This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/RItX9BG6Bl_mx3MTjyJm8l3wLw4.roa File: RItX9BG6Bl_mx3MTjyJm8l3wLw4.roa (raw, json) Hash identifier: ozz/LMoGDHWxs5USbAIdVcdqDkAaVci0RWqFGYt8Lgg= Subject key identifier: 44:8B:57:F4:11:BA:06:5F:E6:C7:73:13:8F:22:66:F2:5D:F0:2F:0E Certificate issuer: /CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8 Certificate serial: 019B77C67B5C27CCAC1C33001D235D8D6BD3 Authority key identifier: 4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/RItX9BG6Bl_mx3MTjyJm8l3wLw4.roa Signing time: Thu 01 Jan 2026 04:17:34 +0000 ROA not before: Thu 01 Jan 2026 04:17:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 1241 IP address blocks: 185.117.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.mft rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:c6:7b:5c:27:cc:ac:1c:33:00:1d:23:5d:8d:6b:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dc391dc615fd4a3ad10c0f2ab8b0a506d039ed8 Validity Not Before: Jan 1 04:17:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=448b57f411ba065fe6c773138f2266f25df02f0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cf:75:08:42:d7:3b:60:7d:04:5d:09:f0:26: 4c:c5:24:fc:9f:29:ed:46:b3:cc:92:b9:71:aa:fa: 92:b4:f0:fa:ea:31:42:7a:14:29:3b:86:d2:08:63: 2d:ac:66:d1:0a:5a:34:6b:f0:67:2d:79:63:1b:4c: f6:29:0a:f6:4e:14:10:c1:9f:98:4f:f5:0a:73:4f: 07:d9:9c:f3:0f:01:21:ea:99:cd:08:c9:f6:06:7d: a4:ff:be:b8:61:9d:29:35:ae:8c:33:d0:c5:78:f8: c4:fc:08:4f:0c:46:cf:1f:4e:b1:4e:28:3d:e7:3f: e5:6b:4f:5c:9f:6c:2f:bd:b0:cd:da:1a:be:a8:ba: b2:18:71:9d:1f:aa:9c:64:cd:c4:34:e3:74:86:f3: c8:af:07:fe:1c:37:0d:66:e1:54:ea:5b:1e:c0:96: df:d7:1b:1a:de:55:85:6c:8d:ea:13:53:68:f4:05: 17:28:11:5c:95:8c:bb:a6:59:9a:00:ab:6b:2b:9b: 72:53:3c:71:d6:42:af:69:85:7e:02:b4:0e:de:7a: c9:43:f0:89:7e:a5:46:02:8b:70:77:cf:30:63:a9: 3f:22:c3:8d:e4:31:c8:68:f8:74:b9:cf:6c:1b:90: 6f:de:7b:d4:44:72:14:54:9b:05:26:09:28:5d:1d: 85:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:8B:57:F4:11:BA:06:5F:E6:C7:73:13:8F:22:66:F2:5D:F0:2F:0E X509v3 Authority Key Identifier: keyid:4D:C3:91:DC:61:5F:D4:A3:AD:10:C0:F2:AB:8B:0A:50:6D:03:9E:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TcOR3GFf1KOtEMDyq4sKUG0Dntg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/RItX9BG6Bl_mx3MTjyJm8l3wLw4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d66a58-fdf5-491e-b511-fd2915d4cd5a/1/TcOR3GFf1KOtEMDyq4sKUG0Dntg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.117.229.0/24 Signature Algorithm: sha256WithRSAEncryption 