This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/47Z6Ijl4snZDpzGTcBWb6wSz44U.roa File: 47Z6Ijl4snZDpzGTcBWb6wSz44U.roa (raw, json) Hash identifier: PQ4OiK0LGaUldwwdRnQasOlGzvAQnY86J+hvKrPo2OI= Subject key identifier: E3:B6:7A:22:39:78:B2:76:43:A7:31:93:70:15:9B:EB:04:B3:E3:85 Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Certificate serial: 019B791084AC0CB70EDC37EA349BF1059651 Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/47Z6Ijl4snZDpzGTcBWb6wSz44U.roa Signing time: Thu 01 Jan 2026 10:18:04 +0000 ROA not before: Thu 01 Jan 2026 10:18:04 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 207483 IP address blocks: 77.83.203.0/24 maxlen: 24 2a13:a440:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:84:ac:0c:b7:0e:dc:37:ea:34:9b:f1:05:96:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf Validity Not Before: Jan 1 10:18:04 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3b67a223978b27643a7319370159beb04b3e385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:26:a9:75:12:ef:77:89:92:20:0d:2b:9c:b0: 95:2b:33:32:a8:b9:59:4d:19:93:9b:5a:c7:66:92: 1e:b9:86:8f:c6:2e:20:3e:54:0e:eb:70:fc:f6:ae: 68:ed:d8:ad:f7:bf:5c:56:ac:78:86:79:75:c1:22: e8:b9:ca:56:bd:94:2d:67:c0:98:bd:51:d6:82:c6: ca:bc:f0:09:04:d6:23:0e:bf:8b:62:44:ed:3b:67: 41:9a:81:64:14:a9:6a:e4:99:3c:c4:21:0a:89:3c: 26:7d:18:31:46:07:84:a8:27:61:bb:b2:ae:d7:67: 21:e6:1e:76:8b:b7:bd:5c:eb:13:d4:e2:ee:54:47: d1:da:1c:24:58:54:29:e7:e4:33:8a:ee:92:f8:37: 57:ba:a3:9e:69:dc:2b:3b:95:6e:fe:e4:f0:91:16: 10:9e:53:91:8d:e0:36:f0:48:9f:96:d8:bc:5d:71: a3:d1:e8:d9:c0:00:aa:e3:01:f6:c2:96:f4:35:ab: 17:a1:dc:09:fb:86:51:a6:5c:ff:1f:c0:84:75:f1: e2:08:35:c4:b7:9d:4f:d7:ad:46:4a:3e:9e:65:f8: 89:dd:6d:75:7e:82:a7:97:b9:58:2b:0a:6f:22:9d: 9c:d8:54:42:31:b3:85:80:6b:72:11:19:06:8e:8e: 5d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B6:7A:22:39:78:B2:76:43:A7:31:93:70:15:9B:EB:04:B3:E3:85 X509v3 Authority Key Identifier: keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/47Z6Ijl4snZDpzGTcBWb6wSz44U.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 77.83.203.0/24 IPv6: 2a13:a440:9::/48 Signature Algorithm: sha256WithRSAEncryption 29:19:bc:d7:5e:7e:c3:3e:4c:2e:45:05:40:42:0c:2f:27:6d: ad:8d:4b:60:22:f9:8f:4f:11:32:31:fb:a6:98:74:fc:86:a0: a8:6d:de:3e:61:06:c5:bf:ad:de:4f:87:cc:25:61:9d:4d:15: 36:4d:80:32:1d:1c:36:87:d2:18:7c:4e:c7:c5:0f:b9:3d:35: ff:47:09:ee:f5:e7:88:b5:a0:86:63:87:e8:61:2a:3c:92:5e: 79:ba:c6:ae:48:46:43:9b:05:07:51:c5:34:24:1a:b2:b8:a6: cc:09:ba:50:df:c9:b5:c7:13:08:c7:ef:ed:66:14:0c:bb:06: 41:a3:c7:f5:8b:db:96:3d:84:55:3a:56:db:e1:ec:59:f4:05: 09:4d:f5:03:6c:74:b7:cb:ea:6e:c3:0a:03:59:6a:84:05:ab: d6:6a:46:72:6f:a0:f5:32:c4:a0:b8:0f:37:8c:59:20:39:6a: 8b:b6:3d:3b:83:b3:25:96:0b:10:d0:cf:e6:fe:67:f1:ad:8d: 03:11:5f:f6:f6:0c:e5:67:7c:24:88:13:40:af:2b:d2:1c:03: 67:f4:88:e6:7a:8c:59:5a:63:2c:2b:56:88:86:f9:53:c7:ec: 90:db:b6:0d:de:02:ff:45:c7:2d:7c:59:94:94:58:72:b7:a4: 09:79:47:69 -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt5EISsDLcO3DfqNJvxBZZRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl ZjVkYWYwHhcNMjYwMTAxMTAxODA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlM2I2N2EyMjM5NzhiMjc2NDNhNzMxOTM3MDE1OWJlYjA0YjNlMzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iapdRLvd4mSIA0rnLCVKzMyqLlZ TRmTm1rHZpIeuYaPxi4gPlQO63D89q5o7dit979cVqx4hnl1wSLoucpWvZQtZ8CY vVHWgsbKvPAJBNYjDr+LYkTtO2dBmoFkFKlq5Jk8xCEKiTwmfRgxRgeEqCdhu7Ku 12ch5h52i7e9XOsT1OLuVEfR2hwkWFQp5+Qziu6S+DdXuqOeadwrO5Vu/uTwkRYQ nlORjeA28Eiflti8XXGj0ejZwACq4wH2wpb0NasXodwJ+4ZRplz/H8CEdfHiCDXE t51P161GSj6eZfiJ3W11foKnl7lYKwpvIp2c2FRCMbOFgGtyERkGjo5dwwIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFOO2eiI5eLJ2Q6cxk3AVm+sEs+OFMB8GA1UdIwQY MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt NWRkNmUyMmViYWIwLzEvNDdaNklqbDRzblpEcHpHVGNCV2I2d1N6NDRVLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQATVPLMA8E AgACMAkDBwAqE6RAAAkwDQYJKoZIhvcNAQELBQADggEBACkZvNdefsM+TC5FBUBC DC8nba2NS2Ai+Y9PETIx+6aYdPyGoKht3j5hBsW/rd5Ph8wlYZ1NFTZNgDIdHDaH 0hh8TsfFD7k9Nf9HCe7154i1oIZjh+hhKjySXnm6xq5IRkObBQdRxTQkGrK4pswJ ulDfybXHEwjH7+1mFAy7BkGjx/WL25Y9hFU6Vtvh7Fn0BQlN9QNsdLfL6m7DCgNZ aoQFq9ZqRnJvoPUyxKC4DzeMWSA5aou2PTuDsyWWCxDQz+b+Z/GtjQMRX/b2DOVn fCSIE0CvK9IcA2f0iOZ6jFlaYywrVoiG+VPH7JDbtg3eAv9Fxy18WZSUWHK3pAl5 R2k= -----END CERTIFICATE-----Generated at Sun Jan 25 16:13:01 2026 by rpki-client