This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/4YLIYNLUNKZUi3rhtGKVYy_4Aww.roa File: 4YLIYNLUNKZUi3rhtGKVYy_4Aww.roa (raw, json) Hash identifier: 5OBBvoknKe7BIhAFNY6E/EsSly4AA69+3FRzkxou83M= Subject key identifier: E1:82:C8:60:D2:D4:34:A6:54:8B:7A:E1:B4:62:95:63:2F:F8:03:0C Certificate issuer: /CN=cd108c225f2478cd4230179890d07284be1636cd Certificate serial: 019B7BA3AE6DFF069D39071BEF543D3D5428 Authority key identifier: CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/4YLIYNLUNKZUi3rhtGKVYy_4Aww.roa Signing time: Thu 01 Jan 2026 22:18:03 +0000 ROA not before: Thu 01 Jan 2026 22:18:03 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 60528 IP address blocks: 194.126.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.mft rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 04:01:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:ae:6d:ff:06:9d:39:07:1b:ef:54:3d:3d:54:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd108c225f2478cd4230179890d07284be1636cd Validity Not Before: Jan 1 22:18:03 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e182c860d2d434a6548b7ae1b46295632ff8030c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:30:68:d9:1c:2f:0f:62:d5:35:28:e4:31:52: b5:15:99:5c:2b:89:48:ac:ad:5e:80:9e:86:f3:13: c3:91:de:89:6d:51:25:fd:0c:b0:96:da:62:fa:c8: e1:32:28:bc:d4:a7:6b:b7:d4:92:f9:82:ab:ca:16: be:b7:50:d0:8d:72:81:6b:7d:b6:fd:84:5f:1e:c1: df:44:1a:7a:96:90:2a:52:02:c6:d5:dd:c7:4e:d2: 47:37:86:87:3a:b7:83:d4:40:45:17:6f:40:f2:d8: d8:74:fb:d3:c3:b2:d6:ea:7b:97:a6:b2:df:0c:dc: 5d:44:9c:c0:f5:86:a2:15:bc:8a:ac:dc:4f:c9:c3: 32:88:c5:2b:75:17:df:0e:0b:95:77:b9:ae:3b:8f: ba:e4:a8:44:05:23:a4:dd:c7:07:0d:ee:b0:a8:c3: 60:3a:55:23:07:99:ab:d4:5d:3f:a2:7f:ff:26:d5: da:9b:b7:04:d2:b2:9b:00:9e:43:4a:40:8d:b8:f9: 8f:83:cb:38:bc:49:98:6d:21:36:61:ce:02:19:7b: 1f:9d:fb:9b:b3:f8:62:05:98:5a:68:96:d9:6e:5c: bb:f6:8f:88:43:c1:27:ff:4a:d4:03:27:6c:6f:4e: 93:ef:a9:40:20:f5:b4:7b:e1:36:b8:8f:7b:32:5d: 2b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:82:C8:60:D2:D4:34:A6:54:8B:7A:E1:B4:62:95:63:2F:F8:03:0C X509v3 Authority Key Identifier: keyid:CD:10:8C:22:5F:24:78:CD:42:30:17:98:90:D0:72:84:BE:16:36:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRCMIl8keM1CMBeYkNByhL4WNs0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/4YLIYNLUNKZUi3rhtGKVYy_4Aww.