This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/f4_ZJ0TCTzsSkqudnJSIXp4bLQ0.roa File: f4_ZJ0TCTzsSkqudnJSIXp4bLQ0.roa (raw, json) Hash identifier: W6ac4Me1PrNz+AfdrWTNIVyjCCLobhnKb0ISiPAW2p8= Subject key identifier: 7F:8F:D9:27:44:C2:4F:3B:12:92:AB:9D:9C:94:88:5E:9E:1B:2D:0D Certificate issuer: /CN=dc11daefaff81c7e501278d87d9bc2b204d71155 Certificate serial: 019B7B359F91D10D4664FCD7582F19F990D1 Authority key identifier: DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/f4_ZJ0TCTzsSkqudnJSIXp4bLQ0.roa Signing time: Thu 01 Jan 2026 20:17:50 +0000 ROA not before: Thu 01 Jan 2026 20:17:50 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 212238 IP address blocks: 94.154.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.mft rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:9f:91:d1:0d:46:64:fc:d7:58:2f:19:f9:90:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dc11daefaff81c7e501278d87d9bc2b204d71155 Validity Not Before: Jan 1 20:17:50 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=7f8fd92744c24f3b1292ab9d9c94885e9e1b2d0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:15:f9:33:7b:d0:68:4c:29:6b:df:c1:5d:93: 19:da:74:86:aa:20:7b:d4:cb:fc:4f:a0:c4:d2:d1: 8c:61:ca:a2:c2:b0:74:79:ed:3f:57:36:92:57:d8: 40:52:be:40:78:8e:5c:df:71:d3:26:90:c8:c6:0e: 1e:d8:2c:2a:fd:87:21:5d:5b:de:16:9c:1a:be:4a: 1f:0d:8b:eb:38:ad:87:e4:0d:39:ec:de:3c:70:cd: 31:ce:76:3c:39:17:d5:8f:6b:a3:7b:7f:02:a7:0f: 5c:81:df:c1:b1:6b:e8:3a:bf:0a:75:87:a3:aa:b5: 98:d9:c8:87:e9:36:dd:55:27:16:95:f1:e8:a3:c3: fb:68:df:52:b5:b4:67:3e:ba:52:1c:75:ca:04:41: c8:2c:b6:c9:de:02:56:7d:84:fe:46:6b:a7:0a:25: 42:05:9f:f1:84:7e:ac:37:38:0c:10:56:29:b1:89: 81:d3:00:69:7c:7f:49:04:d4:ee:e7:25:49:99:42: 8e:83:a1:a6:cf:fe:4c:4d:8c:98:a3:18:e4:55:9c: f0:d3:cb:f0:0f:1e:32:56:ec:81:c0:62:93:ca:af: 10:75:d4:83:0b:48:5a:af:33:f6:c6:64:38:f5:d6: 78:ca:93:69:3a:23:57:43:0b:23:a1:1a:b5:76:16: 48:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:8F:D9:27:44:C2:4F:3B:12:92:AB:9D:9C:94:88:5E:9E:1B:2D:0D X509v3 Authority Key Identifier: keyid:DC:11:DA:EF:AF:F8:1C:7E:50:12:78:D8:7D:9B:C2:B2:04:D7:11:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3BHa76_4HH5QEnjYfZvCsgTXEVU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/f4_ZJ0TCTzsSkqudnJSIXp4bLQ0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b22603-90ab-43ad-ab16-65249cbc573c/1/3BHa76_4HH5QEnjYfZvCsgTXEVU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 