This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/Rn4SiK5tt6rA-g6mRu3ZOnBd6z8.roa File: Rn4SiK5tt6rA-g6mRu3ZOnBd6z8.roa (raw, json) Hash identifier: 1RB9vRKs49M3yF98f580LlP8MNfzjcsdxXS3Wijgsnc= Subject key identifier: 46:7E:12:88:AE:6D:B7:AA:C0:FA:0E:A6:46:ED:D9:3A:70:5D:EB:3F Certificate issuer: /CN=485018b5c2fef1248ab6ec0d07e971ecbcf739ca Certificate serial: 019B76EBA2E5C235EB480A652EF73E5A9ED5 Authority key identifier: 48:50:18:B5:C2:FE:F1:24:8A:B6:EC:0D:07:E9:71:EC:BC:F7:39:CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/Rn4SiK5tt6rA-g6mRu3ZOnBd6z8.roa Signing time: Thu 01 Jan 2026 00:18:32 +0000 ROA not before: Thu 01 Jan 2026 00:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 202561 IP address blocks: 176.117.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.crl rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.mft rsync://rpki.ripe.net/repository/DEFAULT/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 09:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:a2:e5:c2:35:eb:48:0a:65:2e:f7:3e:5a:9e:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=485018b5c2fef1248ab6ec0d07e971ecbcf739ca Validity Not Before: Jan 1 00:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=467e1288ae6db7aac0fa0ea646edd93a705deb3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:36:dd:26:9b:87:b2:ee:0d:45:68:2b:a9:06: 8d:52:a6:56:12:11:ef:6f:5b:1c:72:c5:44:68:e7: d6:33:6c:04:16:7c:37:03:2d:15:18:53:cc:c9:84: 13:f4:36:29:48:ba:65:78:1e:02:15:a3:8f:18:b3: 2d:74:6c:dc:7e:b2:b3:12:d5:4c:02:f9:68:39:99: 1e:35:e2:41:eb:8b:c5:60:b3:28:27:96:da:c4:da: 7b:bf:9a:fa:51:1c:fd:d9:35:dc:6c:b9:8c:04:34: 26:ab:74:7c:29:08:98:16:d7:a5:16:33:28:02:59: de:5e:06:e8:75:0c:3a:a7:6e:bc:05:33:b1:e9:39: b7:d3:44:7c:c6:52:74:5f:41:19:f9:12:9f:d0:f9: 80:4e:01:ea:88:a7:37:7b:84:99:a2:31:c1:87:6d: 2f:2b:4f:bc:83:df:67:15:63:62:63:91:05:5b:75: 95:67:b9:55:9a:dd:24:25:e8:59:8c:31:c3:d2:4e: c7:3c:30:66:1a:e6:3e:68:8f:80:0f:de:de:58:3a: 61:cf:e1:eb:6f:f0:3d:1a:94:9d:a2:fa:0a:c6:8c: bf:f9:8f:ab:0d:ad:a6:35:d6:62:bb:a2:df:24:d8: 80:db:16:cc:8d:e9:1c:4a:a9:16:97:97:3a:c2:92: 6e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:7E:12:88:AE:6D:B7:AA:C0:FA:0E:A6:46:ED:D9:3A:70:5D:EB:3F X509v3 Authority Key Identifier: keyid:48:50:18:B5:C2:FE:F1:24:8A:B6:EC:0D:07:E9:71:EC:BC:F7:39:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/Rn4SiK5tt6rA-g6mRu3ZOnBd6z8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/853e8f-fcd4-4566-a648-e37499679d46/1/SFAYtcL-8SSKtuwNB-lx7Lz3Oco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 