This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/4N3tODFK8nz9NNMiv7CviryuDAs.roa File: 4N3tODFK8nz9NNMiv7CviryuDAs.roa (raw, json) Hash identifier: X3aNYoDshM8q/qhUCoVbmt8vv1qoQt4+Ks1Zknci3aA= Subject key identifier: E0:DD:ED:38:31:4A:F2:7C:FD:34:D3:22:BF:B0:AF:8A:BC:AE:0C:0B Certificate issuer: /CN=27516d20ebefd12f072d413c4d2606bdb258691a Certificate serial: 019B7BA3616ECACECADA7398AB9C86BE5C46 Authority key identifier: 27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/4N3tODFK8nz9NNMiv7CviryuDAs.roa Signing time: Thu 01 Jan 2026 22:17:43 +0000 ROA not before: Thu 01 Jan 2026 22:17:43 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 35575 IP address blocks: 185.190.46.0/24 maxlen: 24 185.190.47.0/24 maxlen: 24 193.238.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.mft rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:61:6e:ca:ce:ca:da:73:98:ab:9c:86:be:5c:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27516d20ebefd12f072d413c4d2606bdb258691a Validity Not Before: Jan 1 22:17:43 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e0dded38314af27cfd34d322bfb0af8abcae0c0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:98:4b:3b:b8:e7:68:07:db:fc:7a:64:ac:ae: 76:00:95:c0:f7:cc:90:01:a5:78:40:41:b1:ba:b8: 46:88:6a:a8:d5:cc:a6:25:ba:7c:79:3d:99:dd:d0: 16:ae:02:79:c3:1b:2c:14:e2:47:c6:46:c2:40:38: 14:9a:90:8b:08:93:a6:6e:7a:d0:51:34:05:3e:5f: fb:4d:c5:e9:af:fd:6b:ee:6b:79:16:49:d0:7c:36: 6d:1a:8f:31:ee:52:e5:4b:cb:96:35:00:b6:5c:26: 58:a0:1f:d3:df:b8:52:7f:88:0b:f7:2a:5b:55:32: 51:63:b8:8d:11:1e:ee:10:65:ff:09:6c:ed:40:a8: 32:c2:38:11:c3:71:a5:2f:b7:20:ea:3d:79:21:7d: a1:33:82:6d:0f:05:b5:da:80:8c:9a:83:32:f5:30: 2c:cf:d9:4a:32:73:76:e6:4d:94:dd:44:81:3d:aa: 0d:d9:70:2f:3b:c2:a6:7f:b9:fd:1c:26:77:2b:1e: fb:2f:38:c3:12:fc:78:a7:d4:ab:f6:e6:6e:21:04: d3:7f:44:14:a6:5e:26:27:f0:7a:5b:ea:7d:b4:1c: 0c:53:b6:af:3c:90:57:da:8f:8b:81:69:d3:bb:49: 53:55:d2:0c:8d:d9:f8:bf:d5:ca:d7:56:66:ea:5f: b2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:DD:ED:38:31:4A:F2:7C:FD:34:D3:22:BF:B0:AF:8A:BC:AE:0C:0B X509v3 Authority Key Identifier: keyid:27:51:6D:20:EB:EF:D1:2F:07:2D:41:3C:4D:26:06:BD:B2:58:69:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1FtIOvv0S8HLUE8TSYGvbJYaRo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/4N3tODFK8nz9NNMiv7CviryuDAs.