This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/s4WIvm-AvrF9vj-Kb2qFmmnCf9o.roa File: s4WIvm-AvrF9vj-Kb2qFmmnCf9o.roa (raw, json) Hash identifier: RStgzIMohlJnudrvLaG0q4067DlbTrJNhRmP2rmJBo8= Subject key identifier: B3:85:88:BE:6F:80:BE:B1:7D:BE:3F:8A:6F:6A:85:9A:69:C2:7F:DA Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Certificate serial: 019B77C68E0815B5B77E8B47EFD08364FD18 Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/s4WIvm-AvrF9vj-Kb2qFmmnCf9o.roa Signing time: Thu 01 Jan 2026 04:17:39 +0000 ROA not before: Thu 01 Jan 2026 04:17:39 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 199478 IP address blocks: 213.170.248.0/24 maxlen: 24 213.170.249.0/24 maxlen: 24 213.170.250.0/24 maxlen: 24 213.170.251.0/24 maxlen: 24 213.170.252.0/24 maxlen: 24 213.170.253.0/24 maxlen: 24 213.170.254.0/24 maxlen: 24 213.170.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 21:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:8e:08:15:b5:b7:7e:8b:47:ef:d0:83:64:fd:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e Validity Not Before: Jan 1 04:17:39 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b38588be6f80beb17dbe3f8a6f6a859a69c27fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b0:89:5e:af:a8:7e:b8:70:86:fb:eb:b5:0e: 0e:5b:38:16:22:e5:f6:3d:6f:59:39:ba:b3:77:04: 8d:08:79:02:c5:27:52:62:04:b2:16:32:5b:92:78: fe:e4:84:cc:05:4f:c0:2b:e4:67:aa:a2:94:f3:c2: 07:a6:78:d5:08:e8:c9:f6:4f:f5:25:9f:12:09:cc: 20:85:bd:4f:f8:63:46:53:3e:aa:5c:64:d3:91:a6: cb:7b:5a:c6:fa:aa:29:ba:70:d5:7f:82:b6:fd:00: e2:c7:ed:b8:fc:f9:df:ab:7b:eb:48:3c:4a:f7:46: 7c:02:14:a8:c7:dd:7a:ef:9b:24:ac:bd:99:86:76: 9d:3a:a2:63:82:d3:2c:03:fb:da:8b:5e:45:6c:64: e0:b9:67:a9:e2:08:52:a0:1d:93:4a:c2:28:c5:20: 50:15:5d:cf:d1:39:17:dd:5c:90:f5:7a:23:28:71: a5:a0:5c:8d:96:e5:88:11:42:b5:af:93:45:30:25: 4d:d7:46:d4:4b:46:1e:1e:31:19:83:ae:be:26:75: 5e:8e:cc:fb:70:8b:e1:3b:16:a0:50:cc:a1:dd:87: 57:2d:96:4e:e0:28:cb:44:b4:54:91:a2:71:60:dc: 4a:8e:7e:66:c7:2b:4e:0a:aa:9b:1b:f1:4c:58:7b: a3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:85:88:BE:6F:80:BE:B1:7D:BE:3F:8A:6F:6A:85:9A:69:C2:7F:DA X509v3 Authority Key Identifier: keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/s4WIvm-AvrF9vj-Kb2qFmmnCf9o.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.170.248.0/21 Signature Algorithm: sha256WithRSAEncryption 27:a9:6a:88:30:0d:a9:38:c4:dc:25:c7:61:4b:a5:e1:14:fc: 1a:ec:be:71:65:c1:ac:9a:02:bf:d0:99:20:0a:1a:d0:a0:e5: 80:e6:81:ca:d8:fe:b5:cc:00:d0:24:9f:41:0d:4a:c4:34:83: 80:9a:5b:d8:2c:d0:9c:71:61:d3:60:c3:4f:0a:ea:08:00:be: 52:da:21:d6:ec:36:b3:ae:06:e5:44:53:4a:dc:1f:96:01:75: 1c:d4:13:e3:4b:1f:7b:2e:4e:a7:57:1d:60:c7:d0:03:4a:f8: 10:1d:6f:e3:b2:d6:26:d5:a2:6d:f4:c0:11:41:75:1b:ea:b2: 1e:55:60:6b:1f:7b:f3:db:f9:57:30:3c:55:dd:86:24:2e:5f: dc:23:dc:1e:a2:94:6e:2a:d6:b1:4f:2e:3f:63:1e:c8:a4:86: 6b:a9:4c:14:2b:6c:05:80:d2:22:02:d9:4b:4e:8b:42:42:31: d4:99:6d:38:db:ad:95:01:50:e3:b7:41:fa:87:bf:6f:1f:54: fe:ca:e7:62:d0:7f:fe:44:f0:0a:c0:ce:46:8d:94:d2:2d:c9: 63:9d:48:3d:56:6e:1e:84:39:00:87:10:22:73:cc:a6:03:dd: d7:c8:a5:bc:14:07:72:30:bb:21:b7:b4:ac:6c:d5:bc:3c:eb: b8:ce:b3:33 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xo4IFbW3fotH79CDZP0YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy MGI3M2UwHhcNMjYwMTAxMDQxNzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiMzg1ODhiZTZmODBiZWIxN2RiZTNmOGE2ZjZhODU5YTY5YzI3ZmRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrCJXq+ofrhwhvvrtQ4OWzgWIuX2 PW9ZObqzdwSNCHkCxSdSYgSyFjJbknj+5ITMBU/AK+RnqqKU88IHpnjVCOjJ9k/1 JZ8SCcwghb1P+GNGUz6qXGTTkabLe1rG+qopunDVf4K2/QDix+24/Pnfq3vrSDxK 90Z8AhSox91675skrL2ZhnadOqJjgtMsA/vai15FbGTguWep4ghSoB2TSsIoxSBQ FV3P0TkX3VyQ9XojKHGloFyNluWIEUK1r5NFMCVN10bUS0YeHjEZg66+JnVejsz7 cIvhOxagUMyh3YdXLZZO4CjLRLRUkaJxYNxKjn5mxytOCqqbG/FMWHujUQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLOFiL5vgL6xfb4/im9qhZppwn/aMB8GA1UdIwQY MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt Y2YwNmQxOTgzYmExLzEvczRXSXZtLUF2ckY5dmotS2IycUZtbW5DZjlvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD1ar4MA0G CSqGSIb3DQEBCwUAA4IBAQAnqWqIMA2pOMTcJcdhS6XhFPwa7L5xZcGsmgK/0Jkg ChrQoOWA5oHK2P61zADQJJ9BDUrENIOAmlvYLNCccWHTYMNPCuoIAL5S2iHW7Daz rgblRFNK3B+WAXUc1BPjSx97Lk6nVx1gx9ADSvgQHW/jstYm1aJt9MARQXUb6rIe VWBrH3vz2/lXMDxV3YYkLl/cI9weopRuKtaxTy4/Yx7IpIZrqUwUK2wFgNIiAtlL TotCQjHUmW04262VAVDjt0H6h79vH1T+yudi0H/+RPAKwM5GjZTSLcljnUg9Vm4e hDkAhxAic8ymA93XyKW8FAdyMLsht7SsbNW8POu4zrMz -----END CERTIFICATE-----Generated at Sun Jan 25 07:17:12 2026 by rpki-client