This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/4kjooCn4utyvNqQOgFxK7-kKLu0.roa File: 4kjooCn4utyvNqQOgFxK7-kKLu0.roa (raw, json) Hash identifier: UOUVc0j6e6Ip7AZ/AsFrmNnJ9pEwnrKNZc+DelE5OzU= Subject key identifier: E2:48:E8:A0:29:F8:BA:DC:AF:36:A4:0E:80:5C:4A:EF:E9:0A:2E:ED Certificate issuer: /CN=68810ffe4f9203a100677d65193b4426789acf5c Certificate serial: 019B7758F33170DD75FF925D32EFB9ED4820 Authority key identifier: 68:81:0F:FE:4F:92:03:A1:00:67:7D:65:19:3B:44:26:78:9A:CF:5C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aIEP_k-SA6EAZ31lGTtEJniaz1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/4kjooCn4utyvNqQOgFxK7-kKLu0.roa Signing time: Thu 01 Jan 2026 02:17:56 +0000 ROA not before: Thu 01 Jan 2026 02:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 204894 IP address blocks: 91.239.240.0/24 maxlen: 24 2a12:fc40::/29 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.mft rsync://rpki.ripe.net/repository/DEFAULT/aIEP_k-SA6EAZ31lGTtEJniaz1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:f3:31:70:dd:75:ff:92:5d:32:ef:b9:ed:48:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68810ffe4f9203a100677d65193b4426789acf5c Validity Not Before: Jan 1 02:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e248e8a029f8badcaf36a40e805c4aefe90a2eed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:2b:52:f0:85:e5:5d:e5:87:37:5e:4d:08:56: 35:3e:3a:ab:b2:32:f1:8e:e3:da:a0:61:81:fe:54: bd:48:da:71:47:7c:1e:31:c9:51:2a:30:c8:79:b3: 10:19:15:b4:26:c1:9f:b5:04:ac:15:9c:d3:e0:48: f9:c5:59:48:ee:f5:32:4b:f4:a8:5f:85:39:1a:a0: 41:b6:4d:6d:fb:dd:64:d4:4d:39:b8:12:7e:28:ef: df:c0:97:35:8b:a4:ca:fe:1f:d5:db:fa:1a:da:ba: 95:da:4b:5d:ec:eb:42:7f:58:c9:a6:3c:99:94:88: 0e:e7:3b:ef:3b:e2:eb:96:96:17:db:0a:53:b4:52: a2:14:9e:eb:02:8b:f7:16:dc:08:e8:10:0c:cb:ee: cb:8b:30:bd:e7:ad:60:73:16:5a:bd:1d:7e:39:a6: c1:fc:d8:e4:08:b3:36:d2:fd:80:3a:77:2a:85:b6: e1:e2:b0:70:86:3b:1b:1d:de:64:b2:91:2a:07:44: b9:22:27:cf:ae:fc:4e:e5:89:61:52:7d:41:0c:80: f4:bd:76:79:c8:61:24:64:70:81:91:00:e2:3b:dd: 4a:42:0a:2f:41:ce:ff:b7:f4:f8:6e:9d:c9:e4:bc: 61:43:18:1b:eb:a3:8d:b0:60:94:ff:6d:18:fb:c0: 5d:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:48:E8:A0:29:F8:BA:DC:AF:36:A4:0E:80:5C:4A:EF:E9:0A:2E:ED X509v3 Authority Key Identifier: keyid:68:81:0F:FE:4F:92:03:A1:00:67:7D:65:19:3B:44:26:78:9A:CF:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aIEP_k-SA6EAZ31lGTtEJniaz1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/4kjooCn4utyvNqQOgFxK7-kKLu0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/141203-813f-4712-9bd7-bdf431eb94f0/1/aIEP_k-SA6EAZ31lGTtEJniaz1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 