38:4a:67:82:97:a3:a4:13:d0:8b:d2:76:04:75:cc:c5:7d:4b: d6:a2:ce:33:56:bd:e2:49:c5:6f:ba:ac:18:62:ed:0f:89:be: b4:f8:6e:ca:94:ac:76:fc:3b:a7:f1:1c:70:22:2f:15:5f:3a: f3:3f:f9:80:86:29:c4:13:4b:a5:51:5f:11:6d:3e:8b:89:dd: 1d:0f:06:7d:d6:a1:72:a4:fc:1c:7f:e0:ab:85:8d:a4:21:b8: 9d:2b:ac:e4:53:40:d0:fe:a6:20:e4:ba:52:a1:c5:41:b1:1d: 71:8a:e4:93:28:92:c9:8e:21:d3:11:a6:bf:46:8e:1c:ed:60: d2:0a:ef:21:ff:77:98:12:18:09:44:5d:3d:fc:77:cf:c2:65: 32:14:c8:a0:33:57:ef:37:8a:83:30:fc:77:2c:b9:21:0d:75: d3:b3:43:44:87:a3:10:45:8b:40:70:88:2b:8a:a2:ce:6b:f5: 62:0a:31:1f:4f:7b:5b:95:0f:26:01:ed:37:22:1a:c0:c7:dc: 2e:d9:b9:94:ee:cd:e7:03:63:1f:6c:4d:ca:e9:71:94:c0:b4: 63:8a:ce:50:bf:b0:0a:0d:97:e4:fc:34:69:58:59:1a:d6:f4: bc:74:a0:47:b4:c3:cc:04:d7:0f:11:b3:ea:1b:92:21:dc:94: e4:38:e4:c1 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3xntcJ8ysHDMAHSNdjWvTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRkYzM5MWRjNjE1ZmQ0YTNhZDEwYzBmMmFiOGIwYTUwNmQw MzllZDgwHhcNMjYwMTAxMDQxNzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDhiNTdmNDExYmEwNjVmZTZjNzczMTM4ZjIyNjZmMjVkZjAyZjBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqc91CELXO2B9BF0J8CZMxST8nynt RrPMkrlxqvqStPD66jFCehQpO4bSCGMtrGbRClo0a/BnLXljG0z2KQr2ThQQwZ+Y T/UKc08H2ZzzDwEh6pnNCMn2Bn2k/764YZ0pNa6MM9DFePjE/AhPDEbPH06xTig9 5z/la09cn2wvvbDN2hq+qLqyGHGdH6qcZM3ENON0hvPIrwf+HDcNZuFU6lsewJbf 1xsa3lWFbI3qE1No9AUXKBFclYy7plmaAKtrK5tyUzxx1kKvaYV+ArQO3nrJQ/CJ fqVGAotwd88wY6k/IsON5DHIaPh0uc9sG5Bv3nvURHIUVJsFJgkoXR2F3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFESLV/QRugZf5sdzE48iZvJd8C8OMB8GA1UdIwQY MBaAFE3DkdxhX9SjrRDA8quLClBtA57YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVGNPUjNHRmYxS090RU1EeXE0c0tVRzBEbnRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9kNjZhNTgtZmRmNS00OTFlLWI1MTEt ZmQyOTE1ZDRjZDVhLzEvUkl0WDlCRzZCbF9teDNNVGp5Sm04bDN3THc0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy9kNjZhNTgtZmRmNS00OTFlLWI1MTEtZmQyOTE1ZDRjZDVh LzEvVGNPUjNHRmYxS090RU1EeXE0c0tVRzBEbnRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXXlMA0G CSqGSIb3DQEBCwUAA4IBAQA4SmeCl6OkE9CL0nYEdczFfUvWos4zVr3iScVvuqwY Yu0Pib60+G7KlKx2/Dun8RxwIi8VXzrzP/mAhinEE0ulUV8RbT6Lid0dDwZ91qFy pPwcf+CrhY2kIbidK6zkU0DQ/qYg5LpSocVBsR1xiuSTKJLJjiHTEaa/Ro4c7WDS Cu8h/3eYEhgJRF09/HfPwmUyFMigM1fvN4qDMPx3LLkhDXXTs0NEh6MQRYtAcIgr iqLOa/ViCjEfT3tblQ8mAe03IhrAx9wu2bmU7s3nA2MfbE3K6XGUwLRjis5Qv7AK DZfk/DRpWFka1vS8dKBHtMPMBNcPEbPqG5Ih3JTkOOTB -----END CERTIFICATE-----Generated at Sun Jan 25 12:17:17 2026 by rpki-client