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/59d808-154f-42ae-af8f-790244508df4/1/J1FtIOvv0S8HLUE8TSYGvbJYaRo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.190.46.0/23 193.238.68.0/22 Signature Algorithm: sha256WithRSAEncryption 3b:48:df:9b:b8:6f:ad:c7:34:79:2b:e4:a1:14:9d:3c:df:39: 9c:59:62:69:32:55:98:37:be:6a:5b:4d:8e:26:53:ef:c5:98: 81:df:ed:f2:21:dc:17:b1:31:41:d7:e4:7d:13:af:96:b4:a8: ac:a0:4f:90:10:7f:56:62:a1:a1:22:4b:2c:2f:1b:af:cc:5f: 71:ca:dc:b4:e8:a5:a9:fc:09:f6:7d:be:a2:74:fd:5d:aa:f5: 38:2e:fb:9a:60:eb:9a:12:0d:06:b2:ed:66:9f:e7:cb:ac:2a: c9:f8:b7:75:1f:c1:c5:de:39:ca:b7:7b:8f:81:46:10:f2:7e: cd:20:7e:8b:66:df:6c:f9:3b:e3:cf:3e:ec:2a:0e:df:fb:77: 00:e9:8e:bb:37:1f:1d:fb:98:40:ce:cd:56:fe:91:1c:96:f0: 87:31:e7:2f:bd:45:a6:43:de:c9:c4:3b:fc:01:c7:f1:14:19: e1:cb:db:03:7d:ea:c6:7e:e3:6a:2d:b7:40:37:8b:12:1b:9c: ff:7b:a5:74:ef:b7:c9:06:a1:55:1c:e6:99:26:06:48:55:c5: c7:2d:7c:30:38:26:8c:4a:59:00:9b:65:00:0d:93:2e:b2:8b: 08:9d:a1:63:3f:26:93:97:03:9e:90:92:f5:ed:bb:da:a3:7f: e4:3a:57:ab -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7o2Fuys7K2nOYq5yGvlxGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3NTE2ZDIwZWJlZmQxMmYwNzJkNDEzYzRkMjYwNmJkYjI1 ODY5MWEwHhcNMjYwMTAxMjIxNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMGRkZWQzODMxNGFmMjdjZmQzNGQzMjJiZmIwYWY4YWJjYWUwYzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZhLO7jnaAfb/HpkrK52AJXA98yQ AaV4QEGxurhGiGqo1cymJbp8eT2Z3dAWrgJ5wxssFOJHxkbCQDgUmpCLCJOmbnrQ UTQFPl/7TcXpr/1r7mt5FknQfDZtGo8x7lLlS8uWNQC2XCZYoB/T37hSf4gL9ypb VTJRY7iNER7uEGX/CWztQKgywjgRw3GlL7cg6j15IX2hM4JtDwW12oCMmoMy9TAs z9lKMnN25k2U3USBPaoN2XAvO8Kmf7n9HCZ3Kx77LzjDEvx4p9Sr9uZuIQTTf0QU pl4mJ/B6W+p9tBwMU7avPJBX2o+LgWnTu0lTVdIMjdn4v9XK11Zm6l+y7QIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFODd7TgxSvJ8/TTTIr+wr4q8rgwLMB8GA1UdIwQY MBaAFCdRbSDr79EvBy1BPE0mBr2yWGkaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjFGdElPdnYwUzhITFVFOFRTWUd2YkpZYVJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy81OWQ4MDgtMTU0Zi00MmFlLWFmOGYt NzkwMjQ0NTA4ZGY0LzEvNE4zdE9ERks4bno5Tk5NaXY3Q3Zpcnl1REFzLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy81OWQ4MDgtMTU0Zi00MmFlLWFmOGYtNzkwMjQ0NTA4ZGY0 LzEvSjFGdElPdnYwUzhITFVFOFRTWUd2YkpZYVJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBub4uAwQC we5EMA0GCSqGSIb3DQEBCwUAA4IBAQA7SN+buG+txzR5K+ShFJ083zmcWWJpMlWY N75qW02OJlPvxZiB3+3yIdwXsTFB1+R9E6+WtKisoE+QEH9WYqGhIkssLxuvzF9x yty06KWp/An2fb6idP1dqvU4LvuaYOuaEg0Gsu1mn+fLrCrJ+Ld1H8HF3jnKt3uP gUYQ8n7NIH6LZt9s+Tvjzz7sKg7f+3cA6Y67Nx8d+5hAzs1W/pEclvCHMecvvUWm Q97JxDv8AcfxFBnhy9sDferGfuNqLbdAN4sSG5z/e6V077fJBqFVHOaZJgZIVcXH LXwwOCaMSlkAm2UADZMusosInaFjPyaTlwOekJL17bvao3/kOler -----END CERTIFICATE-----Generated at Mon Jan 26 04:51:32 2026 by rpki-client