91.239.240.0/24 IPv6: 2a12:fc40::/29 Signature Algorithm: sha256WithRSAEncryption 3d:be:c4:56:91:61:23:e6:27:68:89:a8:b6:fd:09:4b:ca:d6: 18:b4:e8:ed:6d:af:ac:c6:1c:b1:df:e9:1a:d9:46:20:61:a5: 7a:ae:7a:20:97:87:17:2a:86:c3:41:29:dc:81:f6:9f:8d:14: 12:99:ac:5f:18:1f:a5:cd:bc:2b:ed:73:62:b8:8b:b5:46:22: 23:49:0b:53:b6:46:5a:fb:12:f1:20:83:09:11:93:4f:c6:35: db:17:4e:5f:e2:cd:b7:2e:7b:85:a3:f5:ff:38:0e:fa:27:7a: ad:39:da:7f:d6:c6:4b:39:30:a3:9d:9d:fa:32:9c:13:a7:a8: c8:05:99:91:50:ce:92:82:57:db:44:e0:64:09:86:43:bc:e0: 28:8f:d2:05:26:f2:52:fb:df:c7:bb:81:74:f0:df:92:32:05: b2:67:42:c3:16:1d:7e:ba:ad:6c:71:30:b6:5c:84:5b:6d:4d: b2:91:f7:9f:1b:9e:b3:4f:d0:ed:00:ca:aa:27:56:3f:a2:d8: 5c:64:b9:95:af:58:5c:fe:8d:41:c1:45:69:96:9f:cc:e9:6d: bf:91:fc:79:1b:97:da:05:26:03:43:91:6b:d1:23:6c:cc:40: 7c:e5:62:5b:36:3b:43:12:b0:1f:ca:37:70:61:ab:7d:0d:93: 47:81:24:15 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt3WPMxcN11/5JdMu+57UggMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ODEwZmZlNGY5MjAzYTEwMDY3N2Q2NTE5M2I0NDI2Nzg5 YWNmNWMwHhcNMjYwMTAxMDIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMjQ4ZThhMDI5ZjhiYWRjYWYzNmE0MGU4MDVjNGFlZmU5MGEyZWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ytS8IXlXeWHN15NCFY1PjqrsjLx juPaoGGB/lS9SNpxR3weMclRKjDIebMQGRW0JsGftQSsFZzT4Ej5xVlI7vUyS/So X4U5GqBBtk1t+91k1E05uBJ+KO/fwJc1i6TK/h/V2/oa2rqV2ktd7OtCf1jJpjyZ lIgO5zvvO+LrlpYX2wpTtFKiFJ7rAov3FtwI6BAMy+7LizC9561gcxZavR1+OabB /NjkCLM20v2AOncqhbbh4rBwhjsbHd5kspEqB0S5IifPrvxO5YlhUn1BDID0vXZ5 yGEkZHCBkQDiO91KQgovQc7/t/T4bp3J5LxhQxgb66ONsGCU/20Y+8BdtQIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFOJI6KAp+LrcrzakDoBcSu/pCi7tMB8GA1UdIwQY MBaAFGiBD/5PkgOhAGd9ZRk7RCZ4ms9cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUlFUF9rLVNBNkVBWjMxbEdUdEVKbmlhejF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8xNDEyMDMtODEzZi00NzEyLTliZDct YmRmNDMxZWI5NGYwLzEvNGtqb29DbjR1dHl2TnFRT2dGeEs3LWtLTHUwLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8xNDEyMDMtODEzZi00NzEyLTliZDctYmRmNDMxZWI5NGYw LzEvYUlFUF9rLVNBNkVBWjMxbEdUdEVKbmlhejF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW+/wMA0E AgACMAcDBQMqEvxAMA0GCSqGSIb3DQEBCwUAA4IBAQA9vsRWkWEj5idoiai2/QlL ytYYtOjtba+sxhyx3+ka2UYgYaV6rnogl4cXKobDQSncgfafjRQSmaxfGB+lzbwr 7XNiuIu1RiIjSQtTtkZa+xLxIIMJEZNPxjXbF05f4s23LnuFo/X/OA76J3qtOdp/ 1sZLOTCjnZ36MpwTp6jIBZmRUM6SglfbROBkCYZDvOAoj9IFJvJS+9/Hu4F08N+S MgWyZ0LDFh1+uq1scTC2XIRbbU2ykfefG56zT9DtAMqqJ1Y/othcZLmVr1hc/o1B wUVplp/M6W2/kfx5G5faBSYDQ5Fr0SNszEB85WJbNjtDErAfyjdwYat9DZNHgSQV -----END CERTIFICATE-----Generated at Sun Jan 25 15:38:14 2026 by rpki-client