This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/4eZ7bkmpJQiebKtBTXoYVZg6Ldg.roa File: 4eZ7bkmpJQiebKtBTXoYVZg6Ldg.roa (raw, json) Hash identifier: +qSceZV6AJUPDL56rity8Lx2SMr8wkGezaj/ssbWib4= Subject key identifier: E1:E6:7B:6E:49:A9:25:08:9E:6C:AB:41:4D:7A:18:55:98:3A:2D:D8 Certificate issuer: /CN=b6f3db35659133315d2fcf93058dce350a4cb17a Certificate serial: 019B7E388FBB945A10E7C97E9D0466ABAD6C Authority key identifier: B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/4eZ7bkmpJQiebKtBTXoYVZg6Ldg.roa Signing time: Fri 02 Jan 2026 10:19:54 +0000 ROA not before: Fri 02 Jan 2026 10:19:54 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 50487 IP address blocks: 194.44.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.mft rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 13:21:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:8f:bb:94:5a:10:e7:c9:7e:9d:04:66:ab:ad:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6f3db35659133315d2fcf93058dce350a4cb17a Validity Not Before: Jan 2 10:19:54 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e1e67b6e49a925089e6cab414d7a1855983a2dd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a2:0f:42:ef:99:78:00:88:86:34:35:85:ba: 74:c9:7a:a7:bb:79:4d:94:8d:87:a4:6d:de:e7:80: 4c:99:14:33:9b:b5:86:07:e6:68:f7:ed:8f:56:81: 52:c9:0b:e7:38:3b:d6:a1:20:c4:29:52:29:a8:c9: e4:39:02:32:1d:f2:c7:94:27:1e:c1:17:53:d2:72: c9:89:7c:64:58:be:87:f2:66:6d:d6:66:c1:fe:46: 7b:48:18:23:60:74:6b:38:f9:01:a6:84:db:38:3a: ff:3a:a9:1c:5e:86:8b:e1:a5:16:c6:b8:41:3f:34: 22:33:8f:e2:2a:47:98:c9:de:be:13:8b:21:e7:80: 23:f1:93:2d:22:5f:89:ad:1e:df:1b:ea:87:13:95: b5:52:b8:a8:bb:ae:ba:e3:2c:d9:9c:60:5a:1f:08: 74:f9:17:d1:0d:7b:9d:80:cd:b6:d2:e9:07:a9:c5: 50:ec:24:ac:03:fc:d6:84:86:30:11:21:3a:15:76: dc:4a:8a:7f:33:7e:9f:d0:01:f7:64:e2:1f:bd:49: 77:6b:25:71:23:9c:12:7e:5a:da:f9:3c:a1:fa:a7: a1:85:94:b7:55:29:19:3d:f9:38:ae:d4:b6:04:99: c1:89:48:5c:71:f1:65:6d:74:9a:3b:13:71:4b:05: 91:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E6:7B:6E:49:A9:25:08:9E:6C:AB:41:4D:7A:18:55:98:3A:2D:D8 X509v3 Authority Key Identifier: keyid:B6:F3:DB:35:65:91:33:31:5D:2F:CF:93:05:8D:CE:35:0A:4C:B1:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvPbNWWRMzFdL8-TBY3ONQpMsXo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/4eZ7bkmpJQiebKtBTXoYVZg6Ldg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/70bffe-b4f3-449e-81ed-549ee6d30fb6/1/tvPbNWWRMzFdL8-TBY3ONQpMsXo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.44.222.