This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/RPfAXv-f8uBkkH0WybryVHOTpQU.roa File: RPfAXv-f8uBkkH0WybryVHOTpQU.roa (raw, json) Hash identifier: C6w//enAOUR/TI2OpJYps6HovP/3vBWM2Hbve1rPMiI= Subject key identifier: 44:F7:C0:5E:FF:9F:F2:E0:64:90:7D:16:C9:BA:F2:54:73:93:A5:05 Certificate issuer: /CN=2f814adc1d5209e098f078adbc856bad83b749c2 Certificate serial: 019B7EA526CF52FB575987374B448E19058C Authority key identifier: 2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/RPfAXv-f8uBkkH0WybryVHOTpQU.roa Signing time: Fri 02 Jan 2026 12:18:31 +0000 ROA not before: Fri 02 Jan 2026 12:18:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 61061 IP address blocks: 134.255.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.mft rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Jan 2026 03:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a5:26:cf:52:fb:57:59:87:37:4b:44:8e:19:05:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f814adc1d5209e098f078adbc856bad83b749c2 Validity Not Before: Jan 2 12:18:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44f7c05eff9ff2e064907d16c9baf2547393a505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:bf:09:ff:2e:26:71:1f:1c:00:6c:37:dc:60: eb:fb:49:60:c5:7d:03:ae:1e:08:13:83:db:69:8d: 1e:89:0e:96:35:67:5e:f2:18:04:ed:64:50:d1:f3: 9e:39:12:db:8f:e6:6f:3b:c8:f3:06:33:e2:5f:14: 80:9a:db:4e:bf:3e:4c:2b:ae:a8:9d:6d:76:ec:d1: ef:46:4a:40:66:f5:e5:ad:06:f0:75:88:26:81:da: 68:85:b4:1d:f1:1f:07:8a:cb:72:57:54:27:90:08: 44:a7:81:5e:49:ba:7f:cd:ee:8e:94:9e:a0:4c:8a: 62:49:42:53:f1:85:8d:a5:ba:c7:e8:6b:09:4d:e4: 14:89:2e:06:52:87:25:34:1c:64:1c:6c:77:ac:51: 73:d8:59:28:0f:8e:b3:89:04:d1:1f:e3:4f:2d:34: f0:d1:d8:89:d6:71:bf:66:c6:36:41:9f:60:30:1c: 94:59:29:38:da:4d:a2:8b:03:1b:6c:2a:ec:2f:bb: 40:29:1b:0b:44:85:42:66:0b:dc:85:04:fd:4c:c6: 1d:68:80:96:7a:6a:8f:32:3a:7f:e6:35:10:87:50: c6:77:53:8d:b7:d2:da:89:98:1b:d0:4b:f6:d7:92: 76:61:67:83:d9:1d:da:78:c1:f2:8b:8f:4c:7d:c5: cf:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F7:C0:5E:FF:9F:F2:E0:64:90:7D:16:C9:BA:F2:54:73:93:A5:05 X509v3 Authority Key Identifier: keyid:2F:81:4A:DC:1D:52:09:E0:98:F0:78:AD:BC:85:6B:AD:83:B7:49:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L4FK3B1SCeCY8HitvIVrrYO3ScI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/RPfAXv-f8uBkkH0WybryVHOTpQU.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/13e12a-2bac-4752-997d-df86b6dd997c/1/L4FK3B1SCeCY8HitvIVrrYO3ScI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 134.255.249.