This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/KRctRzsS6WkYFQeNR_1yTG9YjP0.roa File: KRctRzsS6WkYFQeNR_1yTG9YjP0.roa (raw, json) Hash identifier: oB1FvlbACGWEHyhDswCez14XuSiwC0mCrxW2Q45DLmU= Subject key identifier: 29:17:2D:47:3B:12:E9:69:18:15:07:8D:47:FD:72:4C:6F:58:8C:FD Certificate issuer: /CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0 Certificate serial: 019B7F83D3387EE1D718A049C8FA8C4D52AF Authority key identifier: 44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/KRctRzsS6WkYFQeNR_1yTG9YjP0.roa Signing time: Fri 02 Jan 2026 16:21:44 +0000 ROA not before: Fri 02 Jan 2026 16:21:44 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197501 IP address blocks: 31.129.231.0/24 maxlen: 24 31.129.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.mft rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:83:d3:38:7e:e1:d7:18:a0:49:c8:fa:8c:4d:52:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4444c7c3ad34b6977fa18a2237ca306b9bee08e0 Validity Not Before: Jan 2 16:21:44 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=29172d473b12e9691815078d47fd724c6f588cfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d2:a5:3f:c7:53:6a:72:43:c5:ce:95:53:9a: 99:04:1b:cd:65:a1:7d:54:28:b2:3e:87:76:1c:df: 2a:54:e5:13:f6:aa:46:57:cd:44:4d:00:00:25:56: 02:e3:6e:aa:62:56:fc:56:eb:e5:55:a6:8b:4b:28: 90:d1:ed:ab:3a:e4:c9:01:cd:8d:ef:67:4b:47:9c: d5:d2:30:f0:5f:6e:47:bd:3f:77:be:2f:4e:5d:3a: 1b:48:2c:33:24:b1:cd:a5:55:23:3b:4a:2e:4a:1e: ce:8d:3f:7a:e0:d5:44:5e:9e:25:c0:d2:34:6f:bb: 57:df:b6:35:db:c3:73:82:e3:3b:25:b3:c3:e8:a4: 36:5a:f1:89:83:d4:7e:2d:66:de:6a:d8:fe:e4:e6: 7c:44:ab:be:dc:7a:af:11:62:f5:72:73:1e:eb:39: d6:58:8c:f2:3d:d1:2d:6c:5c:c7:8b:4e:de:d6:da: 39:28:14:c7:51:2d:d7:0b:30:15:1e:ba:76:30:21: 7a:31:6f:93:50:fb:b2:17:6e:eb:13:f2:53:bd:a4: 7e:34:43:ee:07:e9:3c:2a:da:0c:67:f3:46:df:b1: 9f:93:9f:ee:14:16:6c:b3:a8:70:1a:8a:51:fb:1b: 8e:51:b8:0e:e5:ba:29:bf:f4:f4:ab:ac:1a:4c:c4: 00:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:17:2D:47:3B:12:E9:69:18:15:07:8D:47:FD:72:4C:6F:58:8C:FD X509v3 Authority Key Identifier: keyid:44:44:C7:C3:AD:34:B6:97:7F:A1:8A:22:37:CA:30:6B:9B:EE:08:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RETHw600tpd_oYoiN8owa5vuCOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/KRctRzsS6WkYFQeNR_1yTG9YjP0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c9c9fc-5864-414e-ae2a-863c9b3d32b0/1/RETHw600tpd_oYoiN8owa5vuCOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.129.231.0/24 31.129.247.