This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/4I6IeKRFTHTfCk6P0VsgUhk8zic.roa File: 4I6IeKRFTHTfCk6P0VsgUhk8zic.roa (raw, json) Hash identifier: 0XVLTIXxWYyeiCe3iIXGikBSA8t/yImgovN3r1Pbd5A= Subject key identifier: E0:8E:88:78:A4:45:4C:74:DF:0A:4E:8F:D1:5B:20:52:19:3C:CE:27 Certificate issuer: /CN=97893182b16718983bc008c8d087f8ddca3d8614 Certificate serial: 019B7A5AD55E8E2FFEDAC4EEFE833046654D Authority key identifier: 97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/4I6IeKRFTHTfCk6P0VsgUhk8zic.roa Signing time: Thu 01 Jan 2026 16:18:51 +0000 ROA not before: Thu 01 Jan 2026 16:18:51 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 29018 IP address blocks: 195.225.132.0/24 maxlen: 24 2a0b:1306:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Jan 2026 23:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7a:5a:d5:5e:8e:2f:fe:da:c4:ee:fe:83:30:46:65:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97893182b16718983bc008c8d087f8ddca3d8614 Validity Not Before: Jan 1 16:18:51 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e08e8878a4454c74df0a4e8fd15b2052193cce27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:bb:78:00:d9:65:f7:2b:04:ad:fa:85:5c:4d: ee:67:04:01:8e:77:59:25:d5:5b:81:f8:07:2e:cd: ca:5f:39:54:72:7d:0a:3d:3c:1c:57:47:0b:eb:56: 41:bf:83:5e:31:f6:b1:07:dc:a4:2a:b0:c3:a1:c5: a8:1a:fa:5d:7a:ec:95:53:be:a2:4e:ae:f5:3e:e7: d9:94:05:a1:ec:4e:b0:70:af:d5:5c:8e:9d:62:ba: 59:14:91:5c:e9:97:44:31:d1:46:67:db:04:22:30: f3:aa:8a:c9:7d:54:8e:90:ad:de:44:06:a3:69:df: 32:1d:5e:d7:1f:eb:e4:e5:c9:88:fc:03:e9:8d:19: 8a:d2:4c:63:d6:cd:0e:c5:72:fa:e5:72:4b:6e:05: 81:79:af:7e:75:07:dc:c3:8b:0b:82:00:4e:53:28: 39:6f:dd:c4:2d:07:8d:89:a5:4b:b2:8f:57:2b:21: 88:df:f4:1b:cb:f5:ec:c1:6e:16:2e:60:c3:82:17: 8a:df:17:2e:70:53:9f:4e:da:b5:a0:48:a0:23:61: d3:6b:bf:33:b2:b2:e9:6c:fd:eb:c8:bc:d6:04:8b: 41:ad:aa:e3:58:fe:b3:d8:92:17:53:6d:f3:ef:11: 48:80:93:5e:5a:f4:80:be:00:ae:cf:6a:6b:14:2f: d0:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:8E:88:78:A4:45:4C:74:DF:0A:4E:8F:D1:5B:20:52:19:3C:CE:27 X509v3 Authority Key Identifier: keyid:97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/4I6IeKRFTHTfCk6P0VsgUhk8zic.