This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/S04NKU0J13eA6-TGQ2BZfun47ys.roa File: S04NKU0J13eA6-TGQ2BZfun47ys.roa (raw, json) Hash identifier: xIlFQJwTJx7ez8Zx99ToD2cR7A/Ipyz0mMaGV2drzPQ= Subject key identifier: 4B:4E:0D:29:4D:09:D7:77:80:EB:E4:C6:43:60:59:7E:E9:F8:EF:2B Certificate issuer: /CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a Certificate serial: 019B783463A985FE65DD61295C96114A72AC Authority key identifier: 68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/S04NKU0J13eA6-TGQ2BZfun47ys.roa Signing time: Thu 01 Jan 2026 06:17:37 +0000 ROA not before: Thu 01 Jan 2026 06:17:37 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204300 IP address blocks: 193.107.40.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.mft rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 15:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:63:a9:85:fe:65:dd:61:29:5c:96:11:4a:72:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68bd10f1b14bbb2767ffdcaec4b4172880ba461a Validity Not Before: Jan 1 06:17:37 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=4b4e0d294d09d77780ebe4c64360597ee9f8ef2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:90:5b:fe:25:fb:f1:07:bf:c0:92:e7:2a:c6: a2:f1:4b:4a:af:af:8c:fa:0e:c5:1c:55:7a:8e:04: 7c:6c:d9:00:51:92:5a:fb:72:8e:5a:b9:7b:4e:28: 94:93:18:bd:78:3c:14:4b:7f:be:02:36:7d:5d:23: 0e:b2:91:31:9c:42:40:24:43:b1:7d:c9:d6:53:98: 2f:b9:cd:a3:c3:1b:e2:8f:53:ef:1f:58:fc:95:55: 66:9f:8a:da:c9:94:ae:1d:6b:73:73:72:c5:ef:b2: 06:0e:f1:bf:0a:df:db:29:6e:db:4e:75:75:ae:34: 81:c1:f1:c0:e2:18:a5:e3:71:59:86:7d:d3:38:07: 76:4d:ed:3d:b5:ba:8d:39:1f:b1:9d:a0:43:c4:72: 91:54:bd:08:b9:50:28:d9:ca:b1:df:e8:9d:d5:00: 4f:a0:6a:db:cd:24:67:8e:e0:c5:01:5d:a1:2e:78: 95:b8:b6:a2:66:43:fc:80:10:be:ed:ff:14:19:cd: 5d:82:6b:4e:25:19:dd:97:29:d0:e9:0c:fb:77:a2: a0:3d:ff:f6:d1:02:77:22:99:7d:70:fe:ac:9e:de: 66:28:e5:da:ab:c0:ef:7d:a7:4f:27:46:75:c0:55: 98:32:b4:f2:a2:27:fa:46:30:9e:96:5d:70:66:84: 11:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:4E:0D:29:4D:09:D7:77:80:EB:E4:C6:43:60:59:7E:E9:F8:EF:2B X509v3 Authority Key Identifier: keyid:68:BD:10:F1:B1:4B:BB:27:67:FF:DC:AE:C4:B4:17:28:80:BA:46:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aL0Q8bFLuydn_9yuxLQXKIC6Rho.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/S04NKU0J13eA6-TGQ2BZfun47ys.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ade856-8960-4a29-8956-9fe7d928d9be/1/aL0Q8bFLuydn_9yuxLQXKIC6Rho.