This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/4KH5oPqlph7SdgPsUcEksiUn8vI.roa File: 4KH5oPqlph7SdgPsUcEksiUn8vI.roa (raw, json) Hash identifier: lkUeA2Dm3n5cyMOdG1B7Cdcwz6ExvSxL9MH87e90v8c= Subject key identifier: E0:A1:F9:A0:FA:A5:A6:1E:D2:76:03:EC:51:C1:24:B2:25:27:F2:F2 Certificate issuer: /CN=02930f8c688c04d17433a2b9c7249bc625bce316 Certificate serial: 019B7D5C804159A7022CA68A53EA8F442B76 Authority key identifier: 02:93:0F:8C:68:8C:04:D1:74:33:A2:B9:C7:24:9B:C6:25:BC:E3:16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/4KH5oPqlph7SdgPsUcEksiUn8vI.roa Signing time: Fri 02 Jan 2026 06:19:32 +0000 ROA not before: Fri 02 Jan 2026 06:19:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 57849 IP address blocks: 31.47.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.crl rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.mft rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:80:41:59:a7:02:2c:a6:8a:53:ea:8f:44:2b:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02930f8c688c04d17433a2b9c7249bc625bce316 Validity Not Before: Jan 2 06:19:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0a1f9a0faa5a61ed27603ec51c124b22527f2f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:00:e6:d6:cf:e9:78:cd:56:c4:42:41:c8:c2: e7:4f:6c:ca:3f:1c:d5:60:4a:68:46:52:95:74:7d: 05:a4:9c:3c:2d:c4:ce:0b:b8:ed:d6:4f:9b:23:79: 70:46:c3:d6:76:02:91:a6:85:42:77:11:62:0d:53: 5d:c4:1a:b7:7b:49:2f:a2:37:19:53:7a:02:76:d0: a5:1c:a9:4b:aa:d0:60:2d:1f:61:4c:8b:bc:81:51: 1e:a0:e8:37:76:75:f8:62:9a:a1:cc:c5:d5:30:2b: a6:0b:c2:63:85:ae:c1:25:9f:10:df:6f:02:55:62: 17:6b:42:be:0a:7e:09:7d:ad:cd:8e:c9:32:07:3a: f3:f0:03:d6:2f:95:d3:85:04:4f:53:f6:85:50:1b: d2:21:97:27:eb:87:92:cf:26:0a:8a:af:27:16:e7: fb:2f:05:c2:6b:ad:98:53:63:d8:74:68:b7:05:4c: 6b:a9:02:7e:eb:fb:50:49:d8:8a:66:9a:37:00:ce: e0:d2:34:52:60:f4:24:6a:27:1a:d2:3d:92:b6:3b: c5:5a:28:d2:6d:02:10:b7:06:d8:6b:ec:af:78:be: 9f:fa:84:fc:3d:d5:98:51:a3:ef:b0:4b:6b:9f:5b: 49:72:df:46:e0:25:c7:91:6c:38:fb:97:01:c9:af: 07:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A1:F9:A0:FA:A5:A6:1E:D2:76:03:EC:51:C1:24:B2:25:27:F2:F2 X509v3 Authority Key Identifier: keyid:02:93:0F:8C:68:8C:04:D1:74:33:A2:B9:C7:24:9B:C6:25:BC:E3:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ApMPjGiMBNF0M6K5xySbxiW84xY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/4KH5oPqlph7SdgPsUcEksiUn8vI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b2064b-be09-43d9-b087-a4e991b0f144/1/ApMPjGiMBNF0M6K5xySbxiW84xY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.47.197.0/24 