This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/I0x4Z-Xx3L5jydy9aoZ7XgF5QNg.roa File: I0x4Z-Xx3L5jydy9aoZ7XgF5QNg.roa (raw, json) Hash identifier: JlSlaBzAXyXquY82elhNPJ3+qyBoK5BR21f4eeFhqKI= Subject key identifier: 23:4C:78:67:E5:F1:DC:BE:63:C9:DC:BD:6A:86:7B:5E:01:79:40:D8 Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Certificate serial: 019B7C7EFE34548A2395DEE7471F1C4839F8 Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/I0x4Z-Xx3L5jydy9aoZ7XgF5QNg.roa Signing time: Fri 02 Jan 2026 02:17:35 +0000 ROA not before: Fri 02 Jan 2026 02:17:35 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 399641 IP address blocks: 193.160.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7c:7e:fe:34:54:8a:23:95:de:e7:47:1f:1c:48:39:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1 Validity Not Before: Jan 2 02:17:35 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=234c7867e5f1dcbe63c9dcbd6a867b5e017940d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:84:47:09:40:97:69:2e:46:78:19:83:33:41: f4:e9:18:80:de:58:e2:a6:e9:df:d5:15:3f:38:2f: fe:28:d9:40:79:6f:32:c9:78:54:ff:85:30:b9:ff: 35:1d:25:e4:8b:94:ed:d5:44:61:55:bd:e9:f3:f8: 57:81:00:31:ef:b6:cd:bb:e4:4d:fc:76:f3:35:7e: 38:fb:b3:3a:d2:8f:a6:89:aa:91:fa:29:fc:d0:38: ee:72:8c:5f:69:f0:a9:1e:a3:9c:27:1f:b7:b4:d1: 3a:17:a6:97:8b:b3:b0:a8:ef:6d:9f:3b:b2:33:6e: a4:e9:d5:28:d6:a5:06:b2:0b:48:37:14:1d:91:91: 07:ab:77:42:21:e9:ba:b4:68:6e:a2:47:3b:13:54: 00:e5:42:3d:c7:9f:2a:c5:8a:63:12:83:f1:c2:92: be:91:74:18:4c:20:40:c2:c1:9f:60:5e:a7:cb:bf: ed:91:66:46:f9:7f:61:c4:e9:a0:57:16:2d:6b:44: 6e:49:73:04:98:4c:81:2c:20:83:33:1e:cf:93:1a: 31:fb:56:8b:a6:bc:d2:37:97:b4:ed:94:01:64:23: ae:e8:f3:22:aa:54:46:1e:f9:a0:a6:68:c3:1e:1f: 2d:69:7e:d1:f2:3c:3a:12:1a:52:1e:ed:e3:5b:0d: 68:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:4C:78:67:E5:F1:DC:BE:63:C9:DC:BD:6A:86:7B:5E:01:79:40:D8 X509v3 Authority Key Identifier: keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/I0x4Z-Xx3L5jydy9aoZ7XgF5QNg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.160.8.0/24 Signature Algorithm: sha256WithRSAEncryption 63:72:4e:9a:bb:aa:da:7c:65:61:fc:3b:77:f4:f7:8e:7b:2c: a5:13:b5:0b:5b:44:e1:f8:4c:63:71:55:92:4e:83:a1:1e:2d: 92:af:a2:e7:be:d5:e3:e2:6c:44:ed:ef:26:1d:ba:4b:7e:64: 2b:ec:ad:33:29:13:1f:2b:d0:5f:a3:23:15:d4:83:9d:55:99: 48:ea:71:86:e6:0b:25:07:8f:e0:e8:61:22:99:78:e6:1b:56: 37:44:a9:32:50:12:d6:f4:43:a3:7d:30:a3:53:aa:04:eb:bd: f4:f6:59:10:68:e9:08:e7:37:3b:1e:a5:ec:04:73:ec:15:04: 33:e1:19:eb:f7:0b:8e:30:9d:45:9b:de:d6:72:76:c2:61:df: d2:31:96:9c:b8:48:d2:bb:d3:3e:40:af:ba:8b:22:b2:e7:e6: 42:8d:04:a0:bf:74:d7:1a:aa:7f:0f:a5:56:fa:f8:44:94:89: 2c:26:c4:5e:fb:fd:7e:f8:c6:22:70:9c:ce:62:19:35:e7:c6: fa:93:0b:72:ab:14:b2:55:bc:4c:cc:d7:30:58:e4:24:f2:5f: be:8a:49:77:fd:dd:89:69:bb:4c:d9:b1:ba:01:e0:25:cb:32: 3e:fd:cc:57:a9:81:ba:b4:39:a4:f8:af:70:92:fa:7a:37:f7: 3f:9f:96:a4 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt8fv40VIojld7nRx8cSDn4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2 OGIxZTEwHhcNMjYwMTAyMDIxNzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygyMzRjNzg2N2U1ZjFkY2JlNjNjOWRjYmQ2YTg2N2I1ZTAxNzk0MGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoRHCUCXaS5GeBmDM0H06RiA3lji punf1RU/OC/+KNlAeW8yyXhU/4Uwuf81HSXki5Tt1URhVb3p8/hXgQAx77bNu+RN /HbzNX44+7M60o+miaqR+in80DjucoxfafCpHqOcJx+3tNE6F6aXi7OwqO9tnzuy M26k6dUo1qUGsgtINxQdkZEHq3dCIem6tGhuokc7E1QA5UI9x58qxYpjEoPxwpK+ kXQYTCBAwsGfYF6ny7/tkWZG+X9hxOmgVxYta0RuSXMEmEyBLCCDMx7Pkxox+1aL przSN5e07ZQBZCOu6PMiqlRGHvmgpmjDHh8taX7R8jw6EhpSHu3jWw1oBwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFCNMeGfl8dy+Y8ncvWqGe14BeUDYMB8GA1UdIwQY MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut ZGNlOTQ3ZTI5NGI2LzEvSTB4NFotWHgzTDVqeWR5OWFvWjdYZ0Y1UU5nLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2 LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaAIMA0G CSqGSIb3DQEBCwUAA4IBAQBjck6au6rafGVh/Dt39PeOeyylE7ULW0Th+ExjcVWS ToOhHi2Sr6LnvtXj4mxE7e8mHbpLfmQr7K0zKRMfK9BfoyMV1IOdVZlI6nGG5gsl B4/g6GEimXjmG1Y3RKkyUBLW9EOjfTCjU6oE67309lkQaOkI5zc7HqXsBHPsFQQz 4Rnr9wuOMJ1Fm97WcnbCYd/SMZacuEjSu9M+QK+6iyKy5+ZCjQSgv3TXGqp/D6VW +vhElIksJsRe+/1++MYicJzOYhk158b6kwtyqxSyVbxMzNcwWOQk8l++ikl3/d2J abtM2bG6AeAlyzI+/cxXqYG6tDmk+K9wkvp6N/c/n5ak -----END CERTIFICATE-----Generated at Mon Jan 26 01:16:28 2026 by rpki-client