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.107.40.0/22 Signature Algorithm: sha256WithRSAEncryption 82:58:a5:8d:42:10:c6:64:25:6c:d6:af:a3:f6:90:34:df:d8: 8a:25:7c:16:c4:d3:5a:0c:6c:6b:e2:57:3e:27:aa:bf:e3:76: 19:84:3c:6a:56:f1:41:e1:fc:e7:89:ba:85:46:bc:0d:9f:46: 82:37:11:f8:3d:c7:2c:38:e8:84:df:ce:aa:eb:97:f3:21:63: cd:45:b2:19:3d:3b:35:8a:4c:0c:38:de:a3:a0:fe:67:e8:4a: 69:35:4c:6e:c2:1c:20:19:82:66:6f:dc:96:9b:65:0a:06:c2: 99:84:07:aa:b2:e7:f5:5c:3b:bb:d6:fc:27:31:6e:49:70:af: 03:ce:17:70:d4:84:1c:f7:7e:aa:bb:f8:a1:2d:dc:e5:e5:c2: 10:1c:4f:81:f6:db:3e:94:92:8f:36:48:54:50:2d:3b:42:64: 22:c3:62:aa:d4:9a:80:f1:88:7d:7e:e6:c9:a2:62:ca:31:2f: 06:8b:49:07:7f:35:a0:4d:39:da:1b:ef:78:24:2a:26:a3:c4: 48:41:e9:79:28:22:60:c7:be:fb:2e:3c:42:b6:6a:02:b9:28: 5d:ab:17:9c:36:10:91:45:3f:b1:5b:17:5b:0b:4b:ae:be:80: a1:7d:8d:f2:c7:43:9f:fd:bc:41:ae:ac:5b:73:47:c0:c5:4d: e3:15:58:f9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NGOphf5l3WEpXJYRSnKsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YmQxMGYxYjE0YmJiMjc2N2ZmZGNhZWM0YjQxNzI4ODBi YTQ2MWEwHhcNMjYwMTAxMDYxNzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0YjRlMGQyOTRkMDlkNzc3ODBlYmU0YzY0MzYwNTk3ZWU5ZjhlZjJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJBb/iX78Qe/wJLnKsai8UtKr6+M +g7FHFV6jgR8bNkAUZJa+3KOWrl7TiiUkxi9eDwUS3++AjZ9XSMOspExnEJAJEOx fcnWU5gvuc2jwxvij1PvH1j8lVVmn4rayZSuHWtzc3LF77IGDvG/Ct/bKW7bTnV1 rjSBwfHA4hil43FZhn3TOAd2Te09tbqNOR+xnaBDxHKRVL0IuVAo2cqx3+id1QBP oGrbzSRnjuDFAV2hLniVuLaiZkP8gBC+7f8UGc1dgmtOJRndlynQ6Qz7d6KgPf/2 0QJ3Ipl9cP6snt5mKOXaq8DvfadPJ0Z1wFWYMrTyoif6RjCell1wZoQRNwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFEtODSlNCdd3gOvkxkNgWX7p+O8rMB8GA1UdIwQY MBaAFGi9EPGxS7snZ//crsS0FyiAukYaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUwwUThiRkx1eWRuXzl5dXhMUVhLSUM2UmhvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9hZGU4NTYtODk2MC00YTI5LTg5NTYt OWZlN2Q5MjhkOWJlLzEvUzA0TktVMEoxM2VBNi1UR1EyQlpmdW40N3lzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9hZGU4NTYtODk2MC00YTI5LTg5NTYtOWZlN2Q5MjhkOWJl LzEvYUwwUThiRkx1eWRuXzl5dXhMUVhLSUM2UmhvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwWsoMA0G CSqGSIb3DQEBCwUAA4IBAQCCWKWNQhDGZCVs1q+j9pA039iKJXwWxNNaDGxr4lc+ J6q/43YZhDxqVvFB4fznibqFRrwNn0aCNxH4PccsOOiE386q65fzIWPNRbIZPTs1 ikwMON6joP5n6EppNUxuwhwgGYJmb9yWm2UKBsKZhAeqsuf1XDu71vwnMW5JcK8D zhdw1IQc936qu/ihLdzl5cIQHE+B9ts+lJKPNkhUUC07QmQiw2Kq1JqA8Yh9fubJ omLKMS8Gi0kHfzWgTTnaG+94JComo8RIQel5KCJgx777LjxCtmoCuShdqxecNhCR RT+xWxdbC0uuvoChfY3yx0Of/bxBrqxbc0fAxU3jFVj5 -----END CERTIFICATE-----Generated at Sun Jan 25 23:48:07 2026 by rpki-client