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/zRCMIl8keM1CMBeYkNByhL4WNs0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 194.126.227.0/24 Signature Algorithm: sha256WithRSAEncryption 56:89:1f:79:61:d2:51:0d:b7:13:a9:0b:93:06:b0:1e:79:20: 77:b1:bb:d3:41:35:bb:72:aa:b2:df:75:22:49:0f:d4:80:26: 45:c6:3c:a1:5d:09:d6:8c:9f:c9:51:b2:49:3d:21:de:0d:84: 5f:ba:5c:54:31:ef:93:c7:7f:44:d7:8a:e8:53:e2:08:9c:4e: 1f:81:d4:be:90:4e:ef:71:eb:20:93:2f:a5:7c:41:a7:ac:6e: 36:e2:ab:3b:df:19:29:25:77:e3:8b:08:d6:fe:0a:10:e2:de: 68:88:26:35:68:a0:c5:cc:03:fe:f4:4b:61:18:b3:06:f0:52: a3:8a:85:2a:2e:71:6a:3e:ac:ae:91:68:18:ea:8f:b5:be:8a: 99:57:35:2d:d2:98:5c:dd:f6:38:5a:8e:14:00:0c:1b:b4:cd: 63:10:9d:c1:15:5e:5b:ad:83:b9:e2:43:4c:cc:d1:73:2f:ad: 23:2c:08:c8:28:79:33:cd:eb:94:34:89:d9:cd:47:1d:a6:b0: 49:c1:9c:b3:73:bb:14:b9:d3:9c:b9:ed:22:bf:e0:60:d2:c4: 87:5c:85:a6:8d:22:9b:1a:b8:dd:d2:9c:36:2b:cc:02:83:e5: 50:c8:8c:0d:ea:75:11:6d:73:2b:44:29:00:dc:e4:f4:1c:40: fe:51:fc:24 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o65t/wadOQcb71Q9PVQoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMTA4YzIyNWYyNDc4Y2Q0MjMwMTc5ODkwZDA3Mjg0YmUx NjM2Y2QwHhcNMjYwMTAxMjIxODAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMTgyYzg2MGQyZDQzNGE2NTQ4YjdhZTFiNDYyOTU2MzJmZjgwMzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTBo2RwvD2LVNSjkMVK1FZlcK4lI rK1egJ6G8xPDkd6JbVEl/Qywltpi+sjhMii81Kdrt9SS+YKryha+t1DQjXKBa322 /YRfHsHfRBp6lpAqUgLG1d3HTtJHN4aHOreD1EBFF29A8tjYdPvTw7LW6nuXprLf DNxdRJzA9YaiFbyKrNxPycMyiMUrdRffDguVd7muO4+65KhEBSOk3ccHDe6wqMNg OlUjB5mr1F0/on//JtXam7cE0rKbAJ5DSkCNuPmPg8s4vEmYbSE2Yc4CGXsfnfub s/hiBZhaaJbZbly79o+IQ8En/0rUAydsb06T76lAIPW0e+E2uI97Ml0rCQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFOGCyGDS1DSmVIt64bRilWMv+AMMMB8GA1UdIwQY MBaAFM0QjCJfJHjNQjAXmJDQcoS+FjbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt YWU1MDI3MzY4MWE3LzEvNFlMSVlOTFVOS1pVaTNyaHRHS1ZZeV80QXd3LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3 LzEvelJDTUlsOGtlTTFDTUJlWWtOQnloTDRXTnMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwn7jMA0G CSqGSIb3DQEBCwUAA4IBAQBWiR95YdJRDbcTqQuTBrAeeSB3sbvTQTW7cqqy33Ui SQ/UgCZFxjyhXQnWjJ/JUbJJPSHeDYRfulxUMe+Tx39E14roU+IInE4fgdS+kE7v cesgky+lfEGnrG424qs73xkpJXfjiwjW/goQ4t5oiCY1aKDFzAP+9EthGLMG8FKj ioUqLnFqPqyukWgY6o+1voqZVzUt0phc3fY4Wo4UAAwbtM1jEJ3BFV5brYO54kNM zNFzL60jLAjIKHkzzeuUNInZzUcdprBJwZyzc7sUudOcue0iv+Bg0sSHXIWmjSKb Grjd0pw2K8wCg+VQyIwN6nURbXMrRCkA3OT0HED+Ufwk -----END CERTIFICATE-----Generated at Sun Jan 25 15:38:05 2026 by rpki-client