This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/4xaEdixeinTNAew5f36B5ogFapc.roa File: 4xaEdixeinTNAew5f36B5ogFapc.roa (raw, json) Hash identifier: U+lj7Po2vIYbjteMOk724C6A7iSVfdA9w8Qr+wSn2EY= Subject key identifier: E3:16:84:76:2C:5E:8A:74:CD:01:EC:39:7F:7E:81:E6:88:05:6A:97 Certificate issuer: /CN=85d0e763f935c171694f172056eb44209db2e2cd Certificate serial: 019B78345D1124D082CB345091AE175C3BE7 Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/4xaEdixeinTNAew5f36B5ogFapc.roa Signing time: Thu 01 Jan 2026 06:17:36 +0000 ROA not before: Thu 01 Jan 2026 06:17:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 200845 IP address blocks: 212.231.64.0/24 maxlen: 24 212.231.65.0/24 maxlen: 24 212.231.66.0/24 maxlen: 24 212.231.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 06:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:5d:11:24:d0:82:cb:34:50:91:ae:17:5c:3b:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd Validity Not Before: Jan 1 06:17:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e31684762c5e8a74cd01ec397f7e81e688056a97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:7a:ef:4b:11:f5:88:30:0c:9d:06:98:84:6a: b4:3c:2c:39:bb:3f:5d:37:cb:43:51:ce:f6:d1:7c: 40:85:3f:84:71:44:66:82:6c:2e:ec:1a:6c:b5:27: f8:17:bc:5d:7d:8f:36:b2:97:43:db:cc:20:bd:a5: 82:1f:8c:ab:77:e2:89:21:5e:52:bf:d9:06:19:d5: 3a:29:84:62:78:58:59:fb:82:b4:7c:34:22:ec:e0: 5b:89:2a:48:21:58:cd:1e:14:88:2c:d6:6f:85:5f: 55:50:c7:b9:24:9e:db:48:ba:76:47:71:e0:33:10: 13:cb:a7:1d:77:c8:f6:0d:7d:c9:06:46:9d:d3:f6: 92:6f:7f:74:34:9d:48:07:93:aa:de:36:a9:57:43: 77:42:e0:3e:41:0d:87:f9:64:bb:72:cd:86:46:0a: bd:d8:44:38:0c:b3:38:c0:05:92:25:26:6a:94:13: 72:e5:00:ca:67:23:49:4b:7f:39:dd:40:f7:6c:03: f7:99:f6:33:83:ed:37:b6:81:b1:a2:59:0a:89:73: 66:01:86:69:a4:22:61:cf:89:f1:d0:35:13:b6:d8: 24:57:a9:9f:91:f2:9e:db:d8:00:9e:05:db:d3:4f: 30:92:f4:b0:a5:e2:a6:39:b9:27:70:38:66:a2:0e: 9f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:16:84:76:2C:5E:8A:74:CD:01:EC:39:7F:7E:81:E6:88:05:6A:97 X509v3 Authority Key Identifier: keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/4xaEdixeinTNAew5f36B5ogFapc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 212.231.64.0-212.231.66.255 212.231.95.0/24 Signature Algorithm: sha256WithRSAEncryption 12:67:91:9d:a4:ce:2a:6b:e1:2c:23:a3:3a:11:7a:35:f6:d6: 0a:e0:a9:50:b6:b6:a6:d1:37:89:e2:b4:b4:fa:a5:1a:41:c5: 06:c3:48:4b:1e:a6:00:69:d0:0a:51:2a:4e:97:d0:49:3f:9e: d0:8d:51:90:f5:ff:85:1a:e4:b7:8a:53:0a:14:c5:25:42:62: b7:53:1c:aa:e0:f6:75:f0:cc:a8:90:c8:59:08:32:66:b4:a8: 7a:14:fc:75:34:33:d6:fd:90:b7:90:21:96:bd:b9:11:25:6b: f1:cb:8f:21:10:e9:ec:79:02:90:df:5e:df:56:6b:5c:5a:15: 34:60:f1:cc:ef:ec:fa:0f:f0:1d:9f:85:f0:27:da:66:7a:4a: 13:e8:e4:63:55:46:db:62:6d:0f:6a:55:c5:ac:38:fc:a7:07: 85:b2:ef:b6:f2:0c:05:28:f5:3a:f4:82:b2:6a:44:f3:87:cc: 3d:96:3e:23:17:e4:57:78:ec:59:75:ad:4d:ba:66:82:10:1c: 7c:1a:54:f8:c9:cd:2e:ba:c8:f0:4d:b2:94:41:99:43:e3:db: 0b:18:39:d2:34:62:5b:f8:fc:5d:89:4f:11:5c:f1:4c:52:50: 1f:b5:f5:2c:d9:43:4c:a6:01:91:5b:7f:53:d4:a6:39:b0:d1: 00:a9:6e:e1 -----BEGIN CERTIFICATE----- MIIFCzCCA/OgAwIBAgISAZt4NF0RJNCCyzRQka4XXDvnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZDBlNzYzZjkzNWMxNzE2OTRmMTcyMDU2ZWI0NDIwOWRi MmUyY2QwHhcNMjYwMTAxMDYxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzE2ODQ3NjJjNWU4YTc0Y2QwMWVjMzk3ZjdlODFlNjg4MDU2YTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3rvSxH1iDAMnQaYhGq0PCw5uz9d N8tDUc720XxAhT+EcURmgmwu7BpstSf4F7xdfY82spdD28wgvaWCH4yrd+KJIV5S v9kGGdU6KYRieFhZ+4K0fDQi7OBbiSpIIVjNHhSILNZvhV9VUMe5JJ7bSLp2R3Hg MxATy6cdd8j2DX3JBkad0/aSb390NJ1IB5Oq3japV0N3QuA+QQ2H+WS7cs2GRgq9 2EQ4DLM4wAWSJSZqlBNy5QDKZyNJS3853UD3bAP3mfYzg+03toGxolkKiXNmAYZp pCJhz4nx0DUTttgkV6mfkfKe29gAngXb008wkvSwpeKmObkncDhmog6fwQIDAQAB o4ICFzCCAhMwHQYDVR0OBBYEFOMWhHYsXop0zQHsOX9+geaIBWqXMB8GA1UdIwQY MBaAFIXQ52P5NcFxaU8XIFbrRCCdsuLNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2Qt ZjEyODM1ZjAyNDdiLzEvNHhhRWRpeGVpblROQWV3NWYzNkI1b2dGYXBjLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2QtZjEyODM1ZjAyNDdi LzEvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAbU50AD BADU50IDBADU518wDQYJKoZIhvcNAQELBQADggEBABJnkZ2kzipr4SwjozoRejX2 1grgqVC2tqbRN4nitLT6pRpBxQbDSEsepgBp0ApRKk6X0Ek/ntCNUZD1/4Ua5LeK UwoUxSVCYrdTHKrg9nXwzKiQyFkIMma0qHoU/HU0M9b9kLeQIZa9uREla/HLjyEQ 6ex5ApDfXt9Wa1xaFTRg8czv7PoP8B2fhfAn2mZ6ShPo5GNVRttibQ9qVcWsOPyn B4Wy77byDAUo9Tr0grJqRPOHzD2WPiMX5Fd47Fl1rU26ZoIQHHwaVPjJzS66yPBN spRBmUPj2wsYOdI0Ylv4/F2JTxFc8UxSUB+19SzZQ0ymAZFbf1PUpjmw0QCpbuE= -----END CERTIFICATE-----Generated at Sun Jan 25 14:40:08 2026 by rpki-client