94.154.42.0/24 Signature Algorithm: sha256WithRSAEncryption 67:82:ef:58:61:44:3f:ba:d5:3a:1b:f0:eb:74:5b:a9:27:6d: f8:a5:7e:09:72:a3:11:a0:59:81:57:99:ca:74:81:78:db:e5: f1:e3:79:c7:8f:c2:80:8e:b3:39:91:24:3d:6d:a4:23:cc:17: fa:78:a8:34:a0:25:90:e5:f2:bb:68:63:13:91:d4:2a:7a:43: 73:dc:60:12:8c:a3:d7:6d:2e:09:ef:31:47:ad:09:42:98:d8: ad:c3:b5:de:39:0e:33:2b:b3:0b:5b:3f:23:88:e5:df:57:60: 0b:2d:cd:ea:ee:70:80:39:b7:4a:c3:d1:31:d7:5b:47:96:e7: 25:2b:a7:2b:bd:60:55:c3:d6:28:af:e4:3f:1a:59:57:e5:53: fe:fd:e2:9f:fd:c9:91:05:57:7c:d9:75:0c:25:e1:bc:c8:20: 7c:24:3b:80:c5:83:15:ac:d9:da:fa:99:13:4c:8b:f9:ea:27: 79:12:7f:39:96:38:67:7e:45:2a:98:aa:56:d2:25:2c:cd:fc: 56:ac:5a:6d:7f:11:fd:0d:3d:4d:24:e6:52:0a:1f:da:31:01: e7:2c:cc:ff:13:c3:0e:1b:a0:81:0c:e3:32:b6:f1:58:f6:9d: 8c:c9:04:ce:62:4c:54:c1:c7:2d:e4:43:86:68:14:e9:a9:97: 48:80:60:c9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7NZ+R0Q1GZPzXWC8Z+ZDRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRjMTFkYWVmYWZmODFjN2U1MDEyNzhkODdkOWJjMmIyMDRk NzExNTUwHhcNMjYwMTAxMjAxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg3ZjhmZDkyNzQ0YzI0ZjNiMTI5MmFiOWQ5Yzk0ODg1ZTllMWIyZDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBX5M3vQaEwpa9/BXZMZ2nSGqiB7 1Mv8T6DE0tGMYcqiwrB0ee0/VzaSV9hAUr5AeI5c33HTJpDIxg4e2Cwq/YchXVve FpwavkofDYvrOK2H5A057N48cM0xznY8ORfVj2uje38Cpw9cgd/BsWvoOr8KdYej qrWY2ciH6TbdVScWlfHoo8P7aN9StbRnPrpSHHXKBEHILLbJ3gJWfYT+RmunCiVC BZ/xhH6sNzgMEFYpsYmB0wBpfH9JBNTu5yVJmUKOg6Gmz/5MTYyYoxjkVZzw08vw Dx4yVuyBwGKTyq8QddSDC0harzP2xmQ49dZ4ypNpOiNXQwsjoRq1dhZIGQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFH+P2SdEwk87EpKrnZyUiF6eGy0NMB8GA1UdIwQY MBaAFNwR2u+v+Bx+UBJ42H2bwrIE1xFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYt NjUyNDljYmM1NzNjLzEvZjRfWkowVENUenNTa3F1ZG5KU0lYcDRiTFEwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9iMjI2MDMtOTBhYi00M2FkLWFiMTYtNjUyNDljYmM1NzNj LzEvM0JIYTc2XzRISDVRRW5qWWZadkNzZ1RYRVZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXpoqMA0G CSqGSIb3DQEBCwUAA4IBAQBngu9YYUQ/utU6G/DrdFupJ234pX4JcqMRoFmBV5nK dIF42+Xx43nHj8KAjrM5kSQ9baQjzBf6eKg0oCWQ5fK7aGMTkdQqekNz3GASjKPX bS4J7zFHrQlCmNitw7XeOQ4zK7MLWz8jiOXfV2ALLc3q7nCAObdKw9Ex11tHlucl K6crvWBVw9Yor+Q/GllX5VP+/eKf/cmRBVd82XUMJeG8yCB8JDuAxYMVrNna+pkT TIv56id5En85ljhnfkUqmKpW0iUszfxWrFptfxH9DT1NJOZSCh/aMQHnLMz/E8MO G6CBDOMytvFY9p2MyQTOYkxUwcct5EOGaBTpqZdIgGDJ -----END CERTIFICATE-----Generated at Sun Jan 25 18:05:28 2026 by rpki-client