This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/n4YS3tv3OTje7y_uAOWl6VEiLt0.roa File: n4YS3tv3OTje7y_uAOWl6VEiLt0.roa (raw, json) Hash identifier: QzWEWprN2q6peVCx8Mc+l5d7z0u1Z+SxRCCImRonZVY= Subject key identifier: 9F:86:12:DE:DB:F7:39:38:DE:EF:2F:EE:00:E5:A5:E9:51:22:2E:DD Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54 Certificate serial: 019B804C9BA3FE3368090C751CC1A1CE9248 Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/n4YS3tv3OTje7y_uAOWl6VEiLt0.roa Signing time: Fri 02 Jan 2026 20:01:02 +0000 ROA not before: Fri 02 Jan 2026 20:01:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204330 IP address blocks: 212.46.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 03:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:80:4c:9b:a3:fe:33:68:09:0c:75:1c:c1:a1:ce:92:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54 Validity Not Before: Jan 2 20:01:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=9f8612dedbf73938deef2fee00e5a5e951222edd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7c:26:d8:c0:65:39:88:24:96:1b:d5:76:96: 76:d7:ea:56:e3:d5:7e:fc:b8:3f:13:f3:a9:fa:03: ff:4e:f0:f2:d6:44:35:5a:9e:a5:8d:43:79:55:28: b2:75:22:ab:ee:55:a9:74:ce:b4:25:8d:2e:0f:09: 2c:fc:21:5a:12:e2:02:2a:10:fc:68:87:75:c0:16: 65:20:87:fa:07:c2:d0:ea:db:7e:01:e4:56:58:7d: 3b:67:77:19:3a:56:bb:09:12:82:44:54:65:ef:5f: 75:ff:ad:df:6b:71:0e:03:1e:4c:75:46:1d:8d:a8: 09:de:04:73:36:69:3a:87:8b:4d:38:19:b8:05:33: 35:86:09:81:20:97:9f:8e:49:8c:29:27:6b:41:d9: 5b:9d:6d:08:3f:ee:5b:de:8b:24:60:c8:af:e7:4e: 40:cb:8b:2b:0d:1e:70:35:ac:ff:ec:4e:dc:d3:ec: 53:d8:bc:95:c2:27:07:1c:f3:53:db:22:8a:d6:20: 45:1c:5a:20:af:36:80:85:2d:38:b8:12:95:a1:ce: ee:ab:e2:67:9d:e4:65:31:e3:60:18:6d:0e:bf:c8: 70:41:38:45:80:34:31:c1:80:8f:65:4d:b8:db:a1: 2a:c7:64:1e:98:88:13:4e:ab:50:63:fe:d6:62:27: 4c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:86:12:DE:DB:F7:39:38:DE:EF:2F:EE:00:E5:A5:E9:51:22:2E:DD X509v3 Authority Key Identifier: keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/n4YS3tv3OTje7y_uAOWl6VEiLt0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.46.33.0/24 Signature Algorithm: sha256WithRSAEncryption 42:5d:68:f5:09:12:34:9c:33:d6:1d:8c:c3:69:81:8b:2d:e1: 35:00:87:dc:64:6e:de:30:9f:15:8b:f2:99:50:4e:d6:24:75: fa:b2:59:48:13:5b:c8:3c:a9:63:d1:3d:ab:b5:3f:5e:ff:89: 0a:97:18:80:73:27:d7:d4:c6:f3:7a:95:c1:8a:d2:42:5e:a7: 37:0e:41:ba:40:21:fa:75:3d:d1:05:5c:a4:4f:19:64:0b:55: 8a:38:01:7f:51:c2:84:66:b0:a0:2c:c8:b1:9c:ca:94:be:1f: 9c:4a:55:36:9b:17:d1:1d:85:99:8c:ae:46:6d:b5:5c:8c:e7: 37:cc:29:a4:af:14:fc:dc:71:c7:a2:4b:59:22:b9:3d:b8:ed: 2e:d9:a2:87:5c:20:78:e8:58:99:e2:41:6b:88:a1:8f:b0:58: e0:36:b0:63:19:2f:c4:db:9c:65:33:06:0e:d1:f6:61:1f:58: 47:41:c3:10:e5:e6:cd:70:84:5a:59:fc:9d:6b:16:7f:82:b8: ce:9b:8c:93:eb:02:bb:34:f9:e4:93:62:be:8b:4a:ca:c7:19: 96:94:96:06:61:f8:d0:b6:6e:b3:15:55:9e:ee:31:7c:6d:68: 4b:ef:cd:32:24:67:f1:92:ed:e2:42:cf:a1:76:44:01:4b:61: 01:bc:1a:15 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZuATJuj/jNoCQx1HMGhzpJIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU2Yjk4ZjgzY2NiZGE3YzE5ZjAwNDE1MWM5OGI1N2M1OWQy NjhmNTQwHhcNMjYwMTAyMjAwMTAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg5Zjg2MTJkZWRiZjczOTM4ZGVlZjJmZWUwMGU1YTVlOTUxMjIyZWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnwm2MBlOYgklhvVdpZ21+pW49V+ /Lg/E/Op+gP/TvDy1kQ1Wp6ljUN5VSiydSKr7lWpdM60JY0uDwks/CFaEuICKhD8 aId1wBZlIIf6B8LQ6tt+AeRWWH07Z3cZOla7CRKCRFRl7191/63fa3EOAx5MdUYd jagJ3gRzNmk6h4tNOBm4BTM1hgmBIJefjkmMKSdrQdlbnW0IP+5b3oskYMiv505A y4srDR5wNaz/7E7c0+xT2LyVwicHHPNT2yKK1iBFHFogrzaAhS04uBKVoc7uq+Jn neRlMeNgGG0Ov8hwQThFgDQxwYCPZU2426Eqx2QemIgTTqtQY/7WYidMiwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFJ+GEt7b9zk43u8v7gDlpelRIi7dMB8GA1UdIwQY MBaAFFa5j4PMvafBnwBBUcmLV8WdJo9UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2Yt N2FhN2ZjMzU5NjU1LzEvbjRZUzN0djNPVGplN3lfdUFPV2w2VkVpTHQwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My84Y2I5MzUtNzFhMy00ZGIzLTlmM2YtN2FhN2ZjMzU5NjU1 LzEvVnJtUGc4eTlwOEdmQUVGUnlZdFh4WjBtajFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1C4hMA0G CSqGSIb3DQEBCwUAA4IBAQBCXWj1CRI0nDPWHYzDaYGLLeE1AIfcZG7eMJ8Vi/KZ UE7WJHX6sllIE1vIPKlj0T2rtT9e/4kKlxiAcyfX1MbzepXBitJCXqc3DkG6QCH6 dT3RBVykTxlkC1WKOAF/UcKEZrCgLMixnMqUvh+cSlU2mxfRHYWZjK5GbbVcjOc3 zCmkrxT83HHHoktZIrk9uO0u2aKHXCB46FiZ4kFriKGPsFjgNrBjGS/E25xlMwYO 0fZhH1hHQcMQ5ebNcIRaWfydaxZ/grjOm4yT6wK7NPnkk2K+i0rKxxmWlJYGYfjQ tm6zFVWe7jF8bWhL780yJGfxku3iQs+hdkQBS2EBvBoV -----END CERTIFICATE-----Generated at Sun Jan 25 13:03:37 2026 by rpki-client