This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/RUdkYB7gYtQia_NavoRTMoG3pvE.roa File: RUdkYB7gYtQia_NavoRTMoG3pvE.roa (raw, json) Hash identifier: T6PW2Xl5c1A8FrzU6sJtHxxL5BTjblBQGY54ZziHyw0= Subject key identifier: 45:47:64:60:1E:E0:62:D4:22:6B:F3:5A:BE:84:53:32:81:B7:A6:F1 Certificate issuer: /CN=a2900e4655ab349a4632b140719dc97230431725 Certificate serial: 019B7CEDB5F628064BFFF901E3156A1EA63A Authority key identifier: A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/RUdkYB7gYtQia_NavoRTMoG3pvE.roa Signing time: Fri 02 Jan 2026 04:18:32 +0000 ROA not before: Fri 02 Jan 2026 04:18:32 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 208142 IP address blocks: 62.140.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.mft rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 19:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:ed:b5:f6:28:06:4b:ff:f9:01:e3:15:6a:1e:a6:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2900e4655ab349a4632b140719dc97230431725 Validity Not Before: Jan 2 04:18:32 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=454764601ee062d4226bf35abe84533281b7a6f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d7:e0:f8:e3:48:08:6d:84:b2:42:94:92:df: 45:fb:9d:f2:48:7d:b5:ce:76:54:40:da:46:87:b8: 4c:5e:e4:8b:2f:bf:e0:2f:5a:cc:3e:07:51:b5:1b: c3:44:ee:f2:4c:d0:83:b1:fb:aa:bc:08:c1:21:4c: 6c:fa:36:6c:78:53:81:a6:b4:38:f7:36:49:56:a9: c7:23:e8:ac:c4:9c:35:47:15:1b:f1:99:c8:9c:97: 07:ca:61:8b:97:82:9c:b7:48:90:1a:cf:55:d2:ca: bb:da:64:5a:7d:42:02:03:dc:55:6b:35:82:1a:d1: 33:05:90:e8:49:30:a8:d6:01:80:ed:de:73:2e:1b: ba:75:20:9d:81:12:78:73:8c:85:1c:7e:99:30:7d: 5c:d8:94:87:f5:f1:3b:a1:40:28:b3:cd:0c:21:42: b3:67:3d:02:bb:de:c6:c3:e5:8c:cd:a8:52:c5:a7: 4b:6b:8d:90:52:f0:77:ca:b8:c2:f3:57:f4:9a:5e: c9:94:e0:98:4f:ec:8f:e6:3d:35:c5:c0:b6:f5:6a: 07:58:e8:7a:32:81:03:65:0f:a2:bc:5f:84:83:dd: e1:a0:e3:e5:34:93:cd:4c:0c:4a:ca:38:4f:57:cc: a0:93:cf:f5:57:a4:47:49:bb:89:f8:9d:cc:0d:f6: 01:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:47:64:60:1E:E0:62:D4:22:6B:F3:5A:BE:84:53:32:81:B7:A6:F1 X509v3 Authority Key Identifier: keyid:A2:90:0E:46:55:AB:34:9A:46:32:B1:40:71:9D:C9:72:30:43:17:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/opAORlWrNJpGMrFAcZ3JcjBDFyU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/RUdkYB7gYtQia_NavoRTMoG3pvE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/opAORlWrNJpGMrFAcZ3JcjBDFyU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 