This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/RNhe93FE6qEUnmI7KhC9QCPUKRE.roa File: RNhe93FE6qEUnmI7KhC9QCPUKRE.roa (raw, json) Hash identifier: +sF8WWUCiojfxzR+V4lEJDjHf4WmTy3H3whX2T288mI= Subject key identifier: 44:D8:5E:F7:71:44:EA:A1:14:9E:62:3B:2A:10:BD:40:23:D4:29:11 Certificate issuer: /CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae Certificate serial: 019B76EB1EDCA72B79F6273F2F41FEAA24AA Authority key identifier: 20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/RNhe93FE6qEUnmI7KhC9QCPUKRE.roa Signing time: Thu 01 Jan 2026 00:17:58 +0000 ROA not before: Thu 01 Jan 2026 00:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 15851 IP address blocks: 212.127.64.0/19 maxlen: 19 213.231.192.0/18 maxlen: 18 2001:a48:8000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:76:eb:1e:dc:a7:2b:79:f6:27:3f:2f:41:fe:aa:24:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae Validity Not Before: Jan 1 00:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=44d85ef77144eaa1149e623b2a10bd4023d42911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e3:9a:f5:8f:1b:bf:0d:a1:16:eb:17:0d:27: ab:89:1b:d3:99:f8:93:e3:d8:ed:73:7d:3b:fb:ee: 14:cf:26:16:28:a9:1a:4b:2f:41:ac:e1:6e:b9:e1: ff:b9:a4:c7:ee:68:76:08:ae:3f:58:01:59:a5:a1: 51:14:11:2d:65:68:7c:c8:95:5f:ae:76:8c:c5:e8: 47:c2:0a:ee:08:8e:1d:d4:3e:be:40:a9:b7:6b:0f: 19:fb:e9:83:7d:6e:4b:ed:4b:d5:79:9d:27:d0:10: 39:db:f3:2b:b3:18:bc:4f:9e:e6:c0:a1:aa:68:04: ab:b1:08:dd:53:41:88:47:16:d3:18:8f:38:62:9b: 82:94:30:09:ad:00:17:73:75:49:53:91:52:41:79: 92:6c:f0:06:b7:78:67:9c:f2:70:6d:ed:f4:e6:52: 73:21:6d:2c:2d:24:d0:fe:3b:94:d3:75:cc:ab:45: c7:67:7f:a6:bf:19:b2:b9:ea:3d:36:16:40:70:34: 06:70:77:86:08:08:c8:b5:a0:cb:d1:f4:38:02:ae: 6d:8c:b7:dd:b6:e6:b1:52:90:93:c1:7f:bf:56:93: d3:a9:7d:ad:af:bc:c0:6e:e9:bc:1a:34:38:5d:c7: b6:fd:64:60:d8:d8:91:c3:3c:49:d5:9f:5b:58:c1: 8d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D8:5E:F7:71:44:EA:A1:14:9E:62:3B:2A:10:BD:40:23:D4:29:11 X509v3 Authority Key Identifier: keyid:20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/RNhe93FE6qEUnmI7KhC9QCPUKRE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.127.64.0/19 213.231.192.0/18 IPv6: 2001:a48:8000::/36 Signature Algorithm: sha256WithRSAEncryption b0:55:06:3a:6e:cc:52:25:4e:26:c0:30:92:e7:0e:02:23:ea: 0a:97:a3:b7:11:da:f2:4a:55:8e:23:1a:fb:18:79:3c:b2:b2: 