This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/4yIaOD2NMt2VBGmVwUq_OiRtg_A.roa File: 4yIaOD2NMt2VBGmVwUq_OiRtg_A.roa (raw, json) Hash identifier: kgy/jwMb361XAjDurvjXKgIsxESxjz3mkWg8JfDokdo= Subject key identifier: E3:22:1A:38:3D:8D:32:DD:95:04:69:95:C1:4A:BF:3A:24:6D:83:F0 Certificate issuer: /CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9 Certificate serial: 019B7F14C9DA1208236D1605CA90A99F425F Authority key identifier: 3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/4yIaOD2NMt2VBGmVwUq_OiRtg_A.roa Signing time: Fri 02 Jan 2026 14:20:27 +0000 ROA not before: Fri 02 Jan 2026 14:20:27 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47774 IP address blocks: 193.111.16.0/23 maxlen: 24 194.117.55.128/25 maxlen: 25 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.mft rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 11:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:14:c9:da:12:08:23:6d:16:05:ca:90:a9:9f:42:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3ec7d2bfc3fa78e7100a1b8935905aff7a496bc9 Validity Not Before: Jan 2 14:20:27 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=e3221a383d8d32dd95046995c14abf3a246d83f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5b:58:fe:d5:c0:60:3b:4c:6a:02:bc:fd:d4: c9:14:12:68:2f:8d:4f:a4:0c:9c:ed:ce:c6:f7:9f: e6:14:50:8b:5f:17:e0:7d:90:74:f2:6c:73:8f:6f: 82:1d:45:24:48:19:f4:9b:95:d1:6e:e1:22:0f:8f: bf:bc:58:07:ab:02:3d:51:79:00:2e:93:9b:fb:72: 73:59:62:66:9e:52:44:72:2d:d5:6c:ed:c0:84:e9: ec:40:6f:0a:f0:5d:de:03:77:14:d1:ce:5d:85:ad: 1a:94:02:01:49:7d:7f:5d:7e:7b:fa:14:2e:a3:33: f3:46:b5:f4:84:71:4a:51:77:9f:c4:f6:b3:dd:ba: ee:ee:00:c3:06:9a:d4:9e:7c:5b:78:88:1c:80:49: 1a:2f:5c:50:3f:11:01:e6:ff:28:82:ee:b9:1d:dd: 1f:7d:13:75:a8:a7:20:67:b7:90:d3:94:2b:fc:48: 8d:59:f8:7f:ba:44:32:ab:24:bb:95:44:2f:7b:81: c7:1c:07:df:dd:b3:f9:0c:10:c6:d6:d3:a0:7c:d2: 4e:80:e6:e0:6c:48:3e:36:17:d0:da:5f:2c:1d:23: b0:a1:57:84:a3:79:1c:7d:ed:f9:df:98:58:e7:c8: 58:db:1a:63:5f:2d:8c:aa:a8:69:01:98:9b:48:4e: e2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:22:1A:38:3D:8D:32:DD:95:04:69:95:C1:4A:BF:3A:24:6D:83:F0 X509v3 Authority Key Identifier: keyid:3E:C7:D2:BF:C3:FA:78:E7:10:0A:1B:89:35:90:5A:FF:7A:49:6B:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PsfSv8P6eOcQChuJNZBa_3pJa8k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/4yIaOD2NMt2VBGmVwUq_OiRtg_A.