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:c3:9a:45:ee:69:2c:42:95:c2:51:94:33:52:10:f1:0f:03: d6:c9:7c:97:7d:77:f7:8d:81:11:ea:21:04:88:83:e3:4c:fe: 69:df:d4:a0:cf:74:99:69:56:ff:4f:38:5c:33:ae:0f:55:29: cc:ac:f3:3b:4c:15:20:1c:35:dc:1a:be:67:27:c1:75:ea:34: d0:93:d6:ee:4a:f8:d9:33:58:33:b8:62:7f:aa:f2:48:7b:9c: c9:c6:58:a2:71:1e:d6:c3:09:1e:e6:c2:b6:e5:3a:72:79:38: 96:10:92:ac:71:2f:9d:2e:0b:0e:40:00:b6:57:0c:a0:11:22: 01:53:df:ce:1c:d1:a4:12:5b:1c:d7:3d:5b:aa:74:ff:55:e6: 9a:79:ec:45:d3:9b:ff:9d:58:be:a3:60:3f:2e:41:32:0b:02: 2c:9c:fc:34:0a:2b:b5:76:7b:28:10:e3:e7:be:5a:4f:d5:da: d2:d4:24:ea:06:63:fb:4b:21:8d:f6:61:8c:49:d4:ff:56:84: 0a:e0:87:68:31:dd:19:62:ec:71:b1:10:9a:c1:b0:2c:69:bc: 5c:9f:14:93:00:65:02:48:c8:6c:33:62:18:f3:4a:a4:3d:7e: ef:a1:22:dd:d0:67:44:7a:79:f7:a2:ad:f1:99:41:fd:7f:35: 50:0f:f0:d3 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt+OI+7lFoQ58l+nQRmq61sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2ZjNkYjM1NjU5MTMzMzE1ZDJmY2Y5MzA1OGRjZTM1MGE0 Y2IxN2EwHhcNMjYwMTAyMTAxOTU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMWU2N2I2ZTQ5YTkyNTA4OWU2Y2FiNDE0ZDdhMTg1NTk4M2EyZGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2KIPQu+ZeACIhjQ1hbp0yXqnu3lN lI2HpG3e54BMmRQzm7WGB+Zo9+2PVoFSyQvnODvWoSDEKVIpqMnkOQIyHfLHlCce wRdT0nLJiXxkWL6H8mZt1mbB/kZ7SBgjYHRrOPkBpoTbODr/OqkcXoaL4aUWxrhB PzQiM4/iKkeYyd6+E4sh54Aj8ZMtIl+JrR7fG+qHE5W1Uriou6664yzZnGBaHwh0 +RfRDXudgM220ukHqcVQ7CSsA/zWhIYwESE6FXbcSop/M36f0AH3ZOIfvUl3ayVx I5wSflra+Tyh+qehhZS3VSkZPfk4rtS2BJnBiUhccfFlbXSaOxNxSwWRhwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOHme25JqSUInmyrQU16GFWYOi3YMB8GA1UdIwQY MBaAFLbz2zVlkTMxXS/PkwWNzjUKTLF6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MGJmZmUtYjRmMy00NDllLTgxZWQt NTQ5ZWU2ZDMwZmI2LzEvNGVaN2JrbXBKUWllYkt0QlRYb1lWWmc2TGRnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC83MGJmZmUtYjRmMy00NDllLTgxZWQtNTQ5ZWU2ZDMwZmI2 LzEvdHZQYk5XV1JNekZkTDgtVEJZM09OUXBNc1hvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwizeMA0G CSqGSIb3DQEBCwUAA4IBAQBfw5pF7mksQpXCUZQzUhDxDwPWyXyXfXf3jYER6iEE iIPjTP5p39Sgz3SZaVb/TzhcM64PVSnMrPM7TBUgHDXcGr5nJ8F16jTQk9buSvjZ M1gzuGJ/qvJIe5zJxliicR7Wwwke5sK25TpyeTiWEJKscS+dLgsOQAC2VwygESIB U9/OHNGkElsc1z1bqnT/VeaaeexF05v/nVi+o2A/LkEyCwIsnPw0Ciu1dnsoEOPn vlpP1drS1CTqBmP7SyGN9mGMSdT/VoQK4IdoMd0ZYuxxsRCawbAsabxcnxSTAGUC SMhsM2IY80qkPX7voSLd0GdEenn3oq3xmUH9fzVQD/DT -----END CERTIFICATE-----Generated at Sun Jan 25 20:29:13 2026 by rpki-client