176.117.106.0/24 Signature Algorithm: sha256WithRSAEncryption 22:ed:43:fe:a2:98:13:a9:b3:15:99:d7:6a:74:a4:d1:8e:6e: 27:24:26:52:17:d7:56:4b:6e:c1:ef:d2:e6:b2:ca:46:33:94: 32:c4:bf:c3:b1:87:30:88:20:0c:e2:25:52:4b:0b:2a:06:ce: 05:7e:a2:df:4d:11:09:95:00:88:cd:c9:0e:15:92:09:dc:34: 4a:ad:d0:fa:7a:60:e9:df:fe:18:2b:fa:92:eb:b4:09:d7:dd: 6e:d5:0e:94:e4:54:90:64:17:74:b7:ea:1c:08:de:69:62:3a: a1:1d:43:92:17:54:c7:e4:95:f8:0a:3f:53:b1:99:eb:ef:09: 4d:58:0e:72:75:93:c1:70:ef:a8:b9:c0:4b:ff:12:57:ce:ca: 65:10:07:08:bf:17:13:7c:0d:20:87:05:b2:ff:fa:1b:cd:0b: fd:78:18:7d:c6:36:d8:09:24:72:01:ae:90:8f:cc:1e:ac:76: bf:76:74:b7:75:f8:86:a0:4f:16:dd:9e:c8:88:7a:d0:0a:55: dd:f3:4d:d8:3c:76:6c:1b:01:a3:1b:ec:6a:58:07:ab:d6:ec: b1:b8:8e:ad:73:48:9b:21:b3:31:38:2f:78:d2:50:e6:b7:37: bd:3b:06:9c:6d:cd:42:fb:24:bf:0c:d2:5e:9f:0a:f3:1a:9b: 78:1d:06:a4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt266LlwjXrSAplLvc+Wp7VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4NTAxOGI1YzJmZWYxMjQ4YWI2ZWMwZDA3ZTk3MWVjYmNm NzM5Y2EwHhcNMjYwMTAxMDAxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NjdlMTI4OGFlNmRiN2FhYzBmYTBlYTY0NmVkZDkzYTcwNWRlYjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TbdJpuHsu4NRWgrqQaNUqZWEhHv b1sccsVEaOfWM2wEFnw3Ay0VGFPMyYQT9DYpSLpleB4CFaOPGLMtdGzcfrKzEtVM AvloOZkeNeJB64vFYLMoJ5baxNp7v5r6URz92TXcbLmMBDQmq3R8KQiYFtelFjMo AlneXgbodQw6p268BTOx6Tm300R8xlJ0X0EZ+RKf0PmATgHqiKc3e4SZojHBh20v K0+8g99nFWNiY5EFW3WVZ7lVmt0kJehZjDHD0k7HPDBmGuY+aI+AD97eWDphz+Hr b/A9GpSdovoKxoy/+Y+rDa2mNdZiu6LfJNiA2xbMjekcSqkWl5c6wpJurwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEZ+EoiubbeqwPoOpkbt2TpwXes/MB8GA1UdIwQY MBaAFEhQGLXC/vEkirbsDQfpcey89znKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0ZBWXRjTC04U1NLdHV3TkItbHg3THozT2NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny84NTNlOGYtZmNkNC00NTY2LWE2NDgt ZTM3NDk5Njc5ZDQ2LzEvUm40U2lLNXR0NnJBLWc2bVJ1M1pPbkJkNno4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny84NTNlOGYtZmNkNC00NTY2LWE2NDgtZTM3NDk5Njc5ZDQ2 LzEvU0ZBWXRjTC04U1NLdHV3TkItbHg3THozT2NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHVqMA0G CSqGSIb3DQEBCwUAA4IBAQAi7UP+opgTqbMVmddqdKTRjm4nJCZSF9dWS27B79Lm sspGM5QyxL/DsYcwiCAM4iVSSwsqBs4FfqLfTREJlQCIzckOFZIJ3DRKrdD6emDp 3/4YK/qS67QJ191u1Q6U5FSQZBd0t+ocCN5pYjqhHUOSF1TH5JX4Cj9TsZnr7wlN WA5ydZPBcO+oucBL/xJXzsplEAcIvxcTfA0ghwWy//obzQv9eBh9xjbYCSRyAa6Q j8werHa/dnS3dfiGoE8W3Z7IiHrQClXd803YPHZsGwGjG+xqWAer1uyxuI6tc0ib IbMxOC940lDmtze9Owacbc1C+yS/DNJenwrzGpt4HQak -----END CERTIFICATE-----Generated at Sun Jan 25 20:48:11 2026 by rpki-client