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:a7:74:3a:b3:62:50:e9:04:6e:6c:aa:04:22:40:8f:02:d6: be:f6:47:cb:5d:3b:06:06:9e:0a:25:ac:0e:65:8a:e6:9e:0f: cb:2b:1c:dd:22:ee:39:68:5a:bf:4e:15:f2:14:f6:34:5c:f6: 89:77:56:9e:ca:c5:1e:a8:a2:d8:0d:85:e1:62:15:31:a3:2d: cd:37:6d:06:dc:63:3c:82:19:25:24:1e:39:61:55:0c:9f:48: 0b:07:86:39:00:ac:30:9f:fd:a4:36:1e:9b:58:09:36:8c:1b: 77:db:d4:b4:03:09:ca:81:25:93:a5:a4:34:c7:cb:42:78:44: da:07:d5:93:09:1c:3f:2f:33:ae:c3:38:79:5b:5f:47:74:eb: c0:29:73:6c:99:84:c9:38:a8:27:ac:a0:5c:d4:04:9a:a4:e8: 87:24:ef:09:fb:24:d0:a1:3c:b2:01:b8:2a:b1:3e:f9:b4:8b: 16:f2:03:93:65:e8:e8:91:ab:9e:e4:1f:0b:aa:59:06:fe:b6: 0c:94:f7:f5:f0:df:ca:d5:0c:c9:cc:b7:e2:04:c8:c3:86:b8: 5d:29:f4:bb:9c:7f:cc:1a:8a:3c:ec:8d:da:ff:a6:9d:92:b7: 5e:7e:42:61:77:8f:ec:f8:43:95:2c:48:f9:4e:fe:8f:4e:a6: f1:f8:19:61 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+pSbPUvtXWYc3S0SOGQWMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmODE0YWRjMWQ1MjA5ZTA5OGYwNzhhZGJjODU2YmFkODNi NzQ5YzIwHhcNMjYwMTAyMTIxODMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGY3YzA1ZWZmOWZmMmUwNjQ5MDdkMTZjOWJhZjI1NDczOTNhNTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjb8J/y4mcR8cAGw33GDr+0lgxX0D rh4IE4PbaY0eiQ6WNWde8hgE7WRQ0fOeORLbj+ZvO8jzBjPiXxSAmttOvz5MK66o nW127NHvRkpAZvXlrQbwdYgmgdpohbQd8R8HistyV1QnkAhEp4FeSbp/ze6OlJ6g TIpiSUJT8YWNpbrH6GsJTeQUiS4GUoclNBxkHGx3rFFz2FkoD46ziQTRH+NPLTTw 0diJ1nG/ZsY2QZ9gMByUWSk42k2iiwMbbCrsL7tAKRsLRIVCZgvchQT9TMYdaICW emqPMjp/5jUQh1DGd1ONt9LaiZgb0Ev215J2YWeD2R3aeMHyi49MfcXP+wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFET3wF7/n/LgZJB9Fsm68lRzk6UFMB8GA1UdIwQY MBaAFC+BStwdUgngmPB4rbyFa62Dt0nCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDRGSzNCMVNDZUNZOEhpdHZJVnJyWU8zU2NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8xM2UxMmEtMmJhYy00NzUyLTk5N2Qt ZGY4NmI2ZGQ5OTdjLzEvUlBmQVh2LWY4dUJra0gwV3licnlWSE9UcFFVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi8xM2UxMmEtMmJhYy00NzUyLTk5N2QtZGY4NmI2ZGQ5OTdj LzEvTDRGSzNCMVNDZUNZOEhpdHZJVnJyWU8zU2NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhv/5MA0G CSqGSIb3DQEBCwUAA4IBAQBqp3Q6s2JQ6QRubKoEIkCPAta+9kfLXTsGBp4KJawO ZYrmng/LKxzdIu45aFq/ThXyFPY0XPaJd1aeysUeqKLYDYXhYhUxoy3NN20G3GM8 ghklJB45YVUMn0gLB4Y5AKwwn/2kNh6bWAk2jBt329S0AwnKgSWTpaQ0x8tCeETa B9WTCRw/LzOuwzh5W19HdOvAKXNsmYTJOKgnrKBc1ASapOiHJO8J+yTQoTyyAbgq sT75tIsW8gOTZejokaue5B8LqlkG/rYMlPf18N/K1QzJzLfiBMjDhrhdKfS7nH/M Goo87I3a/6adkrdefkJhd4/s+EOVLEj5Tv6PTqbx+Blh -----END CERTIFICATE-----Generated at Mon Jan 26 13:45:46 2026 by rpki-client