62.140.248.0/24 Signature Algorithm: sha256WithRSAEncryption 55:bd:32:e0:6e:ad:6f:66:73:5a:e2:68:a3:b2:e1:f4:44:86: 0a:ff:7b:48:bc:9e:b0:78:80:c9:f4:bc:ec:f0:ea:51:8e:82: 7a:3f:47:4d:f4:9a:8b:ee:2b:a6:49:bb:4d:30:c4:bb:05:fb: 3f:71:9d:cd:1d:0a:d9:25:86:9c:65:cf:28:c1:28:86:b8:6b: 6c:ae:9f:f3:5c:2b:c5:20:72:39:12:dd:d3:fc:72:c5:75:32: 8d:61:1b:a0:54:f7:5e:3d:e9:77:ea:05:dc:a9:6f:2e:a2:cb: cd:b1:c9:b4:36:42:85:88:b1:3b:c2:c5:79:f2:3b:78:bc:79: b0:ed:12:98:28:11:d2:d6:b4:b1:92:f3:17:94:7c:d2:d6:79: 98:77:ef:01:f7:13:35:e0:a4:ba:88:a2:88:a6:98:ac:59:07: 2a:af:d6:35:1a:cc:77:22:1e:d6:e3:00:ac:de:fb:27:cc:c2: 4d:c6:f0:82:cb:3d:57:c4:2a:be:6b:4d:cd:0e:e6:0d:e5:88: 5c:49:97:b5:9b:b3:56:f3:be:cd:ad:fb:aa:c8:16:28:e3:ec: 84:b1:eb:84:e4:33:1e:38:e4:b2:52:d7:a6:a7:42:69:bf:e4: 67:77:60:7b:80:92:14:31:3f:c4:10:40:06:f2:cf:58:d8:3e: 36:14:7d:e6 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt87bX2KAZL//kB4xVqHqY6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGEyOTAwZTQ2NTVhYjM0OWE0NjMyYjE0MDcxOWRjOTcyMzA0 MzE3MjUwHhcNMjYwMTAyMDQxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NTQ3NjQ2MDFlZTA2MmQ0MjI2YmYzNWFiZTg0NTMzMjgxYjdhNmYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9fg+ONICG2EskKUkt9F+53ySH21 znZUQNpGh7hMXuSLL7/gL1rMPgdRtRvDRO7yTNCDsfuqvAjBIUxs+jZseFOBprQ4 9zZJVqnHI+isxJw1RxUb8ZnInJcHymGLl4Kct0iQGs9V0sq72mRafUICA9xVazWC GtEzBZDoSTCo1gGA7d5zLhu6dSCdgRJ4c4yFHH6ZMH1c2JSH9fE7oUAos80MIUKz Zz0Cu97Gw+WMzahSxadLa42QUvB3yrjC81f0ml7JlOCYT+yP5j01xcC29WoHWOh6 MoEDZQ+ivF+Eg93hoOPlNJPNTAxKyjhPV8ygk8/1V6RHSbuJ+J3MDfYB/wIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEVHZGAe4GLUImvzWr6EUzKBt6bxMB8GA1UdIwQY MBaAFKKQDkZVqzSaRjKxQHGdyXIwQxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMt ZjRjNWZjM2NhMmM0LzEvUlVka1lCN2dZdFFpYV9OYXZvUlRNb0czcHZFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMtZjRjNWZjM2NhMmM0 LzEvb3BBT1JsV3JOSnBHTXJGQWNaM0pjakJERnlVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPoz4MA0G CSqGSIb3DQEBCwUAA4IBAQBVvTLgbq1vZnNa4mijsuH0RIYK/3tIvJ6weIDJ9Lzs 8OpRjoJ6P0dN9JqL7iumSbtNMMS7Bfs/cZ3NHQrZJYacZc8owSiGuGtsrp/zXCvF IHI5Et3T/HLFdTKNYRugVPdePel36gXcqW8uosvNscm0NkKFiLE7wsV58jt4vHmw 7RKYKBHS1rSxkvMXlHzS1nmYd+8B9xM14KS6iKKIppisWQcqr9Y1Gsx3Ih7W4wCs 3vsnzMJNxvCCyz1XxCq+a03NDuYN5YhcSZe1m7NW877NrfuqyBYo4+yEseuE5DMe OOSyUtemp0Jpv+Rnd2B7gJIUMT/EEEAG8s9Y2D42FH3m -----END CERTIFICATE-----Generated at Mon Jan 26 03:40:34 2026 by rpki-client