This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/u4N4FwbZU3R4YrPAif2Bhql7uXo.roa File: u4N4FwbZU3R4YrPAif2Bhql7uXo.roa (raw, json) Hash identifier: j1Aeh/ewSlpsUAcZ6gs1u3mvHVZZFBD8JqF3ICrH+Og= Subject key identifier: BB:83:78:17:06:D9:53:74:78:62:B3:C0:89:FD:81:86:A9:7B:B9:7A Certificate issuer: /CN=1efa596a3126ace029c6d70d529257e07b38ba06 Certificate serial: 019B7758FE759F9E9A46F4C468CDE0D24282 Authority key identifier: 1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/u4N4FwbZU3R4YrPAif2Bhql7uXo.roa Signing time: Thu 01 Jan 2026 02:17:59 +0000 ROA not before: Thu 01 Jan 2026 02:17:59 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 25003 IP address blocks: 192.115.44.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.mft rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:77:58:fe:75:9f:9e:9a:46:f4:c4:68:cd:e0:d2:42:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1efa596a3126ace029c6d70d529257e07b38ba06 Validity Not Before: Jan 1 02:17:59 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=bb83781706d953747862b3c089fd8186a97bb97a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ba:0e:e7:49:d7:82:23:37:40:e8:ca:18:3b: e3:72:63:79:c2:26:df:e1:aa:6c:6d:64:40:44:14: 4e:ab:87:99:c8:80:43:99:e8:54:aa:11:1e:be:a9: d1:c0:5a:de:3a:3d:1b:86:86:02:80:84:13:58:a1: 34:a6:8d:86:49:90:ad:ea:d3:65:29:3a:78:d1:a9: 48:38:e1:8f:3e:8d:c6:89:0d:4a:9c:ca:69:e8:ca: 64:8e:aa:02:e0:20:13:7d:f7:a5:80:86:23:c7:65: 0b:d6:36:48:ba:73:c2:91:1a:4e:dc:74:e8:0a:76: 08:9d:f3:02:43:4b:c8:4f:1e:10:50:cf:7d:f7:3c: cb:dc:6c:53:d6:fd:a5:05:4f:37:84:95:64:c1:1a: 72:5f:8d:b9:85:02:80:e9:45:32:61:70:d3:ea:13: f6:ff:f6:c0:e2:37:e3:5b:0e:38:85:b3:7c:c1:7a: 15:f8:dd:32:3c:d4:f3:a9:63:a4:e4:b5:07:a2:f7: 98:1c:61:db:f1:1c:d2:19:e7:55:81:db:e3:06:c4: 7d:ed:e7:52:23:7c:35:37:3b:89:13:71:35:a7:b7: 49:8f:da:7c:3c:8b:32:a6:78:77:3c:aa:69:9a:95: 74:1e:09:8b:22:18:87:d8:92:ea:e3:d5:a7:df:cf: 7d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:83:78:17:06:D9:53:74:78:62:B3:C0:89:FD:81:86:A9:7B:B9:7A X509v3 Authority Key Identifier: keyid:1E:FA:59:6A:31:26:AC:E0:29:C6:D7:0D:52:92:57:E0:7B:38:BA:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HvpZajEmrOApxtcNUpJX4Hs4ugY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/u4N4FwbZU3R4YrPAif2Bhql7uXo.