24:31:a5:5c:82:a5:d1:25:b8:0c:ca: bf:d8:03:ec:2b:0d:da:ff:25:43:aa:18:9f:b1:27: 9b:86:58:d1:7e:6b:ef:8b:e2:72:75:c7:53:de:58: 85:b6:af:29:56:dc:00:f8:7a:66:6e:9e:e7:b1:3d: a8:6e:84:23:b7:30:97:56:2e:9a:01:9c:21:09:fe: 14:55:42:4b:45:15:9e:ff:9c:a3:94:07:88:fa:31: 27:f8:f3:f7:ee:6e:d3:c1:3b:29:e2:e2:92:2f:f0: 4a:ab:19:49:72:d4:95:11:d5:b9:e6:52:72:7f:4f: 5d:0e:86:f3:a1:15:93:e4:e9:83:49:11:71:0a:f6: 4a:0b:73:d7:8f:fa:27:a6:55:9d:a1:dc:2c:7b:06: 30:02:5f:e4:f7:b1:77:1e:de:ff:fc:ef:a2:d8:a9: 93:eb:c1:0c:6a:9e:da:17:e6:5b:b2:6e:83:66:c5: 95:94:31:c0:0e:8c:b1:16:70:db:b3:e1:19:3c:94: b1:68:84:ae:55:5b:0b:7c:99:3e:b0:f5:4f:dd:21: 1c:b2:f2:3a:59:4f:be:dc:9b:be:31:60:b7:8a:ca: e3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:29:F8:46:D6:BF:6D:73:6F:DC:2C:17:CE:E8:DB:71:C1:F5:38:58 X509v3 Authority Key Identifier: keyid:5F:7F:70:25:00:82:C3:E0:56:F3:FE:52:8B:D7:7B:06:E2:0E:40:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X39wJQCCw-BW8_5Si9d7BuIOQHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/RSn4Rta_bXNv3CwXzujbccH1OFg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/4e9414-bc4d-4f2c-b9f1-23f0c04d2c17/1/X39wJQCCw-BW8_5Si9d7BuIOQHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.136.15.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:1f:8a:f6:ea:7d:6b:0e:a9:89:f8:0e:b1:ab:3a:82:66:94: 53:ff:4e:9c:14:dc:15:f5:7f:4b:e6:fa:cd:ef:46:54:ee:1f: 12:ac:a4:c0:42:22:38:9a:f5:9a:be:81:c4:c1:8f:e9:ed:a0: 76:d0:3a:a7:d9:c0:18:93:0e:c8:c2:b8:81:ea:c3:14:82:07: 10:8e:82:72:13:f6:9b:70:6a:73:0b:47:9f:bd:21:88:c1:75: b6:c7:a3:84:9d:67:36:b7:1d:8c:13:cc:f3:46:55:67:47:5d: 0d:79:ff:29:da:33:40:c5:0f:a0:f3:a6:f5:0c:93:98:f6:44: 35:c1:1a:54:d7:00:ed:04:18:04:45:c1:aa:8c:c1:9e:1f:c0: df:2c:1a:53:c3:e3:96:6f:a5:9a:48:3f:9c:2c:03:47:dd:74: d4:9f:a3:a2:07:0e:88:a9:fb:09:e3:5c:1a:ef:7d:65:ba:36: 8f:a6:57:01:77:5e:fb:78:a0:09:eb:44:ff:c0:6a:c5:31:32: 12:0f:32:c8:98:b3:af:1c:45:bf:f8:f3:e3:9a:4d:26:2c:5e: e0:c7:55:af:98:3d:51:aa:07:77:3e:c6:d1:b6:eb:c5:f6:ca: a8:5e:9c:66:89:3d:73:2f:c0:e5:80:e8:45:03:99:0c:c5:cf: c4:a3:b0:5f -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xre8P3PnFXixnBcOUmz1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmN2Y3MDI1MDA4MmMzZTA1NmYzZmU1MjhiZDc3YjA2ZTIw ZTQwN2MwHhcNMjYwMTAxMDQxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTI5Zjg0NmQ2YmY2ZDczNmZkYzJjMTdjZWU4ZGI3MWMxZjUzODU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2ztgiUP231CB9fZz8YnJ+TA4yW9 bM1fp53BbWjJG8rrJDGlXIKl0SW4DMq/2APsKw3a/yVDqhifsSebhljRfmvvi+Jy dcdT3liFtq8pVtwA+Hpmbp7nsT2oboQjtzCXVi6aAZwhCf4UVUJLRRWe/5yjlAeI +jEn+PP37m7TwTsp4uKSL/BKqxlJctSVEdW55lJyf09dDobzoRWT5OmDSRFxCvZK C3PXj/onplWdodwsewYwAl/k97F3Ht7//O+i2KmT68EMap7aF+Zbsm6DZsWVlDHA DoyxFnDbs+EZPJSxaISuVVsLfJk+sPVP3SEcsvI6WU++3Ju+MWC3isrjhQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEUp+EbWv21zb9wsF87o23HB9ThYMB8GA1UdIwQY MBaAFF9/cCUAgsPgVvP+UovXewbiDkB8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWDM5d0pRQ0N3LUJXOF81U2k5ZDdCdUlPUUh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80ZTk0MTQtYmM0ZC00ZjJjLWI5ZjEt MjNmMGMwNGQyYzE3LzEvUlNuNFJ0YV9iWE52M0N3WHp1amJjY0gxT0ZnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC80ZTk0MTQtYmM0ZC00ZjJjLWI5ZjEtMjNmMGMwNGQyYzE3 LzEvWDM5d0pRQ0N3LUJXOF81U2k5ZDdCdUlPUUh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYgPMA0G CSqGSIb3DQEBCwUAA4IBAQBeH4r26n1rDqmJ+A6xqzqCZpRT/06cFNwV9X9L5vrN 70ZU7h8SrKTAQiI4mvWavoHEwY/p7aB20Dqn2cAYkw7IwriB6sMUggcQjoJyE/ab cGpzC0efvSGIwXW2x6OEnWc2tx2ME8zzRlVnR10Nef8p2jNAxQ+g86b1DJOY9kQ1 wRpU1wDtBBgERcGqjMGeH8DfLBpTw+OWb6WaSD+cLANH3XTUn6OiBw6IqfsJ41wa 731lujaPplcBd177eKAJ60T/wGrFMTISDzLImLOvHEW/+PPjmk0mLF7gx1WvmD1R qgd3PsbRtuvF9sqoXpxmiT1zL8DlgOhFA5kMxc/Eo7Bf -----END CERTIFICATE-----Generated at Fri Jan 9 00:56:57 2026 by rpki-client