This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/4P44xY1khmyEZiMfEP9IIqI31cw.roa File: 4P44xY1khmyEZiMfEP9IIqI31cw.roa (raw, json) Hash identifier: HoHEIC8qQ5DdoCy6PGfE4N47m5oNmY1p21zVZ0NZdNM= Subject key identifier: E0:FE:38:C5:8D:64:86:6C:84:66:23:1F:10:FF:48:22:A2:37:D5:CC Certificate issuer: /CN=18886007da1730b0770d8604db73d12fd264f3f9 Certificate serial: 019B7E38F56101A72D18EADA86F9966C9DDD Authority key identifier: 18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/4P44xY1khmyEZiMfEP9IIqI31cw.roa Signing time: Fri 02 Jan 2026 10:20:20 +0000 ROA not before: Fri 02 Jan 2026 10:20:20 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47594 IP address blocks: 213.171.1.0/24 maxlen: 24 213.171.2.0/24 maxlen: 24 213.171.11.0/24 maxlen: 24 213.171.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.mft rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Jan 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:f5:61:01:a7:2d:18:ea:da:86:f9:96:6c:9d:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18886007da1730b0770d8604db73d12fd264f3f9 Validity Not Before: Jan 2 10:20:20 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0fe38c58d64866c8466231f10ff4822a237d5cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ad:ef:ac:6e:7d:a9:a6:76:c2:f1:e4:59:d9: ad:43:82:12:88:0a:74:dd:63:0b:d2:5a:a8:65:51: d7:d3:4c:36:da:72:cf:82:04:30:df:91:f9:09:2d: 82:55:5c:7c:49:ec:3a:e3:01:8b:b6:27:c3:61:33: 27:40:5d:27:7f:73:e6:35:a8:10:0a:03:76:90:4f: 09:d2:98:0a:ad:a1:4a:14:5f:75:bd:88:b2:ee:56: a6:ec:3d:fb:5f:c7:cb:fb:bf:75:44:f0:c6:f7:46: f7:4f:94:29:b9:27:7c:f5:80:a6:18:d2:2a:fd:b2: 02:4d:e3:a6:f7:99:03:38:c5:96:1d:bc:75:cc:ee: 1b:8d:16:10:fb:60:04:6e:09:90:e0:80:52:7c:9a: ac:db:f5:b1:44:3a:b1:50:24:9e:4a:6a:5d:f6:9c: 72:8e:c2:1f:ca:dd:72:f6:03:9d:cf:c9:2c:5a:b8: 8a:0e:e4:fe:f5:fe:d4:4e:77:5c:5c:cd:f5:a1:f1: 37:27:fb:25:f6:e6:9e:51:b7:50:5d:5c:f1:b5:a8: 98:89:4d:97:53:1f:0f:09:66:ba:1e:ac:89:81:a6: b0:a2:28:75:b5:e3:ca:b3:77:1d:18:ce:74:40:25: 63:f9:97:3a:79:20:44:64:d0:55:de:bd:50:83:29: 9a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:FE:38:C5:8D:64:86:6C:84:66:23:1F:10:FF:48:22:A2:37:D5:CC X509v3 Authority Key Identifier: keyid:18:88:60:07:DA:17:30:B0:77:0D:86:04:DB:73:D1:2F:D2:64:F3:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GIhgB9oXMLB3DYYE23PRL9Jk8_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/4P44xY1khmyEZiMfEP9IIqI31cw.