This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/N4QCwmv8Sw5ybiIBKm-0kiR2k5M.roa File: N4QCwmv8Sw5ybiIBKm-0kiR2k5M.roa (raw, json) Hash identifier: jAlFMSYTvLNZZPUNEkcMr5EHaq268sFn92XHnKsQ7g4= Subject key identifier: 37:84:02:C2:6B:FC:4B:0E:72:6E:22:01:2A:6F:B4:92:24:76:93:93 Certificate issuer: /CN=83e2340ef5c4a4952eb413d288c29d9378342232 Certificate serial: 019B7D5CE1CAAB603BA1879340A201C2FD87 Authority key identifier: 83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/N4QCwmv8Sw5ybiIBKm-0kiR2k5M.roa Signing time: Fri 02 Jan 2026 06:19:57 +0000 ROA not before: Fri 02 Jan 2026 06:19:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60022 IP address blocks: 178.212.231.0/24 maxlen: 24 2a11:e680::/32 maxlen: 48 2a11:e681::/32 maxlen: 48 2a11:e682::/32 maxlen: 48 2a11:e683::/32 maxlen: 48 2a11:e684::/32 maxlen: 48 2a11:e685::/32 maxlen: 48 2a11:e686::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.mft rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:5c:e1:ca:ab:60:3b:a1:87:93:40:a2:01:c2:fd:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83e2340ef5c4a4952eb413d288c29d9378342232 Validity Not Before: Jan 2 06:19:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=378402c26bfc4b0e726e22012a6fb49224769393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:51:51:a0:40:45:7d:e9:7e:27:3f:49:e9:a1: 34:76:88:25:fd:d9:b0:1a:b5:b5:69:fe:97:b1:58: 40:9a:d7:ba:e2:2c:db:5b:cb:0a:da:f5:cc:00:72: 68:d5:d7:ba:3e:da:c0:65:be:6e:bb:73:d0:cc:b9: ba:b6:30:39:4c:bc:05:80:ae:67:70:8d:d3:d4:cd: b4:6e:43:b8:7b:d6:db:43:6b:dc:a6:31:7a:c2:b7: df:42:24:02:ca:fd:d2:52:b2:b7:f9:93:5e:f8:12: 96:84:21:5a:fc:dd:35:bb:54:1e:ed:db:7b:65:72: 65:02:66:80:ad:5b:dc:fb:d7:97:8a:cd:ef:cc:a6: 53:2f:62:7c:64:f7:4f:4f:ae:71:cf:75:fc:09:74: 78:73:68:ae:0a:d5:6f:bd:95:75:16:06:3e:93:17: fb:c7:f4:2d:4e:74:82:60:88:b9:78:24:a6:87:1a: 0a:cc:10:ac:92:51:2d:d3:0d:13:8f:57:dd:f1:09: 43:3d:0c:95:81:4c:cc:28:51:9b:f5:80:de:91:a6: 12:29:71:b6:30:ad:c2:c2:86:d6:8f:82:d2:a8:42: 1b:a0:dd:68:30:ba:b6:0e:26:d2:46:c2:e0:34:3d: 6b:2d:e0:30:38:ec:e7:e7:a1:78:e3:93:f0:5a:77: 14:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:84:02:C2:6B:FC:4B:0E:72:6E:22:01:2A:6F:B4:92:24:76:93:93 X509v3 Authority Key Identifier: keyid:83:E2:34:0E:F5:C4:A4:95:2E:B4:13:D2:88:C2:9D:93:78:34:22:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-I0DvXEpJUutBPSiMKdk3g0IjI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/N4QCwmv8Sw5ybiIBKm-0kiR2k5M.