This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/4ycHfp1CoXFfjrLAJTQGtsTa-l8.roa File: 4ycHfp1CoXFfjrLAJTQGtsTa-l8.roa (raw, json) Hash identifier: 5TzAawGzbQ+BkfeGhAzCFqHBUQwaDb09xlhuP0hvLkc= Subject key identifier: E3:27:07:7E:9D:42:A1:71:5F:8E:B2:C0:25:34:06:B6:C4:DA:FA:5F Certificate issuer: /CN=59dd542781851c0bce5a3ea5cc387650ffc8277e Certificate serial: 019B7EA6D9E8755B874DBAAA90D464E2CC7B Authority key identifier: 59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/4ycHfp1CoXFfjrLAJTQGtsTa-l8.roa Signing time: Fri 02 Jan 2026 12:20:22 +0000 ROA not before: Fri 02 Jan 2026 12:20:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201388 IP address blocks: 84.47.154.0/24 maxlen: 24 84.47.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:a6:d9:e8:75:5b:87:4d:ba:aa:90:d4:64:e2:cc:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=59dd542781851c0bce5a3ea5cc387650ffc8277e Validity Not Before: Jan 2 12:20:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e327077e9d42a1715f8eb2c0253406b6c4dafa5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:bf:1d:7c:80:42:d9:be:ac:3b:de:86:f3:32: 95:50:b6:c6:d4:43:11:19:a4:a6:31:92:c5:9c:1e: 9e:30:9f:53:1d:ec:73:ff:50:a6:ca:a2:45:1b:b3: df:76:00:7c:aa:0a:1f:ff:6b:1f:5e:15:19:8f:70: 5d:55:08:d8:b8:de:cb:26:d1:21:0e:19:9b:d7:60: 55:4d:6b:32:4b:5f:5f:5d:29:5e:d8:11:50:4e:b8: ed:43:08:48:d0:28:51:14:6d:65:78:32:d4:ec:a7: 68:1d:41:c7:66:2c:7b:3c:46:3f:37:19:f4:09:04: c6:0c:96:04:15:aa:ca:4f:38:64:03:3d:77:93:bc: 11:57:b0:a4:6b:84:c8:b5:3e:76:a2:4b:eb:cd:e4: f0:39:42:15:11:51:13:72:0e:7f:46:f9:c9:84:27: 01:0d:7d:95:7d:54:bb:4f:9e:82:5f:2d:c8:81:ba: 5d:60:a7:b8:85:9d:b3:cd:11:d8:25:90:f6:14:f0: f9:ab:89:4b:28:e5:a4:8a:ad:fa:a6:d5:0c:4f:7e: 57:c2:54:68:60:5b:df:c4:9a:d3:9d:55:2b:fe:98: 7b:14:db:8e:f4:31:d2:a9:cb:e6:14:d4:d1:1f:15: 61:47:54:64:09:4f:b0:75:38:9e:fa:54:fa:c2:96: 49:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:27:07:7E:9D:42:A1:71:5F:8E:B2:C0:25:34:06:B6:C4:DA:FA:5F X509v3 Authority Key Identifier: keyid:59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/4ycHfp1CoXFfjrLAJTQGtsTa-l8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 84.47.154.