Signature Algorithm: sha256WithRSAEncryption 0d:e4:df:60:ed:ba:68:17:d7:eb:22:15:a9:d5:10:e9:05:a9: f4:5a:bb:0e:2a:84:81:ca:ab:5f:c5:ec:df:59:20:90:8f:b5: d0:66:e8:cc:7f:e8:06:d0:db:1c:4f:25:15:d2:d6:67:60:44: 87:8f:75:2a:b3:a4:01:8b:cd:98:63:4f:7b:85:de:55:b7:0c: 1b:49:58:12:85:ec:0c:e2:d9:db:04:80:d1:a4:3d:d3:db:f8: 85:29:95:40:b7:fd:77:aa:3c:7d:e2:5b:7c:61:1b:6b:41:1f: f7:3a:f9:be:b0:d8:16:ca:2a:dc:25:f4:62:90:85:31:2d:76: 02:0e:9e:dd:f8:6a:d0:b9:65:fb:89:3b:73:7f:3a:f4:2f:f4: b5:c3:35:26:b5:44:32:30:84:ce:3d:2a:74:b4:b5:50:b8:45: 4d:4e:dc:69:e0:e4:48:46:57:ae:a2:de:95:4b:69:bd:fc:6c: 73:a2:61:54:bd:8a:82:a9:e8:ef:5f:c3:d2:50:a0:5a:76:59: 30:f6:3e:f5:8a:24:a5:2b:68:1e:76:81:e0:37:ad:06:8a:67: b4:9e:6f:64:44:c9:5e:09:a7:9d:8e:4a:6f:03:ba:a9:4e:36: e3:9f:d6:b4:2f:3c:b8:38:0c:18:78:f7:1f:d7:7d:47:ba:21: ea:72:89:e5 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt9XIBBWacCLKaKU+qPRCt2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyOTMwZjhjNjg4YzA0ZDE3NDMzYTJiOWM3MjQ5YmM2MjVi Y2UzMTYwHhcNMjYwMTAyMDYxOTMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGExZjlhMGZhYTVhNjFlZDI3NjAzZWM1MWMxMjRiMjI1MjdmMmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQDm1s/peM1WxEJByMLnT2zKPxzV YEpoRlKVdH0FpJw8LcTOC7jt1k+bI3lwRsPWdgKRpoVCdxFiDVNdxBq3e0kvojcZ U3oCdtClHKlLqtBgLR9hTIu8gVEeoOg3dnX4YpqhzMXVMCumC8Jjha7BJZ8Q328C VWIXa0K+Cn4Jfa3NjskyBzrz8APWL5XThQRPU/aFUBvSIZcn64eSzyYKiq8nFuf7 LwXCa62YU2PYdGi3BUxrqQJ+6/tQSdiKZpo3AM7g0jRSYPQkaica0j2StjvFWijS bQIQtwbYa+yveL6f+oT8PdWYUaPvsEtrn1tJct9G4CXHkWw4+5cBya8HXQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOCh+aD6paYe0nYD7FHBJLIlJ/LyMB8GA1UdIwQY MBaAFAKTD4xojATRdDOiucckm8YlvOMWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXBNUGpHaU1CTkYwTTZLNXh5U2J4aVc4NHhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9iMjA2NGItYmUwOS00M2Q5LWIwODct YTRlOTkxYjBmMTQ0LzEvNEtINW9QcWxwaDdTZGdQc1VjRWtzaVVuOHZJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9iMjA2NGItYmUwOS00M2Q5LWIwODctYTRlOTkxYjBmMTQ0 LzEvQXBNUGpHaU1CTkYwTTZLNXh5U2J4aVc4NHhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHy/FMA0G CSqGSIb3DQEBCwUAA4IBAQAN5N9g7bpoF9frIhWp1RDpBan0WrsOKoSByqtfxezf WSCQj7XQZujMf+gG0NscTyUV0tZnYESHj3Uqs6QBi82YY097hd5VtwwbSVgShewM 4tnbBIDRpD3T2/iFKZVAt/13qjx94lt8YRtrQR/3Ovm+sNgWyircJfRikIUxLXYC Dp7d+GrQuWX7iTtzfzr0L/S1wzUmtUQyMITOPSp0tLVQuEVNTtxp4ORIRleuot6V S2m9/GxzomFUvYqCqejvX8PSUKBadlkw9j71iiSlK2gedoHgN60Gime0nm9kRMle CaedjkpvA7qpTjbjn9a0Lzy4OAwYePcf131HuiHqconl -----END CERTIFICATE-----Generated at Mon Jan 26 00:14:12 2026 by rpki-client