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/d4d2f8-8dc1-4070-977e-a6cec04595f8/1/g-I0DvXEpJUutBPSiMKdk3g0IjI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 178.212.231.0/24 IPv6: 2a11:e680::-2a11:e686:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 98:a8:e8:cf:c2:02:f4:6b:b1:ca:7f:31:3a:f7:d8:8b:cb:32: 23:40:4d:70:2a:a2:51:32:72:85:f4:79:24:97:73:e9:80:26: c4:d0:ec:70:99:3b:40:1a:35:27:9c:49:2c:bc:be:8a:b8:01: 45:47:1d:0a:cc:69:ac:c4:1b:6f:c5:a4:f2:9c:15:66:8a:d1: 4e:b6:a2:3a:d3:9c:6e:c1:46:27:db:1a:42:d1:03:4c:fc:ee: 2a:4e:71:ca:c0:ef:65:46:29:f7:10:90:68:55:2b:f4:01:db: df:f6:d6:e2:a3:60:7d:3c:59:24:e2:ec:30:c1:50:b3:aa:ae: 30:33:b3:f5:b1:b6:98:1e:92:6e:3d:35:a7:16:85:64:06:48: 2f:a5:6f:d3:2e:f5:a9:1b:98:7c:60:8e:a0:5d:df:8d:4e:e6: 12:0d:b1:4f:d7:01:e1:69:07:1e:38:43:8a:9e:34:4e:d9:d4: 85:77:16:1a:fe:49:56:8d:c9:ab:e0:10:38:3c:46:24:b3:55: 44:fe:44:31:5d:63:a8:fc:ba:55:ed:4c:c2:88:8e:5a:2e:f7: 4f:d6:73:82:7d:ec:56:42:a4:84:83:9f:1a:77:f2:dd:fe:37: f2:2b:03:b2:6a:99:0e:56:a7:48:85:9f:26:37:32:a2:94:c4: 33:8b:ec:e3 -----BEGIN CERTIFICATE----- MIIFFTCCA/2gAwIBAgISAZt9XOHKq2A7oYeTQKIBwv2HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZTIzNDBlZjVjNGE0OTUyZWI0MTNkMjg4YzI5ZDkzNzgz NDIyMzIwHhcNMjYwMTAyMDYxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzNzg0MDJjMjZiZmM0YjBlNzI2ZTIyMDEyYTZmYjQ5MjI0NzY5MzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVFRoEBFfel+Jz9J6aE0dogl/dmw GrW1af6XsVhAmte64izbW8sK2vXMAHJo1de6PtrAZb5uu3PQzLm6tjA5TLwFgK5n cI3T1M20bkO4e9bbQ2vcpjF6wrffQiQCyv3SUrK3+ZNe+BKWhCFa/N01u1Qe7dt7 ZXJlAmaArVvc+9eXis3vzKZTL2J8ZPdPT65xz3X8CXR4c2iuCtVvvZV1FgY+kxf7 x/QtTnSCYIi5eCSmhxoKzBCsklEt0w0Tj1fd8QlDPQyVgUzMKFGb9YDekaYSKXG2 MK3CwobWj4LSqEIboN1oMLq2DibSRsLgND1rLeAwOOzn56F445PwWncUtQIDAQAB o4ICITCCAh0wHQYDVR0OBBYEFDeEAsJr/EsOcm4iASpvtJIkdpOTMB8GA1UdIwQY MBaAFIPiNA71xKSVLrQT0ojCnZN4NCIyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZy1JMER2WEVwSlV1dEJQU2lNS2RrM2cwSWpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9kNGQyZjgtOGRjMS00MDcwLTk3N2Ut YTZjZWMwNDU5NWY4LzEvTjRRQ3dtdjhTdzV5YmlJQkttLTBraVIyazVNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi9kNGQyZjgtOGRjMS00MDcwLTk3N2UtYTZjZWMwNDU5NWY4 LzEvZy1JMER2WEVwSlV1dEJQU2lNS2RrM2cwSWpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAMBAIAATAGAwQAstTnMBYE AgACMBAwDgMFByoR5oADBQAqEeaGMA0GCSqGSIb3DQEBCwUAA4IBAQCYqOjPwgL0 a7HKfzE699iLyzIjQE1wKqJRMnKF9Hkkl3PpgCbE0OxwmTtAGjUnnEksvL6KuAFF Rx0KzGmsxBtvxaTynBVmitFOtqI605xuwUYn2xpC0QNM/O4qTnHKwO9lRin3EJBo VSv0Advf9tbio2B9PFkk4uwwwVCzqq4wM7P1sbaYHpJuPTWnFoVkBkgvpW/TLvWp G5h8YI6gXd+NTuYSDbFP1wHhaQceOEOKnjRO2dSFdxYa/klWjcmr4BA4PEYks1VE /kQxXWOo/LpV7UzCiI5aLvdP1nOCfexWQqSEg58ad/Ld/jfyKwOyapkOVqdIhZ8m NzKilMQzi+zj -----END CERTIFICATE-----Generated at Sun Jan 25 17:22:31 2026 by rpki-client