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 195.225.132.0/24 IPv6: 2a0b:1306:3::/48 Signature Algorithm: sha256WithRSAEncryption 80:c4:41:26:97:4f:27:86:8f:fd:ec:93:a3:26:ac:74:18:f0: 05:e5:12:1b:f2:37:f7:62:9f:85:4a:a0:75:7d:8b:ee:f8:5c: 91:54:4a:22:4a:dd:73:c6:54:16:46:4b:07:a7:1b:4a:36:f0: df:e0:b4:bb:17:ec:3a:de:e3:8a:32:15:c0:fa:fb:35:02:ab: bd:c5:95:f7:2f:7d:e1:09:83:ad:2c:d2:cb:d4:29:e6:5b:4f: 3d:a3:36:5f:81:10:b8:b1:e9:c6:0d:dc:e5:86:5f:c4:e7:4f: 78:c0:18:11:a7:ec:f5:14:c8:d0:23:94:42:85:ec:e9:cb:47: be:d9:dc:e2:b2:10:e3:a2:ab:25:05:49:08:1d:5b:5e:b6:37: 07:9e:a4:4d:91:cc:1d:8d:67:81:fb:43:30:cf:8f:0e:23:8e: 32:c1:55:91:a1:47:72:9a:0a:28:ae:84:10:14:28:04:d3:a2: 66:48:00:e9:e7:0b:39:f5:60:9e:25:08:b3:b8:3b:b6:10:34: 8a:01:15:91:f6:36:7b:56:38:08:1c:f5:f1:67:38:93:58:73: 40:72:bb:0c:04:14:4d:ea:db:e4:1b:8b:af:b1:db:a2:2e:9a: e9:26:6d:c0:2c:ee:e4:df:f9:59:3d:f9:71:85:a4:68:03:de: e6:ce:dd:7a -----BEGIN CERTIFICATE----- MIIFDjCCA/agAwIBAgISAZt6WtVeji/+2sTu/oMwRmVNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3ODkzMTgyYjE2NzE4OTgzYmMwMDhjOGQwODdmOGRkY2Ez ZDg2MTQwHhcNMjYwMTAxMTYxODUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMDhlODg3OGE0NDU0Yzc0ZGYwYTRlOGZkMTViMjA1MjE5M2NjZTI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbt4ANll9ysErfqFXE3uZwQBjndZ JdVbgfgHLs3KXzlUcn0KPTwcV0cL61ZBv4NeMfaxB9ykKrDDocWoGvpdeuyVU76i Tq71PufZlAWh7E6wcK/VXI6dYrpZFJFc6ZdEMdFGZ9sEIjDzqorJfVSOkK3eRAaj ad8yHV7XH+vk5cmI/APpjRmK0kxj1s0OxXL65XJLbgWBea9+dQfcw4sLggBOUyg5 b93ELQeNiaVLso9XKyGI3/Qby/XswW4WLmDDgheK3xcucFOfTtq1oEigI2HTa78z srLpbP3ryLzWBItBrarjWP6z2JIXU23z7xFIgJNeWvSAvgCuz2prFC/QuQIDAQAB o4ICGjCCAhYwHQYDVR0OBBYEFOCOiHikRUx03wpOj9FbIFIZPM4nMB8GA1UdIwQY MBaAFJeJMYKxZxiYO8AIyNCH+N3KPYYUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDRreGdyRm5HSmc3d0FqSTBJZjQzY285aGhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS8xMjAwNDMtMTczMy00YzcyLWFkNDct YmMwZTUxMWMyMGNlLzEvNEk2SWVLUkZUSFRmQ2s2UDBWc2dVaGs4emljLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS8xMjAwNDMtMTczMy00YzcyLWFkNDctYmMwZTUxMWMyMGNl LzEvbDRreGdyRm5HSmc3d0FqSTBJZjQzY285aGhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAw+GEMA8E AgACMAkDBwAqCxMGAAMwDQYJKoZIhvcNAQELBQADggEBAIDEQSaXTyeGj/3sk6Mm rHQY8AXlEhvyN/din4VKoHV9i+74XJFUSiJK3XPGVBZGSwenG0o28N/gtLsX7Dre 44oyFcD6+zUCq73FlfcvfeEJg60s0svUKeZbTz2jNl+BELix6cYN3OWGX8TnT3jA GBGn7PUUyNAjlEKF7OnLR77Z3OKyEOOiqyUFSQgdW162NweepE2RzB2NZ4H7QzDP jw4jjjLBVZGhR3KaCiiuhBAUKATTomZIAOnnCzn1YJ4lCLO4O7YQNIoBFZH2NntW OAgc9fFnOJNYc0ByuwwEFE3q2+Qbi6+x26IumukmbcAs7uTf+Vk9+XGFpGgD3ubO 3Xo= -----END CERTIFICATE-----Generated at Sun Jan 25 10:20:55 2026 by rpki-client