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/293328-9245-403b-8a4a-169c836bd6b0/1/GIhgB9oXMLB3DYYE23PRL9Jk8_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 213.171.1.0-213.171.2.255 213.171.11.0/24 213.171.13.0/24 Signature Algorithm: sha256WithRSAEncryption 50:ef:6d:0e:c5:9d:73:a6:1a:38:e0:3f:07:43:f3:9e:de:40: 59:f2:71:4f:71:db:f8:18:c9:0f:91:12:4c:5e:37:2a:e2:27: 41:83:07:5c:13:8f:c0:a9:42:da:25:bd:44:db:88:06:e0:29: e5:8d:8d:2c:e9:b6:93:58:a8:f7:aa:b8:e5:ac:e4:04:ec:4a: a6:39:58:16:73:93:f0:07:57:73:5a:de:1a:ee:03:ae:d7:71: 7e:19:f2:e0:f0:27:50:69:ba:2d:73:fd:61:e2:94:82:d0:4b: 2f:3e:31:b6:a1:f4:9b:ed:6f:04:52:d0:2d:ca:0b:de:73:50: 0c:0e:b2:1d:cd:cf:42:52:c1:32:7a:f0:b7:81:b9:4e:7b:f1: dd:2d:0d:ff:84:94:18:b9:8c:95:33:ee:04:44:7f:b1:1e:27: d6:99:be:16:3c:f0:cb:f6:75:b7:5b:fc:e6:bd:12:91:16:30: 5a:8f:f2:61:1f:9f:da:72:d8:07:7f:e1:17:12:2d:29:88:15: 0f:ff:88:a4:0a:a7:dd:87:d3:38:77:eb:89:eb:bd:07:51:0d: c3:65:3a:f3:27:b9:96:58:b4:d7:58:ec:8d:1a:07:5e:df:26: b2:38:b0:81:a0:d3:8a:e1:d2:35:4a:b0:0f:f8:c2:ec:04:41: 5b:4a:f8:c2 -----BEGIN CERTIFICATE----- MIIFETCCA/mgAwIBAgISAZt+OPVhAactGOrahvmWbJ3dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE4ODg2MDA3ZGExNzMwYjA3NzBkODYwNGRiNzNkMTJmZDI2 NGYzZjkwHhcNMjYwMTAyMTAyMDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGZlMzhjNThkNjQ4NjZjODQ2NjIzMWYxMGZmNDgyMmEyMzdkNWNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAra3vrG59qaZ2wvHkWdmtQ4ISiAp0 3WML0lqoZVHX00w22nLPggQw35H5CS2CVVx8Sew64wGLtifDYTMnQF0nf3PmNagQ CgN2kE8J0pgKraFKFF91vYiy7lam7D37X8fL+791RPDG90b3T5QpuSd89YCmGNIq /bICTeOm95kDOMWWHbx1zO4bjRYQ+2AEbgmQ4IBSfJqs2/WxRDqxUCSeSmpd9pxy jsIfyt1y9gOdz8ksWriKDuT+9f7UTndcXM31ofE3J/sl9uaeUbdQXVzxtaiYiU2X Ux8PCWa6HqyJgaawoih1tePKs3cdGM50QCVj+Zc6eSBEZNBV3r1QgymabQIDAQAB o4ICHTCCAhkwHQYDVR0OBBYEFOD+OMWNZIZshGYjHxD/SCKiN9XMMB8GA1UdIwQY MBaAFBiIYAfaFzCwdw2GBNtz0S/SZPP5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR0loZ0I5b1hNTEIzRFlZRTIzUFJMOUprOF9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8yOTMzMjgtOTI0NS00MDNiLThhNGEt MTY5YzgzNmJkNmIwLzEvNFA0NHhZMWtobXlFWmlNZkVQOUlJcUkzMWN3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS8yOTMzMjgtOTI0NS00MDNiLThhNGEtMTY5YzgzNmJkNmIw LzEvR0loZ0I5b1hNTEIzRFlZRTIzUFJMOUprOF9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBADVqwED BADVqwIDBADVqwsDBADVqw0wDQYJKoZIhvcNAQELBQADggEBAFDvbQ7FnXOmGjjg PwdD857eQFnycU9x2/gYyQ+REkxeNyriJ0GDB1wTj8CpQtolvUTbiAbgKeWNjSzp tpNYqPequOWs5ATsSqY5WBZzk/AHV3Na3hruA67XcX4Z8uDwJ1Bpui1z/WHilILQ Sy8+Mbah9JvtbwRS0C3KC95zUAwOsh3Nz0JSwTJ68LeBuU578d0tDf+ElBi5jJUz 7gREf7EeJ9aZvhY88Mv2dbdb/Oa9EpEWMFqP8mEfn9py2Ad/4RcSLSmIFQ//iKQK p92H0zh364nrvQdRDcNlOvMnuZZYtNdY7I0aB17fJrI4sIGg04rh0jVKsA/4wuwE QVtK+MI= -----END CERTIFICATE-----Generated at Mon Jan 12 09:21:23 2026 by rpki-client