This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/4vogBCHvVhbK8N2sbK3joTZSar8.roa File: 4vogBCHvVhbK8N2sbK3joTZSar8.roa (raw, json) Hash identifier: pJFApZIgzEg6Z5G8+ARw6VHXe5cVu/+xIPiV86FoPSo= Subject key identifier: E2:FA:20:04:21:EF:56:16:CA:F0:DD:AC:6C:AD:E3:A1:36:52:6A:BF Certificate issuer: /CN=836528e152b6dcba1571241ac55be5bce01118b7 Certificate serial: 019B7BA3D39B989F3B1B6E5C511465F526A1 Authority key identifier: 83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/4vogBCHvVhbK8N2sbK3joTZSar8.roa Signing time: Thu 01 Jan 2026 22:18:12 +0000 ROA not before: Thu 01 Jan 2026 22:18:12 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 197991 IP address blocks: 5.144.144.0/21 maxlen: 24 149.126.32.0/20 maxlen: 24 178.132.59.0/24 maxlen: 24 178.132.60.0/22 maxlen: 24 2a0d:a5c0::/29 maxlen: 36 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:01:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:d3:9b:98:9f:3b:1b:6e:5c:51:14:65:f5:26:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=836528e152b6dcba1571241ac55be5bce01118b7 Validity Not Before: Jan 1 22:18:12 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e2fa200421ef5616caf0ddac6cade3a136526abf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3a:22:0f:23:11:26:cf:2a:97:69:83:36:5c: d0:81:3c:95:a4:65:80:b8:bf:72:23:a3:be:ae:47: 4b:0a:27:94:6a:74:f3:30:c1:5f:94:71:3f:7e:38: 56:14:45:23:eb:bb:85:ef:ec:b5:fa:61:21:da:55: 82:2a:a1:89:5e:46:ef:a5:30:8f:90:e0:6f:2e:7c: 1b:36:87:0f:dd:d5:01:fd:29:22:72:ef:c3:28:9e: ca:45:2a:4d:1c:1d:13:93:27:2a:15:b8:e5:6a:de: 13:af:86:af:94:0e:e1:80:49:79:33:02:99:75:97: 06:a6:d6:89:b6:4b:c4:bd:5f:06:06:a7:eb:de:ff: 2f:5f:7d:82:38:4d:c7:8b:44:77:38:94:a3:d4:07: e8:31:cb:f3:af:e6:4b:f2:9b:43:03:66:04:d4:86: 31:22:c1:a4:60:06:da:56:52:15:ab:78:6f:f2:f3: ba:aa:a6:6e:90:75:3f:40:d8:08:e8:6a:67:92:44: 3a:5c:44:73:23:07:d0:28:97:5a:1d:b5:08:92:e0: 75:a6:f0:87:e8:e1:2c:e3:9c:c6:dd:9a:92:12:8f: 96:d8:18:65:90:51:56:1d:8c:45:06:a1:8c:28:1d: 54:aa:d9:c6:8a:0b:29:1a:21:76:02:75:e6:76:fc: 03:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:FA:20:04:21:EF:56:16:CA:F0:DD:AC:6C:AD:E3:A1:36:52:6A:BF X509v3 Authority Key Identifier: keyid:83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/4vogBCHvVhbK8N2sbK3joTZSar8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.144.144.0/21 149.126.32.0/20 178.132.59.0-178.132.63.255 IPv6: 2a0d:a5c0::/29 Signature Algorithm: sha256WithRSAEncryption 64:80:97:97:88:fc:ca:de:30:b4:c9:82:4e:d0:48:89:06:ff: a9:97:63:07:1a:45:4c:95:56:7a:c0:ed:fb:8e:47:cd:18:df: e4:30:1a:78:cf:bb:0a:91:8a:5b:79:7b:92:f1:60:0e:59:f9: 3f:09:0c:d3:00:6d:0c:0e:8f:0d:f5:c5:4b:53:88:ac:b6:c3: 71:8d:6c:83:25:2f:60:3b:0d:d9:1c:1c:01:7d:a0:cb:e1:a5: 24:78:39:b6:26:c7:cf:28:98:22:aa:de:45:d2:6e:72:d3:7a: 64:1c:1d:32:dd:94:93:0c:1e:32:a2:11:bb:6f:f1:22:e6:a7: 38:cc:8b:e1:8c:e7:ea:a5:36:36:50:78:4a:54:08:94:c1:15: 84:c2:d1:f7:20:70:07:44:af:29:bb:90:7e:64:c2:0e:7a:8c: d1:4e:b2:24:02:14:a6:0d:37:60:30:7f:c1:d3:7a:5c:4f:7c: c2:44:56:f7:f1:1f:54:68:56:1e:a6:3d:e9:5a:0e:3c:60:5c: c2:a6:68:15:5d:3c:52:2e:e8:af:0c:6a:16:11:53:61:85:35: 74:26:dc:13:80:33:d8:7b:71:28:cf:1f:b7:1b:98:0d:9f:57: d9:32:95:8c:cf:0e:35:b4:b0:ae:c3:17:04:f3:f3:a6:61:a3: b9:7f:92:44 -----BEGIN CERTIFICATE----- MIIFIDCCBAigAwIBAgISAZt7o9ObmJ87G25cURRl9SahMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzNjUyOGUxNTJiNmRjYmExNTcxMjQxYWM1NWJlNWJjZTAx MTE4YjcwHhcNMjYwMTAxMjIxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMmZhMjAwNDIxZWY1NjE2Y2FmMGRkYWM2Y2FkZTNhMTM2NTI2YWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjoiDyMRJs8ql2mDNlzQgTyVpGWA uL9yI6O+rkdLCieUanTzMMFflHE/fjhWFEUj67uF7+y1+mEh2lWCKqGJXkbvpTCP kOBvLnwbNocP3dUB/Skicu/DKJ7KRSpNHB0TkycqFbjlat4Tr4avlA7hgEl5MwKZ dZcGptaJtkvEvV8GBqfr3v8vX32COE3Hi0R3OJSj1AfoMcvzr+ZL8ptDA2YE1IYx IsGkYAbaVlIVq3hv8vO6qqZukHU/QNgI6GpnkkQ6XERzIwfQKJdaHbUIkuB1pvCH 6OEs45zG3ZqSEo+W2BhlkFFWHYxFBqGMKB1UqtnGigspGiF2AnXmdvwD6wIDAQAB o4ICLDCCAigwHQYDVR0OBBYEFOL6IAQh71YWyvDdrGyt46E2Umq/MB8GA1UdIwQY MBaAFINlKOFStty6FXEkGsVb5bzgERi3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZzJVbzRWSzIzTG9WY1NRYXhWdmx2T0FSR0xjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC83YzcwZjQtNWYzYS00ZmQzLTg4M2Mt ZWI5NDE1ZWM1NDhhLzEvNHZvZ0JDSHZWaGJLOE4yc2JLM2pvVFpTYXI4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC83YzcwZjQtNWYzYS00ZmQzLTg4M2MtZWI5NDE1ZWM1NDhh LzEvZzJVbzRWSzIzTG9WY1NRYXhWdmx2T0FSR0xjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMEIGCCsGAQUFBwEHAQH/BDMwMTAgBAIAATAaAwQDBZCQAwQE lX4gMAwDBACyhDsDBAayhAAwDQQCAAIwBwMFAyoNpcAwDQYJKoZIhvcNAQELBQAD ggEBAGSAl5eI/MreMLTJgk7QSIkG/6mXYwcaRUyVVnrA7fuOR80Y3+QwGnjPuwqR ilt5e5LxYA5Z+T8JDNMAbQwOjw31xUtTiKy2w3GNbIMlL2A7DdkcHAF9oMvhpSR4 ObYmx88omCKq3kXSbnLTemQcHTLdlJMMHjKiEbtv8SLmpzjMi+GM5+qlNjZQeEpU CJTBFYTC0fcgcAdErym7kH5kwg56jNFOsiQCFKYNN2Awf8HTelxPfMJEVvfxH1Ro Vh6mPelaDjxgXMKmaBVdPFIu6K8MahYRU2GFNXQm3BOAM9h7cSjPH7cbmA2fV9ky lYzPDjW0sK7DFwTz86Zho7l/kkQ= -----END CERTIFICATE-----Generated at Sun Jan 25 21:05:09 2026 by rpki-client