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/39bb72-f6af-4a67-9c44-ba881122ca63/1/PsfSv8P6eOcQChuJNZBa_3pJa8k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 193.111.16.0/23 194.117.55.128/25 Signature Algorithm: sha256WithRSAEncryption 0b:22:f5:14:f2:c5:38:7f:7a:20:d1:8d:20:85:7e:8f:82:49: f8:94:1f:d5:b3:cc:4d:e1:06:53:66:03:18:84:3f:74:35:a3: c6:2e:68:2e:78:b0:9b:be:17:04:78:23:bc:8c:98:7d:44:e6: 4d:09:8e:30:a5:ce:3d:b5:0a:34:80:1b:d7:00:9f:37:b6:86: 7f:30:ba:eb:a6:10:b6:90:e7:d7:da:37:8d:e8:39:47:31:41: ee:39:45:1b:0c:0a:22:e9:f8:4e:39:de:ae:e5:c1:f9:c4:2e: 0b:7a:50:b6:36:ff:33:7d:67:d0:9b:37:77:7b:11:e1:66:98: ab:3e:ac:19:22:bf:1c:fb:e8:52:35:05:fa:37:c0:9b:23:42: 83:f4:27:1a:2a:b0:1a:f3:dc:86:f4:f3:c4:05:f0:dd:fe:7c: cd:47:51:c9:34:2c:12:89:f1:bd:97:99:91:79:97:f0:80:ce: 6a:11:16:0e:5a:8e:5c:e5:70:5f:85:0b:34:2a:e0:a5:34:2c: cb:df:18:16:84:62:5b:9b:77:23:b7:0c:46:ff:1d:a0:92:88: 0c:00:e4:87:40:b8:75:a1:01:16:06:ec:64:d2:68:9f:e5:51: ec:a6:1a:ea:2f:79:d7:f9:3c:39:d1:4d:25:87:b2:4c:22:7c: 35:f0:04:96 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgISAZt/FMnaEggjbRYFypCpn0JfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYzdkMmJmYzNmYTc4ZTcxMDBhMWI4OTM1OTA1YWZmN2E0 OTZiYzkwHhcNMjYwMTAyMTQyMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhlMzIyMWEzODNkOGQzMmRkOTUwNDY5OTVjMTRhYmYzYTI0NmQ4M2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1tY/tXAYDtMagK8/dTJFBJoL41P pAyc7c7G95/mFFCLXxfgfZB08mxzj2+CHUUkSBn0m5XRbuEiD4+/vFgHqwI9UXkA LpOb+3JzWWJmnlJEci3VbO3AhOnsQG8K8F3eA3cU0c5dha0alAIBSX1/XX57+hQu ozPzRrX0hHFKUXefxPaz3bru7gDDBprUnnxbeIgcgEkaL1xQPxEB5v8ogu65Hd0f fRN1qKcgZ7eQ05Qr/EiNWfh/ukQyqyS7lUQve4HHHAff3bP5DBDG1tOgfNJOgObg bEg+NhfQ2l8sHSOwoVeEo3kcfe3535hY58hY2xpjXy2MqqhpAZibSE7ieQIDAQAB o4ICEDCCAgwwHQYDVR0OBBYEFOMiGjg9jTLdlQRplcFKvzokbYPwMB8GA1UdIwQY MBaAFD7H0r/D+njnEAobiTWQWv96SWvJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHNmU3Y4UDZlT2NRQ2h1Sk5aQmFfM3BKYThrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy8zOWJiNzItZjZhZi00YTY3LTljNDQt YmE4ODExMjJjYTYzLzEvNHlJYU9EMk5NdDJWQkdtVndVcV9PaVJ0Z19BLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy8zOWJiNzItZjZhZi00YTY3LTljNDQtYmE4ODExMjJjYTYz LzEvUHNmU3Y4UDZlT2NRQ2h1Sk5aQmFfM3BKYThrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANAwQBwW8QAwUH wnU3gDANBgkqhkiG9w0BAQsFAAOCAQEACyL1FPLFOH96INGNIIV+j4JJ+JQf1bPM TeEGU2YDGIQ/dDWjxi5oLniwm74XBHgjvIyYfUTmTQmOMKXOPbUKNIAb1wCfN7aG fzC666YQtpDn19o3jeg5RzFB7jlFGwwKIun4TjneruXB+cQuC3pQtjb/M31n0Js3 d3sR4WaYqz6sGSK/HPvoUjUF+jfAmyNCg/QnGiqwGvPchvTzxAXw3f58zUdRyTQs EonxvZeZkXmX8IDOahEWDlqOXOVwX4ULNCrgpTQsy98YFoRiW5t3I7cMRv8doJKI DADkh0C4daEBFgbsZNJon+VR7KYa6i951/k8OdFNJYeyTCJ8NfAElg== -----END CERTIFICATE-----Generated at Sun Jan 25 22:16:27 2026 by rpki-client