This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/4v2abVtxmKK1EfY1UKsh5vBwTBQ.roa File: 4v2abVtxmKK1EfY1UKsh5vBwTBQ.roa (raw, json) Hash identifier: Fs7Ab7yQf/ulu1DAd1ofgpYjehocmFGlxjUMdJ2h/+Y= Subject key identifier: E2:FD:9A:6D:5B:71:98:A2:B5:11:F6:35:50:AB:21:E6:F0:70:4C:14 Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Certificate serial: 019B7BA3E26A2691D353C77A21CFF8D75C1E Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/4v2abVtxmKK1EfY1UKsh5vBwTBQ.roa Signing time: Thu 01 Jan 2026 22:18:16 +0000 ROA not before: Thu 01 Jan 2026 22:18:16 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 20523 IP address blocks: 217.150.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:e2:6a:26:91:d3:53:c7:7a:21:cf:f8:d7:5c:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Validity Not Before: Jan 1 22:18:16 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2fd9a6d5b7198a2b511f63550ab21e6f0704c14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e1:70:4f:6f:80:6c:08:83:e6:28:06:f9:c5: 8c:26:ab:1a:e7:8e:eb:b6:b7:5f:0f:4e:d1:4c:f6: 0d:63:a1:c6:33:22:b7:31:36:0d:60:f3:0f:92:b4: ea:70:32:e4:c2:23:38:c7:1f:29:ac:8e:57:57:be: cf:43:5f:05:b4:3e:3c:be:92:96:38:22:66:a7:f2: a0:2e:b9:2d:2b:07:ad:2c:30:27:3c:c2:12:13:f2: c0:2e:3a:dd:6d:69:23:c8:d4:66:46:dd:26:3c:14: 77:b2:8d:2d:c2:9d:54:c3:04:95:77:7c:4b:76:03: e8:8e:30:2a:a3:44:19:8f:c6:01:6f:af:f5:8e:b9: 85:dd:08:99:7e:21:29:4f:c8:af:0f:5e:bb:11:ea: f4:16:b3:07:d6:1d:00:a3:f4:d3:c7:c4:a9:8a:bd: a0:e6:0c:97:8f:d7:c7:dc:f4:c9:f4:21:0f:7b:a1: c4:5f:63:bc:14:4d:96:28:c0:6a:82:36:6b:b7:b0: b0:f7:dd:dc:be:d0:91:3e:e3:ac:fc:0a:55:6d:ff: 41:f4:54:b1:90:30:1b:12:5d:91:d1:36:2a:38:1c: 4a:84:46:27:42:ad:f4:a4:a5:0a:ee:0f:bd:1c:6e: 2d:76:ae:60:df:30:d7:f4:65:9a:77:4b:91:f8:31: 3e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:FD:9A:6D:5B:71:98:A2:B5:11:F6:35:50:AB:21:E6:F0:70:4C:14 X509v3 Authority Key Identifier: keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/4v2abVtxmKK1EfY1UKsh5vBwTBQ.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 217.150.128.0/20 Signature Algorithm: sha256WithRSAEncryption 96:7e:83:62:5c:ca:29:13:ac:0c:20:ee:06:24:9e:8e:08:9c: c2:94:04:b2:61:3f:ec:db:29:1e:47:0f:cb:bc:be:ee:cc:d8: f9:ff:00:39:49:cc:9e:3e:3a:22:2c:6a:3d:af:6d:f3:48:76: f1:cd:d9:74:2e:29:28:2d:35:3a:f8:71:b7:11:59:3a:62:32: 4a:15:aa:95:c5:11:03:f4:c6:e8:a5:ee:f8:de:35:d6:ef:e3: 0b:09:f9:c5:87:82:bf:2d:a3:0a:eb:df:d7:6c:63:3e:63:86: c4:d0:f7:d6:50:f0:3b:4b:51:78:21:5f:6b:f1:a7:cb:fa:16: 72:8d:c3:99:7d:af:24:33:7d:d8:27:2c:fa:9a:2e:73:21:c0: 7e:1b:63:95:2b:41:45:3a:4e:96:1f:94:a3:d7:ac:65:9f:0f: d0:1b:79:53:f5:89:b4:ee:77:2b:60:3d:1f:fa:a0:ba:ae:93: c7:b9:4d:98:40:78:78:7f:de:94:4e:e9:58:5f:d9:9d:a1:14: da:0b:89:76:8b:53:29:17:cb:d2:a7:e2:cc:32:12:f6:49:36: 1a:75:62:72:cd:10:f2:7b:c5:ba:10:63:8a:9f:36:3c:e4:07: 88:b9:1f:b2:43:72:ed:e7:e7:44:5b:f4:23:3c:8e:dd:84:ac: 76:6c:a3:c7 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o+JqJpHTU8d6Ic/411weMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYjA5N2EzNmMyMzI1ZDEwMzFmZjQwOTFiYTAwYTg2NDU5 ZDQyODgwHhcNMjYwMTAxMjIxODE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmZkOWE2ZDViNzE5OGEyYjUxMWY2MzU1MGFiMjFlNmYwNzA0YzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+FwT2+AbAiD5igG+cWMJqsa547r trdfD07RTPYNY6HGMyK3MTYNYPMPkrTqcDLkwiM4xx8prI5XV77PQ18FtD48vpKW OCJmp/KgLrktKwetLDAnPMISE/LALjrdbWkjyNRmRt0mPBR3so0twp1UwwSVd3xL dgPojjAqo0QZj8YBb6/1jrmF3QiZfiEpT8ivD167Eer0FrMH1h0Ao/TTx8Spir2g 5gyXj9fH3PTJ9CEPe6HEX2O8FE2WKMBqgjZrt7Cw993cvtCRPuOs/ApVbf9B9FSx kDAbEl2R0TYqOBxKhEYnQq30pKUK7g+9HG4tdq5g3zDX9GWad0uR+DE+dQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOL9mm1bcZiitRH2NVCrIebwcEwUMB8GA1UdIwQY MBaAFL+wl6NsIyXRAx/0CRugCoZFnUKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2It ZWNjNDliZGMyYWQ4LzEvNHYyYWJWdHhtS0sxRWZZMVVLc2g1dkJ3VEJRLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2ItZWNjNDliZGMyYWQ4 LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2ZaAMA0G CSqGSIb3DQEBCwUAA4IBAQCWfoNiXMopE6wMIO4GJJ6OCJzClASyYT/s2ykeRw/L vL7uzNj5/wA5ScyePjoiLGo9r23zSHbxzdl0LikoLTU6+HG3EVk6YjJKFaqVxRED 9Mbope743jXW7+MLCfnFh4K/LaMK69/XbGM+Y4bE0PfWUPA7S1F4IV9r8afL+hZy jcOZfa8kM33YJyz6mi5zIcB+G2OVK0FFOk6WH5Sj16xlnw/QG3lT9Ym07ncrYD0f +qC6rpPHuU2YQHh4f96UTulYX9mdoRTaC4l2i1MpF8vSp+LMMhL2STYadWJyzRDy e8W6EGOKnzY85AeIuR+yQ3Lt5+dEW/QjPI7dhKx2bKPH -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:50 2026 by rpki-client