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:62:a3:98:aa:d9:12:ef:f4:1b:5c:a0:4c:6f:56:75:dd:a8: 60:0c:f2:62:45:22:c9:bb:0c:9b:71:43:dc:95:e1:37:6b:4f: 28:00:0d:46:5f:70:77:99:78:0b:82:40:13:73:8a:1b:b8:c6: 69:b6:48:66:c6:3a:9f:04:c7:40:d8:7f:bb:ba:8b:18:53:e3: 8f:b0:3e:d6:75:57:e2:7d:82:94:5b:85:9f:25:a5:22:b2:28: 79:ff:55:e5:71:dd:6a:4b:c9:a9:bb:8f:b3:2f:6c:96:d1:44: 2c:e4:93:75:d6:17:3c:fb:3f:02:89:2a:4e:ca:8d:bb:2f:83: aa:8b:69:80:46:4e:7b:2a:05:24:7f:93:17:f2:0d:bc:07:2d: ea:d1:73:38:1b:2f:4b:4d:76:92:30:42:ed:da:40:da:bd:a2: e0:63:b5:15:a4:98:0f:b6:b8:fd:bb:45:c7:0d:a3:d4:43:89: 98:14:83:80:19:ea:63:86:9b:b6:01:30:51:05:af:02:0a:1f: 2f:5f:58:5e:e3:9b:d5:fa:f9:18:ee:23:fa:59:9a:f3:c4:1c: 51:45:08:01:4e:e0:f4:c7:5d:63:1f:4c:43:d2:70:83:56:09: 33:86:84:e7:8a:9d:9e:78:82:80:56:6c:2f:cc:a2:58:cc:05: 8c:a5:99:6d -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+ptnodVuHTbqqkNRk4sx7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU5ZGQ1NDI3ODE4NTFjMGJjZTVhM2VhNWNjMzg3NjUwZmZj ODI3N2UwHhcNMjYwMTAyMTIyMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzI3MDc3ZTlkNDJhMTcxNWY4ZWIyYzAyNTM0MDZiNmM0ZGFmYTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0r8dfIBC2b6sO96G8zKVULbG1EMR GaSmMZLFnB6eMJ9THexz/1CmyqJFG7PfdgB8qgof/2sfXhUZj3BdVQjYuN7LJtEh Dhmb12BVTWsyS19fXSle2BFQTrjtQwhI0ChRFG1leDLU7KdoHUHHZix7PEY/Nxn0 CQTGDJYEFarKTzhkAz13k7wRV7Cka4TItT52okvrzeTwOUIVEVETcg5/RvnJhCcB DX2VfVS7T56CXy3IgbpdYKe4hZ2zzRHYJZD2FPD5q4lLKOWkiq36ptUMT35XwlRo YFvfxJrTnVUr/ph7FNuO9DHSqcvmFNTRHxVhR1RkCU+wdTie+lT6wpZJ3QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOMnB36dQqFxX46ywCU0BrbE2vpfMB8GA1UdIwQY MBaAFFndVCeBhRwLzlo+pcw4dlD/yCd+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvV2QxVUo0R0ZIQXZPV2o2bHpEaDJVUF9JSjM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi83OWM0YmEtMzhlMi00ZjVhLTk1OWYt NDdlMDkzNzk4OWE4LzEvNHljSGZwMUNvWEZmanJMQUpUUUd0c1RhLWw4LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi83OWM0YmEtMzhlMi00ZjVhLTk1OWYtNDdlMDkzNzk4OWE4 LzEvV2QxVUo0R0ZIQXZPV2o2bHpEaDJVUF9JSjM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVC+aMA0G CSqGSIb3DQEBCwUAA4IBAQBdYqOYqtkS7/QbXKBMb1Z13ahgDPJiRSLJuwybcUPc leE3a08oAA1GX3B3mXgLgkATc4obuMZptkhmxjqfBMdA2H+7uosYU+OPsD7WdVfi fYKUW4WfJaUisih5/1Xlcd1qS8mpu4+zL2yW0UQs5JN11hc8+z8CiSpOyo27L4Oq i2mARk57KgUkf5MX8g28By3q0XM4Gy9LTXaSMELt2kDavaLgY7UVpJgPtrj9u0XH DaPUQ4mYFIOAGepjhpu2ATBRBa8CCh8vX1he45vV+vkY7iP6WZrzxBxRRQgBTuD0 x11jH0xD0nCDVgkzhoTnip2eeIKAVmwvzKJYzAWMpZlt -----END CERTIFICATE-----Generated at Mon Jan 26 00:39:15 2026 by rpki-client