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:11:36:c5:3d:7e:1d:f5:6c:99:c9:80:bc:5d:2c:a9:52:53: 1e:76:65:34:d3:f8:7c:5a:79:05:f7:f6:12:23:e5:a2:47:0d: 1c:54:05:e7:d5:c1:3e:3c:a2:93:02:08:7c:05:32:fa:99:70: 32:b3:95:0f:a7:ac:61:1d:b8:8d:d8:b5:50:f1:34:66:1f:d2: f9:cf:5e:9d:2b:7c:ef:bd:22:eb:6f:ae:00:22:6d:c5:38:02: 53:9d:db:85:c7:c0:74:84:5f:b5:92:4b:91:61:07:11:26:42: 9e:fd:b2:55:39:70:4d:55:c9:9a:5d:eb:67:92:7c:49:d4:d8: 76:f5:dd:53:06:d6:1b:db:d1:1c:c3:4e:d9:bf:73:9c:5a:81: 57:c3:18:f6:35:53:f0:ae:f4:81:90:a1:10:db:cc:a8:0a:81: 8c:67:ff:b1:e1:e2:af:07:b4:9c:85:7a:f1:cb:b7:17:d4:89: c0:19:24:a3:b7:3b:80:77:79:e6:c2:19:ec:42:99:20:88:15: 40:b8:de:34:b1:1f:d2:bc:27:ad:69:66:ee:4c:4f:e5:0c:01: bd:0d:fb:87:e2:cd:3d:7d:ac:5d:82:29:6a:bd:58:c3:38:b7: 3f:51:cd:7a:db:30:5b:8f:bc:68:99:26:92:99:5d:ce:34:cc: 00:63:b1:6c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/g9M4fuHXGKBJyPqMTVKvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NDRjN2MzYWQzNGI2OTc3ZmExOGEyMjM3Y2EzMDZiOWJl ZTA4ZTAwHhcNMjYwMTAyMTYyMTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyOTE3MmQ0NzNiMTJlOTY5MTgxNTA3OGQ0N2ZkNzI0YzZmNTg4Y2ZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5NKlP8dTanJDxc6VU5qZBBvNZaF9 VCiyPod2HN8qVOUT9qpGV81ETQAAJVYC426qYlb8VuvlVaaLSyiQ0e2rOuTJAc2N 72dLR5zV0jDwX25HvT93vi9OXTobSCwzJLHNpVUjO0ouSh7OjT964NVEXp4lwNI0 b7tX37Y128NzguM7JbPD6KQ2WvGJg9R+LWbeatj+5OZ8RKu+3HqvEWL1cnMe6znW WIzyPdEtbFzHi07e1to5KBTHUS3XCzAVHrp2MCF6MW+TUPuyF27rE/JTvaR+NEPu B+k8KtoMZ/NG37Gfk5/uFBZss6hwGopR+xuOUbgO5bopv/T0q6waTMQAIwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFCkXLUc7EulpGBUHjUf9ckxvWIz9MB8GA1UdIwQY MBaAFEREx8OtNLaXf6GKIjfKMGub7gjgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkVUSHc2MDB0cGRfb1lvaU44b3dhNXZ1Q09BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9jOWM5ZmMtNTg2NC00MTRlLWFlMmEt ODYzYzliM2QzMmIwLzEvS1JjdFJ6c1M2V2tZRlFlTlJfMXlURzlZalAwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9jOWM5ZmMtNTg2NC00MTRlLWFlMmEtODYzYzliM2QzMmIw LzEvUkVUSHc2MDB0cGRfb1lvaU44b3dhNXZ1Q09BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAH4HnAwQA H4H3MA0GCSqGSIb3DQEBCwUAA4IBAQB7ETbFPX4d9WyZyYC8XSypUlMedmU00/h8 WnkF9/YSI+WiRw0cVAXn1cE+PKKTAgh8BTL6mXAys5UPp6xhHbiN2LVQ8TRmH9L5 z16dK3zvvSLrb64AIm3FOAJTnduFx8B0hF+1kkuRYQcRJkKe/bJVOXBNVcmaXetn knxJ1Nh29d1TBtYb29Ecw07Zv3OcWoFXwxj2NVPwrvSBkKEQ28yoCoGMZ/+x4eKv B7SchXrxy7cX1InAGSSjtzuAd3nmwhnsQpkgiBVAuN40sR/SvCetaWbuTE/lDAG9 DfuH4s09faxdgilqvVjDOLc/Uc162zBbj7xomSaSmV3ONMwAY7Fs -----END CERTIFICATE-----Generated at Sun Jan 25 16:37:19 2026 by rpki-client