51:07:f2:4d:ca:6a:0d:04:0a:2a:36:e3:02:c5:ac:e5:8b:3c: 84:f9:c5:41:d0:6f:58:a2:36:37:7b:67:99:1b:0a:50:4d:f5: 9f:35:71:d7:28:7f:6f:91:8a:49:61:f3:5c:3c:31:d7:bc:0b: c9:27:69:6a:77:b0:54:e4:a3:6f:35:33:4a:a7:7a:d7:ed:1f: 07:af:94:07:4b:5a:01:01:b8:38:a2:47:98:66:6f:75:32:fc: 77:22:db:c9:c6:1e:b4:9a:3b:72:02:a6:89:f7:5d:1c:36:c5: cb:26:22:29:8c:ac:37:73:1a:4a:cd:a9:be:e5:71:aa:1c:20: d5:13:ca:a9:20:07:ef:0f:89:5e:1d:5b:e1:5d:f8:2f:96:0e: 27:60:05:f9:2c:c9:97:43:bf:ec:e9:5d:8d:00:d6:7e:1e:a0: 2d:74:3f:7c:de:54:d2:89:10:73:41:aa:a8:13:07:ed:4c:86: 9e:1d:47:3d:4d:67:be:4c:c6:06:a9:cf:7b:68:db:01:a3:ca: c2:3c:57:1c:f1:54:44:65:5a:4b:57:e7:f0:69:e7:cf:b5:f8: 19:08:e0:c7 -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgISAZt26x7cpyt59ic/L0H+qiSqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwMmY0YzFhMzdlOTMxM2NkZDJlZWE3NzUwYWUwMjhkMThj ZDVhYWUwHhcNMjYwMTAxMDAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NGQ4NWVmNzcxNDRlYWExMTQ5ZTYyM2IyYTEwYmQ0MDIzZDQyOTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+Oa9Y8bvw2hFusXDSeriRvTmfiT 49jtc307++4UzyYWKKkaSy9BrOFuueH/uaTH7mh2CK4/WAFZpaFRFBEtZWh8yJVf rnaMxehHwgruCI4d1D6+QKm3aw8Z++mDfW5L7UvVeZ0n0BA52/Mrsxi8T57mwKGq aASrsQjdU0GIRxbTGI84YpuClDAJrQAXc3VJU5FSQXmSbPAGt3hnnPJwbe305lJz IW0sLSTQ/juU03XMq0XHZ3+mvxmyueo9NhZAcDQGcHeGCAjItaDL0fQ4Aq5tjLfd tuaxUpCTwX+/VpPTqX2tr7zAbum8GjQ4Xce2/WRg2NiRwzxJ1Z9bWMGNLQIDAQAB o4ICHzCCAhswHQYDVR0OBBYEFETYXvdxROqhFJ5iOyoQvUAj1CkRMB8GA1UdIwQY MBaAFCAvTBo36TE83S7qd1CuAo0YzVquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUM5TUdqZnBNVHpkTHVwM1VLNENqUmpOV3E0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lZGI4Y2QtMDAzZC00ODNhLTkwNmEt ZjZiNzhlMmIxN2ExLzEvUk5oZTkzRkU2cUVVbm1JN0toQzlRQ1BVS1JFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZS9lZGI4Y2QtMDAzZC00ODNhLTkwNmEtZjZiNzhlMmIxN2Ex LzEvSUM5TUdqZnBNVHpkTHVwM1VLNENqUmpOV3E0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQF1H9AAwQG 1efAMA4EAgACMAgDBgQgAQpIgDANBgkqhkiG9w0BAQsFAAOCAQEAsFUGOm7MUiVO JsAwkucOAiPqCpejtxHa8kpVjiMa+xh5PLKyUQfyTcpqDQQKKjbjAsWs5Ys8hPnF QdBvWKI2N3tnmRsKUE31nzVx1yh/b5GKSWHzXDwx17wLySdpanewVOSjbzUzSqd6 1+0fB6+UB0taAQG4OKJHmGZvdTL8dyLbycYetJo7cgKmifddHDbFyyYiKYysN3Ma Ss2pvuVxqhwg1RPKqSAH7w+JXh1b4V34L5YOJ2AF+SzJl0O/7OldjQDWfh6gLXQ/ fN5U0okQc0GqqBMH7UyGnh1HPU1nvkzGBqnPe2jbAaPKwjxXHPFURGVaS1fn8Gnn z7X4GQjgxw== -----END CERTIFICATE-----Generated at Mon Jan 26 05:43:51 2026 by rpki-client