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3cc78a-8fb5-475a-8882-9d0c620735f1/1/HvpZajEmrOApxtcNUpJX4Hs4ugY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 192.115.44.0/22 Signature Algorithm: sha256WithRSAEncryption 8e:9f:9e:dd:84:4c:05:00:7f:2e:d4:d5:79:53:ae:67:18:c5: 18:f9:ec:72:ee:8d:85:85:2b:2b:62:75:02:c3:4c:7e:ae:fe: ee:0c:ac:f7:db:81:5d:1b:c2:e8:5a:9b:9d:a2:5e:29:99:c0: 24:8d:ab:f1:36:01:14:dd:27:c5:91:07:d0:1c:a3:60:2f:b9: 2c:af:84:3e:91:b8:fb:1d:d6:a0:14:0e:7b:4c:b0:24:e7:0c: 02:ec:92:38:ba:54:b7:82:d8:fe:25:c0:a3:50:44:4e:bc:31: 1d:9b:5e:01:6f:af:91:90:37:ed:5e:95:b9:b3:06:7e:b9:f9: 7a:a8:48:1c:2e:bc:9a:26:b2:2a:e0:9c:96:73:e3:67:5d:6b: e8:62:fa:ec:16:22:16:93:28:ca:49:cd:2d:0a:c8:e7:49:62: d9:98:cd:7a:3d:74:22:0f:e0:3c:82:76:43:af:30:68:72:d7: 90:68:5e:92:0f:97:2c:15:bb:ff:45:01:76:f0:94:a5:9f:07: 93:69:00:3c:94:d0:dc:5d:37:fc:f6:8b:ab:4a:24:11:bb:b0: b5:6f:05:d7:cb:5b:93:29:fa:9e:9a:2a:70:70:b7:fc:2a:32: 2f:13:7b:a2:7f:9a:fe:01:56:35:97:26:3d:1a:09:97:73:29: 52:64:d4:a9 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt3WP51n56aRvTEaM3g0kKCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFlZmE1OTZhMzEyNmFjZTAyOWM2ZDcwZDUyOTI1N2UwN2Iz OGJhMDYwHhcNMjYwMTAxMDIxNzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiYjgzNzgxNzA2ZDk1Mzc0Nzg2MmIzYzA4OWZkODE4NmE5N2JiOTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLoO50nXgiM3QOjKGDvjcmN5wibf 4apsbWRARBROq4eZyIBDmehUqhEevqnRwFreOj0bhoYCgIQTWKE0po2GSZCt6tNl KTp40alIOOGPPo3GiQ1KnMpp6MpkjqoC4CATffelgIYjx2UL1jZIunPCkRpO3HTo CnYInfMCQ0vITx4QUM999zzL3GxT1v2lBU83hJVkwRpyX425hQKA6UUyYXDT6hP2 //bA4jfjWw44hbN8wXoV+N0yPNTzqWOk5LUHoveYHGHb8RzSGedVgdvjBsR97edS I3w1NzuJE3E1p7dJj9p8PIsypnh3PKppmpV0HgmLIhiH2JLq49Wn3899ZQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFLuDeBcG2VN0eGKzwIn9gYape7l6MB8GA1UdIwQY MBaAFB76WWoxJqzgKcbXDVKSV+B7OLoGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSHZwWmFqRW1yT0FweHRjTlVwSlg0SHM0dWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zY2M3OGEtOGZiNS00NzVhLTg4ODIt OWQwYzYyMDczNWYxLzEvdTRONEZ3YlpVM1I0WXJQQWlmMkJocWw3dVhvLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8zY2M3OGEtOGZiNS00NzVhLTg4ODItOWQwYzYyMDczNWYx LzEvSHZwWmFqRW1yT0FweHRjTlVwSlg0SHM0dWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwHMsMA0G CSqGSIb3DQEBCwUAA4IBAQCOn57dhEwFAH8u1NV5U65nGMUY+exy7o2FhSsrYnUC w0x+rv7uDKz324FdG8LoWpudol4pmcAkjavxNgEU3SfFkQfQHKNgL7ksr4Q+kbj7 HdagFA57TLAk5wwC7JI4ulS3gtj+JcCjUEROvDEdm14Bb6+RkDftXpW5swZ+ufl6 qEgcLryaJrIq4JyWc+NnXWvoYvrsFiIWkyjKSc0tCsjnSWLZmM16PXQiD+A8gnZD rzBocteQaF6SD5csFbv/RQF28JSlnweTaQA8lNDcXTf89ourSiQRu7C1bwXXy1uT KfqemipwcLf8KjIvE3uif5r+AVY1lyY9GgmXcylSZNSp -----END CERTIFICATE-----Generated at Sun Jan 25 17:46:09 2026 by rpki-client